https://github.com/tartinerlabs/skills
Claude Code skills for git workflows, GitHub automation, security audits, code refactoring, and project tooling
https://github.com/tartinerlabs/skills
agent-skills automation claude-code claude-code-skills cli code-quality developer-tools github-actions productivity tailwind-css
Last synced: about 2 months ago
JSON representation
Claude Code skills for git workflows, GitHub automation, security audits, code refactoring, and project tooling
- Host: GitHub
- URL: https://github.com/tartinerlabs/skills
- Owner: tartinerlabs
- License: mit
- Created: 2026-02-14T16:23:33.000Z (4 months ago)
- Default Branch: main
- Last Pushed: 2026-04-25T09:07:30.000Z (about 2 months ago)
- Last Synced: 2026-04-25T09:13:40.550Z (about 2 months ago)
- Topics: agent-skills, automation, claude-code, claude-code-skills, cli, code-quality, developer-tools, github-actions, productivity, tailwind-css
- Language: Shell
- Size: 295 KB
- Stars: 6
- Watchers: 0
- Forks: 1
- Open Issues: 4
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
README
# Skills
[](https://github.com/tartinerlabs/skills/actions/workflows/release.yml)
[](https://github.com/tartinerlabs/skills/actions/workflows/skills.yml)
[](https://github.com/tartinerlabs/skills/releases)
[](LICENSE)
Powertools for Codex and [Claude Code](https://docs.anthropic.com/en/docs/claude-code): git workflows, GitHub automation, code quality, and project tooling. Each skill ships with modular, independently editable rules for deep, opinionated guidance.
## Why These Skills
- **Modular rules architecture** — Each skill ships with standalone rule files in `rules/` directories. Rules can be added, removed, or edited independently without touching the main skill logic.
- **Opinionated audit workflows** — Skills like `security`, `github-actions`, `tailwind`, and `refactor` produce structured severity-graded reports, then auto-fix issues.
- **GitLeaks built in** — The `commit`, `security`, and `setup` skills all enforce GitLeaks secret detection as a first-class concern.
- **Convention-aware** — Skills detect your project's existing conventions (language variant, commit format, package manager, project structure) and adapt automatically.
## Skills
Invoke any skill with `/skill-name` in Claude Code. Codex support is provided through the repo-scoped plugin metadata in this repository.
### Git
| Skill | Description |
|-------|-------------|
| [commit](skills/commit) | Clean git commits with conventional commit detection and GitLeaks secret scanning |
| [create-branch](skills/create-branch) | Create and checkout a branch with naming validation and GitHub issue linking |
### GitHub
| Skill | Description |
|-------|-------------|
| [create-pr](skills/create-pr) | Push branch and create a pull request with structured description and auto-assignment |
| [github-issues](skills/github-issues) | Create, update, query, and comment on GitHub issues with MCP |
| [github-actions](skills/github-actions) | Create and audit GitHub Actions workflows with SHA pinning, permissions, and caching checks |
### Code Quality
| Skill | Description |
|-------|-------------|
| [deps](skills/deps) | Harden npm supply chain with .npmrc flags, version pinning, Renovate config, and CI audit workflows |
| [refactor](skills/refactor) | Audit and refactor TypeScript/JavaScript code for dead code, deep nesting, type assertions, and design patterns |
| [security](skills/security) | OWASP Top 10 security audit with GitLeaks secret detection and dependency vulnerability scanning |
| [tailwind](skills/tailwind) | Audit and fix Tailwind CSS v4 anti-patterns for spacing, 8px grid, mobile-first, and GPU animations |
| [testing](skills/testing) | Write and run tests with Vitest and React Testing Library for JS/TS projects |
### Project
| Skill | Description |
|-------|-------------|
| [setup](skills/setup) | Add Biome, Husky, commitlint, lint-staged, GitLeaks, and TypeScript to JS/TS projects |
| [project-structure](skills/project-structure) | Audit project directory structure for colocation, grouping, and anti-pattern detection |
| [naming-format](skills/naming-format) | Audit and fix filename and export naming conventions for consistency |
| [update-project](skills/update-project) | Update and maintain CLAUDE.md, README.md, agents, skills, and rules to match current project state |
## Agents
Agents invoke skills autonomously with an isolated worktree. Invoke with `claude agent run `.
| Agent | Description |
|-------|-------------|
| [deps](agents/deps.md) | Autonomous supply chain hardening — runs the deps skill in an isolated worktree and outputs a structured summary |
## Installation
### [Claude Code Plugin](https://docs.anthropic.com/en/docs/claude-code/plugins)
```bash
claude plugin install tartinerlabs/skills
```
### Codex Plugin
This repository includes repo-scoped Codex plugin metadata in `.codex-plugin/plugin.json` and `.agents/plugins/marketplace.json`.
To use it in Codex:
1. Open this repository in Codex
2. Restart Codex if needed so it reloads the repo marketplace
3. Open the plugin directory and install `tartinerlabs` from the repo marketplace
### [Skills](https://skills.sh)
Install all skills:
```bash
pnpm dlx skills add tartinerlabs/skills
```
Install a single skill:
```bash
pnpm dlx skills add tartinerlabs/skills/commit
```
Install a subset for specific workflows:
```bash
# Git and GitHub workflow skills only
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/create-branch
pnpm dlx skills add tartinerlabs/skills/create-pr
pnpm dlx skills add tartinerlabs/skills/github-issues
# Security-focused subset
pnpm dlx skills add tartinerlabs/skills/security
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/setup
```
### [Context7](https://context7.com)
```bash
pnpm dlx ctx7 skills install /tartinerlabs/skills --all --universal
```
## Plugin Metadata
Plugin manifests are maintained manually on purpose.
- Codex metadata lives in `.codex-plugin/plugin.json` and `.agents/plugins/marketplace.json`
- Claude metadata lives in `.claude-plugin/plugin.json` and `.claude-plugin/marketplace.json`
- `package.json.version` is the only shared source of truth across plugin manifests
## Architecture
Skills use a modular rules pattern. Each skill directory contains:
```
skills//
SKILL.md # Skill definition with frontmatter
rules/ # Independent, editable rule files
some-rule.md # Severity, examples, fix instructions
agents/.md # Optional Claude Code agents that invoke skills autonomously
```
This means you can:
- **Customise** a rule's severity or examples without forking the skill
- **Add** project-specific rules by dropping a new `.md` file in `rules/`
- **Remove** rules you disagree with
## Skill Format
Each skill is a directory with a `SKILL.md` file following the [Agent Skills spec](https://agentskills.io).
## License
MIT