Skills

Powertools for coding agents: git workflows, GitHub automation, code quality, and project tooling. Each skill ships with modular, independently editable rules for deep, opinionated guidance.

Why These Skills

• Modular rules architecture — Each skill ships with standalone rule files in rules/ directories. Rules can be added, removed, or edited independently without touching the main skill logic.
• Opinionated audit workflows — Skills like security, github-actions, tailwind, and refactor produce structured severity-graded reports, then auto-fix issues.
• GitLeaks built in — The commit, security, and setup skills all enforce GitLeaks secret detection as a first-class concern.
• Convention-aware — Skills detect your project's existing conventions (language variant, commit format, package manager, project structure) and adapt automatically.

Skills

Install the plugin for your agent, then invoke skills through that agent's native skill or command interface.

Git

| Skill | Description | |-------|-------------| | commit | Clean git commits with conventional commit detection and GitLeaks secret scanning | | create-branch | Create and checkout a branch with naming validation and GitHub issue linking |

GitHub

| Skill | Description | |-------|-------------| | create-pr | Push branch and create a pull request with structured description and auto-assignment | | github-issues | Create, update, query, and comment on GitHub issues with MCP | | github-actions | Create and audit GitHub Actions workflows with SHA pinning, permissions, and caching checks |

Code Quality

| Skill | Description | |-------|-------------| | deps | Harden npm supply chain with .npmrc flags, version pinning, Renovate config, and CI audit workflows | | refactor | Audit and refactor TypeScript/JavaScript code for dead code, deep nesting, type assertions, and design patterns | | security | OWASP Top 10 security audit with GitLeaks secret detection and dependency vulnerability scanning | | tailwind | Audit and fix Tailwind CSS v4 anti-patterns for spacing, 8px grid, mobile-first, and GPU animations | | testing | Write and run tests with Vitest and React Testing Library for JS/TS projects |

Project

| Skill | Description | |-------|-------------| | setup | Add Biome, Husky, commitlint, lint-staged, GitLeaks, and TypeScript to JS/TS projects | | project-structure | Audit project directory structure for colocation, grouping, and anti-pattern detection | | naming-format | Audit and fix filename and export naming conventions for consistency | | update-project | Update and maintain CLAUDE.md, README.md, agents, skills, and rules to match current project state |

Agents

Agents invoke skills autonomously with an isolated worktree. Invoke with claude agent run <name>.

| Agent | Description | |-------|-------------| | deps | Autonomous supply chain hardening — runs the deps skill in an isolated worktree and outputs a structured summary |

Installation

Claude Code Plugin

claude plugin install tartinerlabs/skills

Codex Plugin

This repository includes repo-scoped Codex plugin metadata in .codex-plugin/plugin.json and .agents/plugins/marketplace.json.

To use it in Codex:

1. Open this repository in Codex
2. Restart Codex if needed so it reloads the repo marketplace
3. Open the plugin directory and install tartinerlabs from the repo marketplace

Cursor Plugin

This repository includes Cursor plugin metadata in .cursor-plugin/plugin.json and .cursor-plugin/marketplace.json.

For local development, install the plugin with Cursor's plugin flow or copy the repository into Cursor's local plugin directory:

mkdir -p ~/.cursor/plugins/local
ln -s "$(pwd)" ~/.cursor/plugins/local/tartinerlabs

The shared skills/ directory is exposed to Cursor directly. Claude-specific hooks are intentionally not declared in the Cursor manifest.

Skills

Install all skills:

pnpm dlx skills add tartinerlabs/skills

Install a single skill:

pnpm dlx skills add tartinerlabs/skills/commit

Install a subset for specific workflows:

# Git and GitHub workflow skills only
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/create-branch
pnpm dlx skills add tartinerlabs/skills/create-pr
pnpm dlx skills add tartinerlabs/skills/github-issues

# Security-focused subset
pnpm dlx skills add tartinerlabs/skills/security
pnpm dlx skills add tartinerlabs/skills/commit
pnpm dlx skills add tartinerlabs/skills/setup

Context7

pnpm dlx ctx7 skills install /tartinerlabs/skills --all --universal

OpenCode

Note: The OpenCode plugin is currently in Beta and might not work.

Add to opencode.json:

{
  "$schema": "https://opencode.ai/config.json",
  "plugin": ["@tartinerlabs/skills"]
}

Plugin Metadata

Plugin manifests are maintained manually on purpose.

• Codex metadata lives in .codex-plugin/plugin.json and .agents/plugins/marketplace.json
• Claude metadata lives in .claude-plugin/plugin.json and .claude-plugin/marketplace.json
• Cursor metadata lives in .cursor-plugin/plugin.json and .cursor-plugin/marketplace.json
• package.json.version is the shared source of truth across plugin manifests; semantic-release syncs manifest versions during release

Architecture

Skills use a modular rules pattern. Each skill directory contains:

skills/<name>/
  SKILL.md          # Skill definition with frontmatter
  rules/            # Independent, editable rule files
    some-rule.md    # Severity, examples, fix instructions

agents/<name>.md    # Optional Claude Code agents that invoke skills autonomously

This means you can:

• Customise a rule's severity or examples without forking the skill
• Add project-specific rules by dropping a new .md file in rules/
• Remove rules you disagree with

Skill Format

Each skill is a directory with a SKILL.md file following the Agent Skills spec.

License

MIT