RMAzrim
Useropencode-artes: 115 production-grade OpenCode skills for fullstack web development, localhost security auditing and AI agent automation. Frontend, backend, devops, testing and AI-ops skill ecosystem in one place.
Categories
Indexed Skills (54)
agent-self-debugger-loop
A Python CLI (self_debug.py) that parses pytest stderr/stdout tracebacks, extracts the failing File x.py line N location, reads and rewrites that file via an ast.NodeTransformer to inject sys._getframe()-based log probes and None/missing-attribute guards, re-runs pytest up to 4 attempts, and rolls back via git stash on exhaustion. Pure stdlib (ast, re, subprocess, tempfile, pathlib) plus pytest.
ast-anti-pattern-slayer
Parses Python or JavaScript-style source into an AST, computes cyclomatic complexity v(G) as decision count plus one, maximum block nesting depth, bare except clauses and unreachable dead code, then uses a conservative ast.NodeTransformer to rewrite trailing if/else wrappers into semantics-preserving early return and continue guard clauses, emitting a structured JSON diagnostics report with file line and column locations.
auth-session--oauth2-scaffolder
Implements comprehensive user authentication systems supporting secure cookie sessions, JWT refresh token rotation, password hashing, and third-party OAuth2 social logins.
backend-suite-orchestrator
Orchestrates the 4-stage backend build chain — REST routes with OpenAPI spec (skills/express-fastapi-route-builder), auth/session/OAuth2 (skills/auth-session-oauth2-scaffolder), GraphQL schema plus per-request DataLoaders (skills/graphql-schema-dataloader-builder), and JWT-guarded realtime WebSockets (skills/websocket-realtime-secure-engine) — followed by route-integrity, middleware-registration, build, smoke-test, and API-spec validation. Accepts full_run, include_steps, and skip_steps parameters to execute only a selected chain subset, applies predecessor gating and fail_fast semantics, captures per-step stdout and reports, and consolidates everything into a single BACKEND_SUITE_REPORT.md with aggregate counts, per-step pass/fail status, and recommendations.
bola--idor-vulnerability-scanner
Inspects API endpoints for Broken Object Level Authorization (BOLA/IDOR) flaws to ensure users cannot manipulate resource IDs to access foreign data.
bytecode-decompiler--obfuscation-assistant
Loads Python pyc bytecode via marshal after importlib header validation, pretty-prints raw dis, reconstructs a basic-block control-flow graph annotated with loop heads and try/except regions, renames mangled single-letter variables using usage heuristics, renders a readable structured pseudo-Python outline, flags obfuscation signatures such as missing strings, oversized constants and dynamic eval execution, and documents the uncompyle6 byte-exact pipeline when it is installable.
chart-config-generator
Map raw JSON datasets into ready-to-use chart configuration objects (Chart.js, Recharts, or ECharts).
custom-chess-engine-mechanic-builder
Wraps python-chess inside a SkillChessBoard that adds turn tracking, per-skill cooldown ticks, a Teleport mechanic and a Freeze Square mechanic with expiry timers, plus rotate_view_180 coordinate mapping, a pygame-free ASCII renderer and an optional pygame renderer, all driven by a runnable demo.
cmd-sanitizer
Static linter over command strings before execution. Detects and rewrites unsafe Win32/PowerShell 5.1 patterns: bare && chaining, unquoted spaced paths, $? vs $LASTEXITCODE confusion, UTF-16 pipe corruption, and timeout-kill indeterminacy. Emits sanitized command + guard boilerplate.
codegen-drift-watchdog
Detect when generated output (Prisma client, tRPC router types, OpenAPI clients) is stale versus its source schema, then auto-regenerate or fail CI with a precise list.
context-bank
Materializes a structured CONTEXT_BANK.md + JSON file that captures verified file paths, decided invariants, active TODOs, and open risks, allowing subagents and repeated sessions to reload a lean current snapshot instead of decaying transcript memory.
context-compressor
Compress long conversation histories or documents to save context window token limits.
cors--csp-headers-hardener
Inspects HTTP response headers on local web servers and injects defensive security headers to prevent clickjacking, cross-site scripting, and unauthorized domain access.
database-zero-downtime-migrator
Generates Expand-and-Contract (Parallel Change) migration SQL as four ordered stage files plus a JSON manifest from a MigrationPlan, emitting Postgres or MySQL dialect output through a Python stdlib argparse module.
dependency-cve-audit--patcher
Audits third-party open-source packages for known vulnerabilities (CVEs), evaluating breaking change risks and generating automated patch updates.
dependency-fitness-scorecard
Score every third-party dependency on maintenance activity, release cadence, issue health, and size so upgrade decisions are data-driven instead of fear-driven.
docker-multi-stage-stack-builder
Containerizes web applications and dependencies into lightweight, production-ready multi-stage Docker images orchestrated via Docker Compose.
drizzle--prisma-orm-architect
Architect relational database schemas, model complex entity relationships, optimize query execution, and generate zero-downtime database migration files.
env-config-sleuth
Cross-reference environment variables referenced by code against definitions in .env files, CI workflows, and docs to find missing, misspelled, and orphaned configuration keys.
error-class-hierarchy-builder
Create domain-specific custom exception classes with standardized error codes, HTTP statuses, and metadata payloads.
error-code-consistency-auditor
Audit every error class, message, and HTTP mapping across the codebase for duplication, contradictory status codes, and undocumented errors.
express--fastapi-route-builder
Generates enterprise-grade RESTful API routes in Node.js (Express) or Python (FastAPI) complete with payload validation, unified error handling, and automated Swagger specs.
flaky-test-jury
Analyze repeated CI test logs, classify flaky tests by root-cause category, and emit stabilization patches plus a verdict report before they erode team trust.
form-validation--schema-builder
Builds robust, type-safe interactive web forms featuring complex validation logic, real-time error feedback, and seamless client-server schema synchronization.
frontend-suite-orchestrator
Orchestrates a 5-stage frontend build chain over a Next.js project: App Router scaffold, Tailwind responsive/dark-mode styling, zod-backed progressive forms, and the Zustand + TanStack Query state/query pipeline, followed by a build validation gate that runs `npm run build` / `next build`, verifies the component tree and routes exist, and consolidates everything into a FRONTEND_SUITE_REPORT.md. Supports full_run, include_steps, skip_steps, fail_fast, and artifact_dir customization so teams can re-materialize any subset of the scaffolding chain. The final report captures the scaffolded file-tree summary, the validation build exit code, and open items for follow-up.
git-bisect-time-traveler
Automates regression tracking by orchestrating non-interactive git bisect sessions wrapped around a headless test harness, parses the first-bad-commit SHA, subject and date plus the number of commits examined, and generates a minimal git-apply-compatible revert patch for exactly the files the offending commit touched, with optional dry-run verification.
golden-snapshot-migrator
Capture golden snapshots before a major library or dependency migration and diff after to keep the external behavior contract intact.
graphql-schema--dataloader-builder
Designs performance-optimized GraphQL APIs with strict type definitions, clean Query/Mutation resolvers, and batching mechanisms to eliminate N+1 database queries.
graphql-schema-designer
Design GraphQL type definitions, query/mutation schemas, and resolver boilerplate code.
i18n-locale-extractor
Extract hardcoded UI text strings into structured internationalization JSON translation files.
infrastructure--qa-suite-orchestrator
Orchestrates the 5-stage infrastructure and QA chain — ORM schemas plus zero-downtime migrations (skills/drizzle-prisma-orm-architect), Redis caching and pub/sub event bus (skills/redis-pubsub-cache-manager), multi-stage Docker images with Compose stack (skills/docker-multi-stage-stack-builder), Playwright E2E and security flows (skills/playwright-e2e-security-flow-tester), and Lighthouse Core Web Vitals audits (skills/lighthouse-web-vitals-optimizer) — all executed against the provisioned stack. Accepts full_run, include_steps, and skip_steps parameters to select the chain subset, applies predecessor gating and fail_fast semantics, captures per-step stdout and reports, and consolidates DB migration status, cache health, docker build/health, E2E pass counts, a Lighthouse scores table, and recommendations into a single INFRA_QA_SUITE_REPORT.md.
jwt-security--algorithm-cracker-tester
Evaluates JSON Web Token handling on local API routes to identify token forgery, algorithm confusion, and weak signature secrets.
jwt-token-rotator
Implement secure short-lived access token renewal and refresh token rotation with revocation blacklisting.
license-clash-mediator
Build a dependency-license graph and flag copyleft/permissive conflicts plus missing license metadata before they become legal incidents.
lighthouse--web-vitals-optimizer
Audits web performance metrics, optimizes client-side bundle footprints, and refactors resource delivery to achieve maximum Core Web Vitals scores.
bullet-hell-pattern-generator
Deterministic bullet-hell pattern math engine on the Python stdlib - spiral, aimed fan, ring, and laser-sweep emitters produce JSON frames, an ASCII snapshot, and a self-contained SVG render of one frame. Seed-based reproducibility with zero external game engine, zero MCP.
etl-incremental-pipeline-builder
Self-contained incremental ETL runner (pure stdlib) with SQLite staging, watermark-based delta loads, idempotent upserts, schema evolution detection, and a data-quality gate. Run it end-to-end with zero installations - no external scheduler, framework, or MCP required.
generative-art-svg-engine
Deterministic generative-art engine on the Python stdlib that turns a seed into layered, palette-driven SVG compositions - LCG pseudo-noise, seeded palettes, shape primitives (circles, paths, grids, waves), tint/weight rules - and exports browser-ready self-contained SVG. Reproducible per seed with zero design tools and zero MCP.
iot-hub-dashboard-builder
Self-contained IoT hub in the Python stdlib: a TCP JSON pub/sub broker (MQTT-style topic tree with retain flags), a device simulator streaming telemetry, a subscription client, and a threshold rule engine writing alerts + a CSV dashboard feed. Runs entirely on 127.0.0.1 with zero broker installs and zero MCP.
accessibility-auditor
Audit HTML/JSX code against WCAG 2.1 guidelines and provide accessible ARIA code fixes.
async-concurrency-handler
Implement async/await workflows, promise pools, worker threads, or goroutines while preventing race conditions.
caching-strategy-implementer
Implement Cache-Aside, Write-Through, and TTL-based caching logic using Redis or in-memory LRU caches.
changelog-generator
Parse Git commit logs to generate a CHANGELOG.md adhering to Conventional Commits.
cli-tool-scaffolder
Scaffold interactive command-line interface tools with argument parsing, flags, spinners, and help menus.
code-translator
Precisely convert code logic from one programming language to another.
cron-schedule-parser
Translate natural language time rules into valid 5-part or 6-part Cron schedule expressions.
data-structure-optimizer
Analyze algorithm time/space complexity (Big O) and refactor logic using optimal data structures (Heaps, Tries, Hash Maps).
db-migration-generator
Generate database schema migration scripts (Prisma/TypeORM/Alembic) based on model changes.
dependency-injection-wiring
Decouple code modules using Inversion of Control (IoC) containers and explicit interface abstractions.
dep-map
Builds a persistent dependency graph (`dep-graph.json`) by scanning `import`/`require`/`include` patterns across the codebase. Before any edit it lists the blast radius of consumers for the target symbol; after the edit it re-verifies no orphaned references exist.
design-pattern-implementer
Refactor code to apply object-oriented design patterns (Factory, Strategy, Observer, Decorator, Adapter) cleanly.
dockerfile-builder
Draft efficient, secure, and minimal multi-stage Dockerfiles.
github-actions-generator
Design automated CI/CD workflows for testing, building, and deployment.
k8s-manifest-validator
Validate and lint Kubernetes manifest files (YAML/JSON) against required fields, resource constraints, and best practices, with an optional kubectl dry-run schema check.
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.