Plan, deploy, secure, and monitor AWS infrastructure — from VPC design and ECS deployments to Terraform modules, CI/CD pipelines, IAM hardening, cost optimization, and disaster recovery — all guided by structured cloud engineering skills.
Build production-grade CI/CD pipelines using GitHub Actions for AWS deployments, covering ECR image builds, ECS deployments, rollback strategies, environment promotion, secrets management, and multi-stage workflows.
Plan cloud infrastructure work at any scope — task (one change), feature (1-3 weeks), or roadmap (1-3 months). Multi-cloud aware (AWS, Azure, GCP). On first run, asks 7 setup questions and saves your project profile (cloud provider, region, compliance scope, budget tier, security posture, environments, existing infra) to .heaptrace/cloud-plan.json. On every run, asks scope (Task/Feature/Roadmap) and produces a plan adapted to that scope — task plan, feature plan with phases and rollback, or strategic roadmap with executive summary. Defaults to mid-market budget tier (cost-effective + reliable, not cheapest) and balanced security (secrets in vault, encryption everywhere, least-privilege IAM). Names the next cloud skills to run for execution.
Audit and optimize AWS costs through right-sizing, reserved instances, savings plans, unused resource cleanup, S3 lifecycle policies, Compute Optimizer recommendations, cost allocation tags, and budget alerts.
Configure the full lifecycle of cloud credentials — rotation policies, access key audits, token TTL strategy, JWT signing keys, third-party API key management, and revocation procedures. Multi-cloud aware (AWS, Azure, GCP). Eliminates long-lived access keys in favor of IAM roles + STS, sets up automated rotation via Secrets Manager / Key Vault / Secret Manager, defines short-TTL tokens with refresh rotation, and configures detection alerts on credential misuse. Distinct from secrets-manage (which stores secrets) and from Compliance Pack's secrets-scan (which finds leaks) — this skill defines the ROTATION POLICY and audits long-lived credentials. Names exact services, exact rotation cadences, exact verification commands.
Plan and implement disaster recovery strategies for AWS workloads, covering RTO/RPO definitions, backup strategies, cross-region replication, failover testing, runbook creation, and multi-tier DR architectures.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
105 structured skills for development teams — from planning to release.
Every skill comes with step-by-step guides, flow diagrams, checklists, templates, and anti-patterns.
This repo is a native Claude Code plugin. Install individual packs directly from within Claude Code:
/install-plugin and point it to this repo, or add to your settings.json:{
"plugins": [
{ "source": "https://github.com/heaptracetechnology/heaptrace-skills", "plugin": "heaptrace-dev" },
{ "source": "https://github.com/heaptracetechnology/heaptrace-skills", "plugin": "heaptrace-architect" }
]
}
Install only the packs your team needs. Each plugin is listed in .claude-plugin/marketplace.json.
Clone and copy individual plugin skills to your tool's skills directory.
git clone https://github.com/heaptracetechnology/heaptrace-skills.git
# Copy a specific plugin's skills (e.g. developer pack)
cp -r heaptrace-skills/plugins/heaptrace-dev/skills/* your-project/.claude/skills/
# Copy all plugins at once
for plugin in heaptrace-skills/plugins/*/; do
cp -r "$plugin/skills/"* your-project/.claude/skills/
done
Path: .claude/skills/<skill-name>/SKILL.md
# Copy a specific plugin's skills
cp -r heaptrace-skills/plugins/heaptrace-dev/skills/* your-project/.cursor/skills/
Path: .cursor/skills/<skill-name>/skill.md
Skills are personal tools — don't commit them to your project repo:
echo ".claude/skills/" >> .gitignore
echo ".cursor/skills/" >> .gitignore
Skills are structured instruction files that guide AI coding assistants through specific development tasks. Instead of writing prompts from scratch, skills give consistent, battle-tested processes your entire team can follow.
Client gives a task
→ /suggest (what's missing? what can we add?)
→ /feature-plan (break it down, plan it)
→ /feature-work (build it end-to-end)
→ /code-review (catch issues before PR)
→ /smart-commit (clean commit message)
→ /release-notes (client-ready changelog)
The daily toolkit for every developer.
| Skill | What It Does |
|---|---|
feature-plan | Break requirements into tasks, mockups, and flow diagrams |
feature-work | Build end-to-end: DB → API → UI → Test |
find-fix | Trace bugs: reproduce → isolate → root cause → fix → verify |
smart-commit | Generate semantic commit messages (WHY, not WHAT) |
suggest | Spot gaps and suggest improvements clients didn't ask for |
code-review | 8-pass review: logic, security, perf, naming, tests |
test-gen | Generate tests that catch real bugs, not just pass |
explain | Understand any code before you touch it |
sec-audit | OWASP Top 10, secrets scan, dependency check |
release-notes | Turn git history into client-ready changelogs |
quick-plan | Rapid planning for small, well-scoped tasks |
quick-work | Fast execution mode for clearly defined tasks |
code-standards | Enforce and document team coding standards |
For tech leads managing teams and making architectural decisions.
| Skill | What It Does |
|---|---|
sprint-plan | Break epics into sprints with estimates and assignments |
arch-review | Audit architecture for scalability, coupling, SPOFs |
tech-debt-audit | Find and prioritize tech debt across the codebase |
incident-response | Structured triage, root cause analysis, postmortem |
pr-strategy | Split large features into reviewable PRs |
onboard-dev | Generate onboarding guide for new team members |
perf-audit | Profile slow endpoints, N+1 queries, memory leaks |
decision-doc | Write Architecture Decision Records (ADRs) |
message-craft | Craft clear technical messages and stakeholder updates |
System design, API contracts, and infrastructure planning.
npx claudepluginhub heaptracetechnology/heaptrace-skills --plugin heaptrace-cloud-engineerCompliance and security skills for HIPAA, GDPR, SOC2, PCI-DSS audits, infrastructure hardening, incident planning, and secrets management.
Mobile development skills for app releases, mobile APIs, authentication, CI/CD, debugging, offline support, performance, and state management.
UI/UX designer skills for wireframing, user flows, design systems, UX audits, responsive design, accessibility, and design handoff.
QA skills for test planning, E2E testing, API testing, regression checks, bug reporting, load testing, accessibility audits, and test data generation.
Core developer skills for feature planning, code review, testing, commits, and daily development workflows.
Enhances web_search Skill by researching best practices and deploying infrastructure automatically
36 on-demand AWS and cloud skills, slash commands, agents, and security hooks for Claude Code
AWS infrastructure and CloudFormation expertise
Editorial "DevOps & Cloud" bundle for Claude Code from Antigravity Awesome Skills.
Research-backed, opinionated guidance for building cloud infrastructure that doesn't rot — multi-account governance, naming conventions, IaC organization, security, deployment pipelines, and operational hygiene, distilled from production experience across multiple cloud migrations
Set of DevOps skills for Claude Code.