Plan, implement, review, test, and release code with structured workflows: feature planning, end-to-end implementation (TypeScript/React/Next.js/PostgreSQL/Prisma), code review with security and quality checks, debugging, small-task execution, commit message generation, and release notes from git history.
Review code changes for logic errors, security issues, performance problems, duplication, and best practice violations. Use before merging a PR, after completing a feature, or when reviewing a teammate's work.
Generate meaningful tests for a file, function, API endpoint, or feature. Covers unit tests, integration tests, and edge cases. Use after writing code to ensure it works correctly, or before refactoring to lock in existing behavior.
Audit code against your project's own standards — multi-language, calibration-first, three modes (STRICT/DELTA/BASELINE). Detects existing conventions before flagging violations, supports 12+ languages, adapts to project test maturity (NO_TESTS / EARLY / MATURE / COMPREHENSIVE), and never punishes a project for legacy debt. Pairs with code-review for objective-then-subjective gating in CI/CD.
Deep-dive explanation of any code, system, or feature. Breaks down how it works, why it was built that way, how data flows, what depends on it, and what would break if you changed it. Use when onboarding, exploring unfamiliar code, or before modifying something you don't fully understand.
Plan a new feature from a requirement or idea. Breaks it down into clear tasks, creates UI mockups, defines data flow, identifies risks, and produces a ready-to-implement plan. Use when starting any new feature, before writing code.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
105 structured skills for development teams — from planning to release.
Every skill comes with step-by-step guides, flow diagrams, checklists, templates, and anti-patterns.
This repo is a native Claude Code plugin. Install individual packs directly from within Claude Code:
/install-plugin and point it to this repo, or add to your settings.json:{
"plugins": [
{ "source": "https://github.com/heaptracetechnology/heaptrace-skills", "plugin": "heaptrace-dev" },
{ "source": "https://github.com/heaptracetechnology/heaptrace-skills", "plugin": "heaptrace-architect" }
]
}
Install only the packs your team needs. Each plugin is listed in .claude-plugin/marketplace.json.
Clone and copy individual plugin skills to your tool's skills directory.
git clone https://github.com/heaptracetechnology/heaptrace-skills.git
# Copy a specific plugin's skills (e.g. developer pack)
cp -r heaptrace-skills/plugins/heaptrace-dev/skills/* your-project/.claude/skills/
# Copy all plugins at once
for plugin in heaptrace-skills/plugins/*/; do
cp -r "$plugin/skills/"* your-project/.claude/skills/
done
Path: .claude/skills/<skill-name>/SKILL.md
# Copy a specific plugin's skills
cp -r heaptrace-skills/plugins/heaptrace-dev/skills/* your-project/.cursor/skills/
Path: .cursor/skills/<skill-name>/skill.md
Skills are personal tools — don't commit them to your project repo:
echo ".claude/skills/" >> .gitignore
echo ".cursor/skills/" >> .gitignore
Skills are structured instruction files that guide AI coding assistants through specific development tasks. Instead of writing prompts from scratch, skills give consistent, battle-tested processes your entire team can follow.
Client gives a task
→ /suggest (what's missing? what can we add?)
→ /feature-plan (break it down, plan it)
→ /feature-work (build it end-to-end)
→ /code-review (catch issues before PR)
→ /smart-commit (clean commit message)
→ /release-notes (client-ready changelog)
The daily toolkit for every developer.
| Skill | What It Does |
|---|---|
feature-plan | Break requirements into tasks, mockups, and flow diagrams |
feature-work | Build end-to-end: DB → API → UI → Test |
find-fix | Trace bugs: reproduce → isolate → root cause → fix → verify |
smart-commit | Generate semantic commit messages (WHY, not WHAT) |
suggest | Spot gaps and suggest improvements clients didn't ask for |
code-review | 8-pass review: logic, security, perf, naming, tests |
test-gen | Generate tests that catch real bugs, not just pass |
explain | Understand any code before you touch it |
sec-audit | OWASP Top 10, secrets scan, dependency check |
release-notes | Turn git history into client-ready changelogs |
quick-plan | Rapid planning for small, well-scoped tasks |
quick-work | Fast execution mode for clearly defined tasks |
code-standards | Enforce and document team coding standards |
For tech leads managing teams and making architectural decisions.
| Skill | What It Does |
|---|---|
sprint-plan | Break epics into sprints with estimates and assignments |
arch-review | Audit architecture for scalability, coupling, SPOFs |
tech-debt-audit | Find and prioritize tech debt across the codebase |
incident-response | Structured triage, root cause analysis, postmortem |
pr-strategy | Split large features into reviewable PRs |
onboard-dev | Generate onboarding guide for new team members |
perf-audit | Profile slow endpoints, N+1 queries, memory leaks |
decision-doc | Write Architecture Decision Records (ADRs) |
message-craft | Craft clear technical messages and stakeholder updates |
System design, API contracts, and infrastructure planning.
Compliance and security skills for HIPAA, GDPR, SOC2, PCI-DSS audits, infrastructure hardening, incident planning, and secrets management.
Mobile development skills for app releases, mobile APIs, authentication, CI/CD, debugging, offline support, performance, and state management.
UI/UX designer skills for wireframing, user flows, design systems, UX audits, responsive design, accessibility, and design handoff.
QA skills for test planning, E2E testing, API testing, regression checks, bug reporting, load testing, accessibility audits, and test data generation.
Automation QA skills for Cypress testing, CI test pipelines, contract testing, mock services, and visual regression.
npx claudepluginhub heaptracetechnology/heaptrace-skills --plugin heaptrace-devVirtual development team: TDD, debugging, code review, backlog management, and proven workflow patterns
Lead engineer skills for sprint planning, architecture reviews, tech debt audits, incident response, PR strategy, and developer onboarding.
Full feature development workflow from spec to completion
Helder's personal SDLC toolbelt for AI coding agents — from PRD to ship. Bundles the tracer-bullet workflow alongside TDD, code review, audits, and shipping skills.
Per-feature development lifecycle: design, launch, build, wrap.
AI-powered development workflow automation - Phase-based planning, implementation orchestration, preflight code quality checks with security scanning, ship-it workflow, and development principles generator for CLAUDE.md