By j0ruge
Navigate known pitfalls when self-hosting Zitadel v4 OIDC, with documented solutions for JWT/JWKS over self-signed HTTPS, TLS reverse proxy configuration, API v1→v2 mapping, and CI smoke tests.
Based on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Plugin marketplace for Claude Code and Cursor — CI/CD, code review, deployments, releases, and more.
Installation · Plugins · Auto-updates · Team Distribution · References
A curated dual-platform plugin marketplace for Claude Code and Cursor by j0ruge. Each plugin packages production-ready skills and commands that integrate directly into your workflow — no configuration needed beyond install.
| Plugin | Claude Code | Cursor | Notes |
|---|---|---|---|
| cicd | ✓ | ✓ | Skill — works on both platforms without changes |
| codereview | ✓ | ✓ | Skills — adapted automatically by the installer |
| ddd | ✓ | ✓ | Skill — works on both platforms |
| deploy | ✓ | ✓ | Command (Claude Code) / Skill (Cursor) |
| dev-script | ✓ | ✓ | Skill — generates dev.sh (bash) + dev.ps1 (PowerShell) per project |
| dotnet-wpf | ✓ | ✓ | Skills — works on both platforms |
| pdf-generation | ✓ | ✓ | Skill — PDF template design + library selection (pdfmake/pdf-lib/PDFKit/Puppeteer/@react-pdf), modular sections, visual verification |
| release | ✓ | ✓ | Command (Claude Code) / Skill (Cursor) |
| retrofit-skill | ✓ | ✓ | Command (Claude Code) / Skill (Cursor) |
| statusline | ✓ | — | Claude Code only (uses the Claude Code status line API) |
| ticket | ✓ | — | Claude Code only (/ticket slash command + Jira acli + atlassian MCP) |
| whisper-preprocess | ✓ | ✓ | Skill — ffmpeg + OpenAI Whisper offline audio→text pipeline (silence removal, voice enhancement, segmentation, multilingual merge); decoupled stable-gain listening copy (no "picotamento") |
| zitadel-idp | ✓ | ✓ | Skill — Zitadel self-hosted OIDC integration field guide (bootstrap, JWT, branding, 43 gotchas with proto-aligned v4.15 examples + CD cutover survival kit + Console UI human-user creation pitfalls + production-cutover v0.7.0 (backend extra_hosts for hairpin-NAT IdP, 3-layer SPA defense vs RT-reuse session revoke) + smoke-e2e CI v0.8.0 (admin.pat bind mount EACCES cascade into unique_constraints_pkey, default password policy 4-class trap, Login UI v2 healthcheck slow on small runners) + real-browser smoke v0.9.0 (seed user grant reconciliation gap on YAML evolution, browser→backend CORS preflight 401 mimicking JWT failure, Playwright self-signed Zitadel recipe) + admin-console Failed to fetch mixed-content v0.10.0 (api http vs issuer https from --tlsMode disabled; recreate, don't docker start) + v2.66→v4 upgrade runbook + API v1→v2 mapping) |
| wsl-windows-onboarding | ✓ | ✓ | Skill — onboards a Windows box to WSL2: install the Ubuntu distro + a non-root sudo user, diagnose WSL, install rtk + Claude Code (global rtk hook), migrate projects into the Linux FS (copy→validate→delete, incl. a tight-disk one-repo-at-a-time loop for a nearly-full C: and the reserved-name nul/\\?\ delete trap, CRLF/filemode "whole tree modified" diagnosis), and set up zsh + the Windows Terminal profile (icon + default) |
# Add the marketplace (pick one)
/plugin marketplace add j0ruge/skills_commands_manager # via GitHub
/plugin marketplace add [email protected]:j0ruge/skills_commands_manager.git # via SSH
Then install any plugin:
/plugin install codereview # or: cicd, ddd, deploy, dev-script, dotnet-wpf, pdf-generation, release, retrofit-skill, statusline, ticket, whisper-preprocess, zitadel-idp
[!TIP] Keep plugins up to date with a single command:
/plugin marketplace update
Clone the repo and run the interactive installer:
git clone [email protected]:j0ruge/skills_commands_manager.git
cd skills_commands_manager
python install.py
The installer prompts for platform (Claude Code, Cursor, or Both) and where to place the Cursor skills. It automatically adapts plugin content for Cursor.
[!IMPORTANT] Cursor has no global skills directory — only project-local
.cursor/skills/is auto-loaded by the agent (Cursor docs). Runpython install.pyfrom inside each project where you want the skills available, and pick the Project option.The installer also offers a Staging cache option that copies the converted skills to
~/.cursor/skills/as a master copy — handy as a source to mirror into projects, but Cursor itself will not pick those up directly.
npx claudepluginhub j0ruge/skills_commands_manager --plugin zitadel-idpApply non-obvious session lessons to a target skill in two modes — full (marketplace skill: bumps version, updates CHANGELOG/marketplace.json/README, commits and pushes) or lean (local skill in another repo: edits files + CHANGELOG and commits there, no bump or marketplace changes). Triggers — retrofit, skill-maintenance, session-lessons, lean-retrofit, local-skill.
GitHub Actions / Docker / GHCR pipeline troubleshooting and config — auto-routes by stack: backend Node (Prisma/Biome) or Django (gunicorn), plus frontend Vite. Deep self-hosted runner runbook (containerized myoung34 + systemd): registration-token chicken-and-egg, ACCESS_TOKEN/PAT migration, deprecated-binary & deleted-registration crashloops, stacked failures, silently-queued deploys. Also GHCR auth/TLS-handshake-timeout, reverse-proxy upstream poisoning, Django ALLOWED_HOSTS healthcheck-400. Triggers — CI/CD, GitHub Actions, GHCR auth, self-hosted runner, runner crashloop, registration token expired, runner version deprecated, compose run orphan, deploy queued, Django gunicorn.
Code review toolkit: automated pre-PR review with severity grading, TOCTOU race condition detection, accessibility checks, data integrity analysis, deterministic hardcoded secrets detection via shell script (passwords, JWT, AWS/GCP/GitHub tokens, PEM keys — GitGuardian-equivalent, applied to CODE/TESTS/CONFIG, with optional ggshield/gitleaks integration when installed), a parallel whole-repo dead-code sweep (unused exports, orphaned files, unreachable code via knip/ts-prune/vulture or grep, with cleanup recommendations), and multi-reviewer PR comment resolver (CodeRabbit, Copilot, Gemini, Codex) with GitHub conversation resolution and model-tier routing for token efficiency. Stack-agnostic with TypeScript/React defaults and dotnet preset for C#/.NET projects.
Automated GitHub Release creation with categorized release notes from git history. Multi-stack (C#/.NET, Node.js, Go, Rust, Python) with --path filter for monorepo component releases. Contributor resolution via org membership cross-reference.
Complete C#/.NET WPF development toolkit — project setup & audit, Fluent Design guide (90+ controls), WinForms-to-WPF MVVM migration, and FlaUI E2E testing.
Comprehensive skill pack with 66 specialized skills for full-stack developers: 12 language experts (Python, TypeScript, Go, Rust, C++, Swift, Kotlin, C#, PHP, Java, SQL, JavaScript), 10 backend frameworks, 6 frontend/mobile, plus infrastructure, DevOps, security, and testing. Features progressive disclosure architecture for 50% faster loading.
Harness-native ECC plugin for engineering teams - 67 agents, 279 skills, 94 legacy command shims, reusable hooks, rules, MCP conventions, and operator workflows for Claude Code plus adjacent agent harnesses
This skill should be used when users need to generate ideas, explore creative solutions, or systematically brainstorm approaches to problems. Use when users request help with ideation, content planning, product features, marketing campaigns, strategic planning, creative writing, or any task requiring structured idea generation. The skill provides 30+ research-validated prompt patterns across 14 categories with exact templates, success metrics, and domain-specific applications.
Develop, test, build, and deploy Godot 4.x games with Claude Code. Includes GdUnit4 testing, web/desktop exports, CI/CD pipelines, and deployment to Vercel/GitHub Pages/itch.io.
A growing collection of Claude-compatible academic workflow bundles. Covers scientific figures, manuscript writing and polishing, reviewer assessment, citation retrieval, data availability, paper reading, literature search, response letters, paper-to-PPTX conversion, and evidence-grounded Chinese invention patent drafting. Rules are organized as reusable skill folders with explicit workflows and quality checks.
Binary reverse engineering, malware analysis, firmware security, and software protection research for authorized security research, CTF competitions, and defensive security