Starter Files
Don't start from scratch. Copy a vetted SKILL.md template for your use case, customize it, and install it in minutes.
How it works
Browse 12 vetted templates across 4 categories — Git, Testing, Documentation, and Security.
Click "Copy Template" to grab the full SKILL.md content to your clipboard instantly.
Paste into your .claude/skills/ folder, edit the trigger and instructions, and you're live.
Auto-generate Conventional Commits messages from your staged diff. Analyzes changes and proposes a correctly scoped, typed commit message every time.
--- name: smart-git-commit description: Generate semantic commit messages --- ## Trigger When asked to commit or write a commit message ## Instructions Run git diff --staged, analyze changes, output a Conventional Commits message: type(scope): subject
Write structured pull request descriptions with context from your branch history. Generates a Summary, Test Plan, and Breaking Changes section automatically.
--- name: pr-description-writer description: Write structured PR descriptions --- ## Trigger When asked to write a PR or pull request description ## Instructions Run git log --oneline origin/main..HEAD, summarize changes. Output ## Summary, ## Test Plan, ## Notes
Enforce kebab-case branch naming conventions across your team. Suggests correctly formatted branch names from a ticket ID or short description.
--- name: branch-naming-guide description: Enforce branch naming conventions --- ## Trigger When asked to name a branch or create a branch ## Instructions Output branch names as: type/ticket-short-description Types: feat, fix, chore, docs, refactor, test
Generate Jest or Vitest unit tests from function signatures and implementation. Covers happy path, edge cases, and error handling out of the box.
--- name: unit-test-generator description: Generate Jest/Vitest unit tests --- ## Trigger When asked to write tests or add unit tests for a function ## Instructions Read the function. Output describe/it blocks covering happy path, null input, empty array, and error cases
Generate Playwright end-to-end test scenarios from user stories or page descriptions. Outputs fully working test files with locators and assertions.
--- name: e2e-test-writer description: Write Playwright E2E test scenarios --- ## Trigger When asked to write E2E or Playwright tests ## Instructions Output a .spec.ts file using @playwright/test. Use getByRole and getByText locators. Include page.goto
Analyze your current test suite and flag uncovered branches, untested functions, and missing edge cases. Prioritizes gaps by risk level.
--- name: test-coverage-advisor description: Analyze and improve test coverage --- ## Trigger When asked to review or improve test coverage ## Instructions Read source files and existing tests. List uncovered functions ranked by complexity and risk. Suggest tests
Add JSDoc comments to JavaScript functions — param types, return values, and @throws tags. Works with TypeScript too.
--- name: jsdoc-generator description: Add JSDoc comments to JS functions --- ## Trigger When asked to document or add JSDoc to a function ## Instructions Infer types from code. Output /** @param @returns */ blocks above each function. Include @throws if throws
Generate complete project READMEs with installation, usage, API reference, and contributing sections. Tailored to the detected project type.
--- name: readme-builder description: Generate a complete project README --- ## Trigger When asked to write or generate a README ## Instructions Detect project type from package.json. Output README with: title, badges, install, usage, API, contributing
Generate OpenAPI 3.0 specs from Express, Fastify, or Flask route code. Outputs valid YAML with schemas, parameters, and response codes.
--- name: api-documentation description: Generate OpenAPI 3.0 specs from routes --- ## Trigger When asked to document an API or generate OpenAPI spec ## Instructions Read route files. Output openapi.yaml with paths, schemas, 200/400/401/500 response objects
Check code for OWASP Top 10 vulnerabilities including SQL injection, XSS, insecure deserialization, and broken authentication patterns.
--- name: owasp-code-scanner description: OWASP Top 10 vulnerability scanner --- ## Trigger When asked to scan code for security or OWASP issues ## Instructions Review code for OWASP Top 10. Output a table: issue, severity, line, recommendation. Flag critical items
Detect hardcoded API keys, passwords, tokens, and credentials before you push. Flags common secret patterns and suggests environment variable replacements.
--- name: secrets-detector description: Detect hardcoded secrets and credentials --- ## Trigger When asked to check for secrets or before committing ## Instructions Scan staged files. Flag API keys, tokens, passwords. Suggest process.env.SECRET_NAME as replacement
Audit npm or pip dependencies for known CVEs, outdated packages, and license compatibility issues. Outputs a prioritized risk table.
--- name: dependency-auditor description: Audit dependencies for CVEs and license risks --- ## Trigger When asked to audit dependencies or check for CVEs ## Instructions Read package.json or requirements.txt. Run npm audit. Output table: package, CVE, severity, fix command
Submit it and we'll review, test, and add it to the directory so thousands of developers can use it.