🔥 25 Must-Have Skills
/nextjs-app-router-scaffolder
/tailwind-responsive-darkmode-styler
/form-validation-schema-builder
/state-management-query-architect
/accessibility-auditor
/express-fastapi-route-builder
/auth-session-oauth2-scaffolder
/websocket-realtime-secure-engine
/graphql-schema-dataloader-builder
/mcp-tools-auto-bridge
/drizzle-prisma-orm-architect
/sql-query-optimizer
/db-migration-generator
/schema-drift-detector
/docker-multi-stage-stack-builder
/github-actions-generator
/dockerfile-builder
/k8s-manifest-validator
/unit-test-generator
/playwright-e2e-security-flow-tester
/lighthouse-web-vitals-optimizer
/security-suite-orchestrator
/owasp-sast-auditor
/dependency-cve-audit-patcher
/secrets-leak-detector
The 25 highest-impact skills from all 115 — full catalog below.
ai-ops 6
/agent-self-debugger-loop
view →
Agent Self-Debugger Loop
A Python CLI (self_debug.py) that parses pytest stderr/stdout tracebacks, extracts the failing File x.py line N location, reads and rewrites that file via an ast.NodeTran…
/context-compressor
view →
Context Compressor
Compress long conversation histories or documents to save context window token limits.
/prompt-evaluator
view →
Prompt Evaluator
Evaluate agent prompt effectiveness using accuracy metrics and token constraints.
/rag-chunking-evaluator
view →
RAG Chunking Evaluator
Analyze document structures to recommend optimal chunking strategies and overlap ratios for RAG pipelines.
/structured-output-enforcer
view →
Structured Output Enforcer
Convert unstructured LLM output into validated JSON adhering to strict Zod or JSON Schema rules.
/tool-schema-builder
view →
Tool Schema Builder
Convert standard code functions into JSON schema format for AI function calling.
algorithms 2
/data-structure-optimizer
view →
Data Structure Optimizer
Analyze algorithm time/space complexity (Big O) and refactor logic using optimal data structures (Heaps, Tries, Hash Maps).
/procedural-dungeon-generator
view →
Procedural Dungeon & Map Generator
Implements deterministic 2D tilemap generation with Binary Space Partitioning for rectangular rooms, A* grid pathfinding for corridor carving between room centers, and a …
api 3
/graphql-schema-designer
view →
GraphQL Schema Designer
Design GraphQL type definitions, query/mutation schemas, and resolver boilerplate code.
/mcp-tools-auto-bridge
view →
MCP Tools Auto Bridge
A Python generator (bridge_gen.py) that reads a target source file via ast reflection, extracts public function signatures (name, parameters, type annotations, docstrings…
/webhook-handler-generator
view →
Webhook Handler Generator
Draft secure webhook receiver endpoints complete with cryptographic signature verification (Stripe, GitHub, Midtrans).
backend 16
/auth-session-oauth2-scaffolder
view →
Auth Session & OAuth2 Scaffolder
Implements comprehensive user authentication systems supporting secure cookie sessions, JWT refresh token rotation, password hashing, and third-party OAuth2 social logins…
/caching-strategy-implementer
view →
Caching Strategy Implementer
Implement Cache-Aside, Write-Through, and TTL-based caching logic using Redis or in-memory LRU caches.
/docker-multi-stage-stack-builder
view →
Docker Multi-Stage Stack Builder
Containerizes web applications and dependencies into lightweight, production-ready multi-stage Docker images orchestrated via Docker Compose.
/express-fastapi-route-builder
view →
Express & FastAPI Route Builder
Generates enterprise-grade RESTful API routes in Node.js (Express) or Python (FastAPI) complete with payload validation, unified error handling, and automated Swagger spe…
/graphql-schema-dataloader-builder
view →
GraphQL Schema & DataLoader Builder
Designs performance-optimized GraphQL APIs with strict type definitions, clean Query/Mutation resolvers, and batching mechanisms to eliminate N+1 database queries.
/jwt-token-rotator
view →
JWT Token Rotator
Implement secure short-lived access token renewal and refresh token rotation with revocation blacklisting.
/pagination-cursor-builder
view →
Pagination Cursor Builder
Build cursor-based and keyset pagination handlers for database queries and API endpoints.
/playwright-e2e-security-flow-tester
view →
Playwright E2E Security Flow Tester
Crafts automated End-to-End (E2E) browser testing suites validating critical user journeys, edge cases, and client-side security boundary enforcement.
/rate-limiter-middleware
view →
Rate Limiter Middleware
Build API rate-limiting middleware using Token Bucket or Sliding Window algorithms.
/redis-pubsub-cache-manager
view →
Redis Pub/Sub & Cache Manager
Deploys high-performance caching strategies and distributed message pub/sub event buses to reduce database load and handle background processing.
/wasm-rust-compiler
view →
WebAssembly Rust Compiler
Surveys JS and Python sources for CPU-bound hot loops, then provides a complete wasm-bindgen Rust implementation, Cargo manifest, wasm-pack build scripts, and browser loa…
/websocket-realtime-handler
view →
WebSocket Realtime Handler
Implement WebSocket connection lifecycles, ping/pong heartbeats, reconnect logic, and event broadcasting.
/websocket-realtime-secure-engine
view →
WebSocket Realtime Secure Engine
Scaffolds high-throughput, bidirectional real-time communication layers over WebSockets or Server-Sent Events (SSE) with robust reconnection and authentication controls.
/websocket-realtime-sync-engine
view →
WebSocket Realtime Sync Engine
Implements a dependency-light ESM WebSocket sync client with exponential-backoff reconnection, heartbeat ping/pong keep-alive, JSON Patch style delta application, and ver…
/error-code-consistency-auditor
view →
Error Code Consistency Auditor
Audit every error class, message, and HTTP mapping across the codebase for duplication, contradictory status codes, and undocumented errors.
/middleware-order-validator
view →
Middleware Order Validator
Audit middleware registration order in Express/FastAPI apps against safety rules — auth before authz, rate-limit before routes, error handlers last — and emit fixes.
cloud 3
/k8s-manifest-validator
view →
K8s Manifest Validator
Validate and lint Kubernetes manifest files (YAML/JSON) against required fields, resource constraints, and best practices, with an optional kubectl dry-run schema check.
/serverless-function-generator
view →
Serverless Function Generator
Scaffold lightweight serverless handlers for Cloudflare Workers or AWS Lambda with standard CORS and error handling.
/terraform-module-builder
view →
Terraform Module Builder
Draft modular, reusable Infrastructure-as-Code Terraform modules for cloud infrastructure.
core-coding 9
/ast-anti-pattern-slayer
view →
AST Anti-Pattern Slayer
Parses Python or JavaScript-style source into an AST, computes cyclomatic complexity v(G) as decision count plus one, maximum block nesting depth, bare except clauses and…
/async-concurrency-handler
view →
Async Concurrency Handler
Implement async/await workflows, promise pools, worker threads, or goroutines while preventing race conditions.
/bytecode-decompiler-assistant
view →
Bytecode Decompiler & Obfuscation Assistant
Loads Python pyc bytecode via marshal after importlib header validation, pretty-prints raw dis, reconstructs a basic-block control-flow graph annotated with loop heads an…
/chess-engine-mechanic-builder
view →
Custom Chess Engine Mechanic Builder
Wraps python-chess inside a SkillChessBoard that adds turn tracking, per-skill cooldown ticks, a Teleport mechanic and a Freeze Square mechanic with expiry timers, plus r…
/error-class-hierarchy-builder
view →
Error Class Hierarchy Builder
Create domain-specific custom exception classes with standardized error codes, HTTP statuses, and metadata payloads.
/regex-builder-parser
view →
Regex Builder & Parser
Construct ReDoS-safe regular expressions and string parser logic for complex input string extraction.
/type-definition-generator
view →
Type Definition Generator
Convert untyped JavaScript, Python dicts, or raw JSON payloads into strict TypeScript interfaces or Type Hint annotations.
/refactor-safety-harness
view →
Refactor Safety Harness
Record golden outputs of current behavior before a refactor, then diff outputs after to prove behavior is unchanged.
/startup-cold-boot-optimizer
view →
Startup Cold-Boot Optimizer
Profile application cold-start, identify heavy imports and work in the boot hot path, and produce a targeted lazy-load optimization plan plus proven timings.
core-engine-hardening 11
/cmd-sanitizer
view →
Cmd Sanitizer
Static linter over command strings before execution. Detects and rewrites unsafe Win32/PowerShell 5.1 patterns: bare && chaining, unquoted spaced paths, $? vs $LASTEXITCO…
/context-bank
view →
Context Bank
Materializes a structured CONTEXT_BANK.md + JSON file that captures verified file paths, decided invariants, active TODOs, and open risks, allowing subagents and repeated…
/deptomap
view →
Dep Map
Builds a persistent dependency graph (`dep-graph.json`) by scanning `import`/`require`/`include` patterns across the codebase. Before any edit it lists the blast radius o…
/memory-journal
view →
Memory Journal
Cross-session ledger at `~/.opencode/memory/*.md`: appends decisions/rejections/root-causes during a session; on session start, diffs against the live transcript so the a…
/memory-leak-profiler-debugger
view →
Memory Leak Profiler & Debugger
Instruments a target callable under tracemalloc and the cyclic garbage collector, takes paired allocation snapshots across repeated runs, flags allocations whose cumulati…
/output-trust-check
view →
Output Trust Check
Wraps every truncating tool call: when output is truncated/byte-capped, refuses to decide on the truncated portion and automatically requests the tail window or a targete…
/regression-sentinel
view →
Regression Sentinel
Before each new task in a long session, re-runs the last N passing checkpoints captured by verify-orchestrator as a smoke suite, catching regressions caused by recent edi…
/schema-sync
view →
Schema Sync
Before multi-step toolkit workflows, pings the live tool (via schema-style endpoints / search tools) and diffs against my cached schema; on mismatch, rewrites the workflo…
/spec-loop-closer
view →
Spec Loop Closer
Forces every user requirement through a 1:1 mapping to a checkable assertion (grep-able token, executable test, or numeric threshold) before implementation begins. Blocks…
/subagent-evidence
view →
Subagent Evidence
Dispatch-time contract for explore agents: return only observations each with a `file:line` citation and raw excerpt; inference must be explicitly tagged `[INFERRED]`. Po…
/verify-orchestrator
view →
Verify Orchestrator
Auto-discovers project verification surface (test/lint/typecheck configs), runs the minimal verification suite, and gates every completion claim on machine-parsed exit co…
data-science 2
/chart-config-generator
view →
Chart Config Generator
Map raw JSON datasets into ready-to-use chart configuration objects (Chart.js, Recharts, or ECharts).
/pandas-data-cleaner
view →
Pandas Data Cleaner
Generate Python Pandas scripts to handle missing values, drop duplicates, and normalize column data types.
database 7
/database-zero-downtime-migrator
view →
Database Zero-Downtime Migrator
Generates Expand-and-Contract (Parallel Change) migration SQL as four ordered stage files plus a JSON manifest from a MigrationPlan, emitting Postgres or MySQL dialect ou…
/db-migration-generator
view →
DB Migration Generator
Generate database schema migration scripts (Prisma/TypeORM/Alembic) based on model changes.
/drizzle-prisma-orm-architect
view →
Drizzle & Prisma ORM Architect
Architect relational database schemas, model complex entity relationships, optimize query execution, and generate zero-downtime database migration files.
/sql-query-optimizer
view →
SQL Query Optimizer
Analyze slow SQL queries, recommend indexes, and restructure join clauses.
/vector-db-hybrid-indexer
view →
Vector DB Hybrid Search Indexer
A dependency-light Python module (hybrid_index.py) implementing a self-contained BM25 sparse scorer, a cosine-similarity dense index with optional numpy and pure-math fal…
/vector-db-indexer
view →
Vector DB Indexer
Chunk documents and store vector embeddings into a Vector DB.
/schema-drift-detector
view →
Schema Drift Detector
Compare SQL migrations, ORM models, and TypeScript types against one another to find which layer is silently out of sync before your queries start breaking.
debugging 2
/memory-leak-debugger
view →
Memory Leak Debugger
Identify and resolve unmanaged memory leaks, event listener leaks, and circular references across runtimes.
/postmortem-autobiographer
view →
Postmortem Autobiographer
Turn an incident description or production stack trace into a structured postmortem with timeline, 5-whys, and trackable action items — ready for team review.
developer-experience 13
/changelog-generator
view →
Changelog Generator
Parse Git commit logs to generate a CHANGELOG.md adhering to Conventional Commits.
/cli-tool-scaffolder
view →
CLI Tool Scaffolder
Scaffold interactive command-line interface tools with argument parsing, flags, spinners, and help menus.
/code-translator
view →
Code Translator
Precisely convert code logic from one programming language to another.
/cron-schedule-parser
view →
Cron Schedule Parser
Translate natural language time rules into valid 5-part or 6-part Cron schedule expressions.
/git-bisect-time-traveler
view →
Git Bisect Time Traveler
Automates regression tracking by orchestrating non-interactive git bisect sessions wrapped around a headless test harness, parses the first-bad-commit SHA, subject and da…
/mermaid-diagrammer
view →
Mermaid Diagrammer
Convert code logic, database structures, or system architectures into valid Mermaid.js visual diagrams.
/openapi-spec-writer
view →
OpenAPI Spec Writer
Extract backend API code into OpenAPI/Swagger 3.0 documentation.
/regex-builder-explainer
view →
Regex Builder & Explainer
Construct complex regular expressions based on pattern requirements with step-by-step logic breakdown.
/tui-app-scaffolder
view →
Interactive TUI Application Scaffolder
Scaffolds a complete reactive Textual terminal Todo application with header, input, DataTable, footer, status label, custom keybindings and CRUD handlers, and includes a …
/env-config-sleuth
view →
Env Config Sleuth
Cross-reference environment variables referenced by code against definitions in .env files, CI workflows, and docs to find missing, misspelled, and orphaned configuration…
/monorepo-package-cleaner
view →
Monorepo Package Cleaner
Audit a monorepo workspace for dependency cycles, mismatched shared versions, and cross-boundary imports, then emit a prioritized cleanup plan.
/pr-logic-reviewer
view →
PR Logic Reviewer
Review a pull-request diff for logic bugs — boundary conditions, null safety, state and edge semantics — not style, and emit a bug-first review report.
/timezone-trap-cron-debugger
view →
Timezone-Trap Cron Debugger
Simulate thousands of scheduled job runs across timezones and DST transitions to provably detect misfires, skips, and duplicate executions hidden in cron schedules.
devops 5
/dockerfile-builder
view →
Dockerfile Builder
Draft efficient, secure, and minimal multi-stage Dockerfiles.
/github-actions-generator
view →
GitHub Actions Generator
Design automated CI/CD workflows for testing, building, and deployment.
/codegen-drift-watchdog
view →
Codegen Drift Watchdog
Detect when generated output (Prisma client, tRPC router types, OpenAPI clients) is stale versus its source schema, then auto-regenerate or fail CI with a precise list.
/dependency-fitness-scorecard
view →
Dependency Fitness Scorecard
Score every third-party dependency on maintenance activity, release cadence, issue health, and size so upgrade decisions are data-driven instead of fear-driven.
/performance-budget-bouncer
view →
Performance Budget Bouncer
Enforce performance budgets in CI and reject pull requests that exceed size, weight, or timing thresholds with a machine-readable flagging report.
frontend 10
/accessibility-auditor
view →
Accessibility Auditor
Audit HTML/JSX code against WCAG 2.1 guidelines and provide accessible ARIA code fixes.
/form-validation-schema-builder
view →
Form Validation & Schema Builder
Builds robust, type-safe interactive web forms featuring complex validation logic, real-time error feedback, and seamless client-server schema synchronization.
/i18n-locale-extractor
view →
i18n Locale Extractor
Extract hardcoded UI text strings into structured internationalization JSON translation files.
/lighthouse-web-vitals-optimizer
view →
Lighthouse & Web Vitals Optimizer
Audits web performance metrics, optimizes client-side bundle footprints, and refactors resource delivery to achieve maximum Core Web Vitals scores.
/nextjs-app-router-scaffolder
view →
Next.js App Router Scaffolder
Automatically scaffolds production-ready Next.js App Router directory structures, isolating React Server Components (RSC) from Client Components, configuring standardized…
/seo-metadata-builder
view →
SEO & Metadata Builder
Generate complete HTML meta tags, Open Graph, Twitter Cards, and JSON-LD structured data.
/state-management-architect
view →
State Management Architect
Implement clean application state management patterns (Zustand, Redux Toolkit, Pinia) with atomic state updates.
/state-management-query-architect
view →
State Management & Query Architect
Establishes a clean separation between global client UI state and asynchronous server state management using Zustand and TanStack Query (React Query).
/tailwind-converter
view →
Tailwind CSS Converter
Convert raw CSS or inline styles into clean, idiomatic Tailwind CSS utility classes.
/tailwind-responsive-darkmode-styler
view →
Tailwind Responsive & Darkmode Styler
Transforms raw JSX or HTML structures into fully responsive, accessible, dark-mode ready web interfaces using Tailwind CSS utility classes.
orchestrator 7
/backend-suite-orchestrator
view →
Backend Suite Orchestrator
Orchestrates the 4-stage backend build chain — REST routes with OpenAPI spec (skills/express-fastapi-route-builder), auth/session/OAuth2 (skills/auth-session-oauth2-scaff…
/frontend-suite-orchestrator
view →
Frontend Suite Orchestrator
Orchestrates a 5-stage frontend build chain over a Next.js project: App Router scaffold, Tailwind responsive/dark-mode styling, zod-backed progressive forms, and the Zust…
/infra-qa-suite-orchestrator
view →
Infrastructure & QA Suite Orchestrator
Orchestrates the 5-stage infrastructure and QA chain — ORM schemas plus zero-downtime migrations (skills/drizzle-prisma-orm-architect), Redis caching and pub/sub event bu…
/looping-auto-fixer
view →
Looping Auto Fixer
Iterative fixer that runs unit-test-generator → validates via skill-tester → if tests fail, feeds error logs to memory-leak-debugger or patches code → repeats up to 3 ret…
/mega-pipeline-deployer
view →
Mega Pipeline Deployer
Flexible orchestration engine that executes pipeline workflows in Full Mode (all 7 steps sequentially) or Selective Mode (user-specified step subset). Performs data contr…
/project-auto-builder
view →
Project Auto Builder
Dynamic orchestrator that inspects ./registry.json, analyzes the project workspace stack (Node.js, Python, Docker, etc.), automatically matches and orders optimal skills …
/security-suite-orchestrator
view →
Security Suite Orchestrator
Orchestrates a full 8-stage security audit chain over a local web app: dependency CVE scan, OWASP SAST static audit, SQLi/XSS input sanitization, JWT security cracking, B…
security 12
/bola-idor-vulnerability-scanner
view →
BOLA / IDOR Vulnerability Scanner
Inspects API endpoints for Broken Object Level Authorization (BOLA/IDOR) flaws to ensure users cannot manipulate resource IDs to access foreign data.
/cors-csp-headers-hardener
view →
CORS & CSP Headers Hardener
Inspects HTTP response headers on local web servers and injects defensive security headers to prevent clickjacking, cross-site scripting, and unauthorized domain access.
/dependency-cve-audit-patcher
view →
Dependency CVE Audit & Patcher
Audits third-party open-source packages for known vulnerabilities (CVEs), evaluating breaking change risks and generating automated patch updates.
/jwt-security-cracker-tester
view →
JWT Security & Algorithm Cracker Tester
Evaluates JSON Web Token handling on local API routes to identify token forgery, algorithm confusion, and weak signature secrets.
/owasp-sast-auditor
view →
OWASP SAST Security Auditor
Audits local web application source code for OWASP Top 10 vulnerabilities, generating security report logs and applying immediate automated code fixes.
/owasp-vulnerability-checker
view →
OWASP Vulnerability Checker
Audit API endpoints for common security vulnerabilities (XSS, SQLi, CSRF).
/prompt-injection-shield
view →
Prompt Injection & Security Shield
A stdlib-only Python module (shield.py) implementing InjectionShield static inspection for jailbreak signatures, system-prompt extraction patterns, and command-injection …
/rate-limit-bruteforce-shield
view →
Rate-Limit & Brute-Force Shield
Scans sensitive authentication endpoints and implements Redis-backed rate-limiting controls to block credential stuffing and brute-force attacks.
/secrets-leak-detector
view →
Secrets Leak Detector
Scan codebases to detect leaked API keys, tokens, or credentials.
/sqli-xss-payload-sanitizer
view →
SQLi & XSS Payload Sanitizer
Identifies unescaped user inputs and unparameterized database queries, injecting sanitization middleware and parameterized bindings to neutralize XSS and SQLi.
/license-clash-mediator
view →
License Clash Mediator
Build a dependency-license graph and flag copyleft/permissive conflicts plus missing license metadata before they become legal incidents.
/trojan-source-hunter
view →
Trojan Source Hunter
Scan source files for invisible Unicode/Bidirectional trojan-source characters that silently alter code logic flow without being visible to reviewers.
software-architecture 3
/dependency-injection-wire
view →
Dependency Injection Wiring
Decouple code modules using Inversion of Control (IoC) containers and explicit interface abstractions.
/design-pattern-implementer
view →
Design Pattern Implementer
Refactor code to apply object-oriented design patterns (Factory, Strategy, Observer, Decorator, Adapter) cleanly.
/pygame-state-machine-architect
view →
Pygame State Machine Architect
Defines an abstract BaseState lifecycle (startup, cleanup, get_event, update, draw) plus a StateMachine manager running a fixed delta-time loop with dt = clock.tick(60) /…
testing 4
/unit-test-generator
view →
Unit Test Generator
Generate automated unit test suites (Jest, Pytest, Go test) with complete mocking.
/flaky-test-jury
view →
Flaky Test Jury
Analyze repeated CI test logs, classify flaky tests by root-cause category, and emit stabilization patches plus a verdict report before they erode team trust.
/golden-snapshot-migrator
view →
Golden Snapshot Migrator
Capture golden snapshots before a major library or dependency migration and diff after to keep the external behavior contract intact.
/shadow-traffic-replayer
view →
Shadow Traffic Replayer
Replay recorded production HTTP traffic against a new build and diff responses to surface API regressions without writing a single test.
⚡ Install
Option A — one line in ~/config/opencode/opencode.jsonc, then restart OpenCode:
{ "skills": ["https://rmazrim.github.io/opencode-artes/skills/"] }
Option B — clone & build (115 skills generated locally):
git clone https://github.com/RMAzrim/opencode-artes.git && cd opencode-artes && npm install && npm run build