zebbern/claude-code-guide

API Fuzzing for Bug Bounty provides techniques for testing REST, SOAP, and GraphQL APIs during bug bounty hunting and penetration testing. Use it to discover vulnerabilities like IDOR, authentication bypass, SQL injection, SSRF, and GraphQL-specific issues.

API Shape Explorer generates multiple radically different interface designs for a module using parallel sub-agents, then compares them to help you choose the best API shape. Use it when designing APIs, exploring interface options, or comparing module shapes.

AWS Penetration Testing guides security assessment of Amazon Web Services environments, including IAM enumeration, privilege escalation, SSRF to metadata, S3 bucket exploitation, and Lambda attacks. Use it when asked to pentest AWS or test cloud infrastructure security.

Academic Paper Reviewer simulates academic peer review across Originality, Methodology, Results, and Writing, providing Major and Minor Revision recommendations with actionable feedback. Use it when asked to review a paper or simulate peer review.

Active Directory Attacks provides techniques for attacking Microsoft Active Directory environments, covering reconnaissance, credential harvesting, Kerberos attacks, lateral movement, and privilege escalation for red team operations and penetration testing.

Audit Flow traces system flows interactively across code, API, auth, data, and network layers with SQLite persistence and Mermaid export. Use it for security audits, compliance documentation, flow tracing, debugging, architecture reviews, or incident post-mortems.

Authentication Patterns compares session-based, JWT, and OAuth 2.0 authentication approaches and helps select providers like NextAuth, Clerk, Supabase Auth, and Lucia. Use it when implementing, reviewing, or migrating authentication flows to follow security best practices.

Broken Authentication Testing identifies and exploits authentication and session management vulnerabilities in web applications. Use it when asked to test for broken authentication, session fixation, credential stuffing, weak password policies, or authentication bypass flaws.

Burp Suite Testing guides web application security testing with Burp Suite, including HTTP traffic interception, request modification with Repeater, and automated vulnerability scanning. Use it when you need to intercept HTTP traffic, modify web requests, analyze HTTP history, or test for web vulnerabilities.

CV Tailor optimizes resumes by matching keywords to the target job description, rewriting experience bullets with the quantified STAR method, and checking ATS compatibility. Use it when applying for a specific role or when a resume needs tailoring.

Caching provides guidelines for implementing and reviewing cache layers, including invalidation, TTL selection, cache key design, and when not to cache. Use it when debugging stale data, cache stampedes, or configuring client-side caching.

Chart Image generates PNG chart images from data, supporting line, bar, area, candlestick, pie, and heatmap charts. Use it when you need to visualize data, plot time series, or create charts for reports, alerts, or dashboards without a browser.

Cloud Penetration Testing provides techniques for authorized security assessments of AWS, Azure, and GCP, covering reconnaissance, enumeration, privilege escalation, data extraction, and persistence. Use it for authorized cloud security engagements.

Code Documenter creates docstrings, API specifications, and documentation sites for software projects. Use it when adding inline documentation, generating OpenAPI/Swagger specs, or building developer guides and tutorials.

Code Vulnerability Audit scans code for dependency vulnerabilities, hardcoded secrets, and OWASP security anti-patterns such as SQL injection and XSS. Use it when asked to run security scans, vulnerability detection, secret leak checks, or code security audits.

Code to Diagram analyzes codebases via static analysis to generate architecture diagrams, flowcharts, and org charts in Mermaid or SVG format. Use it when you need to visualize module dependencies or understand code structure.

Cross-Examine interviews the user relentlessly about a plan or design until shared understanding is reached, asking one question at a time and resolving each branch of the decision tree. Use it when someone wants to stress-test a plan, get grilled on a design, or says "grill me".

Data Viz Renderer generates self-contained HTML/SVG infographics from JSON data, including stats cards, bar charts, flow diagrams, and mixed dashboards. Use it when a user asks for data visualization, infographics, charts, or dashboards.

Database Optimizer analyzes slow queries, execution plans, and system metrics to find and fix database performance bottlenecks. Use it for index design, query rewrites, configuration tuning, and partitioning strategies.

Database Scout explores SQLite and PostgreSQL databases read-only: lists tables, inspects schemas, previews data, generates Mermaid ER diagrams, and runs safe SELECT queries. Use it when asked to inspect a database structure or query data without modifying it.

Dataset Quality Audit runs 12-dimension quality checks on tabular data (CSV, Excel, TSV, JSON) to detect missing values, duplicates, outliers, format issues, and type inconsistencies, producing an overall score, grade, and actionable suggestions.

Deep Module Refactor explores a codebase like an AI would, surfaces architectural friction, and proposes module-deepening refactors as GitHub issue RFCs to improve testability and AI-navigability.

Design System Builder extracts design systems from reference UI images and generates implementation-ready UI design prompts. Use when users provide UI screenshots or mockups and want to create consistent designs, generate design systems, or build MVP UIs matching reference aesthetics.

Dev Guide Generator creates complete technical tutorials from a single topic, covering prerequisites, environment setup, core steps, troubleshooting, and a cheatsheet. Use it when asked to write a step-by-step guide, quickstart, or how-to documentation.

React Composition Patterns provides guidelines for building flexible, maintainable React components, avoiding boolean prop proliferation through compound components and state lifting. Use it when refactoring components with many boolean props, building component libraries, or reviewing component architecture.