helderberto/agent-skills

July 22, 2026 · View on GitHub

Test Plugin Installation

Personal SDLC toolbelt for AI coding agents — from spec to ship.

A collection of skills that encode the workflows, quality gates, and engineering practices I use day-to-day. Pure Markdown, zero runtime deps, installable as a Claude Code plugin or copied into any agent that reads instruction files.

  SPEC            PLAN            BUILD            TEST             REVIEW           SHIP
 ┌──────┐       ┌──────┐        ┌──────┐         ┌──────┐         ┌──────┐         ┌──────┐
 │ Idea │ ────▶ │ Spec │ ─────▶ │ Code │ ──────▶ │ Test │ ──────▶ │  QA  │ ──────▶ │  Go  │
 │Refine│       │Slices│        │ Impl │         │Verify│         │ Gate │         │ Live │
 └──────┘       └──────┘        └──────┘         └──────┘         └──────┘         └──────┘
 /hb:spec       /hb:plan        /hb:build        /hb:test         /hb:review       /hb:ship

Each phase has a dedicated workflow skill that orchestrates the smaller toolbelt skills underneath it. Type the spine in order, or let it chain — every skill auto-routes by description. Only the outward-facing steps that push work out of your hands (ship, create-pull-request) are gated against auto-triggering, so you always pull that trigger yourself.


Quick Start

Claude Code (recommended)

Install via the marketplace:

/plugin marketplace add helderberto/agent-skills
/plugin install hb@helderberto-skills

After install, skills are available as /hb:<skill-name> — e.g. /hb:spec, /hb:tdd, /hb:ship. Most skills also auto-trigger from natural language ("review this PR", "check accessibility", etc.) based on their description.

Gemini CLI

Install as native skills:

gemini skills install https://github.com/helderberto/agent-skills.git --path skills

Skills are auto-discovered and routed by description. See docs/gemini-cli-setup.md.

OpenCode

Clone and point OpenCode at the workspace — AGENTS.md plus the skills/ directory drive auto-routing:

git clone https://github.com/helderberto/agent-skills.git

Open the project in OpenCode. The .opencode/skills symlink and root AGENTS.md are already wired. See docs/opencode-setup.md.

Cursor

Clone the repo, then copy individual skills into .cursor/rules/:

git clone https://github.com/helderberto/agent-skills.git
cp agent-skills/skills/tdd/SKILL.md .cursor/rules/tdd.md
cp agent-skills/skills/code-review/SKILL.md .cursor/rules/code-review.md

See docs/cursor-setup.md for the recommended starter set.


Workflow example — full SDLC walkthrough

A non-trivial feature flows through all six phases. Each workflow skill is one invocation:

You: /hb:spec add dark mode support
AI:  Interviews, scans the codebase, writes .specs/specs/dark-mode.md.
     Run /hb:plan dark-mode next?

You: /hb:plan dark-mode
AI:  Breaks the spec into phased vertical slices.
     Writes .specs/plans/dark-mode.md.

You: /hb:build dark-mode
AI:  Implements next incomplete phase. TDD loop, lint, type-check.
     Marks checkboxes in the plan. Offers a commit.

You: /hb:test dark-mode
AI:  Runs validation (lint, types, tests) + coverage, then verifies
     plan checkboxes against the codebase. Reports progress + blockers.

You: /hb:review
AI:  Detects what changed, runs relevant audits in order
     (code-review, a11y-audit, safe-repo, perf-audit, deps-audit, ...).
     Consolidates findings into Critical / Important / Suggestion.

You: /hb:ship
AI:  Pre-launch gate (validate-code + safe-repo --diff).
     Atomic commits, push current branch.
     /hb:ship --fast skips the gate (hotfix only).

For quick standalone tasks, you don't need the workflow — just describe what you want and the relevant skill triggers ("write tests for X", "audit deps", "create an ADR for Y").


Skills

Skills come in two modes. User-invoked ones never auto-trigger (disable-model-invocation: true) — reserved for outward-facing, irreversible actions you must pull the trigger on yourself: ship and create-pull-request. Everything else is model-invoked: it auto-routes by description and stays callable explicitly as /hb:<name>. Model-invoked descriptions carry the trigger and anti-trigger clauses routing depends on; the two user-invoked ones keep a single what-it-does sentence, since trigger phrases are dead weight when nothing auto-routes.

Skills also carry an effort hint: mechanical ones (lint, commit, prose-fix) run at low reasoning effort, heavy ones (architecture-audit, harden, diagnose) at high or xhigh, and the rest at the implicit medium default. The override lasts only for the turn the skill fires — so complexity matches the task without you touching /effort.

SDLC workflow

The six-phase spine. Type each to advance, or let one phase chain into the next:

SkillPhaseWhat it does
specSPECInterview + codebase scan → structured spec in .specs/specs/<slug>.md
planPLANTurn spec into multi-phase implementation plan (tracer-bullet vertical slices)
buildBUILDImplement next incomplete phase of a plan with feedback loops
testTESTValidate (lint/types/tests) + coverage, and verify plan checkboxes against codebase
reviewREVIEWFan out parallel reviewers (scope-detected audits + independent agent lenses), consolidate into one verdict — optional QA pass, not a ship gate
shipSHIPPre-launch gate (validate-code + safe-repo) + atomic commits + push (--fast to skip gate) · user-invoked

On-demand tools

Focused capabilities the agent applies automatically based on the task (all callable explicitly too). Expand a group to browse.

Build & test
SkillWhat it does
tddRed → green → refactor loop for any new logic
source-drivenImplement using official docs for exact dependency versions
fortifySplit large functions, add edge-case coverage, backfill missing tests
code-simplifyReduce complexity without changing behavior — clarity over cleverness (Chesterton's Fence)
e2eWrite end-to-end tests for user flows using Cypress
Verify
SkillWhat it does
validate-codeAuto-fix lint, verify types, run tests
lintRun linting and formatting checks
diagnoseDisciplined diagnosis loop for hard bugs and perf regressions
visual-validateBrowser-driven UI validation via Chrome DevTools or Playwright MCP
Review & audit
SkillWhat it does
code-reviewFive-axis review of a PR (correctness, readability, architecture, security, performance)
visual-reviewRender a PR diff as an annotated HTML page — each hunk linked to a design/simplification principle with a suggested rewrite
triage-reviewTriage existing PR review comments (Copilot + human), verify against code, classify Address/Skip/Optional/Discuss
a11y-auditAccessibility compliance audit (WCAG)
i18nFind hardcoded strings, check translation coverage
perf-auditFrontend bundle size and performance audit
deps-auditCheck dependencies for vulnerabilities (npm/pnpm/yarn/pip/go/cargo)
safe-repoSensitive data scan; --diff mode for in-flight changes
hardenProactive security hardening at trust boundaries (OWASP-style)
Git & release
SkillWhat it does
commitGroup unstaged changes into atomic commits by concern (repository style)
resolving-merge-conflictsResolve an in-progress merge/rebase conflict by recovering each side's intent
create-adrRecord a 1–3 sentence Architecture Decision Record
create-pull-requestOpen a GitHub PR with structured body · user-invoked
Design & discovery
SkillWhat it does
codebase-designShared deep-module vocabulary for designing or improving an interface
frontend-ui-engineeringFront-load UI construction decisions — prop API, state placement, required states, a11y by construction
architecture-auditSurface architectural friction, propose refactors toward deep modules as RFCs
domain-modelingBuild and sharpen the project's ubiquitous language and glossary
researchInvestigate a question against primary sources; capture cited findings as Markdown
prototypeBuild a throwaway prototype — terminal app or toggleable UI variations — to flesh out a design
grill-meStress-test a plan or design through relentless interview, one question at a time
Session, meta & writing
SkillWhat it does
handoffCompact the current conversation into a handoff doc for a fresh agent
teachStateful teaching workspace — lessons, references, learning records tied to a mission
explain-codeExplain code with visual diagrams and analogies
create-skillAuthor a new skill with proper structure
setup-pre-commitConfigure Husky + lint-staged for commit-time gates
prose-fixFix typos, dashes, formatting in markdown
reviseStructurally edit and improve article drafts

Agents

Subagents the skills fan out to for independent, read-only perspectives (e.g. /hb:review spawns lenses, /hb:plan tags steps). Bundled with the plugin, so installing hb ships them too. Claude Code only — other agents consume skills/ and ignore this directory.

AgentPurpose
security-auditorThreat modeling, vulnerability assessment
test-auditorTest effectiveness beyond coverage
frontend-architectComponent design, deep modules, structural health
parity-checkAudit code migrations for missing functionality
git-detectiveInvestigate git history and trace changes
learnerCapture insights into CLAUDE.md

Structure

agent-skills/
├── .claude-plugin/      Plugin manifest + marketplace entry (Claude Code)
├── .opencode/skills →   Symlink to skills/ for OpenCode discovery
├── skills/              one folder per skill, each with SKILL.md
├── agents/              subagent definitions (Claude Code only)
├── docs/                Skill anatomy + per-agent setup guides
├── AGENTS.md            Intent → skill mapping (drives OpenCode auto-routing)
├── CONTRIBUTING.md      How to contribute new skills or improvements
├── LICENSE              MIT
└── README.md

Artifact convention

Workflow skills write structured artifacts to .specs/:

  • .specs/specs/<slug>.md — specs from /hb:spec
  • .specs/plans/<slug>.md — phased plans from /hb:plan

The .specs/ directory is local-first. Add it to .gitignore if you prefer specs as scratch space, or commit it if you want specs as versioned project documentation.


Contributing

PRs welcome. See CONTRIBUTING.md for workflow, conventions, and where to start.


License

MIT © Helder Burato Berto