basitalisandhu/claude-skills
Claude Code skills, every skill I maintain in one repository: 87 skills in 13 plugins for AWS and Microsoft 365 security, agent security, compliance evidence, repository engineering, debugging, DevOps, docs and data, vendored from their sou
ARCHETYPE
Skill Collector
Ten-plus skills loaded on demand. A procedural-knowledge library.
Copy this rig
$ git clone --depth 1 https://github.com/basitalisandhu/claude-skills MCP servers are added to Claude Code at local scope; env vars are shown as YOUR_… placeholders — we never store values. Files are fetched with degit into a separate folder so you can review before merging.
$ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/agent-action-timeline .claude/skills/agent-action-timeline $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/agent-kill-switch-runbook .claude/skills/agent-kill-switch-runbook $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/agent-recertification .claude/skills/agent-recertification $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/connector-register .claude/skills/connector-register $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/credential-expiry-radar .claude/skills/credential-expiry-radar $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/entra-agent-id-review .claude/skills/entra-agent-id-review $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/leaked-credential-response .claude/skills/leaked-credential-response $ npx degit basitalisandhu/claude-skills/plugins/agent-identity-governance/skills/nhi-inventory .claude/skills/nhi-inventory $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/agent-config-audit .claude/skills/agent-config-audit $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/agent-eval-harness .claude/skills/agent-eval-harness $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/agent-session-log-review .claude/skills/agent-session-log-review $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/agent-threat-model .claude/skills/agent-threat-model $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/incident-lookup .claude/skills/incident-lookup $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/mcp-server-review .claude/skills/mcp-server-review $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/prompt-injection-review .claude/skills/prompt-injection-review $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/secure-agent-checklist .claude/skills/secure-agent-checklist $ npx degit basitalisandhu/claude-skills/plugins/agent-security/skills/semgrep-agentic .claude/skills/semgrep-agentic $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/agent-safe-aws-access .claude/skills/agent-safe-aws-access $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/aws-account-audit .claude/skills/aws-account-audit $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/aws-agent-session-audit .claude/skills/aws-agent-session-audit $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/aws-incident-response-runbook .claude/skills/aws-incident-response-runbook $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/aws-spend-guardrails .claude/skills/aws-spend-guardrails $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/iam-least-privilege-review .claude/skills/iam-least-privilege-review $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/landing-zone-blast-radius .claude/skills/landing-zone-blast-radius $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/sandbox-account-guardrail-pack .claude/skills/sandbox-account-guardrail-pack $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/scp-guardrails .claude/skills/scp-guardrails $ npx degit basitalisandhu/claude-skills/plugins/aws-security/skills/security-hub-triage .claude/skills/security-hub-triage $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/context-budget-audit .claude/skills/context-budget-audit $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/hook-author .claude/skills/hook-author $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/permissions-builder .claude/skills/permissions-builder $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/skill-collision-check .claude/skills/skill-collision-check $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/skill-description-linter .claude/skills/skill-description-linter $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/skill-portability-check .claude/skills/skill-portability-check $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/skill-supply-chain-review .claude/skills/skill-supply-chain-review $ npx degit basitalisandhu/claude-skills/plugins/cc-setup-tooling/skills/skill-trigger-eval .claude/skills/skill-trigger-eval $ npx degit basitalisandhu/claude-skills/plugins/code-quality/skills/complexity-report .claude/skills/complexity-report $ npx degit basitalisandhu/claude-skills/plugins/code-quality/skills/dead-code-finder .claude/skills/dead-code-finder $ npx degit basitalisandhu/claude-skills/plugins/code-quality/skills/error-handling-review .claude/skills/error-handling-review $ npx degit basitalisandhu/claude-skills/plugins/code-quality/skills/naming-audit .claude/skills/naming-audit $ npx degit basitalisandhu/claude-skills/plugins/code-quality/skills/refactor-plan .claude/skills/refactor-plan
This rig commits no guardrails. Here is the community baseline instead — the deny/ask rules most often found across all 7,204 rigs:
{
"permissions": {
"deny": [
"Read(./.env)",
"Read(**/.env)",
"Read(~/.ssh/**)",
"Bash(rm -rf *)",
"Read(**/*.pem)",
"Bash(rm -rf /)",
"Bash(git push --force:*)",
"Bash(sudo *)",
"Read(.env)",
"Bash(rm -rf /*)",
"Read(./.env.*)",
"Read(~/.aws/**)",
"Bash(git push --force*)",
"Bash(rm -rf:*)",
"Read(**/*.key)",
"Read(**/.env.*)",
"Bash(sudo:*)",
"Bash(git reset --hard*)",
"Bash(git reset --hard:*)",
"Read(.env.*)"
],
"ask": [
"Bash(git push:*)",
"Bash(git push *)",
"Bash(git commit:*)",
"Bash(rm *)",
"Bash(rm:*)",
"Bash(git rebase *)",
"Bash(wget *)",
"Bash(npm publish:*)",
"Bash(git commit *)",
"Bash(gh pr merge *)"
]
}
} MCP servers (1)
| server | source | est. tokens |
|---|---|---|
| agent-incidents env: AGENT_INCIDENTS_DATA | local / custom | 2.5k |
Skills (125)
agent-action-timelineagent-kill-switch-runbookagent-recertificationconnector-registercredential-expiry-radarentra-agent-id-reviewleaked-credential-responsenhi-inventoryagent-config-auditagent-eval-harnessagent-session-log-reviewagent-threat-modelincident-lookupmcp-server-reviewprompt-injection-reviewsecure-agent-checklistsemgrep-agenticagent-safe-aws-accessaws-account-auditaws-agent-session-auditaws-incident-response-runbookaws-spend-guardrailsiam-least-privilege-reviewlanding-zone-blast-radiussandbox-account-guardrail-packscp-guardrailssecurity-hub-triagecontext-budget-audithook-authorpermissions-builderskill-collision-checkskill-description-linterskill-portability-checkskill-supply-chain-reviewskill-trigger-evalcomplexity-reportdead-code-findererror-handling-reviewnaming-auditrefactor-planreview-checklisttest-gap-findertype-coverageauditor-narrative-drafteraws-identity-and-logging-evidencecontrol-map-from-exportsessential-eight-evidence-mapevidence-pack-buildergithub-change-control-evidencesecurity-questionnaire-drafterapi-contract-reviewcsv-profilerjson-schema-authorregex-builderschema-migration-plansql-query-reviewbug-repro-minimiserflaky-test-hunterlog-triagememory-leak-checklistperf-profile-readerstack-trace-explainercron-doctordockerfile-hardeningenv-diffgithub-actions-authork8s-manifest-reviewrelease-notessemver-advisorterraform-apply-gateterraform-reviewadr-writerapi-docs-from-codechangelog-keeperonboarding-docpostmortem-writerreadme-authorincident-postmortem-timelineissue-triage-digestiteration-reportpr-queue-digestaccess-review-packconditional-access-gap-analysiscopilot-oversharing-readinessentra-posture-reviewgraph-permission-preflightguest-and-external-sharing-reviewintune-baseline-checklicense-and-service-plan-auditprivileged-access-reviewteams-and-groups-sprawlmac-app-leftoversmac-cleanupmac-duplicate-finderadr-mineragent-context-writercited-codebase-auditdocs-truth-checkplan-grillreadme-who-what-whyrelease-notes-verifierrepo-hygiene-bundlerepo-onboarding-guiderestructure-plannerstale-branch-sweepuntested-entry-pointsauth-flow-reviewcors-reviewdependency-audit-readerdiff-security-reviewhttp-security-headersjwt-inspectorsecrets-hygienechange-request-writerdecision-logfocus-planmeeting-actions-ledgerone-on-one-ledgerrfc-lifecycleri<redacted>ri<redacted>shift-handovervendor-scorecardweekly-status-rollupworking-agreement-check
Similar rigs
basitalisandhu/claude-dev-skills
Claude Code skills for everyday development: a plugin marketplace with six plugins and forty skills for code review, refactoring, debugging, CI and containers, data and APIs, docs and security basics, 23 with tested standard-library scripts
Skill Collector 3.6k tok ·
basitalisandhu/repo-engineering-skills
Claude Code skills for repository audits and documentation: verify README and docs claims against the code, run audits where every finding cites a resolvable path:line, write AGENTS.md and CLAUDE.md with only what code cannot say, check a R
Skill Collector 1.0k tok ·
basitalisandhu/aws-security-skills
Claude Code skills for AWS security: a plugin with five skills for a read-only account audit, SCP guardrail builder and linter, blast-radius landing zone design, IAM least-privilege review and Security Hub and GuardDuty triage. Tested stand
Skill Collector 882 tok ·
basitalisandhu/agent-security-skills
Claude Code security plugin and agentskills.io skill pack for securing LLM agents: threat modelling, config audits, prompt injection review, MCP server review, incident lookup, security evals, Semgrep rules, guard hooks and an incident-data
Pragmatist 3.3k tok ·