Goodsmileduck/claude-registry

CI/CD pipelines: GitHub Actions (OIDC federation, permissions hardening, deploy concurrency, reusable workflows, pull_request_target security) and AWS CodePipeline + CodeBuild (pipeline v1/v2, CodeStar Connections, buildspec authoring, IAM service roles, ECR/VPC builds, caching).

Cloud provider operations: GCP IAM inheritance and impersonation; AWS cost investigation (Cost Explorer + CUR, anomaly detection, Savings Plans vs RIs); and Cloudflare platform — DNS zones (REST), Workers configuration, the cf unified CLI (preview), and Zero Trust Access for remote MCP servers. Ships stdlib validators.

Curated upstream: Cloudflare's official platform skills — Workers, Pages, KV/D1/R2, Workers AI, Vectorize, Agents SDK, Tunnel, Spectrum, WAF, DDoS, Terraform, Pulumi. Includes the wrangler, agents-sdk, durable-objects, sandbox-sdk, web-perf, building-mcp-server-on-cloudflare, building-ai-agent-on-cloudflare, and cloudflare-email-service skills.

draw.io diagram authoring: native .drawio file generation, the draw.io MCP servers, and an architecture/HLA method for infrastructure & Kubernetes topology (semantic edge routing, comb-bus/ladder/rail layouts, icon and color conventions). Ships a reusable Python generator.

DigitalOcean operations skills. DNS zones: domain/record CRUD via doctl and the DigitalOcean Terraform provider, apex CNAME / no-flattening trap when migrating from Cloudflare, FQDN trailing-dot semantics, DNS-01 ACME wildcard certs, nameserver delegation. App Platform: lints app specs (app.yaml / doctl apps spec JSON / digitalocean_app Terraform) for plaintext secrets, missing health checks, single-instance services, dev databases in production, port mismatches, overlapping ingress routes, conflicting git/image sources, deprecated routes, unknown instance sizes, and app/database region mismatch. Container Registry: analyze and clean registry images — list repos with tag counts, delete old tags (keep last N), find stale repos, trigger garbage collection, with dry-run support.

Infrastructure-as-code workflows: Terraform/OpenTofu plan review, drift detection, state surgery (mv/rm/import) and provider upgrades; Terragrunt CLI-redesign migration, config composition, run --all orchestration and stacks; and S3-compatible object-storage provider identification. Ships stdlib validators.

Kubernetes operations and GitOps: pod/workload debugging; Operators (CRD design, reconcile-loop linting, OperatorHub capability audit); ArgoCD ApplicationSets and GitOps posture; and Docker/Dockerfile static analysis with Compose validation. Ships stdlib validators.

Inject and audit 1Password secrets via the op CLI: op:// references with op run/op inject, an always-ask permission gate, and an opt-in deny-capable PreToolUse audit hook. Use for API keys, tokens, credentials, .env secrets, OP_SERVICE_ACCOUNT_TOKEN, or 1Password.

Installs skills from a user-curated manifest (~/.claude/skill-manifest.json) into the current project's .claude/skills/ — symlinks local skills, runs `npx skills add` for third-party ones, and advises `/plugin install` for native Claude plugins. Optionally scans the project for trigger files and pre-selects recommended matches. Ships a starter manifest as skill-manifest.example.json.

Curated upstream: Vercel-Labs React/Next.js skills — performance best practices, composition patterns (compound components, render props), and React Native / Expo conventions for mobile.