LLM Mart Basic

@llm-mart · Joined Jun 2026

0 Followers 0 Reputation 13633 Contributions
Claude Skill framework-upgrade-risk-review

Assess breaking-change and regression risk for a same-framework major-version upgrade (React, Next.js, Angular, Vue, or core build tooling), grounding every claimed breaking change in the framework's official release notes/migration guide, and separate upgrade-blocking issues fro

0
Claude Skill frontend-auth-session-security-review

Review client-side authentication and session-management code for token-storage location, cookie-flag correctness, CSRF/open-redirect exposure, and OAuth/OIDC flow choice for browser-based apps against OWASP ASVS and Session Management Cheat Sheet guidance, with the OAuth-for-bro

0
Claude Skill frontend-bff-boundary-review

Determines and reviews whether aggregation/shaping logic belongs in a Backend-for-Frontend layer versus client-side composition, and audits existing BFF boundaries for scope creep, duplicated aggregation logic, and leaked backend topology or pass-through authorization.

0
Claude Skill frontend-board-chair

Sequence frontend specialist and red-team reviews for the 10 governed workflows (new feature, perf regression, a11y audit, security review, SSR/hydration bug, design-system change, framework migration, AI-generated code review, production incident, CWV failure) and issue a bindin

0
Claude Skill frontend-dom-xss-csp-review

Review frontend source for DOM XSS sinks (innerHTML, dangerouslySetInnerHTML, v-html, document.write, eval-class APIs), verify actual attacker-reachable taint flow, and audit Content-Security-Policy and Trusted Types enforcement for real bypasses rather than header-presence check

0
Claude Skill Ats Resume Agent

AI agent for Claude Code that tailors resumes to job descriptions with ATS optimization and LaTeX PDF output. Zero fabrication - every claim sourced from your c…

0
Claude Skill frontend-finops-cost-to-serve-review

Build a cost-to-serve model covering CDN egress, SSR/edge compute, image transformation, and CI build-minute spend for a frontend surface, and rank remediation options by dollar savings weighed against Core Web Vitals and security impact, without treating cost-cutting and securit

0
Claude Skill frontend-maestro

Route frontend governance tasks to the narrowest specialist or parallel team (max 4) from the frontend agent catalog. Use when you do not already know which frontend specialist handles the task. Not for direct frontend answers; Maestro classifies, dispatches, and hands off to fro

0
Claude Skill frontend-migration-modernization-plan

Build a phased, reversible plan to migrate or modernize a legacy frontend surface (jQuery/Backbone/AngularJS to a modern framework, CRA/Webpack to Vite, or a same-framework major-version bump) using strangler-fig sequencing with measurable exit criteria per phase, without default

0
Claude Skill frontend-observability-rum-instrumentation

Design or review browser-side Real User Monitoring instrumentation for Core Web Vitals (LCP, INP, CLS) using the web-vitals attribution build and distributed tracing via OpenTelemetry Web, enforcing lab-vs-field evidence labeling, sampling/cardinality sizing, and PII-in-telemetry

0
Claude Skill frontend-platform-architecture-review

Reviews cross-cutting frontend architecture decisions (module boundaries, rendering topology, technology adoption) against a rewrite-averse, evidence-grounded standard before they are approved, producing an ADR-quality verdict rather than a stylistic opinion.

0
Claude Skill frontend-testing-strategy-review

Reviews frontend test-pyramid shape, critical-path coverage, and flaky-test governance across unit, component, integration, and E2E layers (Vitest/Jest, Testing Library, Playwright/Cypress), loading framework references only when the task needs them.

0
Claude Skill graphql-client-security-review

Statically review GraphQL client configuration (Apollo Client, and urql/similar clients by analogy) for production-enabled devtools/introspection exposure, a normalized cache left uncleared across user sessions, missing persisted-query allowlisting against client-driven query abu

0
Claude Skill html-semantics-accessibility-review

Review HTML markup and rendered DOM structure for correct native-element usage, valid heading/landmark hierarchy, and WAI-ARIA APG-conformant custom-widget patterns; produce a WCAG 2.2-grounded verdict with APG pattern citations for every custom interactive control, flagging anyt

0
Claude Skill i18n-l10n-readiness-review

Audit frontend code for internationalization readiness — externalized ICU MessageFormat strings, Intl-based date/number/currency/plural formatting, correct lang/dir attribute propagation, and RTL-safe CSS logical properties — before translation vendor engagement, with CLDR plural

0
Claude Skill javascript-runtime-async-review

Review JavaScript/TypeScript for event-loop and microtask/macrotask ordering correctness, unhandled Promise rejection paths, DOM event-listener and timer cleanup, and race-condition risk in rapid-repeated-async UI patterns, tracing actual browser scheduling semantics rather than

0
Claude Skill legacy-jquery-to-modern-framework-review

Inventory the hidden behaviors in a legacy jQuery/Backbone-era codebase — implicit global event delegation, direct DOM mutation outside any render cycle, plugin side effects, ad-hoc accessibility shims, and unsanitized HTML string building — that a mechanical framework port would

0
Claude Skill microfrontend-boundary-review

Reviews micro-frontend/module-federation boundary contracts for shared-dependency versioning safety, runtime isolation, and ownership clarity before adoption or extension of a distributed frontend architecture.

0
Claude Skill monorepo-package-governance-review

Reviews monorepo task-graph configuration (Turborepo tasks/caching, Nx task pipelines) alongside dependency and lockfile governance (pnpm catalogs, npm overrides, lifecycle-script risk) to prevent false-green CI from stale cache reuse and unpinned supply-chain exposure.

0
Claude Skill nextjs-app-router-data-fetching-review

Statically review Next.js App Router Server/Client Component boundaries and Server Action data mutations for correct data-fetching placement, bundle-leak risk, and authorization-trust integrity, escalating client-trusted authorization to a security finding rather than a style not

0
The AI-in-production safety playbook

Fourteen posts of being wrong in production, compressed to checkboxes

security prompt-engineering devops ai
Sep 30
The control plane was flapping because of a spinning disk

Healthy nodes, a quiet network, 300 restarts in three days, and a latency budget measured in milliseconds

kubernetes sre incident-response observability
Sep 29
The overlay that pinged but wouldn't carry TCP

Discovery worked. Ping worked. Every TCP connection timed out, and later the tunnel only worked when someone had a terminal open.

containers incident-response networking linux
Sep 28
Bringing a cluster back after the host rebooted

Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.

kubernetes sre containers incident-response
Sep 27
The agent is running in *your* shell

A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.

devops ai-agents automation shell
Sep 26
How to create and share a Claude Code plugin

A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.

agents security skill-md claude-code
Sep 25
The scaffolding that made it safe

None of the safety came from the model. It came from six boring habits.

git devops ai-agents claude-code
Sep 25
Claude Code skills vs. subagents: when to use each

Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.

agent-skills claude-code context
Sep 24
Knowing when to stop

Six hours in, one step left, everything green, and the incident that didn't happen

prompt-engineering ai ai-agents sre
Sep 24
CLAUDE.md vs. skills: where should Claude Code instructions live?

CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.

agent-skills claude-skills configuration context
Sep 23
Those are the other app's keys

Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it

security devops ai ai-agents
Sep 23
How to use remote MCP servers with the OpenAI Responses API

An API request routing a model's tool call through an approval gate to a remote MCP server

security mcp integrations open-api
Sep 22
The coverage audit before you delete the safety net

31 config keys, two audits, and why the first one was wrong in both directions

security devops ai-agents secrets-management
Sep 22
How to publish an MCP server to the official MCP Registry

The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.

security mcp
Sep 21
Rotating a leaked credential, in the right order

Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.

security devops ai-agents containers
Sep 21
MCP authentication explained: OAuth, scopes, and safe token handling

Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.

security mcp
Sep 20
Byte-identical or bust

"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks

security kubernetes verification
Sep 20
MCP stdio vs. Streamable HTTP: which transport should you use?

stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.

security mcp
Sep 19
Never let the AI print a secret

The most important rule wasn't about what I could change. It was about what I was allowed to display.

security kubernetes devops ai-agents
Sep 19
MCP tools vs. resources vs. prompts: when to use each

Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.

security mcp
Sep 18
/position-sizing position-sizing

Position Sizing — portfolio strategy analysis

0
/ddm-valuation Ddm valuation

Dividend Discount Model — multi-stage DDM for mature dividend payers and financials

0
/peg-valuation Peg valuation

PEG valuation — P/E ÷ Growth Rate with Peter Lynch thresholds and sector comparison

0
/ratio-analysis Ratio analysis

Financial ratio analysis — 24 ratios across 6 categories with cross-company comparison

0
/residual-income Residual income

Residual Income / EVA — Book Value + PV of future economic profit for banks and insurers

0
/reverse-dcf Reverse dcf

Reverse DCF — solve for implied growth rate/margins from current price

0
/challenge Challenge

agentii.challenge — the spec 046 kit command. Use the Skill tool to run agentii:challenge on this workspace.

0
/clarify Clarify

agentii.clarify — the spec 046 kit command. Use the Skill tool to run agentii:clarify on this workspace.

0
/constitution Constitution

agentii.constitution — the spec 046 kit command. Use the Skill tool to run agentii:constitution on this workspace.

0
/converge Converge

agentii.converge — the spec 046 kit command. Use the Skill tool to run agentii:converge on this workspace.

0
/implement Implement

agentii.implement — the spec 046 kit command. Use the Skill tool to run agentii:implement on this workspace.

0
/plan Plan

agentii.plan — the spec 046 kit command. Use the Skill tool to run agentii:plan on this workspace.

0
/specify Specify

agentii.specify — the spec 046 kit command. Use the Skill tool to run agentii:specify on this workspace.

0
/tasks Tasks

agentii.tasks — the spec 046 kit command. Use the Skill tool to run agentii:tasks on this workspace.

0
/pr-finish pr-finish

Drive a PR to merge — rebase, fix CI, resolve review comments, update title/description, merge when green

0
/delegate-review Delegate review

Run OCR in delegation mode — OCR handles file selection and rules, the host agent performs the actual review.

0
/review Review

Run OpenCodeReview (OCR) to review code changes and autonomously apply fixes.

0
/login Login

Log in to Hivemind and select your organization

0
/update Update

Update the Hivemind plugin to the latest version

0
/login Login

Log in to Hivemind and select your organization

0
Mcp Dev Latam

Open-source MCP servers for Latin American commerce — Pix, NF-e, banking, fiscal, logistics, and messaging across Brazil, Mexico, Argentina, Colombia, Chile, an…

26 views 0 likes
Piclaw

pi coding agent in a technicolor web trenchcoat

15 views 0 likes
Ansvisor

Open-source AI Search Intelligence Platform — track, analyze, and improve AI visibility, citations, prompts, competitors, and content opportunities across ChatG…

13 views 0 likes
Qveris Agent Toolkit

Open-source toolkit for the QVeris capability routing network: CLI, MCP server, Python SDK, skills, and REST API docs for agents to discover, inspect, call, and…

14 views 0 likes
XActions

⚡ The Complete X/Twitter Automation Toolkit — Scrapers, MCP server for AI agents (Claude/GPT), CLI, browser scripts. No API fees. Open source. Unfollow people w…

18 views 0 likes
PhysiClaw

The AI agent that interacts with you in the real world.

12 views 0 likes
Codex Rehome

Offline Codex Desktop migration for Windows and macOS.

17 views 0 likes
Daily Stock Analysis

LLM 驱动的多市场股票智能分析系统:多源行情、实时新闻、决策看板与自动推送,支持零成本定时运行。 LLM-powered multi-market stock analysis system with multi-source market data, real-time news, decision dashbo…

15 views 0 likes
Joanium

Your smart, reliable, and friendly personal AI assistant.

27 views 0 likes
Mirascope

The LLM Anti-Framework

14 views 0 likes
Dramaclaw

A general-purpose AIGC video engine: script to finished film in one pipeline — dramas, ads, product videos, otome games, and more. | 通用 AIGC 视频引擎 —— 从剧本到成片一条流水线…

17 views 0 likes
Oneshot Gtm

GTM agent for technical founders. Pay-per-result. Signed receipts. Two surfaces: terminal CLI + local web dashboard.

16 views 0 likes
Nuphus Mcp

Desktop automation MCP server — computer use for any AI agent: control screen, windows, mouse/keyboard, and Chrome via Model Context Protocol (stdio)

18 views 0 likes
Dsh Desktop

DeepSeek Harness (dsh) Windows desktop client - bundled Node.js + dsh CLI, one-click launch

15 views 0 likes
Dim0

Open-source, real-time collaborative AI canvas - notes, mini-apps, and agents on one infinite board.

13 views 0 likes
MCPSafari

MCPSafari: Native Safari MCP Server for AI Agents

27 views 0 likes
SciAgent Skills

197 bioinformatics & life science skills for Claude Code and AI agents — BixBench 92.0% accuracy. RNA-seq, single-cell, drug discovery, proteomics, and more. Po…

22 views 0 likes
Franklin

The AI agent with a wallet — spends USDC autonomously to get real work done. Apache-2.0, TypeScript.

12 views 0 likes
Ego Lite

The fastest browser for AI agents to run browser automation, built for sharing your logged-in browser state with your AI agents, like Codex or Claude Code, with…

24 views 0 likes
Ouroboros

Ouroboros — self-creating AI agent. Born Feb 16, 2026.

17 views 0 likes