Plugins

Application-security review (SEC1-SEC12: auth, input validation, injection, XSS, CSRF/origin, crypto, secrets, supply chain, PII/logging, resource exhaustion, path traversal, deserialization/SSRF) for Python, TypeScript/JavaScript, and Java. Sibling to ship-clean-code; serves as the depth target when ship-reviewed-prs SC persona delegates.

Apply testing best practices when writing or reviewing tests for Python, TypeScript/JavaScript, or Java code. Covers test design, TDD, test strategy, mocking, integration testing, flaky test management, and 49 cataloged test smells.

Build, sign, notarize, and release Tauri 2 desktop apps on macOS, plus dev-loop gotchas (ACL capabilities, watcher, cargo patches)

Facilitated development mode: you implement, Claude assists with specs, plans, scaffolding, and research.

Content creation and documentation skills

Set up production-ready auth in minutes. Supports Better Auth and Firebase Auth with OAuth social login, UI components, database schemas. Auto-detects existing themes.

Governance harness for the ShipWithAI design system: spec-first workflow skills, read-only auditor agents (incl. design-harness-doctor), and warn-only guardrail hooks. Install one plugin and a dev/agent inherits the whole workflow.

Generate a production-ready Claude Code harness for your project. Auto-detects stack (Next.js, Laravel, Spring Boot). Generates CLAUDE.md, settings.json, and safety hooks in one command.

Set up a standardized Claude Code harness for any project. One guided interview configures CLAUDE.md, permissions, hooks, MCP servers, agents, and SSOT docs. Three tiers: Essential (5 min), Standard (15 min), Full (30 min).

Describe your app in plain English — Shipwright builds, tests, and deploys it autonomously via a 9-phase pipeline.

The autonomous delivery agent for Claude Code — conversational planning, queue-driven execution, policy-controlled code review, a five-phase test-readiness pipeline, and autonomous deploy (merge → canary → promote) for any software project.

Reusable engineering-methodology skills: quality gates, commit/issue/doc hygiene, tool preferences, and language guidelines.

Onboard an existing (brownfield) repository into the Shipwright SDLC — analyze stack + routes + conventions, generate CLAUDE.md + agent_docs + configs + E2E baseline

TDD implementation with code review, Conventional Commits, and feature branch workflow

Parse Conventional Commits, generate Keep-a-Changelog entries, create version tags and PRs

IREB traceability, Requirements Traceability Matrix, SBOM, test evidence, and change history reports

Deploy to Jelastic (Infomaniak) with smoke test verification and rollback support

Generate UI mockups from IREB specs — standalone HTML screens and user flows

Grade any git repository against the Control Grade rubric (A–F) — a read-only, deterministic cold-repo grader that reuses the same scoring engine as the compliance dashboard. Grades a local path or clones a URL; underivable dimensions render honest n/a.

Lightweight SDLC for ongoing changes. Auto-detects intent (feature/change/bug) and runs specs → build → test → commit.

Deep planning with research, interview, external LLM review, and TDD approach

Local browser preview — start dev server and show URL for in-browser testing

Decompose project requirements into well-scoped planning units with IREB-aligned specs

Orchestrate the full Shipwright SDLC pipeline — from user description to deployed application

Security scanning — Semgrep + Trivy + Gitleaks + Shipwright prompt-injection scan (OSS default), with an automated remediation loop and an optional Aikido backend

Profile-aware test runner: unit tests, smoke tests, Playwright E2E, and security scans

Cross-platform CI coordination — local VMs, SSH hosts, cloud runners

Autonomous engineering loop: audits surface work, /do-work refines and dispatches, parallel workers in isolated worktrees ship the fixes.

Multi-agent software house team v3.6: 19 agents + 18 skills + 5 commands.

from WalkerHi11/mediabuy-plugins