Home / Resources / Skills Resources / Skills
AI Skills Library.
122 curated Claude Code skills covering frontend, SEO, architecture, testing, devops, 3D, security, and AI agents. Each skill includes capabilities, use cases, and project-specific notes. Plus slash command reference, settings.json schema, and git hooks.
Categories
๐ SEO / AEO 22
โ๏ธ Frontend 19
๐ง AI / Agents 14
๐ฎ Three.js / 3D 13
๐๏ธ Architecture 12
๐ DevOps / Git 11
โ๏ธ Content 10
๐งช Testing 6
๐ Security 6
โก Performance 5
โฟ Design / A11y 4
Curated Skill Library
All risk levels
Safe
Moderate
Critical
Unknown
All122 โ๏ธ Frontend19 ๐ SEO / AEO22 ๐ง AI / Agents14 ๐๏ธ Architecture12 ๐ฎ Three.js / 3D13 โ๏ธ Content10 ๐ DevOps / Git11 ๐งช Testing6 ๐ Security6 โก Performance5 โฟ Design / A11y4
122 skills available
โ๏ธ
Next.js Best Practices
Safe
Next.js App Router principles: Server Components, data fetching, routing patterns, caching strategies.
#nextjs #app-router #static-export #server-components #routing
โ๏ธ
Deep dive into Next.js App Router: layouts, loading states, error boundaries, parallel routes.
#nextjs #app-router #layouts #suspense #error-boundary
โ๏ธ
React Best Practices (Vercel)
Safe
45 rules across 8 categories maintained by Vercel: eliminating waterfalls, bundle optimization, server performance, re-render optimization.
#react #performance #bundle #waterfall #memo
โ๏ธ
Modern React patterns: hooks, composition, performance, TypeScript best practices for production apps.
#react #hooks #context #composition #patterns
โ๏ธ
React State Management
Safe
Modern React state: Redux Toolkit, Zustand, Jotai, React Query. Deep coverage of useReducer, Context, server state.
#react #state #useReducer #context #redux
โ๏ธ
Loading states, error handling, data fetching patterns, optimistic UI. Golden rule: never show stale UI.
#react #loading #error #optimistic #suspense
โ๏ธ
React Component Performance
Safe
Diagnose and fix React rendering performance: profiler, memo, virtualization, code splitting.
#react #performance #memo #virtualization #profiler
โ๏ธ
TypeScript Expert
Critical
Advanced TypeScript: type-level programming, performance optimization, monorepo, migration, modern tooling. Zero errors enforced.
#typescript #types #zod #discriminated-union #strict
โ๏ธ
TypeScript Advanced Types
Moderate
Deep type-level programming: mapped types, conditional types, template literals, recursive types.
#typescript #advanced #mapped-types #conditional #template-literals
โ๏ธ
Tailwind Design System
Safe
Production-ready design systems with Tailwind CSS: design tokens, CVA component variants, responsive patterns, dark mode, accessibility.
#tailwind #cva #tokens #dark-mode #responsive
โ๏ธ
Practical Tailwind patterns: glassmorphism, gradient animations, sci-fi UI effects, admin dashboard patterns.
#tailwind #glassmorphism #gradient #animation #dark-theme
โ๏ธ
Frontend Developer
Unknown
Full React 19+ / Next.js 15+ developer: components, performance, accessibility, state management, data fetching.
#react #nextjs #frontend #components #animation
โ๏ธ
Dark UI (TypeScript)
Unknown
Modern dark-themed React UI system with Tailwind CSS and Framer Motion. Glassmorphism, dashboards, admin panels.
#dark-theme #glassmorphism #framer-motion #admin-ui #typescript
โ๏ธ
React Modernization
Moderate
Upgrade React: classโhooks migration, concurrent features, codemods, React 18/19 adoption.
#react #migration #hooks #react-19 #concurrent
โ๏ธ
Internationalization patterns: detecting hardcoded strings, managing translation files, RTL support, locale switching.
#i18n #l10n #translations #locale #en
๐ฎ
Three.js Skills (Hub)
Safe
Systematically create high-quality 3D scenes and interactive experiences using Three.js best practices.
#threejs #webgl #3d #scene #r3f
๐ฎ
Three.js Fundamentals
Safe
Scene setup, cameras, renderer, Object3D hierarchy, coordinate systems. Foundation for all 3D work.
#threejs #camera #renderer #scene-graph #transforms
๐ฎ
Keyframe animation, skeletal animation, morph targets, animation mixing. From GLTF animations to procedural motion.
#threejs #animation #gltf #keyframe #gsap
๐ฎ
GLSL, ShaderMaterial, uniforms, custom vertex/fragment effects. Custom visual language for unique aesthetics.
#threejs #glsl #shader #vertex #fragment
๐ฎ
PBR, basic, phong, shader materials. Textures, normal maps, environment reflections, optimization.
#threejs #materials #pbr #textures #environment-map
๐ฎ
Light types, shadows, IBL (image-based lighting). Performance-aware lighting for futuristic aesthetics.
#threejs #lighting #shadows #hdr #environment
๐ฎ
Built-in shapes, BufferGeometry, custom geometry, instancing for performance.
#threejs #geometry #buffer #instancing #procedural
๐ฎ
Three.js Post-Processing
Safe
EffectComposer, bloom, DOF, screen effects, color grading. Cinematic visual quality.
#threejs #postprocessing #bloom #dof #color-grading
๐ฎ
Texture types, UV mapping, environment maps, texture settings, compression, optimization.
#threejs #textures #uv #hdr #compression
๐ฎ
Three.js Interaction
Safe
Raycasting, controls, mouse/touch input, object selection, click detection.
#threejs #raycasting #interaction #mouse #touch
๐ฎ
GLTF, textures, images, models, async patterns, loading progress management.
#threejs #gltf #loader #draco #async
๐ฎ
GLSL Shader Programming
Safe
Advanced GLSL: noise, SDF shapes, domain warping, ray marching, procedural textures.
#glsl #shader #noise #sdf #ray-marching
๐งช
Jest/Vitest testing: factory functions, mocking strategies, TDD red-green-refactor workflow. Behavior-driven testing.
#testing #vitest #jest #tdd #mocking
๐งช
Comprehensive testing workflow: unit, integration, E2E, browser automation, QA checklists.
#testing #qa #integration #e2e #coverage
๐งช
Test-Driven Development
Unknown
TDD discipline: write failing test before implementation. Red โ Green โ Refactor cycle.
#tdd #testing #red-green-refactor #test-first
๐งช
E2E Testing (Playwright)
Unknown
End-to-end testing with Playwright: browser automation, visual regression, cross-browser, CI integration.
#playwright #e2e #browser #visual-regression #ci
๐งช
E2E Testing Patterns
Unknown
Build reliable, fast, maintainable E2E test suites. Anti-flakiness patterns, test isolation, CI parallelism.
#e2e #playwright #reliability #parallel #flakiness
๐
Diagnose SEO issues affecting crawlability, indexation, rankings. Evidence-based, prioritized audit framework.
#seo #audit #crawlability #eeat #rankings
๐
Audit crawlability, indexability, Core Web Vitals, structured data, JavaScript rendering, AI crawler access.
#seo #technical #cwv #hreflang #robots
๐
GEO (AI Search Optimization)
Safe
Optimize content for AI Overviews, ChatGPT, Perplexity, Claude citations. llms.txt readiness, passage-level citability.
#geo #ai-search #chatgpt #perplexity #llms-txt
๐
Schema.org / JSON-LD
Safe
Generate valid JSON-LD structured data for 10 schema types with rich result eligibility validation.
#seo #schema #json-ld #structured-data #rich-snippets
๐
Hreflang tag validation, implementation patterns, common mistakes, bidirectional link verification.
#seo #hreflang #localization #international #en
๐
Keyword Strategist
Unknown
Analyze content for keyword density, semantic variations, LSI keywords. Prevent over-optimization.
#seo #keywords #lsi #density #semantic
๐
AEO Keyword Research
Unknown
Research and prioritize keywords with AEO question queries, difficulty tiers, cannibalization checks, and content map.
#seo #aeo #keywords #research #questions
๐
AEO Content Quality Auditor
Safe
Audit content for E-E-A-T, AI citability, readability, originality, and semantic completeness.
#seo #aeo #eeat #quality #readability
๐
Write SEO + AEO optimized blog posts optimized for both search ranking and AI citation.
#seo #aeo #blog #content-writing #featured-snippets
๐
Content Cluster Builder
Safe
Build topical authority with pillar page + cluster articles, content types, internal link map, content gap analysis.
#seo #content-cluster #pillar #topical-authority #internal-linking
๐
Internal Linking Strategy
Safe
Map internal link opportunities, anchor text, orphan page detection, cannibalization checks.
#seo #internal-linking #anchor-text #orphan-pages #link-equity
๐
Meta Description Generator
Safe
Write 3 title tag variants + 3 meta description variants per page with SERP preview, OG tags, Twitter Cards.
#seo #meta #og-tags #twitter-card #serp
๐
Schema Generator (10 Types)
Safe
Generate valid JSON-LD for 10 schema types with rich result eligibility validation and implementation-ready script blocks.
#seo #schema #json-ld #10-types #rich-results
๐
Optimize existing meta tags for CTR, relevance, and keyword alignment across all pages.
#seo #meta #ctr #title-tags #descriptions
๐
XML sitemap structure, priority, changefreq, image sitemaps, news sitemaps. Submission to GSC.
#seo #sitemap #xml #gsc #image-sitemap
๐
Analyze content for quality, E-E-A-T signals, SEO best practices. Score and prioritize improvement.
#seo #content-audit #eeat #thin-content #quality-scoring
๐
SEO Forensic Incident Response
Safe
Investigate sudden drops in organic traffic/rankings. Structured triage, root-cause analysis, recovery plan.
#seo #forensic #incident #traffic-drop #penalty
๐
SEO Authority Builder
Unknown
Analyze E-E-A-T signals and suggest improvements. Build author authority for developer content.
#seo #eeat #authority #trust #author
๐
Comprehensive content outlines and topic clusters for SEO. Editorial calendar with keyword-to-content mapping.
#seo #content-planning #editorial-calendar #topic-clusters #briefs
๐
Cannibalization Detector
Unknown
Detect keyword overlap and cannibalization between pages. Suggest differentiation strategies.
#seo #cannibalization #keyword-overlap #canonical #content-consolidation
โ๏ธ
Multi-platform content strategist. Editorial calendars, compelling copy, brand storytelling, engagement optimization.
#content #writing #editorial #brand-voice #blog
โ๏ธ
High-level content strategy: audience mapping, content pillars, distribution channels, measurement.
#content #strategy #pillars #distribution #audit
โ๏ธ
Elite content marketing strategist: AI-powered creation, omnichannel distribution, SEO + conversion optimization.
#content #marketing #conversion #funnel #cta
โ๏ธ
Rigorous, conversion-focused marketing copy for landing pages and emails. No fabrication. Evidence-based persuasion.
#copywriting #conversion #landing-page #headlines #cta
โ๏ธ
Write complete, structured landing pages optimized for SEO ranking, AEO citation, and visitor conversion.
#landing-page #seo #aeo #conversion #hero
โ๏ธ
Engineering blog post standards: technical accuracy, developer audience, strong openings, practical examples.
#blog #technical-writing #developer #tutorials #code-examples
๐
Deployment Engineer
Critical
Modern CI/CD pipelines, GitOps workflows, zero-downtime deployment automation. Multi-platform expertise.
#deployment #ci-cd #cloudflare #github-actions #gitops
๐
GitHub Actions Templates
Moderate
Production-ready GitHub Actions workflow patterns for testing, building, deploying applications.
#github-actions #ci #workflows #caching #matrix
๐
Git Advanced Workflows
Critical
Master advanced Git: interactive rebase, worktrees, bisect, reflog, history cleanup, collaboration.
#git #rebase #worktrees #bisect #history
๐
Create high-quality pull requests: comprehensive descriptions, automated review, best practices for clarity.
#git #pull-request #code-review #conventional-commits #pr-description
๐
Git Workflow Orchestrator
Critical
Complete git workflow: code review โ PR creation โ quality gates โ deployment readiness. Multi-agent orchestration.
#git #workflow #multi-agent #quality-gates #conventional-commits
๐
Git Hooks Automation
Moderate
Git hooks with Husky, lint-staged, pre-commit, commitlint. Automate quality gates before code reaches CI.
#git-hooks #husky #lint-staged #commitlint #automation
๐
CI/CD Automation
Moderate
Create efficient CI/CD pipelines, GitHub Actions workflows, and automated development processes.
#cicd #automation #pipeline #release #parallelization
๐
DevSecOps, comprehensive cybersecurity, compliance frameworks. OWASP Top 10, SDLC security controls.
#security #owasp #audit #devsecops #authentication
๐
Security Audit Workflow
Safe
Comprehensive security workflow: web app testing, API security, penetration testing, vulnerability scanning, hardening.
#security #pentest #web-app #api-security #hardening
๐
Frontend Security Coder
Unknown
Client-side security: XSS prevention, safe DOM manipulation, CSP implementation, secure input handling.
#security #frontend #xss #csp #dom
๐
Static Application Security Testing across JS/TS, React, Next.js. SQL injection, XSS, secrets, path traversal.
#security #sast #semgrep #eslint-security #static-analysis
๐
Dependency Security
Unknown
Scan npm/yarn dependencies for CVEs, license compliance, supply chain risks. Automated remediation.
#security #dependencies #npm-audit #cve #supply-chain
โก
Performance Engineer
Unknown
End-to-end performance optimization: profiling, observability, caching, scalability. Frontend + backend.
#performance #lighthouse #cwv #bundle #profiling
โก
Performance Optimizer
Unknown
Identify and fix performance bottlenecks in code, databases, APIs. Measure before and after.
#performance #optimization #profiling #measurement #bottleneck
โก
Performance Profiling
Unknown
Profiling principles: measurement, analysis, optimization techniques. CPU, memory, network, rendering.
#profiling #devtools #cpu #memory #frame-rate
โฟ
Accessibility Audit (WCAG)
Safe
WCAG compliance audit, inclusive design, assistive technology compatibility. Remediation guidance.
#accessibility #wcag #a11y #screen-reader #aria
๐๏ธ
Write Architecture Decision Records: context, decision, consequences, alternatives. Living documentation.
#architecture #adr #documentation #decisions #consequences
๐๏ธ
Architecture Review
Unknown
Master software architect: review system architecture, evaluate scalability, assess compliance with standards.
#architecture #review #scalability #resilience #coupling
๐๏ธ
Architecture Patterns
Safe
Backend architecture: Clean Architecture, Hexagonal, DDD, microservices, testable design.
#architecture #clean-architecture #ddd #hexagonal #repository
๐๏ธ
Clean Code (Uncle Bob)
Safe
Clean Code principles by Robert C. Martin. Transform working code into readable, maintainable code.
#clean-code #refactoring #solid #naming #functions
๐๏ธ
Elite code review: AI-powered analysis, static analysis tools, security review, production quality assurance.
#code-review #security #performance #typescript #quality
๐๏ธ
Code Review Excellence
Safe
Transform reviews from gatekeeping to knowledge sharing. Constructive feedback, systematic analysis, collaboration.
#code-review #feedback #mentoring #constructive #checklist
๐ง
AI Agents Architect
Unknown
Design autonomous AI systems: graceful degradation, clear failure modes, controllable autonomy, multi-agent orchestration.
#ai #agents #react-loop #orchestration #memory
๐ง
Meta-skill: auto-discover skills, match by capabilities, coordinate multi-skill workflows, registry management.
#orchestration #multi-agent #workflow #discovery #registry
๐ง
Production-ready patterns for LLM applications: RAG, chat, streaming, cost management, error handling.
#llm #patterns #streaming #rag #tokens
๐ง
AI Assistant Development
Unknown
Build intelligent conversational interfaces, chatbots, AI-powered applications with natural language understanding.
#llm #chatbot #assistant #conversational #context
๐ง
Expert prompt engineering: constitutional AI, chain-of-thought, model-specific optimization. Reduce cost and hallucinations.
#prompt-engineering #cot #few-shot #optimization #tokens
๐ง
LLM Prompt Optimizer
Unknown
Improve prompts using proven techniques: boost quality, reduce hallucinations, cut token usage.
#prompt-engineering #rtf #risen #cot #optimization
๐ง
LLM Operations: RAG, embeddings, vector databases, fine-tuning, cost management, quality evals, production AI architectures.
#llm #rag #embeddings #vector-db #fine-tuning
๐ง
Comprehensive LLM application evaluation: automated metrics, human evaluation, A/B testing, regression detection.
#llm #evaluation #metrics #ab-testing #regression
๐ง
Multi-Agent Patterns
Unknown
Design multi-agent systems: supervisor, swarm, pipeline patterns. Context isolation, handoffs, parallel execution.
#multi-agent #supervisor #swarm #pipeline #parallel
๐ง
AI Engineering Toolkit
Unknown
6 production-ready AI workflows: prompt eval (8-dimension), context budget, RAG design, agent security audit, eval harness.
#ai #toolkit #eval #rag #security
๐ง
LLM Structured Output
Unknown
Reliably extract structured data from LLM responses: JSON mode, function calling, schema validation.
#llm #structured-output #json #zod #function-calling
๐ง
Prompt Engineering
Unknown
Expert patterns, best practices, optimization techniques for LLM prompting. Debug agent behavior.
#prompt-engineering #system-prompt #persona #debugging #provider-specific
โ๏ธ
Scroll Experience Architect
Unknown
Scrolling as narrative device. Cinematic scroll animations, parallax storytelling, scroll-driven reveals, sticky sections, snap points.
#scroll #parallax #gsap #scrolltrigger #animation
โ๏ธ
Advanced JavaScript animation with Anime.js: complex timelines, staggering, SVG morphing, spring physics, awards-caliber orchestration.
#animejs #animation #timeline #stagger #svg
โก
Progressive Web App (PWA)
Safe
Build installable PWAs: service workers, Web App Manifest, offline caching strategies, Workbox, background sync, push notifications.
#pwa #service-worker #offline #workbox #manifest
๐๏ธ
Error Handling Patterns
Safe
Build resilient apps with robust error handling: error taxonomy, retry logic, circuit breakers, React error boundaries, async error flows.
#error-handling #boundaries #retry #circuit-breaker #resilience
๐๏ธ
Debugging Strategies
Safe
Systematic debugging: hypothesis-driven investigation, binary search isolation, browser DevTools deep dive, React/Next.js specific debugging.
#debugging #devtools #hydration #profiling #react-devtools
๐๏ธ
Ultra-fast web APIs with Hono โ runs on Cloudflare Workers, Bun, Deno, Node.js. Type-safe routing, middleware, RPC client, JSX support.
#hono #edge #cloudflare-workers #bun #api
๐๏ธ
API Design Principles
Safe
REST API design: resource modeling, versioning, pagination, error responses, OpenAPI spec, idempotency, HATEOAS, and HTTP semantics.
#rest #api #openapi #http #versioning
๐
Bun Runtime Development
Critical
Fast JS/TS development with Bun: native bundler, test runner, SQLite, HTTP server, shell scripting. Replaces Node + npm + Jest.
#bun #runtime #javascript #typescript #performance
โฟ
50+ design styles, 97 color palettes, 57 font pairings, 99 UX guidelines. Comprehensive design intelligence for web and mobile.
#ux #ui #design #color #typography
๐
Schema Markup & Structured Data
Unknown
Design and validate schema.org structured data for Google rich results: JSON-LD, eligibility audit, rich snippet optimization.
#schema #json-ld #structured-data #rich-results #seo
๐
AI-First SEO (AEO/GEO)
Safe
Answer Engine Optimization and Generative Engine Optimization: be cited by ChatGPT, Claude, Gemini, Perplexity. Beyond traditional SEO.
#aeo #geo #ai-seo #generative-search #entity
๐
Observability Engineer
Safe
Full-stack observability: distributed tracing, structured logging, metrics, dashboards, alerting, SLOs. OpenTelemetry-first approach.
#observability #opentelemetry #tracing #logging #metrics
๐ง
LangGraph Agent Architecture
Unknown
Production-grade AI agents with LangGraph: StateGraph, checkpointers, conditional routing, human-in-the-loop, tool integration.
#langgraph #agents #stategraph #llm #multi-agent
โ๏ธ
TanStack Query Expert
Safe
Production TanStack Query (React Query): declarative data fetching, cache invalidation, optimistic updates, Next.js SSR hydration.
#tanstack-query #react-query #data-fetching #caching #mutations
๐ง
LangChain Architecture
Unknown
LangChain.js: chains, agents, RAG pipelines, document loaders, vector stores, retrievers, LCEL (LangChain Expression Language).
#langchain #rag #vector-store #embeddings #lcel
โฟ
Rigorous A/B test methodology: hypothesis gates, sample size calculation, statistical power, pre-registration, results analysis.
#ab-testing #experimentation #statistics #hypothesis #conversion
โฟ
Accessibility Audit (WCAG 2.1)
Safe
Comprehensive a11y audit: axe-core, ARIA roles, keyboard navigation, color contrast, screen reader testing, WCAG 2.1 AA compliance.
#a11y #wcag #accessibility #axe #aria
๐งช
Playwright E2E Testing
Safe
End-to-end testing with Playwright: cross-browser automation, visual regression, API mocking, component testing, CI integration.
#playwright #e2e #testing #browser-automation #visual-regression
๐
GitHub Actions Expert
Moderate
Advanced GitHub Actions: matrix builds, composite actions, reusable workflows, secrets management, OIDC, artifact caching.
#github-actions #ci-cd #workflows #automation #deployment
๐
Git Workflow Expert
Moderate
Advanced Git: conventional commits, interactive rebase, git bisect, worktrees, hooks, monorepo strategies, release automation.
#git #conventional-commits #hooks #rebase #bisect
โ๏ธ
MDX authoring, frontmatter schemas, remark/rehype plugins, dynamic component injection, content pipeline from Git to render.
#mdx #markdown #content #remark #rehype
โ๏ธ
Copy Editing & Content Quality
Safe
Professional copyediting: grammar, clarity, tone consistency, active voice, readability metrics, style guide enforcement.
#copywriting #editing #content #clarity #tone
โ๏ธ
React Hooks Deep Dive
Safe
Advanced React hooks: custom hook composition, useSyncExternalStore, useOptimistic, useDeferredValue, useTransition, concurrent features.
#react #hooks #concurrent #useTransition #useDeferredValue
โก
React Performance Optimization
Safe
React rendering optimization: memo, useMemo, useCallback, Profiler, selective re-renders, virtualization, lazy loading.
#react #performance #memo #profiler #lazy
๐๏ธ
Node.js Best Practices
Safe
Production Node.js: event loop, streams, clustering, graceful shutdown, memory management, security hardening.
#nodejs #event-loop #streams #cluster #security
๐๏ธ
Git-First CMS Patterns
Safe
Git as canonical content source: file-based CMS, content API design, atomic file commits, conflict resolution, content versioning.
#git-cms #content-api #headless #file-based #mdx
๐
JWT Authentication
Moderate
Stateless auth with JWT: signing, verification, refresh rotation, claim design, JWKS, edge-compatible patterns.
#jwt #auth #security #token #refresh
โ๏ธ
i18n / L10n Patterns
Safe
Internationalization patterns: message format, plural rules, locale detection, RTL support, date/number formatting, ICU format.
#i18n #l10n #translation #locale #icu
โ๏ธ
Form architecture in React: React Hook Form, Zod validation, form state, accessibility, file uploads, multi-step wizards.
#forms #react-hook-form #zod #validation #accessibility
๐ฎ
3D Web Experience Design
Moderate
Holistic 3D web design: composition, camera choreography, lighting rigs, UX for WebGL, performance budgeting, progressive enhancement.
#threejs #webgl #3d #camera #lighting
Format Reference
Skill File Format
Skills live at .claude/skills/<name>.md โ YAML frontmatter declares the name and description; the Markdown body becomes the skill's system prompt when invoked.
---
name: deploy
description: Deploy the current branch to production via Railway
---
# Deploy Skill
Run `railway up --environment production` for the current project.
## Steps
1. Check for uncommitted changes (git status)
2. Confirm the target environment with the user
3. Run: railway up --environment production
4. Tail deployment logs until success or failure
5. Verify health endpoint responds 200
## Requirements
- RAILWAY_TOKEN must be set in environment
- railway CLI installed globally
Git Hooks Integration
Wire Claude Code into Git Hooks
Run Claude Code skills automatically at key git lifecycle events. Install hooks in .git/hooks/ or use Husky for team-wide hooks via .husky/.
pre-commit Review staged files
Runs /review on staged TypeScript files. Blocks commit if critical issues are found.
#!/bin/bash
# .husky/pre-commit
set -e
STAGED=$(git diff --cached --name-only --diff-filter=ACMR | grep -E '\.(ts|tsx)$' || true)
if [ -z "$STAGED" ]; then exit 0; fi
echo "Running Claude Code review on staged files..."
echo "$STAGED" | xargs -I{} claude --print "/review {}" 2>&1 | tee /tmp/claude-review.txt
if grep -q "severity: critical" /tmp/claude-review.txt; then
echo "Claude Code found critical issues. Fix before committing."
exit 1
fi
commit-msg Validate commit message
Validates that commit messages follow Conventional Commits spec via Claude.
#!/bin/bash
COMMIT_MSG=$(cat "$1")
if echo "$COMMIT_MSG" | grep -q "^Merge"; then exit 0; fi
RESULT=$(claude --print "Validate this commit message follows Conventional Commits. Reply PASS or FAIL.\n\nMessage: $COMMIT_MSG" 2>/dev/null)
if echo "$RESULT" | grep -q "^FAIL"; then echo "$RESULT"; exit 1; fi
pre-push Security audit before push
Runs /audit on the full codebase before pushing. Blocks if HIGH or CRITICAL issues found.
#!/bin/bash
set -e
BRANCH=$(git rev-parse --abbrev-ref HEAD)
echo "Running Claude Code security audit before push to $1/$BRANCH..."
claude --print "/audit" 2>&1 | tee /tmp/claude-audit.txt
if grep -qE "(HIGH|CRITICAL)" /tmp/claude-audit.txt; then
echo "Security audit found issues. Resolve before pushing."
exit 1
fi
Configuration Reference
~/.claude/settings.json Schema
Controls Claude Code permissions, hooks, environment variables, and model selection. Place at ~/.claude/settings.json for global config or .claude/settings.json for project-level overrides.
permissions.allow
Glob patterns for commands and file operations Claude can execute automatically. Use Bash(*), Read(**), Write(src/**) patterns.
permissions.deny
Patterns ALWAYS blocked regardless of context. Use for irreversible operations you never want automated.
hooks.PreToolUse
Shell commands run BEFORE each tool call. Return non-zero exit code to block the call. Receives CLAUDE_TOOL_INPUT env var.
hooks.PostToolUse
Shell commands run AFTER each tool call completes. Great for running typecheck after every Write.
hooks.Stop
Shell commands run when Claude finishes responding. Use for notifications: alerts, Slack, terminal bells.
env
Key-value pairs injected as environment variables into every Claude Code session. Useful for NODE_ENV, log levels, feature flags.
model
Default model for primary responses. Example: "claude-sonnet-4-6".
smallFastModel
Faster/cheaper model for classification, routing, and quick tasks within the same session.
{
// Permissions โ what Claude Code can and cannot do automatically
"permissions": {
"allow": [
"Bash(git log:*)",
"Bash(npm run *)",
"Bash(npx tsc --noEmit)",
"Read(**/*)",
"Write(src/**/*)"
],
"deny": [
"Bash(rm -rf /)",
"Bash(git push --force *)"
]
},
// Hooks โ shell scripts run at lifecycle events
"hooks": {
"PreToolUse": [{
"matcher": "Bash",
"hooks": [{ "type": "command", "command": "echo 'Running: $CLAUDE_TOOL_INPUT'" }]
}],
"PostToolUse": [{
"matcher": "Write",
"hooks": [{ "type": "command", "command": "npx tsc --noEmit 2>&1 | head -20" }]
}],
"Stop": [{ "hooks": [{ "type": "command", "command": "notify-send 'Claude Code' 'Done'" }] }]
},
// Inject env vars into every Claude Code session
"env": { "NODE_ENV": "development", "NEXT_PUBLIC_LOG_LEVEL": "debug" },
"model": "claude-sonnet-4-6",
"smallFastModel": "claude-haiku-4-5-20251001"
}
Best Practices ยท Template
CLAUDE.md Template
Place CLAUDE.md at your project root. Claude Code reads it on every invocation. Define stack, rules, common tasks, and architecture decisions here.
# Project: My App
## Stack
- Next.js 16, React 19, TailwindCSS v4, TypeScript strict
- Tests: Vitest + Testing Library
## Critical Rules
- Static export only (no API routes, no SSR)
- Commit only when explicitly asked
- No console.error โ use reportError()
- All strings via useTranslations()
## Common Tasks
- Dev: npm run dev
- Build: npm run build
- Typecheck: npm run typecheck
- Tests: npm run test