hrconsultnj/claude-plugins.

app-architecture

Complete architecture guide for building features from database to UI. Routes to frontend/, fullstack/, mobile/, backend/, or sdks/ based on detected stack. Covers decomposition, multi-tenant isolation, auth model, query patterns, and component patterns.

audit-deps

Focused dependency CVE audit — reports vulnerabilities with version info and safe upgrade commands.

backlog

Manage the tasks-plans/ workspace — add items to backlog, ideas, or reference. Process queued work. Organize by topic, not flat dumps.

build-graph

Build or update the code review knowledge graph, generate the visualization, and open it. Run this first to initialize, or let hooks keep it updated automatically.

calibrate

Calibrate test bench — detect test framework, read existing test conventions, generate .claude/testbench.json config. Query Context7 for test framework reference docs. Run once per project.

ci-generate

Generate CI/CD workflow from detected stack. GitHub Actions, GitLab CI, or Bitbucket Pipelines. Includes lint, typecheck, test, build, and deploy stages.

ci-validate

Validate CI/CD workflow files. Runs actionlint for GitHub Actions, checks for common mistakes, and reports issues with fix suggestions.

code-organizer

Restructure a messy project into conventional file layout based on detected framework. Analyzes, plans, executes with import updates, and verifies.

deps-check

Check dependency health -- known CVEs, outdated packages, unsafe versions. Recommends the highest safe version, not just "latest". Blocks Critical CVEs via Composure commit gate.

design-forge

This skill should be used when the user asks to "add premium animations", "create a canvas visualization", "build a glassmorphism panel", "add a custom cursor", "create a generative background", "build an interactive card", "add scroll progress", "add sound design", "create a Three.js hero", "build a creative portfolio", "add particle effects", "add scanlines", "add a typewriter effect", "design a landing page", "implement advanced animations", "add 3D elements", "design using Next.js Conf patterns", "create interactive experience", "add Framer Motion animations", "add GSAP scroll animations", "integrate Spline 3D", or needs guidance on premium web design patterns, creative coding, generative art, micro-interactions, accessibility for animations, or bespoke interactive experiences beyond standard UI components.

dockerfile

Generate or validate Dockerfiles with security best practices. Multi-stage builds, non-root user, layer caching, .dockerignore.

headers

HTTP security header analysis — context-aware grading with exploitable-risk focus, not checkbox counting.

initialize

Detect project stack and generate Composure config (.composure/no-bandaids.json, task queue, framework reference docs). Run once per project.

integration-builder

Stack-agnostic third-party integration scaffolding. Detects project language, pulls latest SDK docs via Context7, chooses integration tier, scaffolds client/auth/webhooks with proper error handling and test patterns. Works across TypeScript, Python, Go, Rust, and Ruby.

package-risk

Analyze an installed package's source code for suspicious behavior patterns (eval, network calls, env access, obfuscation).

preflight

Production readiness checklist. Checks environment variables, health endpoints, error monitoring, CORS, rate limiting, and security headers.

run

Run tests -- all, changed files only, or for a specific file. Parse output, show failures with source context.

update-project

Refresh Composure config, hooks, or reference docs without full re-initialization. Targets only what changed.

view-graph

Open the code review graph visualization in the browser. Regenerates the HTML if the graph has been updated since last generation.