Agent safety seatbelts: the pre-flight security checklists you run before an agent touches email, the browser, files, or goes autonomous — least-privilege reviews, prompt-injection spotting, and the blast-radius drill
Plugin pm-seatbelt from marketplace pm-claude-skills in mohitagw15856/pm-claude-skills. Commands read from the repo's manifest — yesterday.
blast-radius-drillRun the worst-case drill before an agent goes autonomous — the 'if this agent were fully hijacked right now, what's the damage' walk-through, the containment controls (caps, kill-switch, reversibility, isolation), and the recovery plan. Use when asked what's the worst my agent could do, run a blast-
browser-agent-preflightRun the pre-flight checklist before an agent drives a browser — the untrusted-web-content threat (every page is attacker-controllable), the credential and session-cookie exposure, the action-confirmation gates for purchases and posts, and the sandboxing that limits the damage. Use when asked let my
email-agent-preflightRun the pre-flight checklist before an agent touches an inbox — the read-vs-send permission line, the injection-in-email-body threat, the send-guard rules, and the blast-radius limits that keep a compromised agent from mailing the company. Use when asked let my agent read/send email safely, set up g
file-access-preflightRun the pre-flight checklist before an agent gets filesystem access — the scope boundary (which directories, read vs write), the secrets-exposure sweep, the destructive-operation gates, and the path-traversal and untrusted-file defenses. Use when asked let my agent access my files safely, is it safe
injection-spotterSpot prompt-injection in untrusted content before an agent acts on it — the anatomy of injected instructions across the channels attackers use (email, web, files, tool outputs, documents), the tell-list, and the safe-handling response. Use when asked is this content trying to hijack my agent, check
tool-permission-reviewReview what an agent is actually allowed to do before you turn it loose — the tool-by-tool audit (each capability's blast radius), the least-privilege pass that removes what the task doesn't need, the dangerous-combination check, and the allow/ask/deny tiering. Use when asked review my agent's permi
100 cowork skills for the AI-coworker era: inbox and email ops, files and folders, spreadsheets, documents, meetings, team collaboration, research, presentations, personal work ops, and office admin — the office knowledge work an AI coworker actually does
100 skills
Engineering & tech skills: Code Review Checklist, Incident Postmortem, API Docs Writer, Architecture Decision Record, Debugging Log Analyser, PR Description Writer, System Design Interview, Changelog Generator, Test Strategy Doc, Runbook Writer, CI/CD Playbook, SLO & Error Budget, Developer Onboarding Doc, On-Call Runbook, Security Threat Model, Performance Budget, Database Schema Design, Database Migration Plan, Technical Debt Register, RFC Writer, Capacity Planning, Load Testing Plan, Disaster Recovery Plan, Feature Flag Guide, Dependency Audit, Service Catalog Entry, Monitoring Setup Guide, Local Dev Setup, API Versioning Strategy, Infra-as-Code Review, Engineering Weekly Report, Tech Radar, Sprint Velocity Analysis, Microservices Decomposition, Engineering Hiring Rubric, Context Mode, Claude Superpowers, Skill Security Auditor, Error Decoder, Regex Builder, Git Troubleshooter, Dependency Conflict Resolver, Code Explainer, Writing Great Skills. 44 structured skills for engineering teams, SREs, technical PMs, and Claude Code power users — including dev-troubleshooting skills (errors, regex, git, dependencies, code explanation), a security audit for any SKILL.md / system prompt before you install or merge it, and a meta-skill for authoring high-quality skills.
47 skills
Executable business calculators & models — each ships a stdlib script: Unit Economics (LTV/CAC), SaaS Metrics (NRR/quick ratio), Runway (default alive/dead), Pricing, ROI/NPV — plus computed models that emit real .xlsx with live formulas: cohort curve fitting (LTV), Monte Carlo runway (P10/P50/P90), and Van Westendorp pricing. Verifiable math, not vibes.
30 skills
Life-admin letters that get results: Complaint Letter, Dispute Letter, Reference Letter, Rental Application, and Insurance Claim. The everyday correspondence everyone needs, done well.
29 skills
AI reads the fine print for you: leases, medical bills, terms of service, loans, benefits packages, and HOA covenants decoded into plain English with ranked red flags, the questions to ask, and what's actually negotiable. Not legal advice — a sharp friend who reads contracts.
26 skills
Executive-function & focus skills for getting unstuck and running your own brain: beat activation-energy paralysis, triage overwhelm, protect your energy, build a personal memory file, and make hard decisions when depleted. ADHD-friendly, useful for everyone.
26 skills
Talk like caveman. Cut filler. Keep technical details explicit.
22 skills · 1 command · 3 agents · hooks
Persistent memory for Claude Code: the next session starts where the last one left off.
29 skills · 1 MCP server · hooks
tasteskill 2.5.1: professional company websites at the figma.com and x.ai level, with one section per screen, real photographs, real product UI, effects kept for tech and gaming pages, and a real-browser checker and finish gate.
1 skill
Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
Cross-session memory and token savings for coding agents.
6 skills · 1 agent · 1 MCP server · hooks
Package any website or local web build into a lightweight desktop app with Pake CLI.
1 skill
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.