platform-claude-marketplace

Start here. Curated starter pack: superpowers (TDD, debugging, planning, git worktrees), 7-phase feature development, and 6-agent parallel PR review — all in one install.

[Platform Team] 2 security scanning skills: appsec-scan (catalog-driven CI mirror — admin-managed scanner preference profiles, GitLab CI/CD Catalog component versions resolved every run, local runs of Fortify SAST, GitLab SAST/Dependency-Scanning-SBOM/Secret-Detection/Container-Scanning plus Parasoft, Pylint, ESLint, Scantist, Trivy; approval-gated fix loop and a guided Vulnerability Report triage plan) and appsec-dast-sim (LLM-based DAST following OWASP WSTG v4.2 — no running app required).

[Platform Team] lint-and-validate (pre-commit gate with auto-fix formatters and linters — also in essentials), api-design-principles (REST/GraphQL + RFC 7807), openapi-spec-generation (keep OpenAPI 3.1 in sync), doc-coauthoring (ADRs, design docs, runbooks, postmortems).

[Vendored: obra/superpowers] 14 core developer skills: TDD, systematic debugging, planning, git worktrees, code review workflows, subagent-driven development, and more. Already bundled in essentials — install separately only if you want superpowers without the rest of essentials.

[Vendored: EveryInc/compound-engineering-plugin] 38 skills + 50 specialised review agents: code review, architecture strategy, performance analysis, security review, data integrity, deployment verification, and more. Note: ce-gemini-imagegen requires GEMINI_API_KEY.

[Vendored: garrytan/gstack] 54 developer productivity skills: QA, design consultation, browser automation, production safety gates (canary/guard/ship), context management, planning workflows, code review, benchmarking. Browser skills require Chrome.

[Vendored: ruvnet/ruflo] 33 skills for AI swarm orchestration, AgentDB memory management (learning, vector-search, optimization), SPARC methodology, GitHub automation, and v3 architecture patterns. Swarm features (flow-nexus, hive-mind) require internet access.

[Vendored: gsd-build/get-shit-done] 66 slash commands covering the full Discuss→Plan→Execute→Verify lifecycle: /gsd task, /gsd plan, /gsd execute, /gsd verify, plus context management and team workflow commands.

[Vendored: anthropics/skills] 4 skills for building with the Anthropic ecosystem: Claude API development (prompt caching, tool use, streaming, batch), MCP server building with vendored SDK reference, web app testing, and dual-mode agent patterns.

[Vendored: kepano/obsidian-skills] 5 skills for Obsidian knowledge management: Markdown authoring, Bases queries, CLI usage, JSON Canvas diagrams, and content defuddle (simplification).

[Vendored: anthropics/claude-plugins-official] 7-phase feature development workflow with 3 agents (code-architect, code-explorer, code-reviewer) and the /feature-dev slash command. Already bundled in essentials.

[Vendored: anthropics/claude-plugins-official] 6-agent parallel PR review toolkit: code simplicity, comment analysis, conversation context, test coverage, silent failure detection, type design. Plus /review-pr slash command. Already bundled in essentials.

[Vendored: anthropics/claude-plugins-official] Git hooks framework for Claude Code: pre-commit, post-commit, and custom hook matchers. Includes the writing-rules skill and /hookify configuration command.

[Vendored: anthropics/skills] Frontend design patterns and best practices for building modern web UIs.