Recently updated open-source projects

skill-validator audits a Claude Code SKILL.md for structural problems, missing fields, weak trigger descriptions, unreplaced placeholders, and marketplace readiness. It produces a 0–10 score, a separate triggering score, critical issues, warnings, strengths, and one concrete recommended next step for each problem.

github-repo-launch-kit organizes an open-source launch into trust signals, repository differentiation, first-wave outreach, and ongoing maintenance. It inspects the repository and can safely apply selected setup changes through a dry-run-aware script, while marking human-owned work such as authentic posts and the launch narrative. It explicitly rejects star manipulation, automated account posting, and replacing the maintainer's voice.

Flutter Store Readiness Skill audits a Flutter project for iOS privacy manifests, Android Data Safety, permission explanations, screenshots, age ratings, metadata limits, signing, target SDK, and release configuration. It returns per-platform readiness states, item-level checklists, blocking issues, and positive findings before submission. The project must contain iOS or Android sources, and some final checks still belong in App Store Connect or Play Console.

Flutter Localization Audit Skill scans Flutter and Dart projects for hardcoded strings, incomplete ARB files, intl setup problems, plural and gender forms, RTL gaps, locale-unaware formatting, interpolation errors, and fallback issues. Its report combines per-locale coverage with file-level evidence, severity, positive findings, and prioritized fixes. A project with pubspec.yaml and ARB files is required, and the skill reports issues without editing translations.

Flutter Dependency Audit Skill reviews a Flutter or Dart project's packages across outdated versions, abandoned libraries, duplicate functionality, license conflicts, known CVEs, loose pinning, and dependency overrides. It reports package-level evidence, severity, positive findings, and prioritized next steps instead of changing the dependency graph automatically. A pubspec.yaml and ideally pubspec.lock are required for a useful audit.

OWASP Mobile Audit Skill checks Flutter, Android, and iOS codebases against all ten OWASP Mobile Top 10 categories plus six emerging checks. The report groups findings by severity, includes file and line evidence with a concrete fix, and records positive controls already present. You can filter the run by rule IDs, but the Markdown report remains an audit aid rather than proof that a mobile app is secure.

Competitor Arc samples historical homepage snapshots from the Wayback Machine, captures key years in Chromium, extracts headlines, calls to action, navigation, and title tags, and writes an evolution report. The timeline helps marketing teams see which positions became common and where differentiation may remain. Bot protection, slow snapshot discovery, and JavaScript-heavy older pages can limit capture quality.

WebTrader Skill supplies React and Supabase scaffolds for order tickets, live prices, positions and history, margin and P&L calculations, stop-loss and take-profit controls, partial closes, and mobile order sheets. It also includes a SignalR price-feed context with reconnect and stale detection, plus standalone financial-math helpers. The scaffolds are MIT-licensed, while the complete white-label broker platform and its admin, KYC, CRM, and payment systems are a separate commercial product.

claude-skill-pptx-preview opens a PPTX in PowerPoint for Mac through AppleScript, exports a PDF, and converts each page to a PNG with pdftoppm for visual inspection. Using PowerPoint as the renderer makes font fallback and complex-shape behavior closer to what the user will see. It requires macOS, PowerPoint, poppler, and automation permission, and the output resolution is adjustable.

gb-music is a Claude Code and Cowork skill for producing Game Boy audio from text instructions. It generates hUGETracker v6 .uge background music with genre, key, and tempo controls, creates FX Hammer .sav sound-effect files with up to 60 effects, and can convert MP3, M4A, or WAV input with librosa. It targets GB Studio 4.x.

Provide destinations, dates, and preferences to generate day-by-day driving guides with parking details, one-tap navigation links, an interactive Leaflet map, a budget, and a packing checklist. The workflow verifies travel times, opening status, weather, and route geometry instead of relying on rough model estimates. It also adds timing buffers, conditional skip rules, and an offline fallback for low-signal roads.

jira-dev-workflow turns a Jira ticket key into a gated Claude Code development flow: read the issue, plan the work, create sub-tasks when appropriate, implement on branches, commit, merge, update Jira states, and post a completion summary. Every state-changing step asks for approval, and interrupted runs can be resumed. A Jira MCP server registered under the `atlassian` name is required; without it, the workflow stops before making changes.

Provide a pull request number, branch, or URL and this pr-buddy variant will guide you through goal, architecture, decisions, code tour, risk, and ownership. You answer first at each station, and the review phase waits until you say you are ready. With pr-review-toolkit it can dispatch parallel reviewers; without it, the host model performs an inline fallback and prepares a combined PR comment.

Conventional Comments Skill applies the Conventional Comments structure to reviews of code, documents, designs, drafts, and pull requests. It supplies semantic labels, blocking and topic decorations, an issue-to-suggestion pairing rule, and communication guidance for curious, actionable feedback. It formats the comments without deciding what deserves review, how the review is organized, or how many comments should be written.

clean-code-audit scans an existing codebase for long files and functions, complexity, weak comments, magic literals, oversized tests, and duplication, then writes a prioritized Markdown report without editing anything. Python analysis uses the AST, while TypeScript and JavaScript rely on a documented heuristic. Thresholds and scan scopes are configurable, and the findings are intended to guide a separate refactoring effort rather than trigger automatic changes.

FeedSquad CLI rewrites text in a server-stored brand voice and supports drafting, adapting, scheduling, approving, and publishing posts for LinkedIn, X, and Threads. Calendar health and performance commands help spot stale drafts, cadence gaps, and patterns in engagement, while publishing remains approval-gated. The CLI requires Node 20, a FeedSquad account, OAuth login, and a connection to its MCP-backed service.

This skill reviews an X post against the engagement signals described by the open-source Phoenix recommendation system, then suggests a format, rewrites, and a posting plan. Its weighted score also incorporates observed 2026 engagement data. Because the released source does not include the platform's exact private weights, the result is an optimization framework rather than a precise reach forecast.

restate-confirm makes Claude Code summarize its understanding in one or two declarative sentences before editing files, deleting data, running side-effecting commands, or acting on an ambiguous request. It waits for confirmation, repeats the understanding after a correction, and then proceeds. Clear continuation signals and ordinary questions can skip the protocol; the plugin is a local instruction layer rather than an execution guard.