supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
commands-creator
Guide for creating and managing slash commands in Claude Code. Use when (1) creating new slash commands, (2) learning command syntax and features, (3) deciding between commands vs skills, (4) implementing advanced command features (arguments, hooks, bash execution), or (5) organizing and managing...
Full skill instructions
This skill provides guidance for creating and managing slash commands in Claude Code. Slash commands are Markdown files that define frequently used prompts and workflows for Claude to execute.
mkdir -p .claude/commands
echo "Review this code for security vulnerabilities:" > .claude/commands/security-review.md
Usage: /security-review
mkdir -p ~/.claude/commands
echo "Explain this code in simple terms:" > ~/.claude/commands/explain.md
Usage: /explain
Use slash commands for:
Use Skills for:
See skills-vs-commands.md for detailed comparison.
.claude/commands/) or Personal (~/.claude/commands/).claude/commands/(project) in /help~/.claude/commands/(user) in /helpPriority: Project commands take precedence over personal commands if both have the same name.
/plugin-name:command-name/mcp__<server-name>__<prompt-name>/mcp commandSee command-types.md for detailed information.
/<command-name> [arguments]
.md extension)$ARGUMENTS: All arguments as a single string$1, $2, $3: Individual positional argumentsSee syntax-and-arguments.md for detailed syntax and argument handling.
Command files support frontmatter for metadata:
---
description: Brief description of the command
allowed-tools: Bash(git add:*), Bash(git status:*)
argument-hint: [message]
---
| Field | Purpose | Default |
|---|---|---|
description | Brief description | First line of prompt |
allowed-tools | Tools command can use | Inherits from conversation |
argument-hint | Arguments expected | None |
model | Specific model to use | Inherits from conversation |
disable-model-invocation | Block Skill tool invocation | false |
hooks | Command-scoped hooks | None |
See frontmatter-reference.md for complete frontmatter reference.
Execute bash commands before the slash command runs:
---
allowed-tools: Bash(git add:*), Bash(git status:*), Bash(git commit:*)
---
Current git status: !`git status`
Use ! prefix to include bash command output in command context.
Include file contents using @ prefix:
Review the implementation in @src/utils/helpers.js
Define hooks scoped to command execution:
---
description: Deploy to staging
hooks:
PreToolUse:
- matcher: "Bash"
hooks:
- type: command
command: "./scripts/validate-deploy.sh"
once: true
---
Deploy to staging environment.
Trigger extended thinking by including extended thinking keywords in the command content.
See advanced-features.md for detailed advanced features.
Organize commands in subdirectories:
.claude/commands/
├── frontend/
│ ├── review.md # Creates /review (project:frontend)
│ └── test.md # Creates /test (project:frontend)
└── backend/
├── review.md # Creates /review (project:backend)
└── deploy.md # Creates /deploy (project:backend)
Subdirectories appear in the command description but don't affect the command name.
/ at any position to see available commands.claude/commands/~/.claude/commands/The Skill tool allows Claude to programmatically invoke commands during conversations. To encourage Claude to use a specific command, reference it in prompts or CLAUDE.md:
> Run /review before committing changes.
Commands with disable-model-invocation: true cannot be invoked via the Skill tool.
See best-practices.md for usage patterns and recommendations.
Basic command:
---
description: Review code for security vulnerabilities
---
Review this code for security vulnerabilities:
- SQL injection risks
- XSS vulnerabilities
- Authentication/authorization issues
- Input validation problems
Command with arguments:
---
argument-hint: [type] [description]
description: Create a git commit
---
Create a git commit with type "$1" and description "$2".
Commit format: $1: $2
Command with bash execution:
---
allowed-tools: Bash(git add:*), Bash(git status:*), Bash(git commit:*)
description: Create a commit from staged changes
---
## Current status
!git status
## Changes to commit
!git diff --cached
Create a meaningful commit message for these changes.
See examples.md for more examples.
Claude Code provides 35+ built-in commands. Common ones include:
| Command | Purpose |
|---|---|
/help | Get usage help |
/clear | Clear conversation history |
/context | Visualize current context usage |
/cost | Show token usage statistics |
/config | Open Settings interface |
/memory | Edit CLAUDE.md memory files |
/model | Select or change AI model |
/plan | Enter plan mode |
/review | Request code review |
Built-in commands are not available through the Skill tool.
| Issue | Solution |
|---|---|
| Command not found | Check filename matches command name |
| Arguments not working | Verify placeholder syntax ($1, $2, $ARGUMENTS) |
| Bash execution failing | Add command to allowed-tools |
| Project command ignored | Personal command may have same name (project takes precedence) |
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content