# AI Library: skills, prompts and plugins

> Skills I use with AI coding agents, ready to read, copy and download. Originals are published here in full; curated ones link to their authors, with what I changed and why I run them.

Canonical: https://mikereams.com/ai

## Original

### Code review with a coverage ledger

Skill · Original · Review & QA · updated 2026-10-17. Details: https://mikereams.com/ai#code-review

Reviews a change file by file, records every file as reviewed or skipped with a reason, and reports only findings it has re-checked.

What you get: A ledger of every changed file and a short, severity-ranked list of confirmed findings with line numbers.

- Built to stop two failures: a reviewer who reads 6 of 14 files and says it looks good, and twenty nitpicks that bury the one real defect.
- A check mode compares the app's own docs with its code and lists only the disagreements, for a release gate.
- The estate rules treat a new dependency, a secret in code or work content in a personal repo as stop-and-ask.

Files (MIT for the original parts; bundled third-party parts keep their licences (see NOTICE); Reviewer prompt adapted from obra/superpowers (MIT); rule docs from alibaba/open-code-review (Apache-2.0).): [SKILL.md](https://mikereams.com/ai-files/code-review/SKILL.md), [reviewer-prompt.md](https://mikereams.com/ai-files/code-review/reviewer-prompt.md), [rules/default.md](https://mikereams.com/ai-files/code-review/rules/default.md), [rules/estate.md](https://mikereams.com/ai-files/code-review/rules/estate.md), [rules/ts-js.md](https://mikereams.com/ai-files/code-review/rules/ts-js.md), [rules/github-workflows.md](https://mikereams.com/ai-files/code-review/rules/github-workflows.md), [rules/package-json.md](https://mikereams.com/ai-files/code-review/rules/package-json.md), [NOTICE](https://mikereams.com/ai-files/code-review/NOTICE), [LICENSE-MIT-superpowers](https://mikereams.com/ai-files/code-review/LICENSE-MIT-superpowers), [LICENSE-APACHE-2.0-open-code-review](https://mikereams.com/ai-files/code-review/LICENSE-APACHE-2.0-open-code-review)

### Diagrams: Mermaid or blueprint SVG

Skill · Original · Diagrams · updated 2026-10-28. Details: https://mikereams.com/ai#diagrams

Picks Mermaid or a hand-drawn blueprint SVG based on where the diagram will live, then draws flowcharts, sequences, ERDs, C4 views and state machines.

What you get: A diagram that renders where it is going: a Mermaid block for GitHub or Obsidian, or a clean grid-aligned SVG for docs and slides.

- One concept per diagram: split rather than cram.
- Component state charts pair with the States section of a design handoff spec.

Files (MIT): [SKILL.md](https://mikereams.com/ai-files/diagrams/SKILL.md)

## Curated

### Web interface guidelines

Skill · Curated · Frontend · updated 2026-08-20. Details: https://mikereams.com/ai#web-design-guidelines

Checks a UI against a long list of interface rules for accessibility, forms, focus, motion and copy.

What you get: A list of rule violations in the UI, each tied to the element that breaks it.

- The original downloaded its rules from GitHub on every run and followed the output instructions it found there: a live remote-instruction channel.
- My copy keeps the rules as a local file and never fetches anything.

Source: [vercel-labs/agent-skills](https://github.com/vercel-labs/agent-skills/tree/b8caa26/skills/web-design-guidelines) by Vercel Labs (MIT), reviewed at b8caa26. Not hosted here.

### Web best practices (Lighthouse)

Skill · Curated · Frontend · updated 2026-08-20. Details: https://mikereams.com/ai#frontend-best-practices

Runs a Lighthouse-style best-practices audit: security headers, CSP, deprecated APIs, console errors and valid markup.

What you get: A checked-off audit list for a build, with the failures named.

- I run a condensed checklist version as the last gate before an app is called done.

Source: [addyosmani/web-quality-skills](https://github.com/addyosmani/web-quality-skills/tree/main/skills/best-practices) by Addy Osmani (MIT). Not hosted here.

### UI design system toolkit

Skill · Curated · Design systems · updated 2026-08-20. Details: https://mikereams.com/ai#ui-design-system

Generates design tokens from a brand colour, checks contrast, does responsive type maths and writes developer handoff specs.

What you get: A token set (colour ramps, type scale, spacing, motion) and a handoff spec a developer can build from without asking a question.

- This site's own tokens came out of its generator, then a contrast pass on every text pair.
- I run a condensed version of the skill.

Source: [alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills) by Alireza Rezvani (MIT). Not hosted here.

### Editorial diagram design

Skill · Curated · Diagrams · updated 2026-09-26. Details: https://mikereams.com/ai#diagram-design

Draws diagrams with an editorial eye: templates, a style guide and layout rules that make technical drawings readable.

What you get: A polished, on-brand technical diagram in HTML or SVG.

- Offline fonts by default: I removed the Google Fonts links from the templates.
- Replaced an unpinned third-party browser CLI, and removed icons whose licences I could not verify.

Source: [cathrynlavery/diagram-design](https://github.com/cathrynlavery/diagram-design/tree/dc1ace4/skills/diagram-design) by Cathryn Lavery (MIT), reviewed at dc1ace4. Not hosted here.

### Systematic debugging

Skill · Curated · Debugging · updated 2026-10-01. Details: https://mikereams.com/ai#systematic-debugging

Finds the root cause before touching code: reproduce, trace back to the source, form one hypothesis at a time, then fix.

What you get: A root cause with the evidence for it, and a fix at the source instead of a patch where the symptom showed.

- I dropped the evaluation fixtures and a shell script that ran an unscoped test command.

Source: [obra/superpowers](https://github.com/obra/superpowers/tree/8ca22db/skills/systematic-debugging) by Jesse Vincent (MIT), reviewed at 8ca22db. Not hosted here.

### Verification before completion

Skill · Curated · Review & QA · updated 2026-10-01. Details: https://mikereams.com/ai#verification-before-completion

No 'done', 'fixed' or 'passing' without fresh evidence: run the check, read the output, then make the claim.

What you get: Every completion claim backed by a command run in the same session and its output.

- Unchanged. Text only, no scripts.

Source: [obra/superpowers](https://github.com/obra/superpowers/tree/8ca22db/skills/verification-before-completion) by Jesse Vincent (MIT), reviewed at 8ca22db. Not hosted here.

### Test-driven development

Skill · Curated · Review & QA · updated 2026-10-01. Details: https://mikereams.com/ai#test-driven-development

Write the failing test, watch it fail for the right reason, write the least code that passes, then refactor.

What you get: New behaviour that arrives with a test that failed without it.

- Wording edits only: names and one cross-reference.

Source: [obra/superpowers](https://github.com/obra/superpowers/tree/8ca22db/skills/test-driven-development) by Jesse Vincent (MIT), reviewed at 8ca22db. Not hosted here.

### Intended vs implemented

Skill · Curated · Review & QA · updated 2026-10-17. Details: https://mikereams.com/ai#intended-vs-implemented

Compares what an app's docs say it does with what the code actually enforces, and cites both sides for every gap.

What you get: A list of gaps between documented intent and the code, each with the doc line, the code line and who could exploit it.

- I run it at the end of each milestone, so that 'accepted' means the spec and the code agree.

Source: [phuryn/pm-skills](https://github.com/phuryn/pm-skills/tree/07b34f6/pm-ai-shipping/skills/intended-vs-implemented) by Paweł Huryn (MIT), reviewed at 07b34f6. Not hosted here.

### Pre-mortem

Skill · Curated · Planning · updated 2026-10-17. Details: https://mikereams.com/ai#pre-mortem

Imagines the plan has already failed and works back: real threats, paper tigers and the elephants nobody mentions.

What you get: A ranked list of what is most likely to sink the plan, with the mitigations worth doing now.

- Cheap to run on a milestone plan before I approve it.

Source: [phuryn/pm-skills](https://github.com/phuryn/pm-skills/tree/07b34f6/pm-execution/skills/pre-mortem) by Paweł Huryn (MIT), reviewed at 07b34f6. Not hosted here.

### Strategy red team

Skill · Curated · Planning · updated 2026-10-17. Details: https://mikereams.com/ai#strategy-red-team

Attacks a strategy or plan the way a sceptic would, and ranks the objections by the cheapest test that would settle each one.

What you get: The weakest assumptions in a plan, each with the cheapest experiment that would prove or kill it.

- Most useful where the risk is building the wrong thing well.

Source: [phuryn/pm-skills](https://github.com/phuryn/pm-skills/tree/07b34f6/pm-execution/skills/strategy-red-team) by Paweł Huryn (MIT), reviewed at 07b34f6. Not hosted here.

### Security reviewer

Skill · Curated · Security · updated 2026-10-17. Details: https://mikereams.com/ai#security-reviewer

Reviews code for security defects: injection, authentication and authorisation gaps, secrets and unsafe defaults.

What you get: Security findings ranked by severity, each with the affected code and a fix.

- I removed its penetration-testing reference, which included commands that read home directories and shell history.
- My copy can read and search code but not run commands.

Source: [Jeffallan/claude-skills](https://github.com/Jeffallan/claude-skills/tree/882ef55/skills/security-reviewer) by Jeff Allan (MIT), reviewed at 882ef55. Not hosted here.

### Skill security auditor

Skill · Curated · Security · updated 2026-08-20. Details: https://mikereams.com/ai#skill-security-auditor

Scans a skill before you install it for prompt injection, hidden text, network calls, shell execution and credential reads.

What you get: A pass or fail report on a skill folder, with each risky line flagged.

- Every skill on this page went through it, then a manual read of every file.
- Use it as a first pass, not the only gate: its curl rule misses file uploads sent with curl -F.

Source: [alirezarezvani/claude-skills](https://github.com/alirezarezvani/claude-skills/tree/aa8d778/engineering/skills/skill-security-auditor) by Alireza Rezvani (MIT), reviewed at aa8d778. Not hosted here.