CLAUDE CODE PLUGIN

CTO Toolkit

24 skills covering the full software engineering lifecycle. From sprint planning to production incident response. Built for CTOs, Staff Engineers, and Tech Leads who ship production software.

24
Skills
21
Reference Docs
10K+
Lines of Content
MIT
License
View on GitHub Explore Skills
// install
# Add marketplace
/plugin marketplace add camilooscargbaptista/cto-toolkit
# Or install directly
claude plugin install cto-toolkit@camilooscargbaptista/cto-toolkit
// skills

Everything you need to ship with confidence

Skills activate automatically based on context. Ask Claude to review code, plan a sprint, write a PR description, or debug a performance issue — the right skill kicks in.

</> Code Review 6 skills
code-review
Router that detects technology context and delegates to the right specialist. Falls back to comprehensive general review.
ROUTERREAD-ONLY
backend-review
Node.js, Java, Clean Architecture, SOLID, microservices, messaging, payments.
NODEJAVACLEAN ARCH
frontend-review
Angular, React, TypeScript, accessibility, performance, CSS architecture.
ANGULARREACTA11Y
flutter-review
Dart, BLoC/Cubit, widget architecture, platform channels, performance.
FLUTTERDARTBLOC
security-review
OAuth2, JWT, RBAC, API security, LGPD/GDPR, payment security.
OAUTH2JWTPCI
ux-review
Nielsen heuristics, mobile UX, accessibility, design systems.
UXA11YMOBILE
{} Architecture & Patterns 3 skills
design-patterns
SOLID, Clean Architecture, DDD, GoF patterns, refactoring guidance with TypeScript examples.
SOLIDDDDGOF
adr
Architecture Decision Records using Michael Nygard format with status tracking.
ADRDECISIONS
tech-spec
Technical specifications and RFCs with 12-section template. Design docs that drive alignment.
RFCSPECDESIGN DOC
⚙ DevOps & Infrastructure 4 skills
devops-infra
Docker, AWS (ECS, Lambda, S3, RDS), CI/CD, Kafka, SQS/SNS, monitoring.
DOCKERAWSCI/CD
terraform-iac
Terraform modules, state management, security, CI/CD pipelines for infrastructure.
TERRAFORMHCLIAC
observability
SLOs/SLIs, alerting strategy, dashboards, OpenTelemetry, on-call best practices.
SREOTELSLO
cost-optimization
FinOps, right-sizing, pricing models, cloud waste elimination, budget governance.
FINOPSAWSCOST
⚠ Quality & Security 3 skills
testing-strategy
TDD, BDD, unit/integration/E2E testing, coverage guidelines, QA processes.
TDDBDDJEST
pentest
OWASP Top 10, PTES methodology, vulnerability reporting, STRIDE threat modeling.
OWASPSTRIDEPENTEST
systematic-debugging
Scientific debugging method, binary search, production debugging, flaky test diagnosis.
DEBUGBISECTROOT CAUSE
♻ Database & Performance 3 skills
database-review
Schema design, migrations, EXPLAIN plans, indexing, connection pools, NoSQL patterns.
POSTGRESMONGOREDIS
performance-profiling
Node.js/Java/Flutter profiling, load testing, caching strategies, flame graphs.
PROFILINGK6CACHE
api-documentation
OpenAPI/Swagger specs, REST design guidelines, documentation quality checklists.
OPENAPISWAGGERREST
★ Process & Management 5 skills
sprint-planning
User stories (INVEST), estimation, RICE prioritization, quarterly roadmaps.
SCRUMRICEROADMAP
git-flow
Branching strategies, Conventional Commits, PR guidelines, semantic versioning.
GITSEMVERCOMMITS
pr-description
Generates senior-level PR descriptions with risk assessment and review guidance.
PRGITHUBREVIEW
one-on-one
1:1 prep, SBI feedback framework, career development conversations, skip-levels.
1:1FEEDBACKCAREER
incident-postmortem
Blameless postmortems, runbooks, severity classification, escalation procedures.
INCIDENTBLAMELESSSRE
// architecture

Built with progressive disclosure

Skills load lean SKILL.md files into context. Deep-dive references load on demand, saving tokens without sacrificing depth.

</>
Read-Only Reviews
Review skills use allowed-tools to restrict to read operations only. No accidental code modifications during analysis.
{ }
Progressive Disclosure
Lean SKILL.md (~100 lines) with 21 deep-dive reference files loaded on demand. 63% less context usage.
$_
Utility Scripts
3 shell scripts for pre-review checks, secret scanning, and diff generation. Executed without loading into context.
→
Smart Routing
code-review detects technology context and delegates to the right specialist. .dart files route to flutter-review, .ts backend to backend-review.
⚖
Full Lifecycle
From sprint planning to production incident response. Planning, coding, reviewing, deploying, monitoring, and managing — all covered.
⚙
Senior-Level Content
10,000+ lines of production-tested patterns, checklists, and templates. Written by a CTO with 19+ years of experience.
// tech coverage

Stack Coverage

Node.js Java NestJS Spring Boot Angular React Flutter Dart TypeScript Docker AWS Terraform GitHub Actions PostgreSQL MongoDB DynamoDB Redis Kafka SQS/SNS OpenTelemetry Prometheus Grafana