Search skills/

jezweb claude-skills Claude skills

A marketplace of Claude Code plugins for web builders: Cloudflare apps, design assets, frontend, dev tools, writing, Shopify and WordPress.

jezweb/claude-skills 63 skills Design & frontendWriting & editingPlanning, TDD & debugging
Our verdict Recommended with caveats

Useful, practical recipes you can install selectively, but quality varies across 60-odd skills and several need your own API keys or accounts.

3/5 Depth expertise shipped ! Security Broad access 20d Maintenance Updated 20 days ago 1.1K Adoption stars OK License MIT, commercial OK

What jezweb claude-skills does

This repo is a Claude Code plugin marketplace, so you install it plugin by plugin (for example /plugin install dev-tools@jezweb-skills). Each skill is a recipe meant to produce something tangible. The README lists ten plugins: cloudflare (a Vite + React + Workers app scaffold), shopify and wordpress (API setup, products, content, Elementor), frontend (Tailwind v4 theming, shadcn/ui, landing pages, React patterns, design review, React Native), design-assets (colour palettes from one hex, favicons, SVG icon sets, image processing, AI image generation), web-design (local business SEO and JSON-LD), writing (AU/US/UK/NZ business English, resumes, proposals, award applications), social-media, dev-tools and integrations.

dev-tools is the biggest: project-health and project-docs, a UX audit/compare/extract family, github-release, git-workflow, codex-review, vitest setup, roadmap and a phased delivery skill. integrations covers Google Workspace, Google Chat, Apps Script, ElevenLabs agents, MCP server building and Stripe. Skills average about 10 KB; some carry references, asset templates or small scripts, and an archive/ folder keeps retired Cloudflare skills. The repo has no evals. The README notes that the author's planning and verification skills live in a separate framework, dotjez.

Good for

  • Freelancers and small agencies building Cloudflare, Shopify or WordPress sites
  • Picking individual plugins for design assets, UX audits or release notes
  • Anyone who wants regional business-English style guides

Not for

  • People wanting one tightly focused methodology
  • Teams that need non-Claude agents, since several skills are marked claude-code-only

What's inside depth 3/5

63 skills averaging 10 KB, many with reference files and templates and a few scripts, but no tests or evals for the skills.

Skills
63
Reference docs
66
Scripts
24
Tests / evals
0
Templates
55
Avg SKILL.md
9.9 KB

Counted from the repository file tree. How we score depth.

Dependencies and costs

  • Cloudflare account and wrangler for the cloudflare plugin
  • Gemini or OpenAI API key for ai-image-generator
  • ElevenLabs, Stripe, Shopify or Google Workspace credentials for the matching integrations
  • WP-CLI for the WordPress skills

Security review

Broad access

This skill asks for more access than most, or sends data to another service. That is usually a design choice rather than bad intent, but you should know before you install it.

  • Pre-approves broad shell commandsallowed-tools is "*" (every tool pre-approved); the same wildcard is set in the dev-tools commands project-health, release, team-update, ux-audit, ux-compare and ux-extract, and in an archived tanstack-start command.plugins/dev-tools/skills/team-update/SKILL.md:5
  • Pre-approves broad shell commandsallowed-tools lists plain Bash (unrestricted shell); the same is true of ai-image-generator, fork-discipline, project-docs, design-loop, design-system, react-native, stripe-payments, and archived cloudflare-api and db-seed.plugins/dev-tools/skills/roadmap/SKILL.md:4

A broad set of workflow skills for Claude Code (dev tools, Cloudflare, frontend, integrations, WordPress, Shopify, writing) with no standalone scripts, only code templates. Many skills pre-approve everything (allowed-tools "*") or unrestricted Bash, roadmap runs commits and deploys phase after phase without asking, project-health writes permission allow-lists to your settings, and nemoclaw-setup pipes vendor installers into bash and uses sudo. Credentials are read from your environment and sent only to the matching service.

Worth knowing

  • Changes files outside your projectWrites .claude/settings.local.json permission allow-lists (presets include broad Bash patterns, a Linux preset has Bash(sudo *)) and can write ~/.claude/rules/*.md, after a single yes/no confirmation.plugins/dev-tools/skills/project-health/SKILL.md:142
  • Installs with curl | shInstalls NVIDIA NemoClaw with curl -fsSL https://nvidia.com/nemoclaw.sh | bash, OpenShell with an install.sh from raw.githubusercontent.com (main branch), and Node via curl ... nodesource ... | sudo -E bash -.plugins/integrations/skills/nemoclaw-setup/SKILL.md:49
  • Installs packages or toolsRuns npm install -g @googleworkspace/cli and npx skills add googleworkspace/cli -g --agent claude-code --all, which installs 90+ skills into ~/.claude/skills/; nemoclaw-setup also adds systemd services with sudo.plugins/integrations/skills/gws-install/SKILL.md:28
  • Runs remote code at an unpinned versionInstalls and runs @googleworkspace/cli and its skill pack from npm without version pins.plugins/integrations/skills/gws-setup/SKILL.md:184
  • Relies on a CLI or package we could not reviewRelies on the OpenAI Codex CLI, the Google Workspace CLI (gws), Shopify CLI, WP-CLI, wrangler and gh; the review prompt and code are sent by those tools to their own services.plugins/dev-tools/skills/codex-review/SKILL.md:28
  • Makes network requestsDocuments curl calls to api.cloudflare.com with the user's Cloudflare token (DNS, email routing, cache purge, custom hostnames); other skills call Google, OpenAI, ElevenLabs, Stripe, Shopify and WordPress APIs with the user's own keys for those services.archive/plugins/cloudflare/skills/cloudflare-api/SKILL.md:53
  • Needs an API key for its own serviceUses GEMINI_API_KEY and an OpenAI key from the environment, each sent only to its own provider's image API.plugins/design-assets/skills/ai-image-generator/SKILL.md:48
  • Changes files outside your projectAsks the user to paste or copy a Google OAuth client_secret.json and writes it to ~/.config/gws/client_secret.json.plugins/integrations/skills/gws-install/SKILL.md:40

What we checked

The repository (266 files) on Oct 29, 2026. Not a full review: we read 13 of 42 code files; it relies on code outside the repository: npm packages @googleworkspace/cli and the googleworkspace/cli skill pack (installed by gws-setup / gws-install); NVIDIA nemoclaw.sh and OpenShell install.sh (fetched by nemoclaw-setup); OpenAI Codex CLI, Shopify CLI, WP-CLI, wrangler (used by individual skills).

NVIDIA SkillSpector static scan: 371 pattern hits (Data Exfiltration 106, MCP Rug Pull 97, Privilege Escalation 57, Excessive Agency 23, Supply Chain 22, Tool Misuse 20). The CRITICAL tainted-flow hit is a FastMCP template that downloads an OpenAPI spec from a URL given in an environment variable; it is example code for users building their own servers. The curl/rm -rf/DELETE/.env hits are documentation examples (Cloudflare API curls, wrangler cache clean, .gitignore templates). The repository's .claude/settings.json holds a UserPromptSubmit hook pointing at a path on the author's own machine (/Users/marcuswebb/...), which does not exist elsewhere and is not part of the installable plugins.

A review, not a certification. Skills change after we check them — read the files before installing.

License

MIT — commercial use allowed.

Can it run unattended?

Not really. Skills are single recipes that ask the user questions; one dev-tools skill describes phased app delivery, but there is no loop or evals to keep it on track unattended.

Alternatives to jezweb claude-skills

Vercel Agent Skills

vercel-labs/agent-skills

Vercel's official 9-skill pack: React and Next.js performance rules, composition patterns, UI and writing review, React Native, deploy and cost audit.

Recommended Broad access Depth 3/5

Full-Stack Dev Skills (Jeffallan)

Jeffallan/claude-skills

67 role-based developer skills for languages, frameworks, DevOps and security, each with reference files, plus 9 Jira/Confluence workflow commands.

Recommended Check first Depth 3/5

Claude Skills (alirezarezvani)

alirezarezvani/claude-skills

A 400+ skill library of agents, personas and commands for engineering, marketing, product, compliance and C-level work, mirrored for 13 coding agents.

With caveats Check first Depth 3/5

daymade Claude Code Skills

daymade/claude-code-skills

A marketplace of about 120 skills from one author: skill-creator fork, audio and transcription tools, Claude Code and Codex ops, research, QA and more.

With caveats Broad access Depth 4/5

FAQ

What is jezweb/claude-skills?

It is a Claude Code plugin marketplace by jezweb with ten plugins of practical, output-producing skills for web builders: Cloudflare apps, Shopify, WordPress, frontend, design assets, writing, social posts, developer tools and integrations.

How do I install jezweb/claude-skills?

Add the marketplace with /plugin marketplace add jezweb/claude-skills, then install what you need, for example /plugin install cloudflare@jezweb-skills or /plugin install dev-tools@jezweb-skills. Skills then trigger from natural language.

Is jezweb/claude-skills safe?

We saw no hidden network calls or credential harvesting; the scanner hits are examples inside documentation. Review project-health before running it, because it proposes wide permission allow-lists for your settings.local.json.

jezweb claude-skills vs Vercel agent-skills?

Jezweb's set is a broad grab bag for freelancers across Cloudflare, Shopify, WordPress, writing and UX audits. Vercel's is the official collection from Vercel, so compare the skill lists against what you actually build.

Sources: GitHub repository (stars, license, file tree, last push Oct 9, 2026). Review based on the README and SKILL.md files as published.