Dev Companion — Security skill for Claude Code
Reusable Claude Code skills: project memory, knowledge graph, code reuse, clean readable code, test-before-edit with security testing, C#/SQL/Razor/JS experts, Git/TFS, analytics.
How to install Dev Companion
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open gulshankundnani/dev-companion and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Dev Companion does
Reusable Claude Code skills: project memory, knowledge graph, code reuse, clean readable code, test-before-edit with security testing, C#/SQL/Razor/JS experts, Git/TFS, analytics. Auto-loads only what each task needs to save tokens.
Alternatives in Security
- Skills Audit Report — Date: 2026-02-15 Auditor: Automated Skill Quality Audit Scope: Recently added skills in business-growth/, fina 5.3k ★
- Maestro Knowledge — Intent-driven knowledge-store and Run knowledge lifecycle management — audit/prune, stage candidates (with sig 530 ★
- Perplexity Super Skills — Complete collection of 12 Perplexity Computer Super-Skills merging Perplexity + Claude Code capabilities acros 346 ★
README
Dev Companion — reusable skills for Claude Code
A shareable, versioned set of Claude Code skills that make Claude work like a disciplined senior engineer on **any** project: it loads per-project memory, runs a preflight checklist, understands the architecture through a knowledge graph, reuses existing code, asks before editing, writes clean tested code, documents, handles Git/TFS, and learns from corrections.
Packaged as a **plugin marketplace** with five plugins, so teams install only what they need and get updates with one command.
Install
**Windows (PowerShell)**
.\install.ps1 # core + dotnet + ui
.\install.ps1 -Plugins companion-core,companion-dotnet,companion-guard
**macOS / Linux / Git Bash**
./install.sh
**Manually inside Claude Code**
/plugin marketplace add D:\ClaudeSkills (or a Git URL — see Sharing)
/plugin install companion-core@dev-companion
/plugin install companion-dotnet@dev-companion
/plugin install companion-ui@dev-companion
No plugin support? `.\install.ps1 -Mode Skills` copies the skills into `~/.claude/skills` (or `-Scope Project` for one repo). Hooks aren't installed in that mode.
Use
| You say / type | What happens |
|---|---|
/companion-core:workflow + your task |
Full sequenced workflow (below) |
| "Initialise project memory" | Creates .claude/knowledge/ in the repo, scans architecture |
| "What uses the Orders table?" | Answers from the knowledge graph, then opens only the relevant files |
| "Remember that we always use Dapper here" | Saved to this project's profile (or global — it asks) |
| "Retro" / "learn from this" | Lessons recorded and promoted across projects |
You don't need to name skills: a prompt hook in `companion-core` matches each request. Requests that change code load the matching expert (for example "add a column to Orders" loads the C# and SQL experts); questions only get
Related Skills
Claude Code Dev Agents
A comprehensive collection of specialized Claude Code subagents for software development lifecycle. Domain-agn
Hardware Compliance Handbook
AI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers -
Locallensedreview
Multi-angle code audit of local changes. Fans out parallel read-only lens agents (correctness, tests, standard
Hunt
Start hunting on a target — loads scope, reads disclosed reports, picks best attack surface based on tech stac
Lean Code.SKILL
Use automatically whenever writing, changing or reviewing code (own work or an agent's PR): tests first, reuse
Run Co 1 Platform Audit
Run Track Co1: Platform Health Audit — sixth-grade readable playbook for community
Related Agents
Curator
(/auto) Maintain active research-tree memory: absorb reviewed evidence, keep graph/state/provenance coherent,
Arckit Gov Reuse
Use this agent when the user wants to discover reusable UK government
Taint Flow Analyst
Traces attacker-controlled data from sources (intents, deep links, WebView bridges, IPC, network/push payloads