kiruna-labs

Picky Skills — Security skill for Claude Code

Security community

Ultra-thorough Claude Code skills for design, security, testing, and performance audits.

How to install Picky Skills

This entry records only its repository, not the path inside it, so there is no exact command to give. Open kiruna-labs/picky-skills and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Picky Skills does

Ultra-thorough Claude Code skills for design, security, testing, and performance audits.

Alternatives in Security

Defense In Depth — Implement multi-layered testing and security best practices 98.1k ★
Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Skill Code Review — Expert multi-AI code review with inline PR comments — use for thorough quality and security analysis 2.8k ★

README

🔍 Picky Skills

**Skills and sub-agents that help run exhaustive UX, security, performance, and QA audits to ensure your coding projects are ready for primetime by spinning up dozens of parallel, deep investigations into key quality areas.**

Most audits sample a few narrow issues. Picky skills are pushing your agent to check every component, endpoint, and perspective your end users care about — and give you a detailed breakdown of triaged issues it identified so your coding agent can act on them together with you.

git clone https://github.com/kiruna-labs/picky-skills.git ~/picky-skills
cd ~/picky-skills && ./install.sh

Then in Claude Code:

> /picky-security     Extensive security audit - vulnerabilities, auth, API security, secrets, deps
> /picky-design       Extensive UI, UX, and accessibility audit
> /picky-performance  Extensive performance audit - Core Web Vitals, caching, runtime, backend, etc.
> /picky-tester       Black-box QA from over 10 different user perspectives using Chrome Dev tools or Playwright
> /picky-landingpage  SEO audit including conversion optimization, copy, social proof, pricing, etc.

30-Second Demo

Demo for /picky-tester which spins up >10 different testing personas that use your app using Chrome Dev tools and log any issues the find along the way.

https://github.com/user-attachments/assets/506677b0-32fa-435b-9e88-ac9b979a3722

Here's what a picky audit actually produces (abbreviated example for /picky-design audit):

📊 DESIGN AUDIT — acme-dashboard
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
Design Health Score: 61/100

COLORS
  Found: 47 unique color values across 23 files
  In design tokens: 12
  Hardcoded/arbitrary: 35 ❌
    src/components/Header.tsx:45 → #3b82f6 (not in palette)
    src/pages/Dashboard.tsx:123 → rgba(0,0,0,0.5) (use shadow token)
    src/components/Card.tsx:18 → #ef4444 (use --color-error)

BUTTONS
  Found: 34 instances across 14 files
  Using design system variants: 22 ✅
  Missing