Shipwright
Description
One skill to design, build, test, polish, and ship world-class software. A complete AI coding agent skill covering architecture, frontend design, security, testing, performance, accessibility, CI/CD, and production readiness.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
Shipwright ⚓
One skill to design it, build it, test it, polish it, and ship it.
Shipwright is an AI coding agent skill that covers the **complete software lifecycle** — from a rough idea to a production-ready system built to the engineering standards of Airbnb, Stripe, and Meta.
Drop it into [Claude Code](https://github.com/anthropics/claude-code) or [Cursor](https://cursor.com) and your agent gains the ability to design architecture, implement with TDD, create distinctive frontends, run exhaustive QA across every layer, harden security, optimize performance, and ship with confidence.
Why Shipwright?
Most AI coding agents are great at writing code but terrible at everything else — they skip design, ignore security, produce generic UIs, forget about accessibility, and have no concept of production readiness. You end up babysitting every decision.
Shipwright fixes this by giving your agent a structured methodology that covers everything from "I have an idea" to "it's live and bulletproof." It's the accumulated knowledge of what world-class software actually requires, distilled into a format that AI agents can follow.
What It Does
Shipwright has two modes:
🔨 BUILD MODE — For new projects
A design-first workflow that prevents the agent from jumping to code before thinking:
**Think** (failure modes, constraints, requirements) → **Architect** (domain model, service boundaries, data patterns, API strategy) → **Plan** (task breakdown with TDD, YAGNI, small commits) → **Implement** (build with craft, no AI slop) → automatically flows into Ship Mode
🚢 SHIP MODE — For taking software live
A 12-phase production-readiness audit that covers every layer:
| Phase | What the Agent Audits & Fixes |
|---|---|
| 1. Code Health | Dead code, dependencies, secrets, type safety, build warnings |
| 2. Backend & Scalability | API design, database optimization, caching, connection pooling, background jobs, data integrity, circuit breake |
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,