Solanasis Docs

claude-skills-acquisition-plan

25 min read

ARCHIVED 2026-03-23 — Superseded by ultimate-claude-code-skills-playbook.md. Archived copy at 2026-03.

Solanasis Claude Skills Acquisition Plan

Date: March 15, 2026 (updated) Purpose: Evaluate and prioritize Claude Code skills/plugins for Cowork — mapped to Solanasis operations and client delivery Status: REVIEWED & READY FOR IMPLEMENTATION Reviews completed: 4 senior reviewer passes + built-in vs third-party overlap analysis

Overlap Analysis Summary (Senior Reviewer Verified)

Already installed plugins (legal, productivity, brand-voice, cowork-plugin-management, core skills) do NOT conflict with any planned marketplace installs. All complement each other.

Skills to SKIP:

  • ❌ Security Auditor Skill — Redundant with Operations compliance-tracking
  • ❌ SEO Machine — Overlaps with Universal SEO at core; defer unless publishing pipeline needed

Everything else: APPROVED for installation. No unnecessary third-party skills found. All serve either a different layer (strategy vs execution) or a unique capability not covered by built-in plugins.

How This Document Works

  • Checkbox = Want to pull in — Check the ones we decide to install
  • Priority Ratings: P1 (install first), P2 (install soon), P3 (nice to have)
  • Verified: Each marketplace skill has been read in full to confirm actual capabilities
  • GitHub repos: Verified for maintenance status, stars, license, and actual content
  • Sources for each skill are listed so we can verify before installing

Context Window & Performance Considerations

Before we go crazy installing everything, here’s how skills affect performance:

  • Skill descriptions (the trigger text) load at session start — consumes ~2% of context window
  • Full skill content only loads when invoked — no cost until used
  • At 128K context, ~2,560 characters are budgeted for skill descriptions
  • Practical limit: 10-15 actively model-invocable skills before you start seeing “Excluded skills” warnings
  • Mitigation: Set disable-model-invocation: true for manual-only skills to save context budget
  • Cowork plugins are automatically available once installed — their skills appear in the skill menu

Pro tip: This means we should be strategic, not greedy. Install what we’ll use weekly, not “just in case” skills.

Current State: What’s Already Active

Core Skills (Built-in to Cowork)

  • docx — Word document creation/editing (comprehensive — includes TOC, headers, page numbers, letterheads, track changes)
  • pdf — PDF processing (extract text/tables, create, merge, split, forms, OCR, encrypt/decrypt)
  • pptx — PowerPoint creation/editing (templates, layouts, speaker notes, combining decks)
  • xlsx — Excel spreadsheet (formulas, formatting, charts, data analysis, .csv/.tsv support)
  • skill-creator — Create/modify/test/benchmark custom skills (includes eval framework)
  • schedule — Scheduled/recurring tasks (cron-based or one-time)

Installed Plugins (from knowledge-work-plugins marketplace)

  • legal (v1.1.0, Anthropic) — 6 skills, 7 commands, 8 MCP servers
    • contract-review (playbook-based, generates redlines, severity GREEN/YELLOW/RED)
    • nda-triage (rapid screening, routes to standard approval vs counsel review)
    • compliance (GDPR, CCPA, LGPD, POPIA, PIPEDA, PDPA, PIPL, UK GDPR — DPA review, DSR handling)
    • legal-risk-assessment (severity × likelihood matrix, 1-25 scoring, color-coded)
    • canned-responses (templates for DSR, discovery holds, vendor inquiries, NDA requests)
    • meeting-briefing (structured prep with action item tracking, integrates calendar/email/chat/docs)
    • Local config: .claude/legal.local.md for organizational playbook positions
  • productivity (v1.1.0, Anthropic) — 2 skills, 2 commands, 10 MCP servers
    • task-management (TASKS.md — Active/Waiting On/Someday/Done, visual dashboard, syncs with Asana/Linear/Jira/monday.com/ClickUp)
    • memory-management (two-tier: CLAUDE.md hot cache ~100 lines + memory/ deep storage for glossary, people, projects, context)
  • brand-voice (v1.0.0, Tribe AI) — 3 skills, 3 commands, 5 agents, 7 MCP servers
    • discover-brand (searches Notion, Confluence, Google Drive, Box, Microsoft 365, Figma, Gong, Granola, Slack)
    • guideline-generation (“We Are / We Are Not” table, tone-by-context matrix, confidence scores, saves to .claude/brand-voice-guidelines.md)
    • brand-voice-enforcement (loads guidelines, applies voice constants, flexes tone by context, validates output)
  • cowork-plugin-management (v0.2.2, Anthropic) — 2 skills
    • create-cowork-plugin (guided conversation → .plugin file with skills/commands/agents/hooks/MCP)
    • cowork-plugin-customizer (replace ~~placeholders with real values, suggest MCP connections)

TIER 1: MARKETPLACE PLUGINS — Ready to Install

These are in the anthropics/knowledge-work-plugins marketplace already on your machine. Each has been read and verified. Just needs activation.

Operations Plugin (v1.1.0, Anthropic) — 6 Skills

Why Solanasis MUST have this: This IS the core business in skill form. Every skill maps directly to fCIO/fCSIO/fCOO delivery. This should be install #1.

  • change-management — P1

    • What it actually does: 4-phase framework (Assess → Plan → Execute → Sustain) for organizational/technical changes
    • Output: Change management plan with communication timeline, stakeholder impact analysis, training plan, resistance mitigation
    • Triggers: “we’re changing”, “rolling out”, “migration plan”, “change management plan”
    • Solanasis use: Every engagement involves change — new CRM, migrated data, new processes. This structures how we guide clients through it.

  • compliance-tracking — P1

    • What it actually does: Tracks compliance against SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS frameworks
    • Includes: Control inventory mapping, audit calendar, evidence management, gap analysis
    • Output: Compliance status dashboards, gap analyses, audit prep checklists, evidence collection plans
    • Triggers: “compliance”, “audit prep”, “SOC 2”, “ISO 27001”, “GDPR”
    • Solanasis use: DIRECT service offering — security assessments and compliance tracking for SMB clients

  • process-optimization — P1

    • What it actually does: Lean-style 4-phase process (Map Current State → Identify Waste → Design Future State → Measure Impact)
    • Waste categories: Waiting, Rework, Handoffs, Over-processing, Manual work
    • Output: Before/after process comparison with improvement recommendations, estimated impact, implementation plan
    • Triggers: “this process is slow”, “streamline this workflow”, “bottleneck”
    • Solanasis use: Core to Dmitri’s zone of genius — seeing systems and improving them

  • risk-assessment — P1

    • What it actually does: Likelihood × Impact matrix (Low/Med/High → Low/Medium/High/Critical), 6 risk categories (Operational, Financial, Compliance, Strategic, Reputational, Security)
    • Output: Prioritized risk register with Description, Likelihood, Impact, Risk Level, Mitigation, Owner, Status
    • Triggers: “what are the risks”, “risk assessment”, “risk register”, “what could go wrong”
    • Solanasis use: Cybersecurity risk assessments, DR planning, vendor risk for clients

  • vendor-management — P1

    • What it actually does: TCO analysis (license + implementation + training + support + exit costs), risk assessment (financial stability, security posture, concentration risk, lock-in), performance metrics (SLA, support, uptime, features)
    • Output: Side-by-side vendor comparison matrix with recommendation, risks, negotiation leverage points
    • Triggers: “evaluate this vendor”, “compare vendors”, “RFP”, “should we renew”
    • Solanasis use: Helping clients evaluate IT vendors + managing our own partner relationships

  • resource-planning — P2

    • What it actually does: Plans allocation across People (headcount, skills, utilization), Budget (operating, project, variance), Time (timelines, dependencies, critical path)
    • Includes: Utilization targets by role type (IC 75-80%, Manager 60-70%, On-call 50-60%)
    • Output: Allocation plans, utilization dashboards, scenario analyses, staffing recommendations
    • Triggers: “resource planning”, “capacity”, “utilization”, “staffing plan”
    • Solanasis use: Managing contractor utilization, client project staffing

Sales Plugin (v1.1.0, Anthropic) — 6 Skills

Why Solanasis needs this: Growth hacking engine. Every skill is designed to work standalone with web search and get better with connectors. Perfect for a scrappy one-person sales operation.

  • account-research — P1

    • What it actually does: Company overview, recent news, hiring signals, key people, product/service analysis via web search. Supercharged with enrichment (verified emails, tech stack, org chart) and CRM (prior relationships, past opportunities)
    • Output format: Structured research brief with company overview, people profiles, recent signals, technology stack
    • Triggers: “research [company]”, “look up [person]”, “intel on [prospect]”
    • Solanasis use: Researching prospective SMB/nonprofit clients before outreach

  • call-prep — P1

    • What it actually does: Pulls company research + meeting context → generates prep brief with agenda, talking points, questions. Auto-pulls from Calendar, CRM, Email, Chat, Transcripts if connected.
    • Output: Prep brief with attendee bios, agenda, key questions, prior relationship context
    • Triggers: “prep me for my call with [company]”, “get me ready for [meeting]”
    • Solanasis use: Prep for every prospect meeting and client check-in

  • draft-outreach — P1

    • What it actually does: Research-first approach — ALWAYS researches prospect before drafting. Generates personalized email + LinkedIn message. Creates draft in inbox if Email MCP connected.
    • 3-step flow: Research (web + enrichment + CRM) → Draft (personalized opening, relevant hook, clear CTA) → Deliver (email draft + LinkedIn copy)
    • Triggers: “draft outreach to [person/company]”, “write cold email to [prospect]”
    • Solanasis use: Cold email campaigns to SMBs and nonprofits

  • create-an-asset — P1

    • What it actually does: Generates landing pages, presentation decks, executive one-pagers, workflow/architecture demos. Detects seller context from email domain, gathers prospect + audience + purpose + format context.
    • 4 phases: Context Detection → Research → Structure & Design → Build & Iterate
    • Asset types: Interactive landing pages (HTML), slide decks, executive one-pagers, workflow demos
    • Triggers: “create an asset”, “build a demo”, “make a landing page”, “mock up a workflow”
    • Solanasis use: Quick generation of proposal materials, demo environments for prospects

  • competitive-intelligence — P2

    • What it actually does: Deep competitor research → interactive HTML battlecard with clickable competitor tabs, comparison matrix, talk tracks, landmine questions
    • Output: Self-contained HTML file with dark theme, professional styling, shareable
    • Triggers: “competitive intel”, “research competitors”, “battlecard for [competitor]”
    • Solanasis use: Understanding how we compare to other MSPs, fCIOs, IT consultants

  • daily-briefing — P2

    • What it actually does: Prioritized daily brief pulling from Calendar (today’s meetings), CRM (pipeline alerts, tasks, deal health), Email (unread from key accounts), Enrichment (overnight signals). Works standalone too — just tell it your meetings and deals.
    • Output: Scannable 2-minute briefing with priorities
    • Triggers: “morning briefing”, “daily brief”, “what’s on my plate today”
    • Solanasis use: Morning standup replacement for a one-person team

Marketing Plugin (v1.1.0, Anthropic) — 4 Skills

Why Solanasis needs this: Content marketing = credibility. These skills are deep — full frameworks, not just templates.

  • content-creation — P1

    • What it actually does: Full templates and best practices for: Blog posts (with SEO structure), Social media posts (hook/body/CTA), Email newsletters (subject/preview/body/CTA), Landing pages (hero/value props/social proof/objection handling/CTA), Press releases, Case studies
    • Includes: Writing best practices by channel, headline formulas, CTA patterns, content length guidelines
    • Triggers: “write a blog post”, “draft social media”, “email newsletter”, “landing page copy”
    • Solanasis use: Already doing blog content — this systematizes the process

  • campaign-planning — P2

    • What it actually does: OAMCM framework (Objective → Audience → Message → Channel → Measure). Includes SMART objectives, audience profiling, message hierarchy (Why care → What is it → Why you → What to do), channel selection guide with budget allocation
    • Output: Campaign plan with objectives, audience profiles, content calendar, channel strategy, success metrics
    • Triggers: “plan a campaign”, “product launch”, “content calendar”, “campaign KPIs”
    • Solanasis use: Planning blog content, LinkedIn campaigns, email nurture sequences

  • competitive-analysis — P2

    • What it actually does: Full research methodology (primary + secondary sources), messaging matrix comparison, positioning analysis frameworks, content gap analysis
    • Research cadence: Deep quarterly, monitoring monthly, alerts ongoing
    • Triggers: “analyze a competitor”, “building battlecards”, “content gaps”
    • Solanasis use: Understanding the IT consulting market landscape (overlaps with sales competitive-intelligence)

  • performance-analytics — P3

    • What it actually does: Detailed metrics framework for Email (delivery rate through revenue per email), Social Media (impressions through share of voice), Paid Advertising (CTR through ROAS), SEO (organic sessions, rankings), with benchmark ranges
    • Triggers: “performance report”, “campaign results”, “channel metrics”
    • Solanasis use: Measuring what’s working across channels — grows in value as marketing matures

Customer Support Plugin (v1.1.0, Anthropic) — 5 Skills

Why Solanasis needs this: As we onboard clients, structured support becomes critical. Knowledge management is especially valuable for building SOPs.

  • knowledge-management — P1

    • What it actually does: Creates KB articles from resolved issues. Includes article type templates (How-to, Troubleshooting, FAQ, Reference, Release notes, Known issues), searchability optimization, style guide, maintenance workflow
    • Key insight: “Every good KB article reduces future ticket volume” — this builds our SOP library automatically
    • Triggers: “document this solution”, “create KB article”, “write a how-to guide”
    • Solanasis use: Building internal knowledge base AND client-facing documentation as we solve problems

  • customer-research — P2

    • What it actually does: Multi-source research methodology with tiered source prioritization (Tier 1: official docs → Tier 2: organizational context → Tier 3: external). Confidence-scored answers with source attribution.
    • Triggers: “research this customer question”, “investigate this issue”
    • Solanasis use: Researching client tech issues against vendor documentation

  • escalation — P2

    • What it actually does: Structured escalation framework: when to escalate vs handle, tiered escalation (L1→L2, L2→Engineering, L2→Product, Any→Security, Any→Leadership), structured escalation brief format
    • Triggers: “escalate this issue”, “this needs engineering attention”
    • Solanasis use: When client issues need escalation to vendors/partners

  • response-drafting — P2

    • What it actually does: Tone-adaptive response drafting: Core principles (lead with empathy, be direct, be honest, own it, close the loop), structured response format (Acknowledgment → Core Message → Next Steps → Closing), length guidelines by channel (Chat: 1-4 sentences, Email: 3-5 paragraphs max, Executive: 2-3 paragraphs)
    • Triggers: “respond to this ticket”, “draft customer response”
    • Solanasis use: Professional communication with clients during incidents

  • ticket-triage — P3

    • What it actually does: Category taxonomy (Bug, How-to, Feature request, Billing, Account, Integration, Security, Data, Performance), P1-P4 priority framework with SLA expectations, routing logic
    • Triggers: “triage this ticket”, “prioritize this issue”
    • Solanasis use: Scaling client support — more relevant when we have multiple clients and contractors

Engineering Plugin (v1.1.0, Anthropic) — 6 Skills

Why Solanasis needs this: Systems integration, data migrations, and CRM setup all involve technical work.

  • documentation — P1

    • What it actually does: Templates for README, API docs, Runbooks (with rollback + escalation path), Architecture docs (with diagrams + trade-offs), Onboarding guides. 5 principles: write for reader, start with useful info, show don’t tell, keep current, link don’t duplicate.
    • Triggers: “write docs for”, “create a README”, “write a runbook”, “onboarding guide”
    • Solanasis use: Creating client-facing technical documentation for ALL engagements

  • incident-response — P1

    • What it actually does: SEV1-SEV4 classification with response times, 5-step framework (Triage → Communicate → Mitigate → Resolve → Postmortem), communication templates, blameless postmortem format with 5 Whys
    • Triggers: “we have an incident”, “production is down”, “SEV1”
    • Solanasis use: When client systems go down — structured incident response

  • code-review — P2

    • What it actually does: 4-dimension review (Security: SQL injection/XSS/CSRF/SSRF; Performance: N+1/memory/complexity; Correctness: edge cases/race conditions/error handling; Maintainability: naming/SRP/duplication/tests)
    • Triggers: “review this code”, “check this PR”, “is this code safe?”
    • Solanasis use: Reviewing integration scripts, migration code, client custom work

  • system-design — P2

    • What it actually does: 5-step framework (Requirements → High-Level Design → Deep Dive → Scale & Reliability → Trade-off Analysis), covers data model, API design, caching, queues, monitoring
    • Triggers: “design a system for”, “how should we architect”
    • Solanasis use: Designing integration architectures for client systems

  • tech-debt — P2

    • What it actually does: 6 debt categories (Code, Architecture, Test, Dependency, Documentation, Infrastructure), scoring: Priority = (Impact + Risk) × (6 - Effort)
    • Triggers: “tech debt”, “what should we refactor”, “code health”
    • Solanasis use: Assessing client systems and recommending improvements

  • testing-strategy — P3

    • What it actually does: Testing pyramid guidance (Unit → Integration → E2E), strategy by component type (API, data pipelines, frontend, infrastructure)
    • Triggers: “how should we test”, “test strategy for”, “test plan”
    • Solanasis use: DR verification testing, migration validation

Data Plugin (v1.0.0, Anthropic) — 7 Skills

Why Solanasis needs this: Data migrations are a wedge service. Data quality, validation, and SQL skills are essential.

  • data-exploration — P1

    • What it actually does: Systematic profiling: Phase 1 (structural understanding — row count, grain, primary key, temporal range), Phase 2 (column-level profiling — nulls, distinct counts, distributions, string patterns), Phase 3 (data quality — completeness, consistency, timeliness, accuracy), Phase 4 (relationship discovery — join keys, referential integrity, patterns)
    • Triggers: “profile this dataset”, “assess data quality”, “explore this data”
    • Solanasis use: Assessing client data before migrations — “what are we actually working with?”

  • data-validation — P1

    • What it actually does: Pre-delivery QA checklist covering Data Quality (source verification, freshness, completeness, null handling, deduplication, filter verification), Calculation Checks (aggregation logic, denominator correctness, date alignment, join correctness, metric definitions), Reasonableness Checks (magnitude, trend continuity, cross-reference, order of magnitude), Presentation Checks (chart accuracy, number formatting, title clarity, reproducibility)
    • Common pitfalls covered: Join explosion, survivorship bias, Simpson’s paradox, cherry-picked time windows
    • Triggers: “QA this analysis”, “check for errors”, “validate this data”
    • Solanasis use: Validating data integrity post-migration

  • sql-queries — P1

    • What it actually does: Dialect-specific SQL reference for PostgreSQL, Snowflake, BigQuery, Databricks, SQL Server, MySQL/MariaDB. Covers date/time, string functions, arrays/JSON, window functions, CTEs, optimization patterns
    • Triggers: “write a query”, “optimize this SQL”, “translate between dialects”
    • Solanasis use: Data migration queries, CRM data extraction — Dmitri uses snake_case SQL conventions

  • data-context-extractor — P2

    • What it actually does: META-SKILL — extracts tribal knowledge from analysts to generate company-specific data skills. Bootstrap mode: discovers schemas, asks key questions, generates initial skill. Iteration mode: adds domain context.
    • Triggers: “create a data context skill”, “set up data analysis for our warehouse”
    • Solanasis use: For each client engagement — build a skill that understands THEIR data

  • data-visualization — P2

    • What it actually does: Chart selection guide (14+ chart types with when to use/avoid), Python visualization code patterns (matplotlib, seaborn, plotly), design principles (accessibility, color theory), specific code templates
    • Triggers: “create a chart”, “visualize this data”, “what chart type should I use”
    • Solanasis use: Creating data quality reports and assessment visualizations for clients

  • interactive-dashboard-builder — P2

    • What it actually does: Self-contained HTML/JS dashboards with Chart.js, dropdown filters, KPI cards, data tables. Single HTML file — no server needed. Professional styling included.
    • Triggers: “build a dashboard”, “interactive report”, “shareable HTML”
    • Solanasis use: Client-facing dashboards for security assessments, DR status, migration progress

  • statistical-analysis — P3

    • What it actually does: Descriptive stats (central tendency, spread, distribution), trend analysis, outlier detection methods (Z-score, IQR, Grubbs, DBSCAN), hypothesis testing guidance, correlation analysis
    • Triggers: “analyze distributions”, “test for significance”, “detect anomalies”
    • Solanasis use: Analyzing security assessment findings, identifying anomalies in client data

Finance Plugin (v1.1.0, Anthropic) — 6 Skills

Why: Lower priority now but relevant for compliance work and as we scale.

  • audit-support — P2
    • SOX 404 compliance, control testing, sample selection
    • Solanasis use: Aligns with compliance/assessment work
  • variance-analysis — P3
    • Financial variance decomposition with narrative explanations
  • financial-statements — P3
    • Income statements, balance sheets, cash flow with GAAP presentation
  • reconciliation — P3
    • GL-to-subledger, bank reconciliations
  • close-management — P3
    • Month-end close process management
  • journal-entry-prep — P3
    • Journal entries with debits/credits

Human Resources Plugin (v1.1.0, Anthropic) — 6 Skills

Why: Relevant as we scale the 1099 contractor model and convert to FTEs.

  • interview-prep — P2
    • Structured interview plans with competency-based questions
    • Solanasis use: Screening contractors for personability + work ethic
  • compensation-benchmarking — P2
    • Market-based compensation analysis
    • Solanasis use: Setting competitive 1099 rates, future FTE comp
  • org-planning — P2
    • Headcount planning, org design, team structure
    • Solanasis use: Planning the contractor-to-FTE pipeline
  • employee-handbook — P3
    • Policy/benefits/procedure question answering
  • people-analytics — P3
    • Workforce data analysis (attrition, engagement, diversity)
  • recruiting-pipeline — P3
    • Track recruiting pipeline stages

Product Management Plugin (v1.1.0, Anthropic) — 6 Skills

Why: Useful for structuring service offerings and client project management.

  • feature-spec — P2
    • Structured PRDs with problem statements, user stories, requirements
    • Solanasis use: Specifying client integration/CRM requirements
  • stakeholder-comms — P2
    • Audience-tailored stakeholder updates
    • Solanasis use: Client status updates, executive summaries
  • competitive-analysis — P3
    • Feature comparison matrices (overlap with marketing/sales)
  • metrics-tracking — P3
    • OKR frameworks, metric definition
  • roadmap-management — P3
    • RICE, MoSCoW, ICE prioritization
  • user-research-synthesis — P3
    • Qualitative/quantitative research synthesis

Enterprise Search Plugin (v1.1.0, Anthropic) — 3 Skills

Why: Useful for cross-platform information synthesis.

  • knowledge-synthesis — P2
    • Combine search results from multiple sources with attribution
  • search-strategy — P3
    • Query decomposition and multi-source orchestration
  • source-management — P3
    • Manage connected MCP sources

Design Plugin (v1.1.0, Anthropic) — 6 Skills

Why: Lower priority. Useful if reviewing client web assets.

  • accessibility-review — P3 (WCAG 2.1 AA auditing)
  • design-critique — P3 (usability/visual hierarchy evaluation)
  • design-handoff — P3 (developer handoff docs)
  • design-system-management — P3
  • user-research — P3
  • ux-writing — P3

Partner-Built Plugins (Require External Accounts)

Apollo Plugin — Requires Apollo.io account

  • enrich-lead — P1 (if account active) — Full contact card from name/company/LinkedIn URL
  • prospect — P1 (if account active) — Describe ideal customer in plain English, get ranked enriched leads
  • sequence-load — P1 (if account active) — Find leads and bulk-add to outreach sequences

Common Room Plugin — Requires Common Room account

  • account-research — P2 (if account active) — Signal-based company research
  • call-prep — P2 (if account active) — Meeting prep with intent signals
  • compose-outreach — P2 (if account active) — Signal-driven personalized outreach
  • contact-research — P2 (if account active) — Deep-dive on decision makers
  • weekly-prep-brief — P2 (if account active) — Weekly call planning

Slack Plugin — If using Slack for team/client comms

  • slack-messaging — P3
  • slack-search — P3

Bio-Research Plugin — Not relevant to Solanasis

  • bio-research skills — Skip entirely

TIER 2: GITHUB COMMUNITY REPOSITORIES

Requires manual setup: clone repo → add as marketplace or copy skill files into .claude/skills/

Security & Compliance

  • Trail of Bits Skills — P1

    • Source: https://github.com/trailofbits/skills
    • Verified: 3.5k stars, actively maintained (March 2026 commits), professional security firm
    • Skills included: Audit context building (line-by-line code analysis, first principles, cross-function flow), Smart contract security, agentic-actions-auditor (GitHub Actions security), burpsuite-project-parser (web security testing), entry-point-analyzer, sharp-edges
    • Honest assessment: These are CODE security focused, not IT infrastructure security assessment. Still valuable for integration/migration code review but won’t generate an SMB cybersecurity assessment report.
    • Solanasis use: Enhancing code-level security review during integration work

  • ❌ Security Auditor Skill — SKIP (Redundant)

Growth Hacking & Marketing

  • Marketing Skills Collection (coreyhaines31) — P1

    • Source: https://github.com/coreyhaines31/marketingskills
    • Verified: 12,820 stars, active maintenance, built by Corey Haines (technical marketer)
    • 32 skills across 7 categories: CRO (copywriting, design-principles, element-analysis, messaging), SEO (keyword-strategy, seo-audit, content-optimization, technical-seo), Analytics (ga4-insights, analytics-setup, data-analysis), Growth Engineering (growth-strategies, funnel-analysis, a-b-testing, user-journey), Copywriting (persuasion-copy, email-templates, landing-pages, content-strategy)
    • Includes: 52 CLI tools, 31 integration guides, MCP integrations (GA4, Stripe, Mailchimp, Google Ads, Resend, Zapier)
    • Honest assessment: This is the most comprehensive growth marketing toolkit available. May overlap with marketplace marketing plugin but goes much deeper on tactical execution.
    • Solanasis use: Scaling content marketing and lead generation — the growth hacking engine

  • Universal SEO Skill (AgriciDaniel) — P1

    • Source: https://github.com/AgriciDaniel/claude-seo
    • Verified: Active maintenance, enterprise-grade
    • 13 sub-skills: seo-audit, seo-competitor-pages, seo-content, seo-geo, seo-hreflang, seo-images, seo-page, seo-plan, seo-programmatic, seo-schema, seo-sitemap, seo-technical
    • 6 subagents: seo-content, seo-performance, seo-schema, seo-sitemap, seo-technical, seo-visual
    • Integrates: DataForSEO MCP for real-time performance data
    • Solanasis use: Ranking for “fractional CIO Boulder,” “SMB cybersecurity assessment,” etc.

  • ⚠️ SEO Machine (TheCraigHewitt) — DEFER (Overlaps with Universal SEO)

    • Source: https://github.com/TheCraigHewitt/seomachine | seomachine.io
    • Verified: Active maintenance, companion website
    • Commands: /research, /write, /rewrite, /analyze-existing, /optimize, /performance-review, /publish-draft, /article, /priorities
    • 10+ agents: Content analysis, SEO optimization, meta generation, internal linking, keyword mapping, editing, performance analysis, headline generation, CRO analysis, landing page optimization
    • Special features: AI watermark/pattern removal, filler phrase detection, WordPress direct publishing
    • Integrates: GA4, Google Search Console, DataForSEO
    • Honest assessment: Purpose-built content factory. Probably overlaps with AgriciDaniel’s SEO skill but adds publishing workflow and AI detection avoidance.
    • Solanasis use: Blog content production pipeline

Large Skill Collections (Cherry-Pick Only)

  • Alireza Rezvani Collection — P2 (cherry-pick specific skills)

    • Source: https://github.com/alirezarezvani/claude-skills
    • Verified: 177 production-ready skills, 254 Python tools, 357 reference guides, 16 agents, 17 slash commands
    • Most relevant domains for Solanasis:
      • C-Level Advisory (28 skills): CEO, CFO, CTO, VP Engineering, VP Sales, VP Marketing, VP Product, COO, CMO advisor roles + orchestration — great for fCIO/fCOO positioning
      • Compliance/Quality (12 skills): Regulatory affairs, risk assessment, compliance audit, quality assurance
      • Business & Growth (4 skills): Growth strategies, scaling, market expansion
    • Honest assessment: Massive collection but quality varies. The C-level advisory and compliance skills are most unique.

  • VoltAgent Awesome Agent Skills — P2 (reference directory)

    • Source: https://github.com/VoltAgent/awesome-agent-skills
    • Verified: 500+ skills, curated links-only directory, includes official vendor skills
    • Official vendor skills: Anthropic, Google Labs, Vercel, Stripe, Cloudflare, Netlify, Trail of Bits, Sentry, Expo, Hugging Face
    • Honest assessment: Best used as a DISCOVERY tool, not a bulk install. Browse when you need a specific capability.

SOP & Documentation

  • SOP Structure Skill (TheBushidoCollective) — P1

MSP-Specific Tools

  • Wyre Technology MSP MCP Platform — P1 (EVALUATE)
    • Source: https://mcp.wyretechnology.com/ | https://github.com/wyre-technology/msp-claude-plugins
    • What it is: MCP server (not skills) — provides TOOLS to interact with MSP platforms
    • Install: /plugin marketplace add wyre-technology/msp-claude-plugins
    • 24+ platform integrations: Autotask PSA, ConnectWise PSA, Datto RMM, NinjaOne, IT Glue, Syncro, Atera, HaloPSA, SentinelOne, Pax8, and more
    • 132+ specialized skills for ticket management, customer management, device management
    • Deployment: Hosted gateway (zero-config) OR self-hosted (free, open source)
    • Honest assessment: This is a GAME CHANGER if it works. Direct integration with the PSA/RMM tools clients already use. Need a dedicated evaluation session.
    • Solanasis use: Managing client infrastructure through their existing tools

Development Frameworks

  • Obra Superpowers — P2

    • Source: https://github.com/obra/superpowers
    • What it does: Full development methodology: Brainstorming (refine ideas before coding), Design & Planning (implementation plans, Red/Green TDD, YAGNI, DRY), Git Worktrees (isolated workspaces on new branches), Subagent-Driven Development (parallel task execution)
    • Solanasis use: When doing technical integration work

  • Agnix Linter — P3

    • Source: https://github.com/agent-sh/agnix
    • What it does: Validates SKILL.md, CLAUDE.md, AGENTS.md with 231 rules
    • Solanasis use: Quality-checking any custom skills we build

TIER 3: CUSTOM SKILLS TO BUILD

Using the skill-creator skill already installed. These are specific to Solanasis operations.

  • Security Assessment Report Generator — P1

    • What it should do: Takes findings from a security assessment, generates professional report with executive summary, risk ratings (Critical/High/Medium/Low), detailed findings with evidence, remediation roadmap with effort/impact, compliance mapping (SOC 2/ISO 27001/HIPAA/GDPR)
    • References to include: NIST CSF, CIS Controls, OWASP Top 10
    • Output: Professional .docx or .pdf report

  • Disaster Recovery Verification Workflow — P1

    • What it should do: Step-by-step DR testing process, captures test results, identifies gaps between documented plan and actual capability, generates DR verification report, tracks remediation
    • Test categories: Backup restoration, failover testing, communication plan testing, data integrity verification, RTO/RPO measurement
    • Output: DR verification report with pass/fail + gap analysis

  • Data Migration Planner — P1

    • What it should do: Source system assessment → data mapping → migration plan → validation strategy → rollback procedures. Generates migration runbook.
    • Phases: Discovery, Planning, Extraction, Transformation, Loading, Validation, Cutover
    • Output: Migration plan document + runbook

  • Client Onboarding Workflow — P1

    • What it should do: Discovery questionnaire, systems inventory, stakeholder mapping, engagement kickoff package, initial assessment scope
    • Output: Client onboarding package

  • Contractor Onboarding SOP — P2

    • What it should do: Tool access provisioning, training checklist, SOP delivery, shadowing schedule, competency verification
    • Output: Contractor onboarding checklist + training plan

  • Responsible AI Assessment — P2

    • What it should do: AI use inventory, risk classification, governance recommendations, implementation roadmap
    • References: NIST AI RMF, ISO 42001, EU AI Act requirements
    • Output: AI readiness assessment report

  • CRM Setup Playbook — P2

    • What it should do: Requirements gathering → pipeline design → custom fields → automation setup → training plan → go-live checklist
    • Output: CRM implementation plan

  • Systems Integration Assessment — P2

    • What it should do: API inventory, data flow mapping, integration health check, optimization recommendations
    • Output: Integration architecture document + recommendations

Phase 1: Core Operations & Growth Engine (Week 1)

#WhatTypeWhy First
1Operations plugin (all 6 skills)MarketplaceDirect service delivery — this IS Solanasis
2Sales plugin (all 6 skills)MarketplaceGrowth hacking engine — revenue depends on this
3Engineering: documentation + incident-responseMarketplaceClient delivery essentials

Context budget impact: ~12 skills × ~200 chars each = ~2,400 chars. Under budget.

Cross-reference: The Master Setup Plan (solanasis-cowork-master-setup-plan.md) expanded Phase 1 to 20 skills across 6 plugins (adding Marketing, Customer Support, Engineering, Data). The master plan uses Model Invocation Mapping (8 manual-only, 12 auto-invoke) to manage context budget. Follow the master setup plan for the definitive Phase 1 scope.

Phase 2: Growth Marketing & Content (Week 2)

#WhatTypeWhy
4Marketing plugin (4 skills)MarketplaceContent marketing + campaign planning
5Marketing Skills Collection (GitHub)Manual32 tactical growth skills
6Universal SEO Skill (GitHub)ManualSearch ranking for solanasis.com

Warning: Phase 1+2 = ~50+ skills. Set most GitHub skills to disable-model-invocation: true and invoke manually.

Phase 3: Data & Client Delivery (Week 3)

#WhatTypeWhy
7Data plugin (explore, validate, SQL minimum)MarketplaceData migration support
8Customer Support: knowledge-managementMarketplaceSOP library builder
9Trail of Bits Skills (GitHub)ManualCode security review
10SOP Structure Skill (GitHub)ManualContractor SOP creation

Phase 4: Custom Skills Build (Weeks 4-6)

#WhatTypeWhy
11Security Assessment Report GeneratorCustom buildClient deliverable template
12DR Verification WorkflowCustom buildClient deliverable template
13Data Migration PlannerCustom buildClient deliverable template
14Client Onboarding WorkflowCustom buildInternal process

Phase 5: Scale & Partner Integration (Month 2+)

#WhatTypeWhy
15Wyre Technology MSP platformMCPEvaluate for client tooling
16Apollo pluginPartnerWhen Apollo account active
17HR pluginMarketplaceWhen scaling contractors
18Finance: audit-supportMarketplaceWhen compliance work grows
19Alireza C-Level Advisory skillsGitHubfCIO/fCOO positioning

Installation Reference

From Existing Marketplace (Easiest)

# In Claude Code CLI:
/plugin install operations@knowledge-work-plugins
/plugin install sales@knowledge-work-plugins
/plugin install marketing@knowledge-work-plugins
/plugin install customer-support@knowledge-work-plugins
/plugin install engineering@knowledge-work-plugins
/plugin install data@knowledge-work-plugins

From GitHub Repos

# Add a marketplace:
/plugin marketplace add owner/repo
 
# For Wyre MSP tools:
/plugin marketplace add wyre-technology/msp-claude-plugins
 
# Browse and install:
/plugin

Custom Skills (Build Our Own)

  1. Use /anthropic-skills:skill-creator in Cowork
  2. Or manually create .claude/skills/skill-name/SKILL.md
  3. Test with /skill-name, iterate, verify

In Cowork Mode

Skills from installed plugins automatically appear. New plugins install through Claude Code CLI or plugin management interface.

Key GitHub Repos to Bookmark

RepositoryURLStarsLicenseMaintainedWhat It Has
Anthropic Official Skillsgithub.com/anthropics/skills91.9kApache 2.0Yes (weekly)Reference implementations
Trail of Bits Skillsgithub.com/trailofbits/skills3.5kTBDYes (March 2026)Code security auditing
Marketing Skillsgithub.com/coreyhaines31/marketingskills12.8kTBDYes32 growth marketing skills
Claude SEOgithub.com/AgriciDaniel/claude-seoActiveTBDYes13 SEO sub-skills
Alireza Skillsgithub.com/alirezarezvani/claude-skillsActiveTBDYes177 production skills
VoltAgent Skillsgithub.com/VoltAgent/awesome-agent-skillsActiveTBDYes500+ curated directory
SEO Machinegithub.com/TheCraigHewitt/seomachineActiveTBDYesContent factory + WordPress
Obra Superpowersgithub.com/obra/superpowersActiveTBDYesDev methodology framework
Wyre MSP Pluginsgithub.com/wyre-technology/msp-claude-pluginsActiveOpen sourceYes24+ MSP platform integrations
Skills Directorygithub.com/girikunche/claude-skills-directoryActiveTBDYes97 validated skills
Awesome Claude (travisvn)github.com/travisvn/awesome-claude-skillsActiveTBDYesCurated directory
Awesome Claude (Composio)github.com/ComposioHQ/awesome-claude-skillsActiveApache 2.0YesIntegration-focused directory
Agnix Lintergithub.com/agent-sh/agnixActiveTBDYesSkill validation (231 rules)

Pro Tips

  1. Marketplace plugins first — Zero friction, already downloaded, professional quality (Anthropic-built)
  2. Don’t install everything at once — Context window has real limits (~15 model-invocable skills max before degradation)
  3. Set disable-model-invocation: true on skills you’ll only invoke manually — saves context budget
  4. Custom skills > generic skills — A Solanasis security assessment skill will outperform a generic one every time. Build these in Phase 4.
  5. Skills are composable — Chain account-research + call-prep + draft-outreach as one prospecting workflow
  6. The skill description is everything — It determines auto-invocation. Bad descriptions = skills that never fire or fire wrong
  7. Test before trusting — Run each new skill through a real workflow before client delivery
  8. Wyre Technology MSP MCP could be the highest-ROI investment — direct PSA/RMM integration. Dedicate a session to evaluate.
  9. The data-context-extractor meta-skill is brilliant — for each client engagement, build a skill that understands THEIR specific data warehouse
  10. Keep this document updated — Check off skills as they’re installed, add notes on what works and what doesn’t

Decision Log

DateDecisionRationale
2026-03-12Created acquisition planSystematic approach to skill selection
2026-03-12Deep research completedVerified every marketplace skill + 12 GitHub repos

This document should be updated as skills are evaluated, tested, and installed.

Graph View