python trading toolkit
by Timoranjes
Turn a positions CSV across US, HK and A-share tickers into currency-correct P&L, and get your agent to compute risk and signals in code instead of guessing.
I build the skills I wished existed when my AI agent broke things at 2am. 100 skills across code quality, security, DevOps, and trading — each one born from a real failure mode: agents stuck in edit loops, PRs that "pass tests" but don't work, pipelines bleeding $847/month on cache misses, dependencies with CVEs four layers deep. Every skill ships with runnable scripts and honest limitations. Free versions solve the core problem in-session. Pro versions add the automation layer — CI gates, repo-wide scans, and scripts you can run again without re-prompting. 582+ uses and counting.
by Timoranjes
Turn a positions CSV across US, HK and A-share tickers into currency-correct P&L, and get your agent to compute risk and signals in code instead of guessing.
by Timoranjes
Your AI coding agent starts strong — remembers every architectural decision, every constraint, every file it touched.
by Timoranjes
A junior dev pushes a workflow file with `uses: some-org/deploy-action@main` and `secrets.GITHUB_TOKEN` exposed.
by Timoranjes
Build Fama-French Factor Exposures, Run Efficient Frontier Optimization, and Decompose Portfolio Risk with VaR, CVaR, and Correlation Clustering
by Timoranjes
Get React Native code from your agent that uses native primitives, typed navigation and fast lists, and audit existing screens for web habits with a bundled script.
by Timoranjes
Your AI agent has access to 12 tools, reads from a vector database, and executes shell commands.
by Timoranjes
You update your `code-review-checklist` SKILL.md to add a new check. It passes your manual test — "looks good.
by Timoranjes
Scan Every useEffect, useMemo, useCallback, and Custom Hook for Anti-Patterns That Cause Memory Leaks, Infinite Re-Renders, and Ghost Data
by Timoranjes
You merge a feature branch and hit 14 conflicts across 6 files.
by Timoranjes
Your CI dashboard shows 78% line coverage. Your CTO calls it "good enough.
by Timoranjes
Catch your agent repeating the same failed edit or command and force a change of approach before it burns your tokens, with three detection layers and a logged escalation.
by Timoranjes
Split a large task across specialist agents with defined roles, file-isolated workspaces and written handoffs, using Gatekeeper, Pipeline, Swarm or Supervisor team patterns.
by Timoranjes
Your OpenAPI spec says `GET /users/{id}` returns a `User` object with `name`, `email`, and `role`.
by Timoranjes
Stop shipping debt with every feature — get a severity-rated inventory of every code smell, stale dependency, and untested path in minutes
by Timoranjes
Scan your dependency manifests for outdated, vulnerable and deprecated packages and get a prioritized upgrade list before you start work or merge a version bump.
by Timoranjes
Audit SKILL.md files for command injection, prompt injection, data exfiltration, and credential theft before installation.
by Timoranjes
Scan SKILL.md files, system prompts and agent configs for prompt injection, unsafe tool use and exposed secrets before you publish or deploy them.
by Timoranjes
Every coding agent stores skills in a different directory. Claude Code reads `~/.claude/skills/`, Cursor reads `.
by Timoranjes
Generate CLAUDE.md, AGENTS.md and Cursor rules for a new project from its real stack, or convert your rules between formats when you switch coding agents.
by Timoranjes
Find the implicit any, unsafe casts, @ts-ignore directives and missing null checks that slip past a strict tsconfig, with fixes ranked by risk.
by Timoranjes
Audit frontend code against WCAG 2.2 AA and get violations ranked by severity, each with a concrete fix your agent can apply.
by Timoranjes
Find the missing variable, leaked secret or version mismatch behind "works locally, fails in production" by auditing .env files, shell profiles and CI config.
by Timoranjes
Keep a long coding session on track: when the agent's context starts to drift it re-anchors on your goals and decisions, so you don't have to restart.
by Timoranjes
Lint docker-compose.yml for hardcoded secrets, missing healthchecks and resource limits, outdated images and insecure networks before you run it in production.
by Timoranjes
Measure how many tokens your AGENTS.md or CLAUDE.md spends on every session and trim it without losing the rules your agent actually needs.
by Timoranjes
Make your agent write the tests first: a hard gate blocks implementation until failing tests define the behavior, edge cases included.
by Timoranjes
Make your agent run build, tests, lint, git diff and a runtime check before it says done, so broken code is not reported as finished.
by Timoranjes
Audit a Dockerfile for root users, bloated images and security anti-patterns, and get severity-scored findings plus a hardened replacement.
by Timoranjes
Generate, audit and validate .gitignore files for your stack, and catch tracked .env and secret files before they reach your repository history.
by Timoranjes
Set a token budget per task, watch spend as the agent works and compress context before a one-line change turns into a 180K-token bill.
by Timoranjes
Make your agent analyze the existing architecture and apply SOLID principles before it writes code, so new features fit your codebase instead of piling on.
by Timoranjes
Generate Playwright tests that hold up: page objects, resilient selectors and anti-flake patterns, instead of 12 brittle tests that all hit the same path.
by Timoranjes
Scan your codebase for hardcoded strings, missing translation keys, locale formatting gaps and RTL issues so you know it is ready before you enter a new market.
by Timoranjes
Find out why your skill never triggers: inspect, rewrite and test the SKILL.md description with trigger phrases and a token budget, using a local script.
by Timoranjes
Find out why your agent ignores your CLAUDE.md or Cursor rules: audit them for conflicts, ambiguity and attention overload, then fix the cause.
by Timoranjes
Turn a slow SQL query into a faster one: read the execution plan, find the missing index and rewrite it for Postgres, MySQL or SQL Server.
by Timoranjes
Paste in pytest, Jest or Go test output and get failures grouped by root cause, with a prioritized fix list instead of 15 separate red tests.
by Timoranjes
Catch broken links, missing sections, and formatting disasters before your README goes public.
by Timoranjes
Audit a PR diff or your staged changes for security issues, secrets and code smells, and get a structured report before you merge.
by Timoranjes
Run a 20-point audit on your SKILL.md to find why agents skip your instructions, then fix the wording so the skill triggers and gets followed.
by Timoranjes
Move beyond "this looks good on today's snapshot" with walk-forward backtesting, CVaR risk analysis, constrained optimization, and self-contained HTML reports.
by Timoranjes
Give your agent backoff, retries, circuit breakers and error handling for flaky APIs, so a 429 or outage does not burn tokens in a retry loop.
by Timoranjes
Stop your agent rewriting whole files for a small fix: it makes the minimal edit, keeps your git diff small and leaves the rest of the module alone.
by Timoranjes
Maintain structured context across agent restarts so your agent remembers decisions, progress, and next steps.
by Timoranjes
Audit Go code for goroutine leaks, concurrency bugs, slice and allocation waste, and modern Go 1.21+ idioms that go vet and staticcheck do not flag.
by Timoranjes
Audit Python code against PEP 8, PEP 484 type hints, modern Python idioms, security vulnerabilities, and performance pitfalls.
by Timoranjes
Audit K8s YAML manifests for security vulnerabilities, missing resource limits, and reliability gaps before deployment.
by Timoranjes
Find unused imports, functions, variables, unreachable code and leftover debug statements across Python, JS/TS, Go, Rust, Java and C++, ranked by severity.
by Timoranjes
A pull request lands with a new data-access query. It passes all tests because the test database has 50 rows.
by Timoranjes
Map an unfamiliar codebase: architecture overview, verified module relationships and a risk register, so a new developer or an AI agent can start work in a day.
by Timoranjes
Cut the tokens your CLAUDE.md burns every session and stop your agent forgetting between sessions, using a layered context design.
by Timoranjes
Yesterday you spent 20 minutes correcting your agent's import paths. Today it uses the wrong imports again.
by Timoranjes
Apply affiliate link rules to articles: FTC disclosures, Amazon ASIN link format, broker risk warnings and SaaS vendor links, with a compliance check before you publish.
by Timoranjes
Write Godot 4 GDScript the modern way: typed signals, composition, state machines and no Godot 3 leftovers, for player controllers, inventories and save systems.
by Timoranjes
Audit a third-party agent skill for prompt injection, data exfiltration and malicious code before you install it or approve it for your team.
by Timoranjes
You're staring at a Next.js 13 → 14 upgrade, a Django 3.2 → 4.2 jump, or an Express → Fastify rewrite.
by Timoranjes
Generate a structured changelog and release notes from git history: Conventional Commits parsing, grouping by type, SemVer bump detection and Markdown or JSON output.
by Timoranjes
Build, test and harden regular expressions: catch ReDoS-prone patterns and check behavior across PCRE, JavaScript, Python and Go engines.
by Timoranjes
Write PR descriptions that reviewers actually read, generate release notes from merged PRs (not memory), maintain a changelog that stays in sync, and apply semantic versioning consistently.
by Timoranjes
Lint a SKILL.md against a 7-category quality framework to find routing, structure and reuse problems before you publish, with concrete rewrites for each failure.
by Timoranjes
Have your agent research a stock like an analyst: pull filings and market data from free APIs and compute key metrics into a report. Research tooling, not investment advice.
by Timoranjes
Research Chinese-language sources your agent normally cannot reach: Baidu, WeChat and Xiaohongshu, with GBK encoding and mobile-first pages handled.
by Timoranjes
Generate CI/CD pipelines for GitHub Actions, GitLab CI or CircleCI with security scanning and Docker builds, or move an existing pipeline between platforms.
by Timoranjes
Turn a branch of commits into a PR description, GitHub release notes and a Keep a Changelog entry using Conventional Commits.
by Timoranjes
Review your Terraform and OpenTofu HCL for public S3 buckets, over-provisioned instances, local state files, missing IAM boundaries, and 40+ provider-specific checks across AWS, Azure, and GCP.
by Timoranjes
Find and fix tests that pass locally but fail randomly in CI by tracing them to timing, shared state, random data or environment differences.
by Timoranjes
Check whether your agent's tests would catch a real bug: run mutation testing per language, enforce a kill-rate gate in CI and catch test-substitution tricks.
by Timoranjes
Check an agent's claim that the work is done: re-run the tests and lint, and use deletion probes to expose tests that still pass without the feature code.
by Timoranjes
Get a stuck agent unstuck: a four-step routine to diagnose edit loops, instruction decay and hallucinated APIs, then verify the recovery.
by Timoranjes
Build institutional-quality trading infrastructure: walk-forward backtests, real-time risk monitoring, broker API integration, and portfolio optimization in Python.
by Timoranjes
Make every service your agent builds debuggable from day one: structured logging, correlation IDs and error boundaries added before it ships.
by Timoranjes
Automate Google NotebookLM from the terminal — create notebooks, add sources, generate podcasts, and chat with your research
by Timoranjes
Draft readable release notes from pasted Conventional Commits in chat. Free = one-shot draft; Pro = git-range parse, SemVer, CI export.
by Timoranjes
Schema lint, replay fixtures, CI gate, and repo-wide MCP tool-surface scan. Free teaches the checklist; Pro automates the merge gate.
by Timoranjes
Catch bad tool calls before they corrupt state — pre-call contracts, failure taxonomy, and when to stop vs retry. For MCP and multi-tool agents.
by Timoranjes
Catch breaking API changes, spec drift and lint errors in one offline CI gate, with a PR-ready report and no npm, Go or Java installs.
by Timoranjes
Run a skill's regression suite in one command and catch a broken SKILL.md edit before it ships, with exit codes your CI already understands.
by Timoranjes
Give your AI agent a research-first design workflow and a 13-rule audit script that fails the build on known AI design signatures.
by Timoranjes
The free version audits one file in conversation. Pro scans your whole repo, computes real contrast ratios, blocks regressions in CI, and exports a prioritized fix backlog.
by Timoranjes
Find configuration drift across a repository fleet, produce reviewable remediation artifacts, and gate CI secret coverage with machine-readable reports.
by Timoranjes
Add Detox E2E tests, WCAG accessibility checks, performance profiling, push notification architecture and offline-first data patterns to your React Native app.
by Timoranjes
Enterprise-grade security auditing: batch scan your entire skill library, map findings to OWASP LLM Top 10, generate SARIF output for GitHub Code Scanning, and auto-generate remediation patches.
by Timoranjes
The free Agent Loop Guardian teaches your agent to recognize when it's repeating itself and break out.
by Timoranjes
Catch conflicting ports, missing health checks, security anti-patterns, and orphaned volumes in your docker-compose.
by Timoranjes
Find, quantify and rank technical debt with the SaP framework, and get a data-backed refactoring report you can use to justify the sprint.
by Timoranjes
Check whether your tests verify behavior, not just lines: mutation testing and coverage thresholds for Python projects, with two scripts you can run in CI.
by Timoranjes
Audit dependencies for CVEs, license compliance and staleness across monorepos with mixed package managers, using scripts you can run in CI.
by Timoranjes
Keep long agent sessions under budget with compression strategies, token budget tracking and window templates, backed by two helper scripts.
by Timoranjes
Audit an AI agent against the OWASP LLM Top 10: prompt injection, unsafe tool permissions and RAG data leaks, with reports for SOC 2 or GDPR preparation.
by Timoranjes
The free version finds the bug. The Pro version fixes it, profiles the re-renders, and tells you what React 19 breaks.
by Timoranjes
Enterprise CI/CD validation with auto-fixer, cost estimator, maturity assessment, pre-commit hooks, and Azure DevOps support. 80+ checks across GitHub Actions, GitLab CI, CircleCI, Jenkins, and Azure.
by Timoranjes
Resolve multi-file merge, rebase and cherry-pick conflicts with semantic analysis, a conflict analyzer script and a safety verifier before you commit.
by Timoranjes
Set hard numeric thresholds for cyclomatic and cognitive complexity that your AI agent must stay under — enforced by linters and CI, not code review promises.
by Timoranjes
Review AI-generated PRs for the hallucinated APIs and silent errors that look correct but fail in production, using a structured senior-engineer checklist.
by Timoranjes
Keep an AI-assisted build on track with a structured 4-phase workflow that limits context bloat, off-track drift and mid-session restarts.
by Timoranjes
Review an AI-generated Prisma schema against 12 safety patterns so a migration cannot silently drop production data or break tenant isolation.
by Timoranjes
Automate Windows desktop applications 5-10x faster than pixel-scanning by accessing the native UI Automation tree, with image matching and OCR fallback.
by Timoranjes
Run an 8-phase pre-deploy check on env vars, secrets, dependencies, data migrations and API stability before you push to production.
by Timoranjes
Capture a note once and save it to Apple Notes, Notion, Obsidian or Bear in each app's native format, with automatic app detection.
by Timoranjes
Run ALTER TABLE on a 10-million-row table without locking writes, losing data, or spending 3 hours writing rollback scripts.