#process

A design brief and specification builder that walks you through discovery, problem and solution exploration to generate a build-ready spec, step by step.

Skills for a personal "second brain" that runs entirely on plain markdown files maintained by Claude Code

A pluggable linting tool that scans your project for committed credentials like API keys, private keys, and tokens before they hit your repo. Runs as a pre-commit hook or CI check, with built-in rules for AWS, GCP, GitHub, OpenAI, Anthropic, Slack, and more.

Bill Buxton on why sketches are the vehicle, not the destination. Foundational reading if you're trying to understand why low fidelity matters.

An open-source secrets scanner that finds, verifies, and analyzes leaked credentials across Git repos, cloud storage, Docker images, filesystems, and SaaS tools like Postman and Jenkins. Supports over 800 credential types with live API verification, so you know whether a leaked key is actually exploitable and not just a false positive.

An agent skill that audits AI-generated code for common security vulnerabilities that coding assistants tend to introduce, like hardcoded secrets, missing row-level security, client-submitted prices, and tokens in localStorage. Built for Claude Code and other Agent Skills-compatible tools, it loads only the checks relevant to your stack (Supabase, Stripe, React Native, etc.) so you're not wasting context on irrelevant rules.

The book I co-wrote with Leon Barnard and Billy Carlson. On using wireframes as a tool for thinking and collaboration, not just UI design.