claude-code-skills

A collection of Claude Code skills for use in development projects.

Installing Skills

Choose the option that matches your situation.

Option 1 — Plugin install (personal)

Installs skills into your personal Claude Code plugin cache, making them available in all your projects.

Register the marketplace (one-time per machine):

claude plugin marketplace add https://github.com/litsec/claude-code-skills

Install whichever skills you want:

claude plugin install maven-dependency-updater@litsec-skills
claude plugin install lombok-remover@litsec-skills
claude plugin install jackson-2-to-3-migration@litsec-skills

Option 2 — Project settings file (team)

The recommended approach for teams. Commit a .claude/settings.json file to your project repository. Every developer who clones the repo gets the skills automatically — as long as they have registered the marketplace once on their machine.

Step 1 — each developer registers the marketplace once:

claude plugin marketplace add https://github.com/litsec/claude-code-skills

Step 2 — add this file to your project repository and commit it:

.claude/settings.json:

{
  "enabledPlugins": [
    "litsec-skills:maven-dependency-updater",
    "litsec-skills:lombok-remover",
    "litsec-skills:jackson-2-to-3-migration"
  ]
}

From that point on, cloning the repo is enough — Claude Code reads .claude/settings.json on startup and activates the listed skills automatically.

Option 3 — Manual shell script

Copies skills directly into a .claude/skills/ directory without using the plugin system. Useful when the marketplace is not accessible, for CI environments, or for air-gapped setups.

Install into a specific project:

./install-skills.sh -project /path/to/your/project

This copies all skills to <project>/.claude/skills/.

Install globally — skills will be available in every Claude Code project:

./install-skills.sh -global

This copies all skills to ~/.claude/skills/.

Notes

• Running install-skills.sh again will overwrite previously installed versions of the same skills.
• Claude Code picks up newly installed skills at the start of the next conversation — no restart required.
• Skills are matched by their description frontmatter field. Prompt naturally and Claude will consult the relevant skill automatically.

Skills

maven-dependency-updater

name: maven-dependency-updater
description: >
  Keep Maven POM files up to date by checking and upgrading all dependencies and plugins
  to their latest versions. Use this skill whenever the user mentions updating, bumping,
  upgrading, or checking Maven dependencies or plugins — even if they just say "update my
  POMs", "are my dependencies up to date?", "bump versions", or "check for newer versions".
  Trigger also when the user shares or references a pom.xml and asks about version currency.
  Handles multi-module Maven projects, asks before applying major version upgrades, and
  keeps a clear audit trail of every change made.

Audits and updates all <dependency> and <plugin> versions across one or more Maven POM files. Queries Maven Central for the latest stable releases, classifies each change as MAJOR / minor / patch, and asks for explicit confirmation before applying any major version bump. Supports multi-module projects, property-based versions, BOMs, and prints a full change log of every update applied.

lombok-remover

name: lombok-remover
description: >
  Scan a Java project and replace all Lombok annotations with equivalent hand-written
  Java code. Use this skill whenever the user wants to remove Lombok, de-lombok a project,
  replace Lombok annotations, migrate away from Lombok, or eliminate the Lombok dependency.
  Also trigger when the user says things like "get rid of Lombok", "expand Lombok", or
  "make Lombok explicit". Handles all common Lombok annotations (@Data, @Builder, @Value,
  @Getter, @Setter, @ToString, @EqualsAndHashCode, @RequiredArgsConstructor,
  @AllArgsConstructor, @NoArgsConstructor, @Slf4j, @With, @Accessors, etc.), updates
  POM files to remove the Lombok dependency, and preserves existing code style throughout.

Replaces every Lombok annotation in a Java project with idiomatic, hand-written Java code, then removes the Lombok dependency from all POM files. Shows a full plan of affected files before making any changes. Handles all common annotations including @Data, @Builder, @Value, @Slf4j, @With, @Accessors, @SneakyThrows, @Delegate, and all constructor/getter/setter variants. Preserves existing code style, handles edge cases like existing hand-written methods, JPA entities, @Builder.Default, and @Singular collections, and cleans up annotationProcessorPaths in the compiler plugin configuration.

jackson-2-to-3-migration

name: jackson-2-to-3-migration
description: >
  Migrate a Java project from Jackson 2 to Jackson 3. Use this skill whenever the user wants
  to upgrade Jackson, mentions jackson-databind, com.fasterxml.jackson imports, or asks about
  moving from Jackson 2.x to 3.x. Also trigger when the user shares Java/Kotlin code or build
  files (pom.xml, build.gradle) containing Jackson 2 dependencies and asks to update, modernize,
  or migrate them. This skill covers import renaming, dependency GroupId changes, API migrations,
  IOException-to-JacksonException changes, ObjectMapper builder patterns, BOM usage in
  multi-module Maven projects, and OpenRewrite recipe usage.

Migrates all Jackson 2 dependencies, imports, and API usage to Jackson 3. Updates POM files to use the tools.jackson GroupIds and adds the Jackson BOM to <dependencyManagement> for centralized version management (preferring the root POM in multi-module projects). Rewrites import com.fasterxml.jackson.* to import tools.jackson.* across all Java/Kotlin sources. Handles the commonly missed IOException → JacksonException transition in catch blocks and throws declarations, with guidance on when to keep IOException. Also migrates ObjectMapper construction to the builder pattern, flags removed deprecated APIs, and warns about Spring Boot compatibility. Includes an OpenRewrite recipe option for large codebases.

Copyright © 2026, Litsec AB. Licensed under version 2.0 of the Apache License.