ColdBox Skills

AI agent skills for ColdBox and the surrounding Ortus ecosystem, including TestBox, WireBox, CacheBox, LogBox, ORM tooling, security, and DocBox.

This repository provides reusable skills for ColdBox and related tooling, compatible with skills.sh-style installs and Claude plugin workflows.

---

Quick Install

# Install all skills registered in the plugin manifest
npx skills add ortus-boxlang/coldbox-skills

# Install a specific category
npx skills add ortus-boxlang/coldbox-skills/coldbox

# Install a specific skill
npx skills add ortus-boxlang/coldbox-skills/coldbox/handler-development

---

Manifest Coverage

The current .claude-plugin/plugin.json registers these categories for plugin install:

• coldbox
• testing
• security
• orm
• wirebox
• cachebox
• logbox

The repository also contains a docbox/ category with additional skills that are present in the repo but not currently listed in the plugin manifest.

---

Categories

coldbox — Core Framework Skills

Skill	What It Covers
handler-development	Handlers, CRUD actions, REST handlers, dependency injection
routing-development	Router configuration, named routes, constraints, route groups
event-model	Event lifecycle, event, rc, prc, rendering and redirects
rest-api-development	RestHandler patterns, API validation, versioning, error handling
interceptor-development	Interceptors, framework interception points, custom events
coldbox-configuration	ColdBox.cfc, settings, conventions, environment configuration
view-rendering	Views, layouts, partials, helpers, data rendering
layout-development	Layout patterns, nested layouts, conditional layouts
module-development	Module structure, ModuleConfig.cfc, routes, settings
coldbox-request-context	Request context, flash scope, collections, metadata
coldbox-flash-messaging	Flash RAM, message persistence, success/error/info/warning patterns
cache-integration	Event and view caching, cache keys, cache invalidation
coldbox-cli	coldbox create workflows, app skeletons, language flags, scaffolding
coldbox-documenter	Documentation standards for handlers, models, modules, config files
coldbox-reviewer	Code review heuristics for ColdBox applications and modules

testing — TestBox and Test Workflow Skills

Skill	What It Covers
testing-bdd	BDD specs, describe, it, matchers, lifecycle hooks
testing-unit	Unit testing patterns and isolated component testing
testing-integration	ColdBox integration specs and endpoint execution
testing-handler	Handler testing, rc/prc assertions, rendered output checks
testing-mocking	MockBox, mocks, stubs, verification, argument matching
testing-fixtures	Seed data, fixtures, factories, test helpers
testing-coverage	Coverage reports and CI wiring
testing-ci	TestBox in CI pipelines and reporters

security — Security and Authentication Skills

Skill	What It Covers
authentication	CBAuth login/logout, session management, remember-me patterns
authorization	CBSecurity roles, permissions, firewall rules
jwt-development	JWT flows, refresh tokens, API auth
security-implementation	End-to-end CBSecurity setup and configuration
csrf-protection	CSRF tokens, forms, AJAX protection
rbac-patterns	Role and permission hierarchy patterns
api-authentication	API keys, bearer auth, OAuth2 integration
sso-integration	SAML, OIDC, OAuth2, social login patterns
passkeys-integration	Passkeys, WebAuthn, FIDO2, module integration

orm — Database and ORM Skills

Skill	What It Covers
qb	QB query builder, fluent queries, joins, pagination
cborm	CBORM active record and Hibernate integration
quick-orm	Quick entities, relationships, scopes, eager loading
database-migrations	cfmigrations schema builder, migrations, seeders

wirebox — Dependency Injection Skills

Skill	What It Covers
wirebox-di	DI patterns, scopes, DSLs, binder configuration
wirebox-aop	AOP, method interception, before/after/around advice

cachebox — Caching Skills

Skill	What It Covers
caching-patterns	Cache providers, invalidation, get-or-set, event caching

logbox — Logging Skills

Skill	What It Covers
logging-patterns	LogBox config, appenders, log levels, structured logging

docbox — Repository Extras

Skill	What It Covers
docbox-generation	DocBox generation workflows, strategies, output formats
docbox-annotations	DocBox annotations and documentation comment patterns

---

MCP Servers

The bundled .mcp.json includes Ortus documentation MCP endpoints for ColdBox, CommandBox, TestBox, WireBox, CacheBox, LogBox, QB, Quick ORM, CBORM, CBSecurity, CBAuth, CBValidation, ContentBox, Relax, and more.

---

Repository Layout

Path	Purpose
coldbox/	Core ColdBox framework skills
testing/	TestBox and CI/testing skills
security/	Authentication, authorization, CSRF, SSO, passkeys
orm/	QB, Quick ORM, CBORM, migrations
wirebox/	WireBox DI and AOP skills
cachebox/	CacheBox skills
logbox/	LogBox skills
docbox/	Additional DocBox-specific skills in the repo

---

Resources

• ColdBox Documentation
• TestBox Documentation
• WireBox Documentation
• CacheBox Documentation
• LogBox Documentation
• BoxLang Documentation
• Ortus Solutions