Latest Agent Skills

age file encryption reference — the modern, simple alternative to GPG. Covers key generation, X25519 encryption, SSH key support, passphrase mode, pipe patterns, SOPS integration, YubiKey plugins, and security considerations. By Filippo Valsorda.

Nx smart monorepo build system reference. Covers affected commands, computation caching, project graph visualization, nx.json and project.json config, code generators for React/ Angular/Node/Next.js, module boundary enforcement, Nx Cloud remote caching, and migration from Turborepo.

D3.js data visualization library reference. Covers selections, data binding (enter/update/exit), scales, axes, shape generators (line/area/pie/arc), force layout, treemap, geo maps, transitions, event handlers, zoom, brush, and drag interactions.

Vercel AI platform guidance covering AI SDK, AI Gateway, Vercel Agent, and MCP. Use when building AI-powered or agentic workloads on Vercel.

Test quality inspection framework for reviewing test coverage, identifying gaps, and ensuring comprehensive validation

Step-by-step debugging workflow: reproduce the bug, isolate the failing component, trace to root cause, apply a targeted fix, and verify the fix resolves the issue without regressions. Use when you encounter a bug, error, exception, crash, or unexpected behavior that needs troubleshooting.

Compare tradeoffs and recommend architectural patterns — dependency injection, service-oriented architecture, repository, domain events, circuit breaker, and anti-corruption layer. Use when choosing between design patterns, planning microservices boundaries, evaluating system design alternatives, or asking 'which pattern should I use' for a specific coupling or resilience problem.

Classic VB6 patterns, COM interop, migration strategies

API security checklist for reviewing endpoints before deployment. Use when creating or modifying API routes to ensure proper authentication, authorization, and input validation.

Production Fastify (TypeScript) patterns: schema validation, plugins, typed routes, error handling, security hardening, logging, testing with inject, and graceful shutdown

Playwright modern end-to-end testing framework with cross-browser automation, auto-wait, and built-in test runner

Go HTTP API development with net/http, Chi, Gin, Echo, and Fiber frameworks

Building production-quality CLI tools with Cobra command framework and Viper configuration management

Never test mock behavior. Never add test-only methods to production classes. Understand dependencies before mocking. Language-agnostic principles with TypeScript/Jest and Python/pytest examples.

Severity-tagged code review checklist (CRITICAL/HIGH/MEDIUM/LOW) used by code-critic agent

Netlify JAMstack deployment platform with serverless functions, forms, and identity

Type-safe API route handler with automatic Zod validation for Next.js App Router...

Svelte 5 - Reactive UI framework with compiler magic, Runes API, SvelteKit full-stack framework, SSR/SSG, minimal JavaScript

Next.js environment variable management with file precedence, variable types, and deployment configurations. Use when configuring Next.js applications, managing environment-specific settings, or deploying to Vercel/Railway/Heroku.

Vendor-neutral framework for scoring software health, estimating technical debt, assessing cloud readiness and open-source safety, and communicating quality to business stakeholders. Use when you need to quantify code health at the application or portfolio level rather than fix individual findings.

Systematically trace bugs backward through call stack to find original trigger

Python code-quality anti-patterns and review checks: exception-hierarchy correctness, singleton identity comparison, narrow exception handling, wildcard-import avoidance, magic-number naming, and dead-local removal. Use when reviewing or self-reviewing Python code for correctness and readability defects that linters and reviewers should catch.

Spring Boot 3.x - Java framework for production-ready applications with dependency injection, REST APIs, data access, security, and actuator monitoring

OpenTelemetry observability patterns: traces, metrics, logs, context propagation, OTLP export, Collector pipelines, and troubleshooting

Create detailed implementation plans with bite-sized tasks for engineers with zero codebase context

Use git worktrees to work on multiple branches simultaneously with separate working directories, enabling parallel development, stacked PRs, and isolated code reviews.

Interactive idea refinement using Socratic method to develop fully-formed designs

Advanced TypeScript patterns and best practices for 2025

Python data validation using type hints and runtime type checking with Pydantic v2's Rust-powered core for high-performance validation in FastAPI, Django, and configuration management.

Supabase open-source Firebase alternative with Postgres, authentication, storage, and realtime subscriptions. Use when building full-stack applications requiring integrated backend services with Next.js, React, or Vue.

Cypress end-to-end and component testing patterns for web apps: reliable selectors, stable waits, network stubbing, auth handling, CI parallelization, and flake reduction

MCP (Model Context Protocol) - Build AI-native servers with tools, resources, and prompts. TypeScript/Python SDKs for Claude Desktop integration.

CI security scanning: secrets, deps, SAST, triage, expiring exceptions

MCP (Model Context Protocol) server build and evaluation guide, including local conventions for tool surfaces, config, and testing

Environment variable validation, security scanning, and management for Next.js, Vite, React, and Node.js applications

Essential Git patterns for effective version control, eliminating redundant Git guidance per agent.

TypeScript-first schema validation library with static type inference for form validation, API validation, and runtime type checking with compile-time types.

Vitest - Modern TypeScript testing framework with Vite-native performance, ESM support, and TypeScript-first design

Build cross-platform desktop applications with Rust using Tauri framework and native GUI alternatives

Vue 3 - Progressive JavaScript framework with Composition API, reactivity system, single-file components, Vite integration, TypeScript support

Ecto patterns for Phoenix/Elixir apps. Covers schemas, changesets, migrations, queries, Ecto.Multi, transactions, constraints, associations, pagination, tenant partitioning, performance, and testing.

Kubernetes operations playbook for deploying services: core objects, probes, resource sizing, safe rollouts, and fast kubectl debugging

Create and manage stacked (dependent) pull requests for complex features

Headless UI - Unstyled, fully accessible UI components for React and Vue with built-in ARIA patterns

Minimal, unopinionated state management library for React with simple hook-based API, no providers, and minimal boilerplate for global state without Redux complexity.

Build content-heavy web applications with a full-featured Python framework that includes ORM, admin interface, authentication, and REST API support.

Biome - Fast all-in-one toolchain for web projects (linter + formatter in Rust, 100x faster than ESLint)

Threat modeling workflow for software systems: scope, data flow diagrams, STRIDE analysis, risk scoring, and turning mitigations into backlog and tests. Use when designing new features, reviewing architecture changes, handling sensitive data, or hardening auth/payment/multi-tenant flows.

Terraform infrastructure-as-code workflow patterns: state and environments, module design, safe plan/apply, drift control, and CI guardrails

Reporting pipelines for CSV/JSON/Markdown exports with timestamped outputs, summaries, and post-processing.

Jest with TypeScript - Industry standard testing framework with 70% market share, mature ecosystem, React Testing Library integration

Type-safe SQL ORM for TypeScript with zero runtime overhead

Flask - Lightweight Python web framework for microservices, REST APIs, and flexible web applications with extensive extension ecosystem

Neon serverless Postgres with autoscaling, instant database branching, and zero-downtime deployments. Use when building serverless applications, implementing database branching for dev/staging, or deploying with Vercel/Netlify.

LangGraph framework for building stateful, multi-agent AI applications with cyclical workflows, human-in-the-loop patterns, and persistent checkpointing.

LangChain LLM application framework with chains, agents, RAG, and memory for building AI-powered applications

Example of a properly self-contained skill following all best practices

Comprehensive API design patterns covering REST, GraphQL, gRPC, versioning, authentication, and modern API best practices

Visual verification workflow for UI changes to accelerate code review and catch ...

SEC EDGAR extraction pipeline: setup, filing discovery by CIK, recipe-driven extraction, and report generation.