Web & Frontend

anouar1991 Skill

Test light and dark color scheme rendering by emulating prefers-color-scheme via CDP, capturing screenshots in both modes, computing WCAG 2.1 contrast ratios for all visible text, detecting hardcoded colors that ignore scheme changes, and validating color-scheme meta/CSS declarations.

anouar1991 Bundle

Compare two URLs (or same URL at different viewports, or before/after deployment) visually and structurally using pixel diffing and accessibility tree comparison.

anouar1991 Skill

Profile CSS and JS animations: identify all running animations via CDP Animation domain, measure frame rates with requestAnimationFrame, detect expensive layout-triggering property animations vs compositor-only, audit will-change usage, and detect jank via long-animation-frame entries.

latitude-dev Skill

Biome formatting, import style, strict TypeScript, naming (including React file names), or generated files.

latitude-dev Skill

apps/web UI — routes, @repo/ui, TanStack Start server functions and collections, navigation (Link vs useNavigate), forms (useForm + createFormSubmitHandler + fieldErrorsAsStrings for Zod field errors), Tailwind layout rules, design-system updates, and useEffect / useMountEffect policy.

latitude-dev Bundle

Create, validate, preview, and publish self-contained HTML artifacts. Use for dashboards, reports, timelines, prototypes, diff walkthroughs, benchmark viewers, decision docs, and existing HTML files that need previewing or publishing. Use direct file commands for user-provided HTML; scaffold only when creating a new artifact.

latitude-dev Skill

Use when the user asks for a rich explanation of a code change, diff, branch, or PR. Produces HTML output.

elie222 Skill

UI component and styling guidelines using Shadcn UI, Radix UI, and Tailwind

diegopherlt Skill

Esta skill debe usarse cuando el usuario pide "dividir componente", "separar componente", "split component", "extraer componentes", "componente muy grande", "refactorizar componente grande", "break down component", "este archivo tiene muchas responsabilidades", o menciona que un archivo React tiene demasiado codigo, demasiado estado, o demasiada logica mezclada con UI. Analiza un componente React y lo divide en piezas mas manejables siguiendo el patron smart/dumb components.

diegopherlt Skill

Search, evaluate and select libraries when a problem is "standard" — meaning someone has almost certainly solved it already. The strongest trigger is mid-planning of a new feature — while drafting or reviewing an implementation plan (plan mode, task-planning), run the standard-problem test on each planned component before the plan commits to a manual implementation. Also use this skill whenever the user is about to implement non-trivial functionality that sounds like a solved problem (programmatic SSH, retry/backoff, argument parsing, schema validation, date handling, HTTP routing, queues, templating), asks "should I implement X myself or use a lib?", "is there a library for X?", asks to compare libraries, or starts writing infrastructure-flavored code from scratch. Also use it when evaluating whether an existing dependency should be replaced, or when designing a public API and the prose-quality taxonomy (Facade / Fluent Interface / Internal DSL) applies.

anouar1991 Skill

Collect CSS rule usage via Chrome DevTools Protocol (CDP) and report per-stylesheet coverage with unused selector analysis.

anouar1991 Skill

Audit keyboard navigation by tabbing through a page, capturing focus state at each stop, and running axe-core for WCAG violations.

anouar1991 Bundle

Compute a composite 0-100 efficiency score using JS/CSS coverage, render-blocking resources, transfer size, and navigation timing via CDP.

anouar1991 Bundle

Tests a page across a six-device viewport matrix (Mobile S/M/L, Tablet, Desktop, Ultrawide). For each viewport captures a screenshot, detects active CSS media queries, checks horizontal overflow, validates touch targets (min 48x48), font readability (min 16px body), viewport meta tag, and image srcset/sizes. Produces a comparison table with per-viewport issue counts.

diegopherlt Bundle

Esta skill debe usarse cuando el usuario pide "documenta los sockets", "documenta los eventos", "documentar websockets", "document the sockets", "document socket events", "necesito la doc de los sockets para el frontend", o cuando menciona documentar eventos de socket.io para consumo desde el frontend. Tambien activar cuando el usuario menciona pasar eventos al frontend, compartir contratos de sockets, o preparar documentacion de eventos en tiempo real. No usar para endpoints HTTP REST (usar document-endpoints en su lugar).

diegopherlt Bundle

Esta skill debe usarse cuando el usuario pide "documenta los endpoints", "documenta la API", "documentar las rutas", "document the endpoints", "document the API", "necesito la doc de los endpoints para el frontend", o cuando menciona documentar endpoints HTTP para consumo desde el frontend. Tambien activar cuando el usuario menciona pasar endpoints al frontend, compartir contratos HTTP, o preparar documentacion de rutas REST. No usar para WebSockets ni socket.io (usar document-sockets en su lugar).

getty104 Bundle

ライブラリの情報を確認するためのスキル。Next.js、shadcn、その他のライブラリについて、適切なMCPサーバーを使用して最新のドキュメントと使用方法を取得します。

lennetech Bundle

Reference for the lenne.tech CLI (`lt`). Covers lt fullstack init/update/convert-mode, lt git get/reset, lt server create/object/addProp, lt deployment, and lt dev (parallel project orchestration via Caddy: install/up/down/status/doctor/tunnel). Activates on any `lt` subcommand, "lenne.tech CLI", "--noConfirm", "convert-mode", "npm mode" / "vendor mode", or "Caddy tunnel". NOT for writing NestJS modules or properties by hand (use generating-nest-servers). NOT for Vue/Nuxt code (use developing-lt-frontend).

lennetech Bundle

Creates and edits business offers on the lenne.tech Offers platform (angebote.lenne.tech) and its demo deployment (demo-angebote.lenne.tech). Knows all 18 content block types, offer lifecycle (draft/sent/viewed/template), custom HTML with Tailwind CSS and NuxtUI components (via rich-component block), HTML embeds for click-dummies, per-offer themes and color mode, and file uploads via single-use upload tickets. Activates when working with offers, content blocks, or the Offers API. Uses MCP tools (offers-api for production, offers-api-demo for demo) for all CRUD operations.

harperreed Skill

Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, or applications. Generates creative, polished code that avoids generic AI aesthetics.

marttp Skill

Use when user needs Vue.js development help. Examples: "build a Vue 3 component", "set up Pinia state management", "create a Nuxt 3 app", "optimize Vue reactivity", "implement composables"

marttp Skill

Use when user needs cross-platform mobile development help. Examples: "build a React Native app", "implement offline sync", "add push notifications", "optimize mobile performance", "integrate biometric authentication"

marttp Skill

Use when user needs React development help. Examples: "build a React component", "optimize React performance", "implement custom hooks", "set up server components", "fix React rendering issues"

lennetech Bundle

Handles ALL Nuxt 4 and Vue frontend work: components, composables, forms (Valibot), API integration (types.gen.ts, sdk.gen.ts), authentication (Better Auth), SSR, and Playwright E2E. Supports monorepos (projects/app/, packages/app/). Activates on .vue files, nuxt.config.ts, Nuxt UI, TailwindCSS, files under app/{components,composables,pages,interfaces,layouts}/, and on "generate types", "Valibot form", "useOverlay modal", "Playwright E2E", "Frontend bauen". NOT for NestJS backend (use generating-nest-servers). NOT for framework-agnostic security theory (use general-frontend-security).

lennetech Bundle

Handles ALL NestJS and @lenne.tech/nest-server work: modules, services, controllers/resolvers, models, DTOs, and debugging. Covers `lt server` generators, @Roles/@Restricted security, CrudService patterns, and API tests via TestHelper. Supports monorepos (projects/api/, packages/api/). Activates on files under src/server/, guards, decorators, REST/GraphQL endpoints, and on "Backend bauen", "Endpoint anlegen", "Modul erstellen". NOT for Vue/Nuxt frontend (use developing-lt-frontend). NOT for nest-server version updates (use nest-server-updating). NOT for TDD orchestration (use building-stories-with-tdd).

marttp Skill

Use when user needs end-to-end feature development spanning frontend and backend. Examples: "build a complete user management feature", "implement real-time collaboration", "create a REST API with React frontend", "add authentication across the full stack"

lennetech Bundle

Orchestrates the Test-Driven Development cycle for user stories and features: writes the story test in tests/stories/ first, agrees the seams, then implements until every test passes. Activates on "TDD", "test first", "tests zuerst", "story test", "Story umsetzen", or any feature implementation that starts from a failing test. NOT for writing NestJS or Vue code outside a TDD cycle (use generating-nest-servers or developing-lt-frontend). NOT for generating tests for code that already exists (use /lt-dev:backend:test-generate).

lennetech Bundle

Framework-agnostic frontend security guide based on OWASP Secure Coding Practices: XSS prevention, CSRF protection, Content Security Policy, secure cookie configuration, client-side auth patterns, input validation, secure storage, and security headers. Applies to any web frontend, not only Nuxt. Activates on XSS, CSRF, CSP, clickjacking, security headers, "Sicherheitslücke", or a frontend security audit. NOT for backend/NestJS security (use generating-nest-servers). NOT for Nuxt-specific implementation (use developing-lt-frontend).

lennetech Skill

Runs and interprets k6 load tests against lenne.tech fullstack APIs. Covers installation, Better-Auth authentication for a realistic path, the three canonical scenarios (smoke / load / soak), threshold defaults for ~10 concurrent users (p95 under 500ms, error rate under 1%), and the optimisation ladder when a threshold fails. Activates on "k6", "Lasttest", "load test", "hält das unter Last", or checking API stability under concurrent users. NOT for Lighthouse frontend performance (use the a11y-reviewer agent). NOT for unit-level performance assertions.

lennetech Skill

Guides local development on the lenne.tech framework libraries themselves (@lenne.tech/nest-server, @lenne.tech/nuxt-extensions) and validating those changes from a consuming starter via `pnpm link`, including the build/watch loop and rollback. Activates on "Grund-Repo", "pnpm link", "test framework locally", or when a bug found in a project belongs in a base repo instead. NOT for consuming the frameworks inside a project (use generating-nest-servers or developing-lt-frontend). NOT for vendored cores (use nest-server-core-vendoring or nuxt-extensions-core-vendoring). NOT for version upgrades (use nest-server-updating).

lennetech Skill

Decides whether a ticket is manually testable by non-developers and writes the German QA test instructions for the Linear comment. Makes frontend verifiability — directly or through a named reproducible symptom — the hard gate: no browser path means QA Testing is never offered as an option. Defines the not-testable categories, the deployed-environment URL resolution order, the role-instead-of-credentials rule, the example-data requirement per step, and the comment format for both cases. Activates whenever a command hands a merged or submitted ticket to QA (ticket-cycle, git:ship, dev-submit). NOT for the developer-facing local re-test manual with literal passwords (that is ticket-cycle STEP 3b). NOT for the browser walk itself (use validating-changes-in-browser).

lennetech Skill

Knowledge base for projects that vendored the @lenne.tech/nuxt-extensions module into their source tree (app/core/, no npm dependency). Covers detecting a vendored frontend, the one-way vendor model, when `app/core/` may be touched, upstream sync and upstream-PR workflows, and cosmetic-vs-substantial classification; no flatten-fix is needed here, unlike the backend core. Activates on "sync frontend core from upstream" or frontend vendor-sync conflicts. NOT for npm-based nuxt-extensions updates or new Nuxt code (use developing-lt-frontend).

0x0pointer Bundle

Full ASVS 5.0 compliance assessment against a codebase and/or architecture diagrams. Reads all 346 controls from the companion CSV, performs targeted code analysis per control, and produces a complete matrix marked COMPLIANT / NON_COMPLIANT / NOT_RELEVANT — with per-control reasoning and evidence (code snippets, file:line references, diagram observations). Outputs a reviewed CSV matrix and a self-contained HTML evidence report.

0x0pointer Bundle

iOS app security assessment structured on OWASP MASVS 2.0 / MASTG. Static analysis of an IPA (MobSF, class-dump, otool/nm, mobsfscan): hardcoded secrets, weak/broken crypto, insecure data storage (NSUserDefaults, plists, Core Data, Keychain accessibility), Info.plist misconfig, ATS (App Transport Security) exceptions & missing cert pinning, custom URL-scheme hijacking, Universal Link validation, UIPasteboard leakage, screenshot/snapshot caching, WKWebView JS bridges, missing jailbreak/anti-debug detection, vulnerable third-party pods/frameworks. Dynamic analysis (opt-in, needs a JAILBROKEN device — cannot be containerized) via Frida/objection: SSL-pinning bypass, Keychain dumps, runtime storage inspection, URL-scheme & pasteboard abuse. Chains from /pentester and /codebase; into /api-security for backend endpoints, /web-exploit for injection, /post-exploit on device access, /ai-redteam on an embedded LLM.

rajbos Skill

Render the VS Code extension's webview panels headlessly and detect which ones changed visually, producing before/after/diff screenshots for review. Use when a change touches webview UI (src/webview/**, view HTML in extension.ts, shared CSS) and you want to see and show what it looks like, or to check that a refactor changed nothing visually.

0x0pointer Skill

Structured threat modeling skill using the PASTA framework (Process for Attack Simulation and Threat Analysis) combined with Adam Shostack's 4-question framework. Use this skill whenever the user asks to do threat modeling, security analysis, map the attack surface, identify threats, or review an application for security risks — even if they don't mention PASTA or a specific framework by name. Core activities: Component Mapping (architecture + data flows), Critical Assessment (business impact prioritization), and Logic Flaw Identification (attacker mindset on business logic). Produces: component map diagram (Mermaid), data flow diagram (Mermaid), attack tree (Mermaid), STRIDE threat table, prioritized risk register, and an actionable mitigation plan. Invoke proactively for any security review, architecture review, or "what could go wrong?" session.