How do I install the Framework Source Code skill?

Run npx skillmds add nickgallick/framework-source-code in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Framework Source Code skill do?

Index of cloned framework repos and how to use them for review validation. It is listed under Coding & Dev Tools on SkillMD.

Is Framework Source Code safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Framework Source Code?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Framework Source Code free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Framework Source Code?

nickgallick (@nickgallick) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Framework Source Code by nickgallick

Name: Framework Source Code
Rating: 4.2 (5 reviews)
Author: nickgallick

File contents

Framework Source Code Index

Local Repos (200MB total, read-only reference)

Framework	Path	TS Files	Use For
Anthropic JS SDK	repos/anthropic-sdk-js	177	Claude API calls, streaming, tool use patterns
Anthropic Python SDK	repos/anthropic-sdk	624 py	Cross-reference Python SDK patterns
Expo (router + secure-store)	repos/expo	401	expo-router, expo-secure-store, React Native
Fastify	repos/fastify	35	Server framework, plugin system, validation
Next.js	repos/nextjs	1,588	App router, server components, caching, API routes
OWASP Cheat Sheets	repos/owasp	—	Security review bible (markdown, not code)
React	repos/react	6	Core hooks, reconciler internals
Supabase JS	repos/supabase-js	270	Client SDK, auth, RLS, realtime patterns
Tailwind CSS	repos/tailwindcss	300	Utility class system, config
TypeScript	repos/typescript	245	Compiler internals, type system
Zod	repos/zod	389	Validation, schema patterns, error handling

Web Fetch Fallback (use for files outside local sparse checkout)

For supabase server patterns, edge functions, or any specific file not in local repos:

# Supabase edge functions are now LOCAL:
# repos/supabase/examples/edge-functions/
# repos/supabase/apps/docs/ (full Supabase docs)

# Next.js specific files
web_fetch("https://raw.githubusercontent.com/vercel/next.js/canary/packages/next/src/...")

# React specific source
web_fetch("https://raw.githubusercontent.com/facebook/react/main/packages/react/src/...")

# Expo packages not in local clone
web_fetch("https://raw.githubusercontent.com/expo/expo/main/packages/expo-notifications/src/...")

Forge ALWAYS has access to any framework's source — local clone for fast access, web_fetch as complete fallback.

How to Search Local Repos

# Find how a specific function works
grep -r "functionName" repos/nextjs/packages/next/src/ --include="*.ts" -l

# Find security patterns
grep -r "sanitize\|escape\|validate\|csrf\|xss" repos/supabase-js/src/ --include="*.ts" -l

# OWASP cheat sheet for a specific topic
ls repos/owasp/cheatsheets/ | grep -i "auth\|sql\|xss"
cat repos/owasp/cheatsheets/Authentication_Cheat_Sheet.md

OWASP Cheat Sheets Available

ls repos/owasp/cheatsheets/ | head -30

Key ones: Authentication, SQL_Injection, XSS_Filter_Evasion, CSRF_Prevention, Input_Validation, Secrets_Management, Session_Management, Authorization_Testing

Changelog

2026-03-20: Supabase monorepo restored (79GB free on disk). Full edge-functions + auth-helpers + docs. Total: 754MB.

---name: framework-source-codedescription: Index of cloned framework repos and how to use them for review validation.---# Framework Source Code Index## Local Repos (200MB total, read-only reference)| Framework | Path | TS Files | Use For ||-----------|------|----------|---------|| Anthropic JS SDK | repos/anthropic-sdk-js | 177 | Claude API calls, streaming, tool use patterns || Anthropic Python SDK | repos/anthropic-sdk | 624 py | Cross-reference Python SDK patterns || Expo (router + secure-store) | repos/expo | 401 | expo-router, expo-secure-store, React Native || Fastify | repos/fastify | 35 | Server framework, plugin system, validation || Next.js | repos/nextjs | 1,588 | App router, server components, caching, API routes || OWASP Cheat Sheets | repos/owasp | — | Security review bible (markdown, not code) || React | repos/react | 6 | Core hooks, reconciler internals || Supabase JS | repos/supabase-js | 270 | Client SDK, auth, RLS, realtime patterns || Tailwind CSS | repos/tailwindcss | 300 | Utility class system, config || TypeScript | repos/typescript | 245 | Compiler internals, type system || Zod | repos/zod | 389 | Validation, schema patterns, error handling |## Web Fetch Fallback (use for files outside local sparse checkout)For supabase server patterns, edge functions, or any specific file not in local repos:```# Supabase edge functions are now LOCAL:# repos/supabase/examples/edge-functions/# repos/supabase/apps/docs/ (full Supabase docs)# Next.js specific filesweb_fetch("https://raw.githubusercontent.com/vercel/next.js/canary/packages/next/src/...")# React specific sourceweb_fetch("https://raw.githubusercontent.com/facebook/react/main/packages/react/src/...")# Expo packages not in local cloneweb_fetch("https://raw.githubusercontent.com/expo/expo/main/packages/expo-notifications/src/...")```Forge ALWAYS has access to any framework's source — local clone for fast access, web_fetch as complete fallback.## How to Search Local Repos```bash# Find how a specific function worksgrep -r "functionName" repos/nextjs/packages/next/src/ --include="*.ts" -l# Find security patternsgrep -r "sanitize\|escape\|validate\|csrf\|xss" repos/supabase-js/src/ --include="*.ts" -l# OWASP cheat sheet for a specific topicls repos/owasp/cheatsheets/ | grep -i "auth\|sql\|xss"cat repos/owasp/cheatsheets/Authentication_Cheat_Sheet.md```## OWASP Cheat Sheets Available```bashls repos/owasp/cheatsheets/ | head -30```Key ones: Authentication, SQL_Injection, XSS_Filter_Evasion, CSRF_Prevention, Input_Validation, Secrets_Management, Session_Management, Authorization_Testing## Changelog- 2026-03-20: Supabase monorepo restored (79GB free on disk). Full edge-functions + auth-helpers + docs. Total: 754MB.

Frequently asked questions