Profile My skills Saved My plugins Edit profile Submit a skill

← all publishers

carthworks

@carthworks source repo

11 published skills

  1. ▌
    API Design REST · carthworks
    Guides designing clean, consistent, and developer-friendly REST APIs. Use when creating new API endpoints, reviewing API contracts, writing OpenAPI/Swagger specs, or when the user asks about URL naming, HTTP status codes, error responses, versioning, pagination, or authentication patterns. Do NOT use for GraphQL design.
    0 installs
  2. ▌
    Nextjs Performance · carthworks
    Optimises Next.js applications for Core Web Vitals, bundle size, and perceived performance. Use when building, auditing, or debugging a Next.js app's performance. Activates when the user asks about slow page loads, LCP, CLS, INP, image optimisation, SSR vs SSG vs ISR decisions, bundle analysis, or when Lighthouse scores are poor. Applies to Next.js App Router (13+) and Pages Router.
    0 installs
  3. ▌
    Env Secret Safety · carthworks
    Prevents hardcoded secrets, API keys, passwords, and credentials in source code. Use this skill whenever the agent is writing code that connects to external services, reads config, handles authentication, or when a user asks about environment variables, .env files, or API keys. Also activates on "how do I store my API key", "is this safe to commit", or when the agent spots a string that looks like a credential.
    0 installs
  4. ▌
    Git Commit Quality · carthworks
    Enforces high-quality git commit messages following Conventional Commits. Use this skill whenever the agent is about to run `git commit`, write a commit message, or help a user stage and commit changes. Blocks vague messages like "fix", "update", "changes", "wip". Also activates when the user asks "how should I write this commit?" or "help me commit this".
    0 installs
  5. ▌
    Code Review Checklist · carthworks
    Provides a structured, thorough code review checklist covering correctness, security, performance, tests, and maintainability. Use this skill whenever asked to review a pull request, diff, or piece of code. Also activates when the user says "review this", "check my code", "is this PR ready", or "what did I miss". Apply to any language or framework.
    0 installs
  6. ▌
    Web Trust And Compliance · carthworks
    Audit web applications and websites for legal compliance, consumer trust, privacy policies, terms of service / terms & conditions, cancellation/refund policies, about & contact pages, pricing & support information, cookie consent, licensing, accessibility, and anti-dark-pattern practices. Use when auditing or preparing a site for launch, legal compliance review, privacy check, trust verification, removing dark patterns, hidden fees, fake reviews, or verifying copyright and business details. Don't use for generic backend performance tuning or non-web tasks.
    0 installs
  7. ▌
    Production Web App Launch · carthworks bundle
    Audit and fix production-readiness gaps in websites and web apps — accessibility, SEO, metadata, security, forms, errors, mobile, deployment config, and operational concerns. Use this whenever someone is preparing a web project for launch, deployment, or public release, and also when they say things like "is this ready to ship", "can I go live", "review before I publish", "pre-launch check", or ask for a production readiness review — even if they never use the word "audit". Applies to static sites, React/Next/Vue/Angular apps, full-stack apps, SaaS products, dashboards, ecommerce, landing pages, and portfolios, and to already-live sites being reviewed after the fact.
    0 installs
  8. ▌
    Test Coverage Guidance · carthworks
    Guides what, when, and how to test code — choosing between unit, integration, and end-to-end tests. Use when writing tests, deciding test strategy, setting up testing frameworks, or when the user asks "what should I test", "how do I test X", "is my test coverage good enough", or "unit vs integration". Applies to any language or framework.
    0 installs
  9. ▌
    Developer Console Signature · carthworks
    Inject styled developer signatures, author branding, project metadata, ASCII art, easter eggs, security contact information, and interactive DevTools inspection helpers (window.<App>) into the browser console log. Use whenever the user asks to add developer details, author info, console logs, branding banners, or DevTools easter eggs to a web app or website (React, Next.js, Vite, Vue, HTML).
    0 installs
  10. ▌
    Dockerfile Best Practices · carthworks
    Guides writing secure, efficient, production-grade Dockerfiles and docker-compose files. Use when creating or reviewing a Dockerfile, docker-compose.yml, or .dockerignore. Also activates when the user asks about containerising an app, reducing image size, running Docker in production, or non-root containers. Do NOT use for Kubernetes manifests — use a dedicated k8s skill for that.
    0 installs
  11. ▌
    Typescript Strict Mode · carthworks
    Enforces TypeScript strict mode configuration and type-safe coding patterns. Use when setting up a TypeScript project, reviewing tsconfig.json, fixing type errors, or when the user asks about TypeScript strictness, type safety, avoiding `any`, or improving their types. Also activates when the agent sees excessive use of `any`, type assertions (`as`), or non-null assertions (`!`).
    0 installs