Search

PythonReactSEOPDF
GitHub Skill

common-pitfalls

Orchestrates pitfall prevention skills for common development issues. Auto-triggered during code review to check for TanStack Query, Drizzle ORM, Express API, React, WebSocket, blockchain RPC, and security pitfalls.

aiskillstore☆ 124 Repository stars6 Repository forks

Installation

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.

View source ↗Guides

Skill instructions

Common Pitfalls Prevention

Orchestrates specialized pitfall prevention skills learned from production issues. Use during code review to automatically check for common mistakes.

When to Use

  • During code review (auto-triggered by full-review skill)
  • Before committing changes
  • When debugging production issues
  • Reviewing unfamiliar code patterns

Workflow

Step 1: Identify Code Categories

Based on changed files, determine which sub-skills to invoke:

File Pattern Sub-Skill
**/hooks/**, useQuery, useMutation pitfalls-tanstack-query
**/db/**, schema.ts, drizzle pitfalls-drizzle-orm
**/routes/**, router., app. pitfalls-express-api
**/components/**, **/pages/**, .tsx pitfalls-react
websocket, wss, ws. pitfalls-websocket
contract, rpc, multicall, gas pitfalls-blockchain
session, key, cache, log pitfalls-security
Step 2: Invoke Relevant Sub-Skills

For each category found, invoke the corresponding skill for detailed patterns.

Step 3: Generate Combined Report

Aggregate findings from all invoked sub-skills.

Sub-Skills Reference

Skill Focus Area
pitfalls-tanstack-query Query keys, invalidation, v5 patterns
pitfalls-drizzle-orm Schema types, migrations, array columns
pitfalls-express-api Routes, status codes, storage patterns
pitfalls-react Components, forms, a11y, responsive
pitfalls-websocket Server setup, heartbeat, reconnection
pitfalls-blockchain RPC errors, gas, multicall, nonces
pitfalls-security Session keys, caching, logging, secrets

Quick Reference Checklist

Core
  • TanStack Query keys use full URL paths
  • Mutations invalidate relevant queries
  • Drizzle types exported for all models
  • API routes return correct status codes
  • All RPC calls wrapped in try/catch
  • WebSocket has heartbeat/reconnection
  • React components handle loading/error states
  • No secrets in logs or frontend code
Type Safety
  • No any types - use unknown and narrow
  • Types inferred from schema ($inferSelect, z.infer)
  • Type guards for runtime validation
Financial
  • BigInt for all token amounts
  • Decimal.js for price calculations
  • Proper rounding (floor/ceil)
Blockchain
  • Gas estimation with buffer
  • EIP-1559 gas pricing
  • Transaction simulation before send
  • Multicall uses allowFailure: true
Security
  • Session keys have expiry and limits
  • AES-256-GCM for stored credentials
  • Audit logging for sensitive operations
  • Rate limiting with exponential backoff

Examples

Read the usage examples in the source repository.

View source ↗

Source history

Indexed on
2026-01-20
Index updated
2026-01-28
Branch
main

Index and sync dates describe this directory. View the source repository for code history.

GitHub ↗

chat Comments (0)

chat_bubble_outline

No comments yet. Be the first to share your thoughts!