GitHub
sharp-edges
Identify dangerous-but-tempting API patterns in React/Next.js/Supabase. Finds "footguns" - APIs that look safe but fail silently or have dangerous defaults. Inspired by Trail of Bits methodology.
☆ 0View skill
Development AI Skills
Discover Development skills, compare source repositories and read the instructions for each workflow.
Categories: Development
Development Clear filters
Browse skills
GitHub
accessibility-audit
WCAG 2.1 accessibility auditing for web applications. Checks color contrast, ARIA usage, keyboard navigation, form labels, and screen reader compatibility.
☆ 0View skill
GitHub
codebase-stability-audit
Audit codebase stability guardrails - tests, ESLint, pre-commit hooks, CI/CD, dead code detection with Knip. Finds unused files, exports, and dependencies. Use /codebase-stability-audit:run to start.
☆ 0View skill
GitHub
fix-review
Verify that security fixes actually resolve the vulnerability without introducing new issues. Reviews fix commits against original findings. Inspired by Trail of Bits methodology.
☆ 0View skill
GitHub
security-audit
Complete security audits with 120+ checks for web applications. Covers OWASP Top 10 2025, Supabase RLS bypass attacks (40+ vectors), API enumeration, Realtime channel leaks, payment security, timing attacks, an...
☆ 0View skill
GitHub
performance-audit
Performance auditing for web applications. Analyzes bundle size, React rendering, database queries, network patterns, and assets. Provides actionable recommendations with effort estimates.
☆ 0View skill
GitHub
mvp-builder
MVP development toolkit using BMAD methodology. Transform ideas into working products through structured phases - product brief, technical spec, sprint planning, and iterative development. Optimized for vibe co...
☆ 0View skill
GitHub
codebase-setup
Professional codebase setup for developers migrating from Lovable, Bolt, or v0. Provides feature-based architecture scaffolding, naming convention checks, and config-driven pattern migration.
☆ 0View skill
GitHub
supabase-toolkit
Supabase-specific tools for authentication, Row Level Security, RPC generation, and migration validation. Built for developers using Supabase as their backend.
☆ 0View skill
GitHub
market-analysis
Complete market analysis toolkit using McKinsey consulting frameworks. Perform competitive research, market sizing, trend analysis, and strategic positioning. Generates actionable insights for product decisions...
☆ 0View skill
GitHub
ai-seo-audit
AI SEO Audit v2.0 for Generative Engine Optimization (GEO). Analyzes websites for AI discoverability in ChatGPT, Claude, Perplexity, and Google AI Overviews. Uses research-backed methodology with 36 checks acro...
☆ 0View skill
GitHub
db-bandwidth-optimization
Tối ưu Database Bandwidth và Cloud Costs để tránh bill shock. Sử dụng khi: (1) Review code có query database, (2) Phát hiện N+1 problem, (3) Tối ưu queries chậm, (4) Giảm cloud costs, (5) User hỏi về database p...
☆ 0View skill
GitHub
docs-seeker
Searching internet for technical documentation using llms.txt standard, GitHub repositories via Repomix, and parallel exploration. Use when user needs: (1) Latest documentation for libraries/frameworks, (2) Doc...
☆ 0View skill
GitHub
impl-domain
Implementar entidades de domínio em domain/entities/. Use quando criar entity, modelo de domínio, ou estrutura de dados core.
☆ 0View skill
GitHub
impl-repository
Implementar repositórios de acesso a dados em repositories/. Use quando criar repository, acesso a banco, queries SQL, ou persistência.
☆ 0View skill
GitHub
impl-service
Implementar serviços de lógica de negócio em services/. Use quando criar service, lógica de negócio, orquestração de repositórios, ou integração com LLM.
☆ 0View skill
GitHub
impl-infra
Implementar clientes de infraestrutura em infrastructure/. Use quando criar client externo, configuração, integração LLM, tracing, ou conexão com serviços fora do synth-lab.
☆ 0View skill
GitHub
impl-api
Implementar routers e schemas da API em api/. Use quando criar endpoint, rota, schema de request/response, ou registrar router.
☆ 0View skill
GitHub
analyze-test-coverage
Analisa commits e sugere testes necessários (unit, integration, contract, smoke, E2E). Roda em background após commits.
☆ 0View skill
GitHub
frontend-ux
Expert frontend/UX engineer for React/Next.js development using ShadCN components, Tailwind CSS v4, and proper SSR/CSR patterns. Use when building or refactoring UI components, styling, or working on user-facin...
☆ 0View skill
GitHub
docker-security
Docker and container security best practices for MCP Finance including non-root users, minimal images, mamba integration, and security hardening. Use when creating Dockerfiles, containerizing applications, or w...
☆ 0View skill
GitHub
deployment-checklist
Pre-deployment checklist and verification for MCP Finance. Use when deploying, preparing to deploy, or when user mentions deployment, going live, or production readiness.
☆ 0View skill
GitHub
api-test
Test API endpoints for MCP Finance app including authentication, data validation, and error handling. Use when testing APIs, debugging endpoints, or when user mentions API testing, endpoint testing, or API issu...
☆ 0View skill
GitHub
code-review
Review code for quality, security, performance, and best practices in MCP Finance app. Use when reviewing code, pull requests, diffs, or when user mentions code review, PR review, or asks to check code quality.
☆ 0View skill
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.