agcel 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/.agent/workflows/api-gen.md +59 -0
- package/.agent/workflows/architect.md +44 -0
- package/.agent/workflows/brainstorm.md +223 -0
- package/.agent/workflows/build.md +38 -0
- package/.agent/workflows/changelog.md +51 -0
- package/.agent/workflows/checkpoint.md +138 -0
- package/.agent/workflows/commit.md +223 -0
- package/.agent/workflows/debug.md +57 -0
- package/.agent/workflows/deploy.md +76 -0
- package/.agent/workflows/doc.md +247 -0
- package/.agent/workflows/execute-plan.md +225 -0
- package/.agent/workflows/feature.md +255 -0
- package/.agent/workflows/fix.md +323 -0
- package/.agent/workflows/help.md +63 -0
- package/.agent/workflows/index.md +148 -0
- package/.agent/workflows/load.md +112 -0
- package/.agent/workflows/mode.md +170 -0
- package/.agent/workflows/optimize.md +53 -0
- package/.agent/workflows/plan.md +337 -0
- package/.agent/workflows/pr.md +74 -0
- package/.agent/workflows/product-plan.md +36 -0
- package/.agent/workflows/production-deploy.md +39 -0
- package/.agent/workflows/refactor.md +63 -0
- package/.agent/workflows/research.md +116 -0
- package/.agent/workflows/review.md +344 -0
- package/.agent/workflows/security-scan.md +56 -0
- package/.agent/workflows/ship.md +221 -0
- package/.agent/workflows/spawn.md +177 -0
- package/.agent/workflows/status.md +59 -0
- package/.agent/workflows/tdd.md +139 -0
- package/.agent/workflows/test.md +340 -0
- package/.agent/workflows/verify.md +35 -0
- package/LICENSE +21 -0
- package/README.md +67 -0
- package/dist/commands/init.js +142 -0
- package/dist/commands/install.js +98 -0
- package/dist/commands/list.js +49 -0
- package/dist/commands/restart.js +17 -0
- package/dist/commands/start.js +41 -0
- package/dist/commands/status.js +24 -0
- package/dist/commands/stop.js +29 -0
- package/dist/commands/uninstall.js +78 -0
- package/dist/index.js +58 -0
- package/dist/server/index.js +174 -0
- package/dist/utils/index.js +63 -0
- package/package.json +54 -0
- package/skills/api-security-best-practices/SKILL.md +291 -0
- package/skills/api-security-best-practices/references/examples.md +617 -0
- package/skills/architecture/SKILL.md +59 -0
- package/skills/architecture/context-discovery.md +43 -0
- package/skills/architecture/examples.md +94 -0
- package/skills/architecture/pattern-selection.md +68 -0
- package/skills/architecture/patterns-reference.md +50 -0
- package/skills/architecture/trade-off-analysis.md +77 -0
- package/skills/aws-serverless/SKILL.md +327 -0
- package/skills/brainstorming/SKILL.md +234 -0
- package/skills/c4-context/SKILL.md +154 -0
- package/skills/ci-cd-engineer/SKILL.md +50 -0
- package/skills/code-auditing/SKILL.md +55 -0
- package/skills/copywriting/SKILL.md +248 -0
- package/skills/database-engineer/SKILL.md +47 -0
- package/skills/doc-coauthoring/SKILL.md +379 -0
- package/skills/docker-expert/SKILL.md +412 -0
- package/skills/langgraph/SKILL.md +291 -0
- package/skills/postgresql/SKILL.md +73 -0
- package/skills/pricing-strategy/SKILL.md +360 -0
- package/skills/product-manager/SKILL.md +57 -0
- package/skills/prompt-engineer/README.md +659 -0
- package/skills/prompt-engineer/SKILL.md +256 -0
- package/skills/python-patterns/SKILL.md +445 -0
- package/skills/qa-engineer/SKILL.md +42 -0
- package/skills/rag-engineer/SKILL.md +94 -0
- package/skills/react-patterns/SKILL.md +202 -0
- package/skills/secure-refactoring/SKILL.md +54 -0
- package/skills/security-documentation/SKILL.md +53 -0
- package/skills/senior-architect/SKILL.md +213 -0
- package/skills/senior-architect/references/architecture_patterns.md +103 -0
- package/skills/senior-architect/references/system_design_workflows.md +103 -0
- package/skills/senior-architect/references/tech_decision_guide.md +103 -0
- package/skills/senior-architect/scripts/architecture_diagram_generator.py +114 -0
- package/skills/senior-architect/scripts/dependency_analyzer.py +114 -0
- package/skills/senior-architect/scripts/project_architect.py +114 -0
- package/skills/seo-audit/SKILL.md +491 -0
- package/skills/sql-injection-testing/SKILL.md +452 -0
- package/skills/test-driven-development/SKILL.md +375 -0
- package/skills/test-driven-development/testing-anti-patterns.md +299 -0
- package/skills/test-fixing/SKILL.md +123 -0
- package/skills/testing-patterns/SKILL.md +263 -0
- package/skills/typescript-expert/SKILL.md +202 -0
- package/skills/typescript-expert/references/advanced-topics.md +252 -0
- package/skills/typescript-expert/references/tsconfig-strict.json +92 -0
- package/skills/typescript-expert/references/typescript-cheatsheet.md +383 -0
- package/skills/typescript-expert/references/utility-types.ts +335 -0
- package/skills/typescript-expert/scripts/ts_diagnostic.py +203 -0
- package/skills/ui-ux-designer/SKILL.md +46 -0
- package/skills/vercel-deployment/SKILL.md +83 -0
- package/skills/vulnerability-scanner/SKILL.md +280 -0
- package/skills/vulnerability-scanner/checklists.md +121 -0
- package/skills/vulnerability-scanner/scripts/security_scan.py +458 -0
- package/skills/writing-plans/SKILL.md +120 -0
|
@@ -0,0 +1,42 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: qa-engineer
|
|
3
|
+
description: Define testing strategies, write test plans, and implementation end-to-end automation
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# QA Engineer
|
|
7
|
+
|
|
8
|
+
## Overview
|
|
9
|
+
|
|
10
|
+
Your role is to prevent bugs from reaching production. You verify that the software meets requirements and behaves correctly under various conditions.
|
|
11
|
+
|
|
12
|
+
## When to Use This Skill
|
|
13
|
+
|
|
14
|
+
- Creating comprehensive test plans
|
|
15
|
+
- Writing End-to-End (E2E) tests
|
|
16
|
+
- Performing regression testing
|
|
17
|
+
- Validating bug fixes
|
|
18
|
+
|
|
19
|
+
## Core Responsibilities
|
|
20
|
+
|
|
21
|
+
1. **Test Planning**: Identifying what needs to be tested and how.
|
|
22
|
+
2. **E2E Automation**: Writing scripts (Playwright, Cypress) to simulate user behavior.
|
|
23
|
+
3. **Manual Testing**: Exploratory testing for edge cases hard to automate.
|
|
24
|
+
4. **Bug Reporting**: Creating clear, reproducible bug reports.
|
|
25
|
+
|
|
26
|
+
## Testing Pyramid
|
|
27
|
+
|
|
28
|
+
1. **Unit Tests** (Dev responsibility): Fast, isolated.
|
|
29
|
+
2. **Integration Tests**: Check how modules work together.
|
|
30
|
+
3. **E2E Tests** (QA focus): Simulate real user flows in a browser environment.
|
|
31
|
+
|
|
32
|
+
### Bug Report Template
|
|
33
|
+
- **Title**: Concise description of the issue.
|
|
34
|
+
- **Severity**: Critical / High / Medium / Low.
|
|
35
|
+
- **Steps to Reproduce**: 1. Go to... 2. Click...
|
|
36
|
+
- **Expected Result**: What should happen.
|
|
37
|
+
- **Actual Result**: What actually happened.
|
|
38
|
+
- **Screenshots/Logs**: Evidence.
|
|
39
|
+
|
|
40
|
+
|
|
41
|
+
## Gap Analysis Rule
|
|
42
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|
|
@@ -0,0 +1,94 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: rag-engineer
|
|
3
|
+
description: "Expert in building Retrieval-Augmented Generation systems. Masters embedding models, vector databases, chunking strategies, and retrieval optimization for LLM applications. Use when: building RAG, vector search, embeddings, semantic search, document retrieval."
|
|
4
|
+
source: vibeship-spawner-skills (Apache 2.0)
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# RAG Engineer
|
|
8
|
+
|
|
9
|
+
**Role**: RAG Systems Architect
|
|
10
|
+
|
|
11
|
+
I bridge the gap between raw documents and LLM understanding. I know that
|
|
12
|
+
retrieval quality determines generation quality - garbage in, garbage out.
|
|
13
|
+
I obsess over chunking boundaries, embedding dimensions, and similarity
|
|
14
|
+
metrics because they make the difference between helpful and hallucinating.
|
|
15
|
+
|
|
16
|
+
## Capabilities
|
|
17
|
+
|
|
18
|
+
- Vector embeddings and similarity search
|
|
19
|
+
- Document chunking and preprocessing
|
|
20
|
+
- Retrieval pipeline design
|
|
21
|
+
- Semantic search implementation
|
|
22
|
+
- Context window optimization
|
|
23
|
+
- Hybrid search (keyword + semantic)
|
|
24
|
+
|
|
25
|
+
## Requirements
|
|
26
|
+
|
|
27
|
+
- LLM fundamentals
|
|
28
|
+
- Understanding of embeddings
|
|
29
|
+
- Basic NLP concepts
|
|
30
|
+
|
|
31
|
+
## Patterns
|
|
32
|
+
|
|
33
|
+
### Semantic Chunking
|
|
34
|
+
|
|
35
|
+
Chunk by meaning, not arbitrary token counts
|
|
36
|
+
|
|
37
|
+
```javascript
|
|
38
|
+
- Use sentence boundaries, not token limits
|
|
39
|
+
- Detect topic shifts with embedding similarity
|
|
40
|
+
- Preserve document structure (headers, paragraphs)
|
|
41
|
+
- Include overlap for context continuity
|
|
42
|
+
- Add metadata for filtering
|
|
43
|
+
```
|
|
44
|
+
|
|
45
|
+
### Hierarchical Retrieval
|
|
46
|
+
|
|
47
|
+
Multi-level retrieval for better precision
|
|
48
|
+
|
|
49
|
+
```javascript
|
|
50
|
+
- Index at multiple chunk sizes (paragraph, section, document)
|
|
51
|
+
- First pass: coarse retrieval for candidates
|
|
52
|
+
- Second pass: fine-grained retrieval for precision
|
|
53
|
+
- Use parent-child relationships for context
|
|
54
|
+
```
|
|
55
|
+
|
|
56
|
+
### Hybrid Search
|
|
57
|
+
|
|
58
|
+
Combine semantic and keyword search
|
|
59
|
+
|
|
60
|
+
```javascript
|
|
61
|
+
- BM25/TF-IDF for keyword matching
|
|
62
|
+
- Vector similarity for semantic matching
|
|
63
|
+
- Reciprocal Rank Fusion for combining scores
|
|
64
|
+
- Weight tuning based on query type
|
|
65
|
+
```
|
|
66
|
+
|
|
67
|
+
## Anti-Patterns
|
|
68
|
+
|
|
69
|
+
### ❌ Fixed Chunk Size
|
|
70
|
+
|
|
71
|
+
### ❌ Embedding Everything
|
|
72
|
+
|
|
73
|
+
### ❌ Ignoring Evaluation
|
|
74
|
+
|
|
75
|
+
## ⚠️ Sharp Edges
|
|
76
|
+
|
|
77
|
+
| Issue | Severity | Solution |
|
|
78
|
+
|-------|----------|----------|
|
|
79
|
+
| Fixed-size chunking breaks sentences and context | high | Use semantic chunking that respects document structure: |
|
|
80
|
+
| Pure semantic search without metadata pre-filtering | medium | Implement hybrid filtering: |
|
|
81
|
+
| Using same embedding model for different content types | medium | Evaluate embeddings per content type: |
|
|
82
|
+
| Using first-stage retrieval results directly | medium | Add reranking step: |
|
|
83
|
+
| Cramming maximum context into LLM prompt | medium | Use relevance thresholds: |
|
|
84
|
+
| Not measuring retrieval quality separately from generation | high | Separate retrieval evaluation: |
|
|
85
|
+
| Not updating embeddings when source documents change | medium | Implement embedding refresh: |
|
|
86
|
+
| Same retrieval strategy for all query types | medium | Implement hybrid search: |
|
|
87
|
+
|
|
88
|
+
## Related Skills
|
|
89
|
+
|
|
90
|
+
Works well with: `ai-agents-architect`, `prompt-engineer`, `database-architect`, `backend`
|
|
91
|
+
|
|
92
|
+
|
|
93
|
+
## Gap Analysis Rule
|
|
94
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|
|
@@ -0,0 +1,202 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: react-patterns
|
|
3
|
+
description: Modern React patterns and principles. Hooks, composition, performance, TypeScript best practices.
|
|
4
|
+
allowed-tools: Read, Write, Edit, Glob, Grep
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# React Patterns
|
|
8
|
+
|
|
9
|
+
> Principles for building production-ready React applications.
|
|
10
|
+
|
|
11
|
+
---
|
|
12
|
+
|
|
13
|
+
## 1. Component Design Principles
|
|
14
|
+
|
|
15
|
+
### Component Types
|
|
16
|
+
|
|
17
|
+
| Type | Use | State |
|
|
18
|
+
|------|-----|-------|
|
|
19
|
+
| **Server** | Data fetching, static | None |
|
|
20
|
+
| **Client** | Interactivity | useState, effects |
|
|
21
|
+
| **Presentational** | UI display | Props only |
|
|
22
|
+
| **Container** | Logic/state | Heavy state |
|
|
23
|
+
|
|
24
|
+
### Design Rules
|
|
25
|
+
|
|
26
|
+
- One responsibility per component
|
|
27
|
+
- Props down, events up
|
|
28
|
+
- Composition over inheritance
|
|
29
|
+
- Prefer small, focused components
|
|
30
|
+
|
|
31
|
+
---
|
|
32
|
+
|
|
33
|
+
## 2. Hook Patterns
|
|
34
|
+
|
|
35
|
+
### When to Extract Hooks
|
|
36
|
+
|
|
37
|
+
| Pattern | Extract When |
|
|
38
|
+
|---------|-------------|
|
|
39
|
+
| **useLocalStorage** | Same storage logic needed |
|
|
40
|
+
| **useDebounce** | Multiple debounced values |
|
|
41
|
+
| **useFetch** | Repeated fetch patterns |
|
|
42
|
+
| **useForm** | Complex form state |
|
|
43
|
+
|
|
44
|
+
### Hook Rules
|
|
45
|
+
|
|
46
|
+
- Hooks at top level only
|
|
47
|
+
- Same order every render
|
|
48
|
+
- Custom hooks start with "use"
|
|
49
|
+
- Clean up effects on unmount
|
|
50
|
+
|
|
51
|
+
---
|
|
52
|
+
|
|
53
|
+
## 3. State Management Selection
|
|
54
|
+
|
|
55
|
+
| Complexity | Solution |
|
|
56
|
+
|------------|----------|
|
|
57
|
+
| Simple | useState, useReducer |
|
|
58
|
+
| Shared local | Context |
|
|
59
|
+
| Server state | React Query, SWR |
|
|
60
|
+
| Complex global | Zustand, Redux Toolkit |
|
|
61
|
+
|
|
62
|
+
### State Placement
|
|
63
|
+
|
|
64
|
+
| Scope | Where |
|
|
65
|
+
|-------|-------|
|
|
66
|
+
| Single component | useState |
|
|
67
|
+
| Parent-child | Lift state up |
|
|
68
|
+
| Subtree | Context |
|
|
69
|
+
| App-wide | Global store |
|
|
70
|
+
|
|
71
|
+
---
|
|
72
|
+
|
|
73
|
+
## 4. React 19 Patterns
|
|
74
|
+
|
|
75
|
+
### New Hooks
|
|
76
|
+
|
|
77
|
+
| Hook | Purpose |
|
|
78
|
+
|------|---------|
|
|
79
|
+
| **useActionState** | Form submission state |
|
|
80
|
+
| **useOptimistic** | Optimistic UI updates |
|
|
81
|
+
| **use** | Read resources in render |
|
|
82
|
+
|
|
83
|
+
### Compiler Benefits
|
|
84
|
+
|
|
85
|
+
- Automatic memoization
|
|
86
|
+
- Less manual useMemo/useCallback
|
|
87
|
+
- Focus on pure components
|
|
88
|
+
|
|
89
|
+
---
|
|
90
|
+
|
|
91
|
+
## 5. Composition Patterns
|
|
92
|
+
|
|
93
|
+
### Compound Components
|
|
94
|
+
|
|
95
|
+
- Parent provides context
|
|
96
|
+
- Children consume context
|
|
97
|
+
- Flexible slot-based composition
|
|
98
|
+
- Example: Tabs, Accordion, Dropdown
|
|
99
|
+
|
|
100
|
+
### Render Props vs Hooks
|
|
101
|
+
|
|
102
|
+
| Use Case | Prefer |
|
|
103
|
+
|----------|--------|
|
|
104
|
+
| Reusable logic | Custom hook |
|
|
105
|
+
| Render flexibility | Render props |
|
|
106
|
+
| Cross-cutting | Higher-order component |
|
|
107
|
+
|
|
108
|
+
---
|
|
109
|
+
|
|
110
|
+
## 6. Performance Principles
|
|
111
|
+
|
|
112
|
+
### When to Optimize
|
|
113
|
+
|
|
114
|
+
| Signal | Action |
|
|
115
|
+
|--------|--------|
|
|
116
|
+
| Slow renders | Profile first |
|
|
117
|
+
| Large lists | Virtualize |
|
|
118
|
+
| Expensive calc | useMemo |
|
|
119
|
+
| Stable callbacks | useCallback |
|
|
120
|
+
|
|
121
|
+
### Optimization Order
|
|
122
|
+
|
|
123
|
+
1. Check if actually slow
|
|
124
|
+
2. Profile with DevTools
|
|
125
|
+
3. Identify bottleneck
|
|
126
|
+
4. Apply targeted fix
|
|
127
|
+
|
|
128
|
+
---
|
|
129
|
+
|
|
130
|
+
## 7. Error Handling
|
|
131
|
+
|
|
132
|
+
### Error Boundary Usage
|
|
133
|
+
|
|
134
|
+
| Scope | Placement |
|
|
135
|
+
|-------|-----------|
|
|
136
|
+
| App-wide | Root level |
|
|
137
|
+
| Feature | Route/feature level |
|
|
138
|
+
| Component | Around risky component |
|
|
139
|
+
|
|
140
|
+
### Error Recovery
|
|
141
|
+
|
|
142
|
+
- Show fallback UI
|
|
143
|
+
- Log error
|
|
144
|
+
- Offer retry option
|
|
145
|
+
- Preserve user data
|
|
146
|
+
|
|
147
|
+
---
|
|
148
|
+
|
|
149
|
+
## 8. TypeScript Patterns
|
|
150
|
+
|
|
151
|
+
### Props Typing
|
|
152
|
+
|
|
153
|
+
| Pattern | Use |
|
|
154
|
+
|---------|-----|
|
|
155
|
+
| Interface | Component props |
|
|
156
|
+
| Type | Unions, complex |
|
|
157
|
+
| Generic | Reusable components |
|
|
158
|
+
|
|
159
|
+
### Common Types
|
|
160
|
+
|
|
161
|
+
| Need | Type |
|
|
162
|
+
|------|------|
|
|
163
|
+
| Children | ReactNode |
|
|
164
|
+
| Event handler | MouseEventHandler |
|
|
165
|
+
| Ref | RefObject<Element> |
|
|
166
|
+
|
|
167
|
+
---
|
|
168
|
+
|
|
169
|
+
## 9. Testing Principles
|
|
170
|
+
|
|
171
|
+
| Level | Focus |
|
|
172
|
+
|-------|-------|
|
|
173
|
+
| Unit | Pure functions, hooks |
|
|
174
|
+
| Integration | Component behavior |
|
|
175
|
+
| E2E | User flows |
|
|
176
|
+
|
|
177
|
+
### Test Priorities
|
|
178
|
+
|
|
179
|
+
- User-visible behavior
|
|
180
|
+
- Edge cases
|
|
181
|
+
- Error states
|
|
182
|
+
- Accessibility
|
|
183
|
+
|
|
184
|
+
---
|
|
185
|
+
|
|
186
|
+
## 10. Anti-Patterns
|
|
187
|
+
|
|
188
|
+
| ❌ Don't | ✅ Do |
|
|
189
|
+
|----------|-------|
|
|
190
|
+
| Prop drilling deep | Use context |
|
|
191
|
+
| Giant components | Split smaller |
|
|
192
|
+
| useEffect for everything | Server components |
|
|
193
|
+
| Premature optimization | Profile first |
|
|
194
|
+
| Index as key | Stable unique ID |
|
|
195
|
+
|
|
196
|
+
---
|
|
197
|
+
|
|
198
|
+
> **Remember:** React is about composition. Build small, combine thoughtfully.
|
|
199
|
+
|
|
200
|
+
|
|
201
|
+
## Gap Analysis Rule
|
|
202
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|
|
@@ -0,0 +1,54 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: secure-refactoring
|
|
3
|
+
description: Rewrite code to adhere to OWASP standards and best practices. Use when tasked with improving code seecurity.
|
|
4
|
+
allowed-tools: Read, Replace, MultiReplace
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# Secure Refactoring Framework
|
|
8
|
+
|
|
9
|
+
> "Security by Design."
|
|
10
|
+
|
|
11
|
+
## 🎯 Selective Reading Rule
|
|
12
|
+
|
|
13
|
+
**Read ONLY files that need refactoring!**
|
|
14
|
+
|
|
15
|
+
| File | Description | When to Read |
|
|
16
|
+
|------|-------------|--------------|
|
|
17
|
+
| `*.py`, `*.js`, `*.ts` | Source code files | Identify refactoring targets |
|
|
18
|
+
| `tests/` | Unit and integration tests | Verify changes don't break functionality |
|
|
19
|
+
|
|
20
|
+
---
|
|
21
|
+
|
|
22
|
+
## 🔗 Related Skills
|
|
23
|
+
|
|
24
|
+
| Skill | Use For |
|
|
25
|
+
|-------|---------|
|
|
26
|
+
| `@[skills/code-auditing]` | Identifying code to refactor |
|
|
27
|
+
| `@[skills/testing-patterns]` | Ensuring no regression |
|
|
28
|
+
|
|
29
|
+
---
|
|
30
|
+
|
|
31
|
+
## Core Principle
|
|
32
|
+
|
|
33
|
+
**"Rewrite with security in mind."**
|
|
34
|
+
|
|
35
|
+
- Prefer parameterized queries over string concatenation for SQL
|
|
36
|
+
- Use secure libraries for cryptography and hashing
|
|
37
|
+
- Implement proper input validation and output encoding
|
|
38
|
+
- Avoid using deprecated or vulnerable functions
|
|
39
|
+
|
|
40
|
+
---
|
|
41
|
+
|
|
42
|
+
## Refactoring Checklist
|
|
43
|
+
|
|
44
|
+
Before finalizing changes:
|
|
45
|
+
|
|
46
|
+
- [ ] Replaced unsafe SQL queries with parameterized queries
|
|
47
|
+
- [ ] Validated input against strict allow-lists
|
|
48
|
+
- [ ] Escaped output based on context (HTML, JS, CSS)
|
|
49
|
+
- [ ] Replaced weak cryptographic algorithms with strong ones
|
|
50
|
+
- [ ] Verified that refactoring did not break existing functionality
|
|
51
|
+
|
|
52
|
+
|
|
53
|
+
## Gap Analysis Rule
|
|
54
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|
|
@@ -0,0 +1,53 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: security-documentation
|
|
3
|
+
description: Explain vulnerability risks in plain English. Use when tasked with documenting security issues.
|
|
4
|
+
allowed-tools: Read, Write
|
|
5
|
+
---
|
|
6
|
+
|
|
7
|
+
# Security Documentation Framework
|
|
8
|
+
|
|
9
|
+
> "Clarity is Security."
|
|
10
|
+
|
|
11
|
+
## 🎯 Selective Reading Rule
|
|
12
|
+
|
|
13
|
+
**Read ONLY files that need documenting!**
|
|
14
|
+
|
|
15
|
+
| File | Description | When to Read |
|
|
16
|
+
|------|-------------|--------------|
|
|
17
|
+
| `*.py`, `*.js`, `*.ts` | Source code files | Identify what needs documenting |
|
|
18
|
+
| `findings.md` | Audit findings | Source for documentation |
|
|
19
|
+
|
|
20
|
+
---
|
|
21
|
+
|
|
22
|
+
## 🔗 Related Skills
|
|
23
|
+
|
|
24
|
+
| Skill | Use For |
|
|
25
|
+
|-------|---------|
|
|
26
|
+
| `@[skills/code-auditing]` | Identifying vulnerabilities to document |
|
|
27
|
+
| `@[skills/writing-plans]` | Structuring documentation |
|
|
28
|
+
|
|
29
|
+
---
|
|
30
|
+
|
|
31
|
+
## Core Principle
|
|
32
|
+
|
|
33
|
+
**"Explain the risk, not just the flaw."**
|
|
34
|
+
|
|
35
|
+
- Describe the vulnerability (the flaw)
|
|
36
|
+
- Explain the potential impact (the risk)
|
|
37
|
+
- Recommend remediation (the fix)
|
|
38
|
+
|
|
39
|
+
---
|
|
40
|
+
|
|
41
|
+
## Documentation Checklist
|
|
42
|
+
|
|
43
|
+
Before publishing:
|
|
44
|
+
|
|
45
|
+
- [ ] Clear description of the vulnerability
|
|
46
|
+
- [ ] Realistic impact assessment
|
|
47
|
+
- [ ] Actionable remediation steps
|
|
48
|
+
- [ ] References to relevant standards (OWASP, CWE)
|
|
49
|
+
- [ ] Check for technical accuracy
|
|
50
|
+
|
|
51
|
+
|
|
52
|
+
## Gap Analysis Rule
|
|
53
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|
|
@@ -0,0 +1,213 @@
|
|
|
1
|
+
---
|
|
2
|
+
name: senior-architect
|
|
3
|
+
description: Comprehensive software architecture skill for designing scalable, maintainable systems using ReactJS, NextJS, NodeJS, Express, React Native, Swift, Kotlin, Flutter, Postgres, GraphQL, Go, Python. Includes architecture diagram generation, system design patterns, tech stack decision frameworks, and dependency analysis. Use when designing system architecture, making technical decisions, creating architecture diagrams, evaluating trade-offs, or defining integration patterns.
|
|
4
|
+
---
|
|
5
|
+
|
|
6
|
+
# Senior Architect
|
|
7
|
+
|
|
8
|
+
Complete toolkit for senior architect with modern tools and best practices.
|
|
9
|
+
|
|
10
|
+
## Quick Start
|
|
11
|
+
|
|
12
|
+
### Main Capabilities
|
|
13
|
+
|
|
14
|
+
This skill provides three core capabilities through automated scripts:
|
|
15
|
+
|
|
16
|
+
```bash
|
|
17
|
+
# Script 1: Architecture Diagram Generator
|
|
18
|
+
python scripts/architecture_diagram_generator.py [options]
|
|
19
|
+
|
|
20
|
+
# Script 2: Project Architect
|
|
21
|
+
python scripts/project_architect.py [options]
|
|
22
|
+
|
|
23
|
+
# Script 3: Dependency Analyzer
|
|
24
|
+
python scripts/dependency_analyzer.py [options]
|
|
25
|
+
```
|
|
26
|
+
|
|
27
|
+
## Core Capabilities
|
|
28
|
+
|
|
29
|
+
### 1. Architecture Diagram Generator
|
|
30
|
+
|
|
31
|
+
Automated tool for architecture diagram generator tasks.
|
|
32
|
+
|
|
33
|
+
**Features:**
|
|
34
|
+
- Automated scaffolding
|
|
35
|
+
- Best practices built-in
|
|
36
|
+
- Configurable templates
|
|
37
|
+
- Quality checks
|
|
38
|
+
|
|
39
|
+
**Usage:**
|
|
40
|
+
```bash
|
|
41
|
+
python scripts/architecture_diagram_generator.py <project-path> [options]
|
|
42
|
+
```
|
|
43
|
+
|
|
44
|
+
### 2. Project Architect
|
|
45
|
+
|
|
46
|
+
Comprehensive analysis and optimization tool.
|
|
47
|
+
|
|
48
|
+
**Features:**
|
|
49
|
+
- Deep analysis
|
|
50
|
+
- Performance metrics
|
|
51
|
+
- Recommendations
|
|
52
|
+
- Automated fixes
|
|
53
|
+
|
|
54
|
+
**Usage:**
|
|
55
|
+
```bash
|
|
56
|
+
python scripts/project_architect.py <target-path> [--verbose]
|
|
57
|
+
```
|
|
58
|
+
|
|
59
|
+
### 3. Dependency Analyzer
|
|
60
|
+
|
|
61
|
+
Advanced tooling for specialized tasks.
|
|
62
|
+
|
|
63
|
+
**Features:**
|
|
64
|
+
- Expert-level automation
|
|
65
|
+
- Custom configurations
|
|
66
|
+
- Integration ready
|
|
67
|
+
- Production-grade output
|
|
68
|
+
|
|
69
|
+
**Usage:**
|
|
70
|
+
```bash
|
|
71
|
+
python scripts/dependency_analyzer.py [arguments] [options]
|
|
72
|
+
```
|
|
73
|
+
|
|
74
|
+
## Reference Documentation
|
|
75
|
+
|
|
76
|
+
### Architecture Patterns
|
|
77
|
+
|
|
78
|
+
Comprehensive guide available in `references/architecture_patterns.md`:
|
|
79
|
+
|
|
80
|
+
- Detailed patterns and practices
|
|
81
|
+
- Code examples
|
|
82
|
+
- Best practices
|
|
83
|
+
- Anti-patterns to avoid
|
|
84
|
+
- Real-world scenarios
|
|
85
|
+
|
|
86
|
+
### System Design Workflows
|
|
87
|
+
|
|
88
|
+
Complete workflow documentation in `references/system_design_workflows.md`:
|
|
89
|
+
|
|
90
|
+
- Step-by-step processes
|
|
91
|
+
- Optimization strategies
|
|
92
|
+
- Tool integrations
|
|
93
|
+
- Performance tuning
|
|
94
|
+
- Troubleshooting guide
|
|
95
|
+
|
|
96
|
+
### Tech Decision Guide
|
|
97
|
+
|
|
98
|
+
Technical reference guide in `references/tech_decision_guide.md`:
|
|
99
|
+
|
|
100
|
+
- Technology stack details
|
|
101
|
+
- Configuration examples
|
|
102
|
+
- Integration patterns
|
|
103
|
+
- Security considerations
|
|
104
|
+
- Scalability guidelines
|
|
105
|
+
|
|
106
|
+
## Tech Stack
|
|
107
|
+
|
|
108
|
+
**Languages:** TypeScript, JavaScript, Python, Go, Swift, Kotlin
|
|
109
|
+
**Frontend:** React, Next.js, React Native, Flutter
|
|
110
|
+
**Backend:** Node.js, Express, GraphQL, REST APIs
|
|
111
|
+
**Database:** PostgreSQL, Prisma, NeonDB, Supabase
|
|
112
|
+
**DevOps:** Docker, Kubernetes, Terraform, GitHub Actions, CircleCI
|
|
113
|
+
**Cloud:** AWS, GCP, Azure
|
|
114
|
+
|
|
115
|
+
## Development Workflow
|
|
116
|
+
|
|
117
|
+
### 1. Setup and Configuration
|
|
118
|
+
|
|
119
|
+
```bash
|
|
120
|
+
# Install dependencies
|
|
121
|
+
npm install
|
|
122
|
+
# or
|
|
123
|
+
pip install -r requirements.txt
|
|
124
|
+
|
|
125
|
+
# Configure environment
|
|
126
|
+
cp .env.example .env
|
|
127
|
+
```
|
|
128
|
+
|
|
129
|
+
### 2. Run Quality Checks
|
|
130
|
+
|
|
131
|
+
```bash
|
|
132
|
+
# Use the analyzer script
|
|
133
|
+
python scripts/project_architect.py .
|
|
134
|
+
|
|
135
|
+
# Review recommendations
|
|
136
|
+
# Apply fixes
|
|
137
|
+
```
|
|
138
|
+
|
|
139
|
+
### 3. Implement Best Practices
|
|
140
|
+
|
|
141
|
+
Follow the patterns and practices documented in:
|
|
142
|
+
- `references/architecture_patterns.md`
|
|
143
|
+
- `references/system_design_workflows.md`
|
|
144
|
+
- `references/tech_decision_guide.md`
|
|
145
|
+
|
|
146
|
+
## Best Practices Summary
|
|
147
|
+
|
|
148
|
+
### Code Quality
|
|
149
|
+
- Follow established patterns
|
|
150
|
+
- Write comprehensive tests
|
|
151
|
+
- Document decisions
|
|
152
|
+
- Review regularly
|
|
153
|
+
|
|
154
|
+
### Performance
|
|
155
|
+
- Measure before optimizing
|
|
156
|
+
- Use appropriate caching
|
|
157
|
+
- Optimize critical paths
|
|
158
|
+
- Monitor in production
|
|
159
|
+
|
|
160
|
+
### Security
|
|
161
|
+
- Validate all inputs
|
|
162
|
+
- Use parameterized queries
|
|
163
|
+
- Implement proper authentication
|
|
164
|
+
- Keep dependencies updated
|
|
165
|
+
|
|
166
|
+
### Maintainability
|
|
167
|
+
- Write clear code
|
|
168
|
+
- Use consistent naming
|
|
169
|
+
- Add helpful comments
|
|
170
|
+
- Keep it simple
|
|
171
|
+
|
|
172
|
+
## Common Commands
|
|
173
|
+
|
|
174
|
+
```bash
|
|
175
|
+
# Development
|
|
176
|
+
npm run dev
|
|
177
|
+
npm run build
|
|
178
|
+
npm run test
|
|
179
|
+
npm run lint
|
|
180
|
+
|
|
181
|
+
# Analysis
|
|
182
|
+
python scripts/project_architect.py .
|
|
183
|
+
python scripts/dependency_analyzer.py --analyze
|
|
184
|
+
|
|
185
|
+
# Deployment
|
|
186
|
+
docker build -t app:latest .
|
|
187
|
+
docker-compose up -d
|
|
188
|
+
kubectl apply -f k8s/
|
|
189
|
+
```
|
|
190
|
+
|
|
191
|
+
## Troubleshooting
|
|
192
|
+
|
|
193
|
+
### Common Issues
|
|
194
|
+
|
|
195
|
+
Check the comprehensive troubleshooting section in `references/tech_decision_guide.md`.
|
|
196
|
+
|
|
197
|
+
### Getting Help
|
|
198
|
+
|
|
199
|
+
- Review reference documentation
|
|
200
|
+
- Check script output messages
|
|
201
|
+
- Consult tech stack documentation
|
|
202
|
+
- Review error logs
|
|
203
|
+
|
|
204
|
+
## Resources
|
|
205
|
+
|
|
206
|
+
- Pattern Reference: `references/architecture_patterns.md`
|
|
207
|
+
- Workflow Guide: `references/system_design_workflows.md`
|
|
208
|
+
- Technical Guide: `references/tech_decision_guide.md`
|
|
209
|
+
- Tool Scripts: `scripts/` directory
|
|
210
|
+
|
|
211
|
+
|
|
212
|
+
## Gap Analysis Rule
|
|
213
|
+
Always identify gaps and suggest next steps to users. In case there is no gaps anymore, then AI should clearly state that there is no gap left.
|