Frontend Auth & Patterns Bundle

Helps build and maintain secure frontend applications with authentication, billing, data tables, and integration patterns.

Browse all skill bundles

Included Skills (200)

Android Auth Integrator — Helps developers implement Clerk authentication in native Android apps using Kotlin and Jetpack Compose.
Clerk Router Patterns — Helps developers implement authentication patterns with Clerk and React Router.
Clerk Auth Patterns — Helps developers implement authentication in TanStack React Start applications.
Expo Auth Integrator — Helps developers add Clerk authentication to Expo and React Native applications.
Expo Brownfield — Expo Brownfield enables developers to embed React Native screens into existing native iOS or Android apps, supporting both isolated and integrated patterns. It integrates with SwiftUI, UIKit, Kotlin, and can be packaged as an AAR or XCFramework, allowing teams to modernize legacy apps without a full rewrite. Mobile engineers use the skill to extend native applications with React Native components while preserving native performance and deployment workflows.
Expo Web To Native — The skill teaches developers how to convert a React web application into a native iOS or Android app with Expo, preserving existing code from frameworks such as Next.js, Vite, or CRA. It maps web concepts like the DOM, CSS, React Router, localStorage, and window to native equivalents, allowing incremental reuse of components. Teams can efficiently transform a website into a mobile app or port a React codebase to React Native.
Expo Brownfield Integrator — This skill assists developers in embedding Expo and React Native modules into existing native iOS or Android applications using integrated or isolated approaches.
Native UI Builder — This tool enables developers to build high-performance native interfaces using SwiftUI and Jetpack Compose directly within Expo and React Native applications.
Expo UI — Expo UI lets developers build native interfaces with a single, consistent API that automatically generates SwiftUI components for iOS and Jetpack Compose components for Android. By replacing multiple third‑party libraries with one cohesive solution, it streamlines cross‑platform mobile projects that need native‑looking UI without platform‑specific code. This skill benefits teams seeking efficient, unified UI development across iOS and Android.
Clerk Router — Routes Clerk authentication tasks to the correct skill based on user needs.
Swift Auth Integrator — Helps developers implement Clerk authentication for native Swift and iOS applications.
Clerk Auth — Clerk Auth offers a hosted authentication and user‑management solution that integrates seamlessly into Next.js, React, or Express applications. It supplies ready‑made UI components, social login, email/password, and role‑based access control, protecting routes with clerkMiddleware and enabling multi‑tenant organization management. Developers and product teams benefit from streamlined user onboarding, secure route protection, and effortless synchronization of Clerk users with their own databases.
Clerk Vue Patterns — Provides Vue 3 patterns for Clerk auth using composables, router guards, and Pinia integration.
Eas App Stores — EAS allows developers to build and submit iOS and Android applications to TestFlight, the App Store, or Google Play, supporting Expo, React Native, and native projects. It automates build configuration, signing, versioning, and store submission while managing listing metadata. Additional tools such as eas‑hosting and expo‑brownfield extend the workflow to web hosting and integrating React Native screens into native apps.
React Native Architect — This skill provides production-ready architectural patterns for React Native and Expo developers to build scalable, high-performance, and offline-first mobile applications efficiently.
Jetpack Compose Architect — Provides expert architectural guidance and performance optimization strategies for Android developers building modern, scalable user interfaces with Jetpack Compose.
Expo Animation — Expo Animation automatically selects timing, spring, or gesture handling for each element, delivering smooth, responsive motion in React Native and Expo apps. It integrates Reanimated, Gesture Handler, Expo Router, and expo-haptics to provide seamless screen transitions, press feedback, and haptic responses, eliminating stutter on devices. Developers use the skill to polish app animations and create web animations with the animate utility.
Expo UI Architect — This comprehensive guide assists developers in building polished, native-feeling mobile applications using Expo Router, covering essential styling, navigation, and advanced component patterns.
Expo Upgrade — Guidelines for upgrading Expo SDK versions and fixing dependency issues
Supabase Auth Integrator — This tool assists developers in implementing secure Supabase authentication patterns within Next.js App Router projects for robust user management.
React Native Optimizer — Provides comprehensive best practices and performance guidelines to help developers build efficient, high-quality React Native and Expo mobile applications.
Dependency Security Auditor — This tool helps software engineers identify vulnerabilities, license conflicts, and upgrade paths across multi-language projects to ensure secure and compliant dependency management.
Clerk Authentication Specialist — This skill provides expert implementation patterns for Clerk authentication, middleware, organizations, and user synchronization to help developers secure their web applications efficiently.
Expo Native UI — The Expo Native UI skill enables developers to create polished, native‑looking screens for Expo apps using Apple HIG styling, semantic colors, native controls, SF Symbols, media, visual effects, gradients, storage, and responsive layout. It streamlines design so teams can focus on functionality while maintaining a consistent, high‑quality user experience. iOS and Android developers benefit from seamless integration with Expo’s ecosystem and the ability to extend navigation and animation through complementary skills.
Expo Router — Navigation and routing for Expo Router. Covers file-based routes, groups and dynamic routes, folder organization, Link with previews and context menus, native Stack, page titles, modals and form sheets, NativeTabs, headers and toolbars, and header search bars.
React Native Optimizer — This skill provides expert best practices for React Native and Expo developers to enhance mobile app performance, animations, and UI architecture.
Clerk Nuxt Patterns — Provides Nuxt 3 auth patterns with @clerk/nuxt for middleware, composables, and server API routes.
Dependency Health Auditor — This tool helps developers maintain secure, optimized, and clean npm projects by identifying vulnerabilities, outdated packages, and unused dependencies efficiently.
Auth Architecture Specialist — This skill assists developers in designing and implementing secure, scalable authentication and authorization systems using industry-standard patterns and robust security best practices.
React Migration Auditor — This skill provides a comprehensive library of verified grep commands to help developers identify deprecated APIs and breaking changes during React version upgrades.
Expo Animation Architect — This tool helps React Native developers build high-performance, fluid animations and gestures that feel natural and responsive on real mobile devices.
Expo Overview — The Expo Overview skill automatically activates when an Expo dependency is present or when a request references Expo, EAS, Expo Go, or an expo‑* package, acting as the central router for all Expo and EAS tasks. It interprets specifications such as navigation, tabs, stacks, maps, lists, and design requests, then delegates each to the appropriate expo‑* or eas‑* skill while enforcing shared setup rules. This provides developers with a streamlined, consistent workflow for building, upgrading, or shipping Expo‑based mobile applications.
React Native Reanimated — React Native Reanimated runs worklets and shared values directly on the UI thread, delivering smooth, high‑framerate animations even when the JavaScript thread is busy. It enables developers to create gesture‑driven interactions, shared‑element transitions, layout animations, and scroll‑driven effects at 60 fps, making it ideal for teams building polished mobile experiences and upgrading from Reanimated 3.
React Dependency Auditor — This tool provides a compatibility matrix for React 18 and 19 dependencies, helping developers resolve version conflicts and ensure smooth framework upgrades.
Expo Development Platform — Build, deploy, and update React Native apps using Expo's file-based routing, cloud builds, and native device APIs.
Expo Upgrade Assistant — This tool provides developers with essential guidelines and migration strategies for upgrading Expo SDK versions and resolving complex dependency conflicts.
Dependency Security Auditor — This tool helps developers identify vulnerabilities, licensing conflicts, and outdated packages to ensure secure, compliant, and well-maintained project dependency supply chains.
Next.js Architecture Guide — This skill provides architectural patterns and best practices for developers building modern, scalable full-stack applications using the Next.js App Router framework.
Clerk Billing — Manages SaaS subscriptions, pricing tables, and checkout flows for developers.
React UI Patterns — This guide provides developers with robust patterns for managing loading states, error handling, and data fetching to ensure a seamless React user experience.
Dependency Upgrader — Helps developers safely upgrade major dependencies with analysis and testing strategies.
Detox — Detox is an end‑to‑end testing framework that executes Jest tests on React Native apps running in iOS simulators or Android emulators, automatically waiting for the app to idle before each step. It enables developers to configure Detox, write or repair E2E tests, debug hanging tests or element‑finding issues, and integrate the tests into continuous‑integration pipelines. Mobile app teams benefit from reliable, automated testing that ensures their React Native applications perform consistently across devices.
API Security Auditor — This tool helps developers implement robust security patterns for API endpoints, ensuring secure authentication, authorization, and input validation across their application architecture.
Nativewind — NativeWind allows developers to apply Tailwind CSS directly in React Native, replacing the traditional StyleSheet with className usage. It streamlines setup, supports responsive design, dark mode, animations, and platform‑specific styling, enabling mobile developers to maintain a consistent, utility‑first UI across iOS and Android. This skill benefits teams that value rapid, maintainable styling and cross‑platform consistency.
React UI Patterns — This skill provides modern React UI patterns for loading, error handling, and data fetching to help developers build responsive, user-friendly web components.
Expo Animation Builder — A skill for building performant React Native animations that work flawlessly on real mobile devices.
React Architecture Guide — This guide provides developers with essential React design patterns, hook best practices, and state management strategies for building scalable, production-ready web applications.
Remix — Remix constructs full‑stack React applications with Remix v2 and the React Router framework mode, providing nested routing, loader and action patterns, and progressive enhancement. It deploys to Node.js, Cloudflare Workers, and other adapters, and eases migration from Remix v2 to React Router v7. Developers building complex, server‑rendered React apps benefit from its streamlined routing and data‑loading architecture.
React Native Assistant — This skill helps developers build cross-platform iOS and Android applications using React Native and TypeScript.
Expo Dom — Use Expo DOM components to run web code in a webview on native and as-is on web. Migrate web code to native incrementally. For the end-to-end migration of a whole web app, use the expo-web-to-native skill.
Clerk CLI Operator — Aids developers in managing Clerk authentication, users, and APIs through the command line interface.
Android Intent Auditor — This tool assists security professionals in identifying vulnerabilities within Android inter-process communication by analyzing exported components and intent-based data flows for potential exploits.
Dependency Auditor — Audits project dependencies for outdated packages, security issues, and breaking changes.
FastAPI Router Generator — This tool helps developers efficiently build standardized FastAPI routers with integrated CRUD operations, authentication dependencies, and proper HTTP response model configurations.
FastAPI Router Builder — Helps developers create FastAPI routers with proper authentication, response models, and HTTP status codes.
Dependency Security Auditor — This tool helps developers identify security vulnerabilities, license compliance issues, and outdated packages to ensure a secure and maintainable software supply chain.
Smart Contract Auditor — This skill assists developers in identifying vulnerabilities and implementing secure coding patterns to ensure robust and reliable smart contract development.
Clerk Setup — Automates Clerk authentication integration for developers using the CLI and framework quickstarts.
React View Transitions — This skill helps developers implement smooth, native-feeling UI animations and page transitions in React applications using the browser's native View Transition API.
React Performance Optimizer — This skill applies Vercel Engineering's performance guidelines to help developers write, review, and refactor high-performance React and Next.js applications with optimal code patterns.
GCP Auth — The GCP Auth skill configures authentication and authorization for Google Cloud, managing Application Default Credentials, service account impersonation, Workload Identity Federation for GKE and external clouds, and OIDC ID tokens for service‑to‑service communication. It enables developers and operations teams to set up local development access, deploy to Cloud Run, Cloud Functions, or GKE, and securely call private Google Cloud APIs, streamlining secure access across environments, improving deployment speed, and reducing configuration errors.
React View Transitions — This skill assists developers in implementing native browser view transitions, shared element animations, and accessible UI state changes within React and Next.js applications.
Expo Project Structure — Folder structure for a new Expo app. Use when scaffolding or laying out a new Expo project with Expo Router, or deciding where a file should live in one. For new projects only — never restructure an existing app to match.
Clerk UI Customizer — Developers create custom authentication flows and style Clerk components for branding.
API Authentication Auditor — This tool evaluates API authentication mechanisms and session management for security vulnerabilities to help developers and security professionals identify and remediate critical bypass risks.
Expo Module — The Expo Module guide teaches developers to create and write native modules and views for Expo using the Expo Modules API in Swift, Kotlin, and TypeScript. It covers module definition DSL, native views, shared objects, config plugins, lifecycle hooks, autolinking, and the type system, enabling teams to build or modify native modules efficiently. This resource is ideal for developers integrating new native functionality into Expo projects.
Auth System Architect — Designs and implements authentication and authorization systems for web applications, helping developers secure their applications.
React Composition Patterns — This tool provides scalable React composition patterns to help developers refactor complex components, reduce boolean prop proliferation, and design flexible, maintainable component libraries.
Expo Development Client — Automates the creation of custom Expo development clients using EAS Build to support native code testing for professional mobile application developers.
Expo Module Developer — This guide assists developers in building and integrating native modules and views for Expo applications using Swift, Kotlin, and TypeScript.
React 19 Migration — This tool provides essential migration patterns for updating test suites to React 19, assisting developers in resolving breaking changes and test warnings.
React Flow Generator — This tool helps developers rapidly build custom React Flow node components by providing standardized TypeScript templates and integrated state management patterns.
React Migration Assistant — This tool helps developers preserve existing React 18 concurrent patterns while safely integrating new React 19 APIs during application migration projects.
React Lifecycle Migrator — This tool provides precise migration patterns for unsafe React class component lifecycle methods, helping developers update legacy codebases to React 18 standards.
React Composition Architect — This tool assists developers in refactoring complex React components by implementing scalable composition patterns, compound components, and efficient state management strategies.
Dependency Upgrade Specialist — This expert assistant helps developers safely plan and execute incremental dependency upgrades while mitigating risks and managing breaking changes through structured migration strategies.
Supply Chain Auditor — This tool secures software projects by identifying typosquatting, dependency confusion, and known vulnerabilities to help developers and security teams mitigate supply chain risks.
Supply Chain Auditor — This tool helps security professionals and developers identify high-risk project dependencies by evaluating maintenance patterns and potential exploitation vectors within the supply chain.
React Migration Assistant — This tool provides developers with essential migration patterns and code refactoring guidance for upgrading legacy React applications to React 19 standards.
Android Development Expert — This skill provides comprehensive guidance for building, architecting, and optimizing production-grade Android applications across native, cross-platform, and hybrid development environments for mobile engineers.
Functional React Patterns — This skill provides practical patterns for integrating fp-ts into React applications to improve type-safe state management, data fetching, and robust form validation.
Shopify App Architect — This skill provides expert patterns for building embedded Shopify applications using Remix, React, App Bridge, and the Shopify Admin GraphQL API.
Functional Backend Architect — This skill provides functional programming patterns for Node.js and Deno developers to build type-safe, testable backend services using fp-ts and dependency injection.
Frontend Architecture Guide — This skill provides standardized patterns for React and Next.js development to help engineers build performant, scalable, and maintainable user interfaces.
Medical Bill Auditor — This tool helps patients identify billing errors by matching provider invoices to insurance explanations of benefits and drafting professional dispute letters.
Functional React Patterns — This skill provides practical functional programming patterns using fp-ts to help React developers manage state, forms, and data fetching effectively.
Expo Design System — The Expo Design System skill creates and maintains a reusable theme of design tokens—color, spacing, typography, radius, shadow, and motion—within an Expo app, ensuring consistent component structures across variants, sizes, and states. It extracts repeated views into shared components, allowing both hand‑crafted and AI‑generated screens to appear polished and native. Designers, developers, and product teams benefit from standardized styles, library extensions, and drift audits that produce cohesive, high‑quality interfaces.
Material UI — The Material UI skill integrates the @mui/material React component library into React or Next.js App Router projects, allowing developers to add prebuilt UI components such as buttons, forms, dialogs, tables, and layout grids. It provides a theming system that lets teams create brand themes with createTheme and ThemeProvider, style components with the sx prop, and implement dark mode via CSS theme variables. The skill also supports upgrading legacy v5–v7 code to the current v9 API with official codemods, streamlining maintenance for modern web applications.
Dependency Confusion Auditor — This tool identifies and mitigates supply-chain risks by detecting claimable internal package names and enforcing secure source configurations for developers and security engineers.
Mobile Application Pentester — Performs comprehensive security assessments on iOS and Android applications using OWASP MASTG standards to identify vulnerabilities for developers and security professionals.
TanStack App Builder — Build full-stack React applications with type-safe server functions and file-based routing using TanStack Start and Vite.
Conform — Conform validates native HTML FormData against a Zod, Valibot, or Yup schema on the server and optionally on the client, ensuring forms work before JavaScript loads. It is ideal for developers building robust React, Next.js Server Actions, or Remix actions who need a single schema shared across client and server and dynamic field list handling. The library offers a seamless, future‑proof API that guarantees reliable form validation.
Connection Auth Builder — Helps developers build authentication rules for Monte Carlo connections by fetching live schemas.
API Integration Patterns — Production-ready patterns for frontend developers to build resilient and user-friendly API integrations.
Credential Stuffing Hunter — This tool assists security analysts in identifying credential stuffing attacks by performing statistical analysis on authentication logs to detect anomalous login patterns.
React Performance Optimizer — This guide provides Vercel-backed performance standards to help developers build efficient, high-speed React and Next.js applications through optimized component and data-fetching patterns.
Wagmi — Wagmi supplies React hooks that let developers connect Ethereum wallets, interact with smart contracts, send transactions, and switch chains directly within React or Next.js applications. It enables front‑end teams to build responsive Web3 interfaces and upgrade from Wagmi v2 to v3 with minimal friction. The skill benefits front‑end developers and product teams creating blockchain‑enabled web experiences.
Next Safe Action — Next Safe Action provides a type‑safe library for Next.js Server Actions that integrates Zod schema validation, authentication middleware, and typed error handling. Developers validate inputs, manage errors gracefully, and invoke actions from client components via hooks. The skill is essential for Next.js teams that require robust, type‑safe mutations within the App Router.
iOS UI Builder — Helps developers create native-feeling iPhone app screens that follow Apple's design conventions.
Drei Helper Library — Assists developers using React Three Fiber by providing ready-made components and hooks for common 3D patterns, simplifying development.
TanStack Query Expert — Assists React developers with data fetching and state management using TanStack Query, enabling efficient and type-safe applications.
Network Data Manager — This skill assists developers in implementing, debugging, and optimizing robust network requests, API integrations, and caching strategies within Expo applications.
Android Malware Analyzer — This tool performs static analysis on Android APKs to help security analysts identify malicious patterns, dangerous permissions, and obfuscated code without execution.
React Component Architect — This tool assists developers in generating high-quality, accessible, and type-safe React components using standardized patterns and best practices for modern web applications.
Memory Safety Advisor — This tool provides cross-language memory safety patterns to help systems developers prevent common vulnerabilities like leaks and use-after-free errors during resource management.
Cosmos DB Architect — This skill helps Python developers implement production-grade Azure Cosmos DB services using FastAPI, secure authentication patterns, and robust service-layer CRUD operations.
Solid Js — The skill teaches SolidJS, a fine‑grained reactive UI library that eliminates the virtual DOM, enabling developers to build high‑performance interfaces. It equips teams seeking a React alternative with superior reactivity primitives and full‑stack capabilities through SolidStart, including server‑side rendering and server functions. The curriculum covers signals, effects, memos, stores, and migration patterns for React users.
Kotlin Multiplatform — Kotlin Multiplatform lets developers share core business logic, networking, and data layers across Android, iOS, web, and desktop while keeping native user interfaces. The skill guides the setup of shared modules, integration of Ktor or SQLDelight, creation of shared ViewModels, and testing of shared code, including migration to Android Gradle Plugin 9. Mobile and cross‑platform teams benefit from efficient code reuse and streamlined maintenance.
Expo DOM Integrator — This tool enables developers to seamlessly integrate web-only libraries and components into Expo applications by rendering them within native webviews.
Laravel Security Auditor — This tool identifies vulnerabilities and misconfigurations in Laravel applications to help developers implement robust security practices and protect sensitive data.
Mobile Storage Auditor — This tool identifies and exploits insecure local data storage vulnerabilities in mobile applications to assist security professionals in performing comprehensive data-at-rest assessments.
Capacitor — Capacitor transforms a web application into a native iOS or Android app, enabling direct access to device features such as the camera through JavaScript. It provides a seamless bridge between web code and native APIs, allowing developers to package and publish hybrid apps to the App Store or Google Play. This skill benefits teams that need to convert existing websites into fully functional mobile applications without rewriting code for each platform.
GitHub Actions Auditor — Identifies exploitable vulnerabilities in GitHub Actions with concrete attack scenarios for security teams.
Neon Authentication Manager — This tool enables developers to integrate secure, managed authentication features like OAuth, MFA, and magic links directly into their Neon-backed applications.
Frontend Architecture Framework — This skill provides a modular, framework-agnostic architecture for React and React Native developers to organize code into scalable, maintainable, and portable feature-based structures.
Next.js Development Expert — This workflow assists developers in building modern, scalable web applications using Next.js 14+, App Router, TypeScript, and Tailwind CSS best practices.
Expo Tailwind Integrator — This tool automates the configuration of Tailwind CSS v4 and NativeWind v5 in Expo projects to enable efficient universal styling across platforms.
Data Boundary Guard — Ensures type safety at the network edge for React and React Native applications.
RESTler API Fuzzer — Automates stateful security testing of REST APIs using OpenAPI specifications to identify injection vulnerabilities, authentication bypasses, and unhandled server-side crash conditions.
Nextjs Architecture Guide — This guide provides developers with essential patterns for Next.js App Router, including component selection, data fetching strategies, and effective file-based routing structures.
Mobile Deep Link Auditor — This tool assists security professionals by identifying and testing deep link vulnerabilities in mobile applications to prevent unauthorized access and intent hijacking.
Iron Session — The skill implements encrypted, signed cookie sessions with iron‑session, removing the need for a session database in Next.js or Node.js applications. It supports cookie‑based authentication, stateless sessions, login and logout flows with the App Router, page protection via session checks, session password rotation, and upgrading from iron‑session v8 to v9. Developers who need secure, scalable session management without additional infrastructure benefit from this streamlined solution.
Semgrep — Semgrep is an open-source static analysis tool that finds bugs, security vulnerabilities and anti-patterns by matching code patterns. Use it to scan a repository, write custom YAML rules, auto-fix findings, or add a Semgrep scan with SARIF output to GitHub Actions or other CI.
Pass-The-Hash Detector — This tool identifies Pass-the-Hash attacks by analyzing NTLM authentication patterns, helping security analysts detect lateral movement and scope potential compromises during incident response.
Passport Js — Passport.js is authentication middleware for Express and other Node.js frameworks, with strategies for local passwords, Google, GitHub and many other providers. Use when implementing login with Google/GitHub/email, OAuth, session auth, or social login.
Auth Implementation Assistant — Implements authentication, login/signup, OAuth, and session management for TypeScript applications across various frameworks and databases, simplifying auth setup.
Multi-Agent Orchestrator — This skill enables developers to coordinate specialized agents for complex, multi-domain tasks, ensuring comprehensive analysis and efficient execution through native orchestration patterns.
API Security Auditor — This tool performs comprehensive security assessments on REST, GraphQL, and gRPC APIs to help developers identify and remediate critical vulnerabilities.
Web Security Auditor — This workflow assists security professionals and developers in identifying and validating OWASP Top 10 vulnerabilities within web applications through systematic testing phases.
Finnish Text Humanizer — This tool refines Finnish text by removing AI-generated markers and stylistic patterns to ensure content sounds natural and authentic to native speakers.
Zustand Store Generator — This tool helps React developers build type-safe Zustand stores by implementing standardized patterns, middleware integration, and optimized state selection for improved performance.
Android UI Tester — Automates end-to-end UI testing and visual verification for Android applications by executing ADB commands to interact with and inspect emulator elements.
React Batching Optimizer — This skill helps React developers diagnose and resolve state batching regressions in class components caused by the React 18 automatic batching update.
NTLM Relay Detector — This tool identifies NTLM relay attacks by analyzing Windows Event logs for suspicious authentication patterns, helping security analysts detect unauthorized credential relay activity.
Secure JWT Implementation — This skill assists developers in implementing robust JWT signing and verification while mitigating common cryptographic vulnerabilities to ensure secure authentication and authorization workflows.
React Ref Migrator — This tool provides precise migration patterns for converting deprecated React string refs to modern createRef or callback ref implementations for React 18 and 19.
HubSpot Integration Specialist — This skill provides expert patterns for developers implementing HubSpot CRM integrations, covering OAuth authentication, API operations, and SDK usage for Node.js and Python.
JWT Vulnerability Tester — This tool helps security professionals identify and validate JWT algorithm confusion, signature forgery, and authentication bypass vulnerabilities within API authentication implementations.
Tailwind Architecture Guide — This skill provides developers with modern Tailwind CSS v4 best practices, focusing on CSS-first configuration, design token architecture, and high-performance styling patterns.
JWT None Attack — This tool helps security professionals test authentication systems by crafting JWTs with the none algorithm to identify and validate signature verification vulnerabilities.
Cloud Credential Auditor — This tool identifies compromised cloud credentials by analyzing anomalous API activity and threat patterns to assist security teams in rapid incident response.
Security Code Auditor — This tool provides rigorous, evidence-based security analysis for pull requests and commits to help developers identify and mitigate high-risk vulnerabilities effectively.
Android Malware Analyst — Analyzes suspicious Android APK files using JADX to identify malicious behaviors, data theft, and security threats for cybersecurity researchers and malware analysts.
tRPC API Architect — This skill assists developers in building end-to-end type-safe full-stack applications by streamlining tRPC router, procedure, and middleware implementation within TypeScript environments.
Hardware Security Authentication — This skill assists developers in building FIDO2/WebAuthn relying party servers to implement phishing-resistant MFA and passkey authentication for secure user identity management.
React — The skill constructs and refines React user interfaces, creating components, managing state, effects, forms, and data loading in line with React 19 conventions. It optimizes rendering, upgrades projects, and integrates the React Compiler, handling Server and Client Components, Suspense, error boundaries, and Actions. Clients receive a streamlined, up‑to‑date React setup that eliminates unnecessary re‑renders and supports modern tooling such as Vite.
Golang — The skill compiles Go programs into single static binaries, manages dependencies, runs tests, vetting, and benchmarks, and handles cross‑compilation for Linux, macOS, and Windows. It assists developers who need to set up or upgrade Go projects, fix data races, write generic code, or build release binaries for Docker. The service streamlines module initialization, dependency tidying, and efficient testing workflows.
SBOM Vulnerability Analyzer — This tool parses SBOM files to identify supply chain vulnerabilities by correlating software components against the NVD database for security teams and developers.
Lateral Movement Detector — This tool identifies lateral movement techniques in enterprise networks by analyzing authentication logs and traffic patterns to assist security analysts in threat hunting.
Frontend Architecture Standards — This skill provides senior-level guidance for building scalable, performance-optimized React applications using strict architectural patterns and feature-based code organization for professional frontend engineers.
Prompt Safety Auditor — This tool analyzes AI prompts for security vulnerabilities, bias, and safety risks while providing actionable improvements for developers building responsible and effective AI applications.
Google Cloud Recipe Auth — Provides expert guidance on Identity and Access Management (IAM) and authenticating and authorizing to Google Cloud services and APIs, covering human users, service identities, Application Default Credentials (ADC), and best practices for secure access.
Expo Dev Client — Build and distribute Expo development clients locally or via TestFlight for internal testing. For production TestFlight releases and store submission, use the eas-app-stores skill.
Expo Deployment Manager — This tool streamlines Expo application deployments by automating EAS build, submission, and configuration tasks for mobile developers and release engineers across all platforms.
Adversarial Code Auditor — This adversarial auditing tool rigorously identifies logic errors and security vulnerabilities to ensure code correctness for developers seeking deep, critical quality assurance.
Playwright Test Auditor — This tool systematically audits Playwright test suites for anti-patterns and best practices to help developers improve test reliability and code quality.
Cloudflare Security Auditor — This tool helps security professionals and developers identify exploitable vulnerabilities within authorized codebases through structured reconnaissance, adversarial review, and comprehensive security reporting.
Sandbox Dependency Installer — This tool installs npm packages on a local ext4 filesystem to prevent native binary crashes caused by virtiofs-mounted workspace limitations in Docker.
Dotnet Upgrade Assistant — This tool provides structured prompts to help developers analyze, plan, and execute complex .NET framework migrations with minimal risk and effort.
Clerk Testing — Simplifies E2E testing for Clerk applications using Playwright or Cypress.
React Frontend Specialist — This skill assists developers in building high-performance, accessible web applications using modern React 19, Next.js 15, and advanced frontend architectural patterns.
React Flow Node Creator — Helps developers build standardized React Flow node components with TypeScript and store integration.
CI/CD Security Auditor — Automates the identification of supply chain vulnerabilities in GitHub Actions and CI/CD pipelines to help security engineers harden build system configurations.
Automated Code Auditor — This tool performs deep security and quality audits on codebases to help developers identify vulnerabilities, bugs, and performance issues with actionable fixes.
Zustand Store Generator — This tool helps developers create type-safe Zustand stores using standardized patterns, middleware integration, and optimized state selection for React applications.
Design Authenticity Auditor — This tool identifies and resolves generic, AI-generated patterns in web design and copy to help developers create premium, human-crafted digital experiences.
SSL TLS Security Auditor — This tool utilizes the sslyze library to evaluate server TLS configurations, identifying protocol weaknesses, cipher vulnerabilities, and certificate issues for cybersecurity professionals.
WordPress Security Auditor — This tool helps security professionals identify vulnerabilities and assess attack surfaces within WordPress installations through authorized and controlled penetration testing procedures.
Smart Contract Auditor — This tool performs static and symbolic analysis on Solidity code to help blockchain developers identify and mitigate critical security vulnerabilities before deployment.
Automated Codebase Auditor — This tool autonomously performs comprehensive overnight audits of security, performance, and code quality to provide developers with a detailed, severity-rated report.
SQL Security Auditor — This tool provides comprehensive security and quality analysis for SQL queries, helping developers prevent injection vulnerabilities and enforce database best practices.
Pre-Push Codebase Auditor — This tool performs a comprehensive line-by-line audit of your codebase to remove junk files, resolve security vulnerabilities, and ensure production-ready code quality.
RAG Security Auditor — Probes Retrieval-Augmented Generation pipelines for indirect prompt injection vulnerabilities to help security engineers validate guardrails and secure document-based AI systems.
UEFI Firmware Auditor — This tool utilizes Intel CHIPSEC to assess platform firmware security, identify hardware vulnerabilities, and analyze low-level configurations for cybersecurity professionals and researchers.
Skill Ecosystem Auditor — This tool audits and optimizes AI skill ecosystems by identifying code quality issues, security vulnerabilities, cost inefficiencies, and structural gaps for developers.
BFLA Security Auditor — This tool helps security professionals identify vertical privilege escalation vulnerabilities by testing if unauthorized users can access restricted administrative API functions.
BOPLA Security Auditor — This tool identifies and tests for OWASP API3:2023 vulnerabilities, helping security professionals mitigate excessive data exposure and mass assignment risks in API endpoints.
Mobile Development Expert — This skill assists developers in building high-performance cross-platform and native mobile applications using modern architecture, best practices, and efficient platform-specific integrations.
Rive — The Rive skill lets developers load .riv files, control state machines, and react to user input, embedding interactive animations in web and mobile apps. It is ideal for dynamic UI and character animations, animated icons with hover or click states, and game‑like interactions in production environments. Product designers, UI/UX teams, and mobile developers benefit from seamless, responsive animation integration.
WordPress Security Auditor — This tool helps WordPress developers secure their plugins, themes, and blocks by auditing code for performance, internationalization, and critical security vulnerabilities.
Repository Health Auditor — This tool audits and repairs repository hygiene, helping developers maintain code quality, dependency integrity, and project documentation through automated health checks and fixes.
Security Risk Auditor — This tool performs rigorous security threat modeling and compliance assessments to help engineers identify vulnerabilities before deploying sensitive data or production changes.
Bluetooth Security Auditor — This tool automates Bluetooth Low Energy security assessments to help cybersecurity professionals identify vulnerabilities and weak pairing configurations in IoT devices.
NestJS Architecture Specialist — This expert assists developers in building scalable, enterprise-grade Node.js applications by applying NestJS best practices for architecture, dependency injection, and robust testing strategies.
STRIDE Threat Modeler — Systematically identify security vulnerabilities using the STRIDE methodology to assist developers and security engineers in creating robust, threat-aware system architecture documentation.
Gke Platform Security — The Gke Platform Security skill hardens GKE clusters by deploying Secret Manager, RBAC hardening, Binary Authorization, Secrets Encryption, Security Posture, Shielded Nodes, GKE Sandbox, and cross‑service IAM patterns. It enables cluster administrators and security teams to secure control planes, enforce strict RBAC, and manage GKE IAM roles, while workload‑level security is handled by separate specialized skills.
Azure EventGrid Integration — Develop event-driven Java applications by leveraging the Azure Event Grid SDK to publish events and implement robust pub/sub messaging patterns efficiently.
Azure Authentication Helper — This tool simplifies implementing secure Microsoft Entra ID authentication for .NET developers using the Azure Identity library and credential chains.
Workflow Blueprint Generator — This tool generates comprehensive technical documentation and implementation blueprints for software developers by analyzing project architecture, technology stacks, and complex data flow patterns.
Copilot Configuration Generator — This tool analyzes codebase patterns to generate comprehensive copilot-instructions.md files, helping developers ensure GitHub Copilot adheres to specific project standards and architectural requirements.
Dependabot Configuration Manager — This skill assists developers in configuring GitHub Dependabot to automate dependency updates, manage security alerts, and optimize pull request workflows for secure repositories.
FastAPI Backend Architect — This workflow assists developers in building production-ready, asynchronous Python backends by streamlining FastAPI setup, database integration, and secure API implementation patterns.
Google Workspace SSO — Configures SAML 2.0 single sign-on for Google Workspace with external identity providers to centralize authentication and enhance security for organizational user access.
TanStack Table Builder — Assists developers in creating customizable and feature-rich data tables using the headless TanStack Table library.
uv — Fast Python package and project manager — uv consolidates pip, pip‑tools, pipx, poetry, pyenv, and virtualenv into a single command‑line tool that installs packages, creates virtual environments, locks dependencies, and manages Python versions. It streamlines project setup, dependency upgrades, lockfile creation, migration from requirements.txt, inline execution, and tool invocation with uvx, accelerating installs in CI and Docker. Developers seeking a unified, efficient workflow for Python projects benefit from its speed and simplicity.
Stripe Integration Specialist — This skill helps developers implement production-grade Stripe integrations, including subscriptions, payments, and billing, using Next.js, Express, or Django.
Frontend Development Expert — This skill assists developers in building, optimizing, and maintaining high-performance React and Next.js applications through automated scaffolding, component generation, and quality analysis.
Container Security Scanner — Scans container images for vulnerabilities and misconfigurations to help DevOps teams.
Enterprise .NET Architect — This expert assistant helps developers build scalable, secure, and high-performance ASP.NET Core 8+ backend services using industry-standard patterns and robust data access strategies.
Serverless Security Hardener — This tool hardens serverless compute platforms by implementing least-privilege IAM roles, dependency scanning, and runtime monitoring to assist cloud security engineers and developers.