Frontend

Review and mitigate XSS risks in WebF apps (sanitize HTML, validate input, avoid unsafe string rendering). Use when the user mentions XSS, sanitize HTML, innerHTML-like rendering, user-generated HTML, or “untrusted input”.

Guide developers through CI/CD pipeline design including architecture patterns, stage design, and security considerations

PRD 기반 프로젝트 부트스트래핑 & 스킬 관리 시스템.[Mode 1 - 새 프로젝트] "PRD 만들어줘", "새 프로젝트", "프로젝트 시작"[Mode 2 - 스킬 추가] "스킬 추가해줘", "frontend 스킬 만들어줘", "backend 스킬 적용"[Mode 2 - 디자인 참조] "이 사이트처럼 만들어줘", "이 디자인 참고해줘" + URL[Mode 2 - 동적 스킬] "AI 스킬 추가해줘", "이 패턴 스킬로 만들어줘" (템플릿 없어도 생성)[Mode 3 - 동기화] "PRD 변경사항 반영해줘", "스킬 동기화"[Mode 4 - 코드 역분석] "PRD 만들어줘" + 기존 코드 존재, "코드 분석해서 PRD 만들어줘"[Mode 5 - 문서 검증] "프로젝트 분석해줘" + PRD/CLAUDE.md 존재, "문서 검증해줘"

Use before implementation when refining rough ideas into specs. Guides collaborative design through Socratic questioning, alternative exploration, and incremental validation. Triggers: 'brainstorm', 'design', 'explore options', 'figure out', 'think through', 'what approach'.

Declarative macOS environment management via Nix. Use when user wants to install packages, add CLI tools, configure programs, manage dotfiles, or modify their development environment. Covers adding packages, the pnpm dlx wrapper pattern for npm tools, and rebuilding the system.

Guide developers through PostgreSQL setup, connection configuration, query patterns, and best practices

This skill should be used when the user asks about "ActiveRecord", "database queries", "query optimization", "N+1 queries", "eager loading", "associations", "migrations", "database indexes", "SQL performance", "ActiveRecord callbacks", "scopes", or needs guidance on efficient database access patterns in Rails 7+.

Guide for MUSUBIX SDD (Specification-Driven Development) workflow. Use this when asked to develop features using MUSUBIX methodology, create requirements, designs, or implement code following the 9 constitutional articles.

Build and deploy this Next.js application with PostgreSQL database. Use when building, deploying, setting up database, or preparing the project for production.

Toolkit for styling artifacts with a theme. These artifacts can be slides, docs, reportings, HTML landing pages, etc. There are 10 pre-set themes with colors/fonts that you can apply to any artifact that has been creating, or can generate a new theme on-the-fly.

Query and manage local Vercel AI SDK documentation mirror (271 docs across 24 sections). Search AI SDK UI hooks, streaming, providers, core functions, and React Server Components. Use when implementing AI features or answering AI SDK-related questions.

Comprehensive plugin architecture patterns, best practices, templates, and validation guidelines distilled from research sources. Use when: creating new plugins, designing plugin architecture, validating plugin structure, or optimizing token usage. Do NOT use for: general coding tasks, non-plugin development, or debugging existing code.

Guide experienced developers through REFACTOR phase of TDD cycle - improving code quality while maintaining green tests

Implement WCAG 2.1 accessibility standards for Vue 3 apps. Use when adding ARIA labels, keyboard navigation, screen reader support, or checking color contrast. Mentions "accessibility", "ARIA", "keyboard nav", "screen reader", or "color contrast".

Validates data with Yup schema builder using chainable methods, custom rules, and TypeScript inference. Use when validating forms with React Hook Form or Formik, or when needing flexible schema validation.

Use when implementing Disney's 12 animation principles with React Spring's physics-based animations

Generate Vitest configuration files for fast unit testing of JavaScript/TypeScript projects. Triggers on "create vitest config", "generate vitest configuration", "vitest setup", "unit test config".

Comprehensive CSS and UI/UX code review, issue identification, and automated fixing with documentation. Use when reviewing stylesheets, analyzing UI/UX patterns, auditing frontend code quality, fixing CSS issues, or documenting style improvements. Triggers on requests like "review my CSS", "audit UI/UX", "fix styling issues", "improve my styles", or "document CSS fixes".

Scrape and build queries to an official public health endpoints under a .gov domain.\

Generate comprehensive pytest test suites for CasareRPA components, including nodes, controllers, use cases, and domain entities. Use when: creating new tests, testing nodes, controller tests, use case tests, domain entity tests, test coverage needed, pytest test generation.