Install
$ agentstack add skill-sxzz-skills-sxzz ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Coding Practices
Code Organization
- Single responsibility: Each source file should have a clear, focused scope/purpose
- Split large files: Break files when they become large or handle too many concerns
- Co-locate types: Keep types and interfaces in the same file where they are used to preserve context
- Co-locate constants: Keep constants in the same file where they are used. Only extract to a dedicated file when shared across multiple files
Runtime Environment
- Prefer isomorphic code: Write runtime-agnostic code that works in Node, browser, and workers whenever possible
TypeScript
- Explicit return types: Declare return types explicitly when possible
- Avoid complex inline types: Extract complex types into dedicated
typeorinterfacedeclarations
Comments
- Avoid unnecessary comments: Code should be self-explanatory
- Explain "why" not "how": Comments should describe the reasoning or intent, not what the code does
Testing (Vitest)
- Test files:
foo.ts→foo.test.ts(same directory) - Use
describe/itAPI (nottest) - Use
toMatchSnapshotfor complex outputs - Use
toMatchFileSnapshotwith explicit path for language-specific snapshots
Tooling Choices
@antfu/ni Commands
| Command | Description | | -------------------------- | ------------------------------------------ | | ni | Install dependencies | | ni / ni -D | Add dependency / dev dependency | | nr | Run script | | nu | Upgrade dependencies | | nun | Uninstall dependency | | nci | Clean install (pnpm i --frozen-lockfile) | | nlx | Execute package (npx) |
ESLint + Prettier Setup
ESLint with @sxzz/eslint-config:
// eslint.config.js
// @ts-check
import { sxzz } from '@sxzz/eslint-config'
export default sxzz()
Prettier with @sxzz/prettier-config:
{
"prettier": "@sxzz/prettier-config"
}
Pre-commit Checklist
Projects typically do not use git hooks or lint-staged. Before committing, always run these manually:
pnpm run lint --fix # ESLint auto-fix
pnpm run format # Prettier formatting
pnpm run typecheck # Type checking (tsgo --noEmit)
Standard Scripts
| Script | Description | | ---------------- | ---------------------------------- | | lint | ESLint check | | lint:fix | ESLint auto-fix | | format | Prettier formatting | | test | Run tests (Vitest) | | typecheck | Type check (tsgo --noEmit) | | release | Version bump and publish (bumpp) | | prepublishOnly | Auto-build before publish |
build and dev scripts vary by project — check package.json for the actual commands.
References
| Topic | Description | Reference | | ------------------- | --------------------------------------------------- | -------------------------------------------------------- | | Project Setup | .gitignore, GitHub Actions workflows | [setting-up](references/setting-up.md) | | Library Development | tsdown bundling with tsdown-preset-sxzz, publishing | [library-development](references/library-development.md) |
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: sxzz
- Source: sxzz/skills
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.