Security
Secure coding practices and vulnerability prevention. Audits dependencies for vulnerabilities, enforces secure coding patterns, protects API routes, and prevents OWASP Top 10 vulnerabilities. Use when building applications, reviewing code for security issues, adding API protection, or ensuring production-ready security. Triggers on "secure the app", "check vulnerabilities", "protect API", "securi…
Auth
Authentication setup for web applications and APIs. Generates secure authentication flows with provider selection (NextAuth for Next.js, Passport for Express, golang-jwt for Go, Supabase for any stack using Supabase backend). Use when building apps requiring user authentication, protected routes, session management, or API authorization. Triggers on requests like "add authentication", "protect ro…
Observability
Instrument applications with distributed tracing, metrics, and monitoring. Supports OpenTelemetry (OTel), Datadog, New Relic, and Dynatrace. Generates instrumentation code for Next.js, Express, React, and Go. Use when adding observability, tracing, metrics, APM, or monitoring to applications. Triggers on "add observability", "instrument app", "add tracing", "monitor performance", "add metrics", o…
Logging
Structured logging for production applications. Implements JSON logging, log levels, context enrichment, error tracking, and trace correlation. Supports Next.js, Express, React, and Go. Use when setting up logging, adding error tracking, debugging issues, or building production-ready applications. Triggers on "add logging", "set up logs", "track errors", "debug", or when building production-ready…
Performance
Performance testing and optimization for web applications. Covers load testing, benchmarking, profiling, and performance budgets. Supports Next.js, Express, React, and Go. Use when testing application performance, running load tests, setting up benchmarks, optimizing slow code, or ensuring production readiness. Triggers on "load test", "benchmark", "performance test", "stress test", "profile", or…
Production Ready
Orchestrates production-readiness for web applications. Prompts users about production requirements and coordinates authentication, observability, security, logging, and performance testing. Use when building production-grade applications, deploying to production, or when user requests "production-ready" app. This skill is optional - each component skill (auth, observability, security, logging, p…