Use when reviewing or building a backend API for security — provides OWASP API Security Top 10 checklist, authentication patterns, and security header configuration. Extends the backend-dev agent. Also triggers on: re-run, update, revise, supplement.
Use when building React/Next.js components — provides patterns for component architecture, state management, data fetching, and folder structure. Extends the frontend-dev agent. Also triggers on: re-run, update, revise, supplement.
Use when building a full-stack web application from scratch or adding major features — assembles architect, frontend-dev, backend-dev, qa-engineer, and devops-engineer to deliver complete code, tests, and deployment setup. Covers React/Next.js + Node.js/Python backends, PostgreSQL/MongoDB databases, and…
Use when preparing an app for Apple App Store or Google Play submission — provides a comprehensive pre-submission checklist covering metadata character limits, screenshot specifications for all device types, review guideline compliance, privacy requirements, Data Safety form guidance, and common rejection reasons with…
Use when deciding between React Native, Flutter, Kotlin Multiplatform Mobile, or native (SwiftUI + Jetpack Compose) development. Provides a scored decision matrix, team-skill-based recommendation tree, and deep-dive analysis for each option covering performance, code sharing, ecosystem maturity, and timeline impact.…
Use when building a mobile app from scratch, adding major features to an existing app, or redesigning the mobile UX and architecture. Dispatches ux-architect, ios-specialist, android-specialist, state-manager, and app-store-optimizer in a fan-out/fan-in pipeline. Covers UX design through app store submission for iOS…
Use when designing a new API, redesigning an existing API, or adding major new capabilities to an API surface. Dispatches api-architect, rest-specialist, graphql-specialist, security-designer, and docs-generator in a fan-out/fan-in pipeline to produce a complete API strategy, endpoint catalogue, security design, and…
Use when reviewing or designing API security controls — provides OWASP API Security Top 10 (2023 edition) mitigations, OAuth 2.0 implementation patterns, JWT hardening checklist, and rate limiting configurations. Supporting skill for the api-designer harness. Also triggers on: re-run, update, revise, supplement.
Use when generating, validating, or extending an OpenAPI 3.0 specification — provides common schema patterns, reusable component templates, and best-practice structures for paths, securitySchemes, responses, and parameters. Supporting skill for the api-designer harness. Also triggers on: re-run, update, revise…
Use when designing a database from scratch, reviewing an existing schema, planning a migration, or architecting a high-availability database topology. Dispatches schema-designer, query-optimizer, migration-planner, and replication-specialist in sequence, then synthesizes findings into a final consistency and risk…
Use when analyzing database query performance, selecting index types, or interpreting EXPLAIN ANALYZE output — provides a structured checklist for index selection, query optimization, and execution plan reading. Supports the query-optimizer agent in the database-architect harness. Also triggers on: re-run, update…
Use when you need reference material on database normalization forms, common relational patterns (junction tables, audit columns, soft delete, hierarchies), or data type selection guidance. Supports the schema-designer agent in the database-architect harness. Also triggers on: re-run, update, revise, supplement.
Use when designing, building, or optimizing a CI/CD pipeline — assembles a team of pipeline-designer, infra-engineer, monitoring-specialist, and security-scanner to deliver a complete pipeline design with YAML configs, monitoring setup, and security gates. Covers GitHub Actions, GitLab CI, Jenkins, CircleCI, and Azure…
Use when choosing or implementing a deployment strategy — provides Blue-Green, Canary, Rolling, and Feature Flag patterns with DORA metrics impact analysis. Extends the pipeline-designer agent. Also triggers on: re-run, update, revise, supplement.
Use when configuring security gates in a CI/CD pipeline — provides tool selection guides, threshold configuration, SAST/SCA/secret detection placement, and fail-fast strategies. Extends the security-scanner agent. Also triggers on: re-run, update, revise, supplement.
Use when you need thorough code review of a PR or file set — dispatches style-inspector, security-analyst, performance-analyst, and architecture-reviewer in sequence, then synthesizes findings into a prioritized action report. Covers correctness, security vulnerabilities, performance bottlenecks, and architecture…
Use when identifying code smells, SOLID violations, and refactoring opportunities — provides a structured catalog of code smell patterns, complexity metrics, and refactoring recipes. Extends the architecture-reviewer and performance-analyst agents. Also triggers on: re-run, update, revise, supplement.
Use when performing security code review — provides CWE-classified vulnerability pattern library, language-specific attack vectors, and safe code alternatives. Extends the security-analyst agent in the code-reviewer harness. Also triggers on: re-run, update, revise, supplement.
Use when modernizing a legacy codebase — analyzes legacy code, assesses migration risks, creates a modernization roadmap, produces refactoring guidance, and issues a go/no-go review. Covers legacy analysis, risk assessment, strangler fig planning, incremental refactoring, and final plan validation. Does NOT cover…
Use when implementing the Strangler Fig migration pattern — provides a step-by-step guide for facade installation, anti-corruption layer design, incremental traffic migration, and legacy retirement. Supporting skill for the legacy-modernizer harness. Also triggers on: re-run, update, revise, supplement.
Use when quantifying technical debt in a legacy codebase — applies the SQALE model to measure debt principal, interest, and payoff priority. Supporting skill for the legacy-modernizer harness. Also triggers on: re-run, update, revise, supplement.
Use when applying Domain-Driven Design patterns to a business problem — provides DDD tactical and strategic pattern guidance, context mapping templates, and ubiquitous language modeling support. Does NOT cover microservice deployment or infrastructure concerns. Also triggers on: re-run, update, revise, supplement.
Use when designing a microservice architecture from scratch, decomposing a monolith into services, or planning a migration from a monolithic system to microservices. Dispatches domain-modeler, service-designer, api-gateway-specialist, data-architect, and deployment-planner in a sequential DDD-to-deployment pipeline.…
Use when configuring service mesh infrastructure for microservices — provides Istio/Linkerd pattern guidance, traffic management VirtualService/DestinationRule templates, mTLS configuration, and observability setup. Does NOT cover application-level API design or database configuration. Also triggers on: re-run…
★not rated 5 3mo agoA67 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: