Best Practices

Build tools (Gradle KTS), Static Analysis (Detekt), and Testing standards. Use when configuring Gradle KTS build scripts, Detekt rules, or Kotlin build tooling.

Security standards for hardening Laravel applications. Use when securing authentication, authorization, input validation, or CSRF in Laravel.

Standards for Unit Tests, UI Tests (Compose), and Hilt Integration. Use when writing unit tests, Compose UI tests, or Hilt test modules in Android.

Code review, security audits, bug detection, alternative implementations, second opinions via OpenAI Codex. Use when user asks for code review, security analysis, implementation advice, bug detection, code patterns, or wants a second opinion on code. Supports uncommitted changes review. Do not use for architecture design or web searches.

SOLID principles for object-oriented design. Use when reviewing code quality, refactoring, designing classes or interfaces, or discussing architecture patterns.

A code analyzer skill that helps with code quality and best practices

Use before claiming work is complete - runs tests, checks git status, verifies changelog

Analyze codebase with parallel mapper agents

Go error handling patterns. Routes to specific patterns.

Stagehand automation patterns and best practices. Scripted browser flows, data seeding, and test orchestration. Trigger: When automating browser flows or test setup with Stagehand.

Bifunctors: two-argument functors for product categories.

Auto-grown skill at knight tour position 2

Auto-grown skill at knight tour position 3

Execute a frozen workflow contract and collect evidence by implementing only approved scope/files and checks. Use when PLAN_FROZEN=true and Execution Contract is complete, then hand off to review.

Run the quality loop (lint + test + build) to verify code quality and correctness. Use after making any code changes, before committing, or when asked to check/verify the project works.

Submit a pull request following DataProvider project standards

Review code changes for quality, security, and best practices

Development tooling: Deno runtime, JSR package registry, deno.json and package.json configuration, and editor settings. Use when setting up projects, choosing packages, or configuring build tools.

Trail of Bits security skills analysis for Solidity contracts. Use for deep smart contract security review with invariant suggestions.

Common mistake — proceeding with assumptions about ambiguous requirements instead of asking a clarifying question first. This skill reminds you to stop and ask before acting on uncertain interpretations.

Use this skill when presenting information from external sources, citing research, or answering factual questions. Assess source credibility and recency before relying on it.

Review the current changes and provide feedback.

TDD and coverage standards for Engram. Trigger: When implementing behavior changes in any package.

Design story architecture. Use when starting a new project or rethinking structure.

Use when changing local image build, serve or bootstrap logic, or canonical smoke behavior.

Prefer vscode-uri over node:path. Use when .ts files in /src import from node:path or use path.join, path.basename, path.dirname, path.resolve.

Answer questions about the Velox codebase or pull requests. Use when asked a question via "/query" or when the user wants to understand code, architecture, or implementation details.

Command Pattern pattern for C development

How to use the Moonwell adapter for lending/borrowing on Base (market discovery, APYs, collateral management, and common gotchas).

A comprehensive code review skill that analyzes code for best practices, potential bugs, security issues, and suggests improvements.

Enforces strict Spec-Driven Development. Prevents direct coding and ensures spec → generate → review loops.

Guidelines and checklists for creating a PR for Luxor.

Core Web Vitals optimization, Lighthouse audits, and performance monitoring.

Start new feature branch

Generate Helmet.js security middleware configuration for Express applications. Triggers on "create helmet config", "generate helmet configuration", "express security headers", "helmet setup".

Search codebase semantically by concept or functionality. Use when looking for code related to a topic, feature, or pattern rather than exact text matches.

Validate resume payloads using strict Pydantic models. Ensures that the resume JSON conforms to the required structure before processing.

Follow Keep a Changelog format with sections: Added, Changed, Deprecated, Removed, Fixed, Security Use when documenting code and APIs. Documentation category skill.

Snapshots are useful for detecting unintended UI changes but shouldn't be the only testing strategy Use when writing and organizing tests. Testing category skill.

Trusted domains, security assessment patterns, and domain research standards for WebFetch permissions

Ensure consistency of documentation files. Use this skill when you made a significant change to the codebase that may affect the documentation (like feature addition), or when you made a significant change to the documentation itself.

Security practices for Triatu. Use when adding data access, Server Actions, logging, or Supabase policies, and when reviewing security risks.

Refactor code to improve maintainability by consolidating redundant logic and applying DRY principles

Fix and update Turborepo (Turbo) configuration and task setup. Use for turbo.json errors, schema updates (pipeline -> tasks), and package-level config issues like missing extends.

Use when synthesizing perf findings into evidence-backed recommendations and decisions.

Idempotent Redundancy

Self-review before submitting a PR. Use when the user wants to review their changes before creating or submitting a pull request.

Checks the internal consistency of a software project, fixes any issues found.

Keep DevAgent changes paired with focused verification and only the necessary test updates.

Maintain realistic workload examples and regression tests that verify generated log extension behavior across edge cases.