#674 by GitHub stars
CloudAI-X/claude-workflow-v2
Universal Claude Code workflow plugin with agents, skills, hooks, and commands
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
skills/analyzing-projects/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/convex-backend/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/database-design/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/designing-apis/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/designing-architecture/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/designing-tests/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/devops-infrastructure/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/error-handling/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/managing-git/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/optimizing-performance/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/parallel-execution/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/security-patterns/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/vercel-react-best-practices/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
skills/web-design-guidelines/SKILL.md
Week of Oct 26, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
3b5a89ec1c10 → 3b5a89ec1c10
View on GitHubAdd to my skills
Verified commit 3b5a89ec1c106dd387e372aec073f9401336382a
git clone --filter=blob:none --no-checkout https://github.com/CloudAI-X/claude-workflow-v2.git .hotskills/cloudai-x-claude-workflow-v2 && git -C .hotskills/cloudai-x-claude-workflow-v2 checkout --detach 3b5a89ec1c106dd387e372aec073f9401336382a
# Copy each selected skill directory from .hotskills/cloudai-x-claude-workflow-v2 into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/CloudAI-X/claude-workflow-v2.git .hotskills/cloudai-x-claude-workflow-v2 && git -C .hotskills/cloudai-x-claude-workflow-v2 checkout --detach 3b5a89ec1c106dd387e372aec073f9401336382a
# Copy each selected skill directory from .hotskills/cloudai-x-claude-workflow-v2 into .agents/skills/<skill-name>/1.4kGitHub stars
4stars in 7 days
14skills in this repository
0commits in 30 days
Heat
3.7- Star growth, last 7 daysAhead of 61% of tracked repositories
- Star growth, last 24 hoursAhead of 71% of tracked repositories
- Rank movement, last 7 daysAhead of 6% of tracked repositories
- Commits, last 30 daysAhead of 0% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- analyzing-projects
skills/analyzing-projects - convex-backend
skills/convex-backend - database-design
skills/database-design - designing-apis
skills/designing-apis - designing-architecture
skills/designing-architecture - designing-tests
skills/designing-tests - devops-infrastructure
skills/devops-infrastructure - error-handling
skills/error-handling - managing-git
skills/managing-git - optimizing-performance
skills/optimizing-performance - parallel-execution
skills/parallel-execution - security-patterns
skills/security-patterns - vercel-react-best-practices
skills/vercel-react-best-practices - web-design-guidelines
skills/web-design-guidelines
How it works
analyzing-projects
When your agent uses it
Analyzes codebases to understand structure, tech stack, patterns, and conventions. Use when onboarding to a new project, exploring unfamiliar code, or when asked "how does this work?" or "what's the architecture?"
What it loads into context
Frontmatter
53 tokensAlways available to the agent
SKILL.md
1,002 tokensWhen the skill is activated
Reference documents
47,065 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Project Analysis Workflow
- Step 1: Quick Overview
- Step 2: Tech Stack Detection
- Step 3: Project Structure Analysis
- Step 4: Key Patterns Identification
- Step 5: Development Workflow
- Step 6: Output Format
- Analysis Validation
Scripts executed separately
../../hooks/branch-protection.sh../../hooks/format-on-edit.py../../hooks/log-commands.sh../../hooks/notify-complete.sh../../hooks/notify-input.sh../../hooks/pre-commit-check.py../../hooks/protect-files.py../../hooks/security-check.py../../hooks/suggest-doc-updates.py../../hooks/track-metrics.py../../hooks/typescript-check.py../../hooks/validate-environment.py../../hooks/validate-prompt.py../../hooks/verify-on-complete.py
Files
../../.claude-plugin/marketplace.jsonasset1,665 bytes../../.claude-plugin/plugin.jsonasset697 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../.codex/hooks.jsonasset2,195 bytes../../hooks/branch-protection.shruns1,293 bytes../../hooks/format-on-edit.pyruns2,592 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/hooks.jsonasset2,641 bytes../../hooks/log-commands.shruns785 bytes../../hooks/notify-complete.shruns1,380 bytes../../hooks/notify-input.shruns1,427 bytes../../hooks/pre-commit-check.pyruns3,553 bytes../../hooks/protect-files.pyruns5,091 bytes../../hooks/security-check.pyruns5,712 bytes../../hooks/suggest-doc-updates.pyruns9,351 bytes../../hooks/track-metrics.pyruns2,945 bytes../../hooks/typescript-check.pyruns3,130 bytes../../hooks/validate-environment.pyruns2,078 bytes../../hooks/validate-prompt.pyruns2,581 bytes../../hooks/verify-on-complete.pyruns6,846 bytesSKILL.mdcore3,831 bytesSKILL.mdcore3,831 bytes../convex-backend/AGENTS.mddoc21,171 bytes../convex-backend/SKILL.mddoc4,274 bytes../database-design/SKILL.mddoc11,020 bytes../designing-apis/OPENAPI-TEMPLATE.mddoc3,440 bytes../designing-apis/SKILL.mddoc4,996 bytes../designing-architecture/SKILL.mddoc7,227 bytes../designing-tests/SKILL.mddoc6,121 bytes../devops-infrastructure/SKILL.mddoc10,972 bytes../error-handling/SKILL.mddoc13,444 bytes../managing-git/SKILL.mddoc5,564 bytes../optimizing-performance/SKILL.mddoc5,854 bytes../parallel-execution/SKILL.mddoc6,747 bytes../security-patterns/SKILL.mddoc14,219 bytes../vercel-react-best-practices/AGENTS.mddoc65,673 bytes../vercel-react-best-practices/SKILL.mddoc5,493 bytes../web-design-guidelines/SKILL.mddoc6,635 bytes
Read SKILL.md
# Analyzing Projects
### When to Load
- **Trigger**: Onboarding to a new project, "how does this work" questions, codebase exploration, understanding unfamiliar code
- **Skip**: Already familiar with the project structure and patterns
## Project Analysis Workflow
Copy this checklist and track progress:
```
Project Analysis Progress:
- [ ] Step 1: Quick overview (README, root files)convex-backend
When your agent uses it
Convex backend development guidelines. Use when writing Convex functions, schemas, queries, mutations, actions, or any backend code in a Convex project. Triggers on tasks involving Convex database operations, real-time subscriptions, file storage, or serverless functions.
What it loads into context
Frontmatter
61 tokensAlways available to the agent
SKILL.md
963 tokensWhen the skill is activated
Reference documents
5,370 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Apply
- Rule Categories
- Quick Reference
- Full Compiled Document
Files
AGENTS.mddoc21,171 bytesSKILL.mdcore4,274 bytes
Read SKILL.md
# Convex Backend Guidelines
### When to Load
- **Trigger**: Convex-specific development, writing Convex functions, schemas, queries, mutations, actions, or real-time subscriptions
- **Skip**: Project does not use Convex as its backend
Comprehensive guide for building Convex backends with TypeScript. Covers function syntax, validators, schemas, queries, mutations, actions, scheduling, and file storage.
## When to Apply
Reference these guidelines when:
- Writing new Convex functions (queries, mutations, actions)database-design
When your agent uses it
Designs database schemas, indexing strategies, query optimization, and migration patterns for SQL and NoSQL databases. Use when designing tables, optimizing queries, fixing N+1 problems, planning migrations, or when asked about database performance, normalization, ORMs, or data modeling.
What it loads into context
Frontmatter
60 tokensAlways available to the agent
SKILL.md
2,667 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Database Design Workflow
- Schema Design Principles
- Indexing Strategy
- Query Optimization
- Migration Patterns
- Connection Pooling
- ORM Best Practices
- NoSQL Design Patterns
- Common Anti-Patterns Summary
Files
SKILL.mdcore11,020 bytesSKILL.mdcore11,020 bytesSKILL.mdcore11,020 bytesSKILL.mdcore11,020 bytesSKILL.mdcore11,020 bytes
Read SKILL.md
# Database Design
### When to Load
- **Trigger**: Schema design, migrations, query optimization, indexing strategies, data modeling, N+1 fixes
- **Skip**: No database work involved in the current task
## Database Design Workflow
Copy this checklist and track progress:
```
Database Design Progress:
- [ ] Step 1: Identify entities and relationshipsdesigning-apis
When your agent uses it
Designs REST and GraphQL APIs including endpoints, error handling, versioning, and documentation. Use when creating new APIs, designing endpoints, reviewing API contracts, or when asked about REST, GraphQL, or API patterns.
What it loads into context
Frontmatter
52 tokensAlways available to the agent
SKILL.md
1,301 tokensWhen the skill is activated
Reference documents
747 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- API Design Workflow
- REST API Design
- API Versioning
- Authentication Patterns
- Rate Limiting Headers
- GraphQL Patterns
- OpenAPI Specification Template
- API Design Validation
- Security Checklist
Files
OPENAPI-TEMPLATE.mddoc3,440 bytesSKILL.mdcore4,996 bytes
Read SKILL.md
# Designing APIs
### When to Load
- **Trigger**: Designing REST or GraphQL endpoints, API contracts, versioning, request/response formats
- **Skip**: Internal-only code with no API surface
## API Design Workflow
Copy this checklist and track progress:
```
API Design Progress:
- [ ] Step 1: Define resources and relationshipsdesigning-architecture
When your agent uses it
Designs software architecture and selects appropriate patterns for projects. Use when designing systems, choosing architecture patterns, structuring projects, making technical decisions, or when asked about microservices, monoliths, or architectural approaches.
What it loads into context
Frontmatter
50 tokensAlways available to the agent
SKILL.md
1,465 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Architecture Decision Workflow
- Pattern Selection Guide
- Common Patterns
- Directory Structure Patterns
- Decision Framework
- Trade-off Analysis Template
- Validation Checklist
Files
SKILL.mdcore7,227 bytes
Read SKILL.md
# Designing Architecture
### When to Load
- **Trigger**: System design, module structure, new project scaffolding, choosing architecture patterns
- **Skip**: Simple bug fixes or minor code changes that don't affect architecture
## Architecture Decision Workflow
Copy this checklist and track progress:
```
Architecture Design Progress:
- [ ] Step 1: Understand requirements and constraintsdesigning-tests
When your agent uses it
Designs and implements testing strategies for any codebase. Use when adding tests, improving coverage, setting up testing infrastructure, debugging test failures, or when asked about unit tests, integration tests, or E2E testing.
What it loads into context
Frontmatter
50 tokensAlways available to the agent
SKILL.md
1,464 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Test Implementation Workflow
- Testing Pyramid
- Framework Selection
- Test Structure Templates
- Coverage Strategy
- Test Data Management
- Mocking Strategy
- Test Validation Loop
Files
SKILL.mdcore6,121 bytesSKILL.mdcore6,121 bytes
Read SKILL.md
# Designing Tests
### When to Load
- **Trigger**: Adding tests, test strategy planning, improving coverage, setting up testing infrastructure
- **Skip**: Non-test code changes where testing is not part of the task
## Test Implementation Workflow
Copy this checklist and track progress:
```
Test Implementation Progress:
- [ ] Step 1: Identify what to testdevops-infrastructure
When your agent uses it
Guides Docker, CI/CD pipelines, deployment strategies, infrastructure as code, and observability setup. Use when writing Dockerfiles, configuring GitHub Actions, planning deployments, setting up monitoring, or when asked about containers, pipelines, Terraform, or production infrastructure.
What it loads into context
Frontmatter
60 tokensAlways available to the agent
SKILL.md
2,857 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- DevOps Workflow
- Docker Best Practices
- CI/CD Pipeline Design
- Deployment Strategies
- Infrastructure as Code
- Monitoring & Observability
- Environment Management
- Common Anti-Patterns Summary
Files
SKILL.mdcore10,972 bytesSKILL.mdcore10,972 bytesSKILL.mdcore10,972 bytes
Read SKILL.md
# DevOps & Infrastructure
### When to Load
- **Trigger**: Docker, CI/CD pipelines, deployment configuration, monitoring, infrastructure as code
- **Skip**: Application logic only with no infrastructure or deployment concerns
## DevOps Workflow
Copy this checklist and track progress:
```
DevOps Setup Progress:
- [ ] Step 1: Containerize application (Dockerfile)error-handling
When your agent uses it
Implements error handling patterns, structured logging, retry strategies, circuit breakers, and graceful degradation. Use when designing error handling, setting up logging, implementing retries, adding error tracking, or when asked about error boundaries, log aggregation, alerting, or resilience patterns.
What it loads into context
Frontmatter
60 tokensAlways available to the agent
SKILL.md
3,202 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Error Handling Workflow
- Error Handling Patterns by Language
- Structured Logging
- Error Boundaries and Graceful Degradation
- Retry Patterns
- Error Tracking Integration
- User-Facing vs Internal Errors
- Common Anti-Patterns Summary
Files
SKILL.mdcore13,444 bytesSKILL.mdcore13,444 bytes
Read SKILL.md
# Error Handling & Observability
### When to Load
- **Trigger**: Try/catch patterns, retry logic, error responses, circuit breakers, structured logging
- **Skip**: No error handling or observability involved in the current task
## Error Handling Workflow
Copy this checklist and track progress:
```
Error Handling Progress:
- [ ] Step 1: Define error taxonomy (categories and severity)managing-git
When your agent uses it
Manages Git workflows including branching, commits, and pull requests. Use when working with Git, creating commits, opening PRs, managing branches, resolving conflicts, or when asked about version control best practices.
What it loads into context
Frontmatter
49 tokensAlways available to the agent
SKILL.md
1,301 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Feature Development Workflow
- Branching Strategies
- Commit Conventions
- Branch Naming
- Pull Request Workflow
- Common Git Commands
- Commit Validation
Files
SKILL.mdcore5,564 bytesSKILL.mdcore5,564 bytesSKILL.mdcore5,564 bytesSKILL.mdcore5,564 bytesSKILL.mdcore5,564 bytesSKILL.mdcore5,564 bytes
Read SKILL.md
# Managing Git
### When to Load
- **Trigger**: Branching strategies, commit workflows, pull requests, merge conflicts, version control questions
- **Skip**: Tasks that do not involve git operations
## Feature Development Workflow
Copy this checklist and track progress:
```
Feature Development Progress:
- [ ] Step 1: Create feature branch from mainoptimizing-performance
When your agent uses it
Analyzes and optimizes application performance across frontend, backend, and database layers. Use when diagnosing slowness, improving load times, optimizing queries, reducing bundle size, or when asked about performance issues.
What it loads into context
Frontmatter
49 tokensAlways available to the agent
SKILL.md
1,519 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Performance Optimization Workflow
- Step 1: Measure Baseline
- Step 2: Identify Bottlenecks
- Step 3: Apply Optimizations
- Step 4: Measure Again
- Performance Targets
- Validation
Files
SKILL.mdcore5,854 bytesSKILL.mdcore5,854 bytes
Read SKILL.md
# Optimizing Performance
### When to Load
- **Trigger**: Diagnosing slowness, profiling, caching strategies, reducing load times, bundle size optimization
- **Skip**: Correctness-focused work where performance is not a concern
## Performance Optimization Workflow
Copy this checklist and track progress:
```
Performance Optimization Progress:
- [ ] Step 1: Measure baseline performanceparallel-execution
When your agent uses it
Patterns for parallel subagent execution using the Agent tool (formerly Task). Use when coordinating multiple independent tasks, spawning dynamic subagents, or implementing features that can be parallelized.
What it loads into context
Frontmatter
43 tokensAlways available to the agent
SKILL.md
1,544 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Concept
- Execution Protocol
- Dynamic Subagent Patterns
- Task List Integration
- When to Use Parallel Execution
- Performance Benefits
- Example: Feature Implementation
- Troubleshooting
Files
SKILL.mdcore6,747 bytes
Read SKILL.md
# Parallel Execution Patterns
### When to Load
- **Trigger**: Multi-agent tasks, concurrent operations, spawning subagents, parallelizing independent work
- **Skip**: Single-step tasks or sequential workflows with no parallelization opportunity
## Core Concept
Parallel execution spawns multiple subagents simultaneously using the Agent tool (named `Task` before Claude Code 2.1.63; `Task` still works as an alias). Subagents run in the background by default, so N tasks run concurrently, dramatically reducing total execution time.
**Critical Rule**: ALL Agent calls MUST be in a SINGLE assistant message for true parallelism. If the calls are in separate messages, they launch one after another.
## Execution Protocolsecurity-patterns
When your agent uses it
Implements authentication, authorization, encryption, secrets management, and security hardening patterns. Use when designing auth flows, managing secrets, configuring CORS, implementing rate limiting, or when asked about JWT, OAuth, password hashing, API keys, RBAC, or security best practices.
What it loads into context
Frontmatter
63 tokensAlways available to the agent
SKILL.md
3,544 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Security Implementation Workflow
- Authentication Patterns
- Authorization Models
- Password Handling
- Secrets Management
- Encryption Patterns
- CORS Configuration
- Rate Limiting
- Security Headers
- Input Validation
- Common Anti-Patterns Summary
Files
SKILL.mdcore14,219 bytesSKILL.mdcore14,219 bytesSKILL.mdcore14,219 bytes
Read SKILL.md
# Security Patterns
### When to Load
- **Trigger**: Auth flows, encryption, secrets management, CORS configuration, input validation, rate limiting
- **Skip**: No security surface involved in the current task
## Security Implementation Workflow
Copy this checklist and track progress:
```
Security Implementation Progress:
- [ ] Step 1: Choose authentication strategyvercel-react-best-practices
When your agent uses it
React and Next.js performance optimization guidelines from Vercel Engineering. This skill should be used when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements.
What it loads into context
Frontmatter
71 tokensAlways available to the agent
SKILL.md
1,318 tokensWhen the skill is activated
Reference documents
16,065 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Apply
- Rule Categories by Priority
- Quick Reference
- Full Compiled Document
Files
AGENTS.mddoc65,673 bytesSKILL.mdcore5,493 bytes
Read SKILL.md
# Vercel React Best Practices
### When to Load
- **Trigger**: React or Next.js development, component writing, data fetching patterns, bundle optimization
- **Skip**: Project does not use React or Next.js
Comprehensive performance optimization guide for React and Next.js applications, maintained by Vercel. Contains 47 rules across 8 categories, prioritized by impact to guide automated refactoring and code generation.
## When to Apply
Reference these guidelines when:
- Writing new React components or Next.js pagesweb-design-guidelines
When your agent uses it
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", "check my site against best practices", or "web interface guidelines".
What it loads into context
Frontmatter
53 tokensAlways available to the agent
SKILL.md
1,738 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Output Format
- 1. Accessibility (A11Y)
- 2. Performance (PERF)
- 3. Responsive Design (RD)
- 4. Component Patterns (CP)
- 5. CSS Practices (CSS)
- 6. Security (SEC)
- 7. Internationalization (I18N)
- Review Checklist
Files
SKILL.mdcore6,635 bytes
Read SKILL.md
# Web Interface Guidelines
### When to Load
- **Trigger**: UI audit, accessibility checks, responsive design review, UX best practices evaluation
- **Skip**: Backend-only work with no UI components
Self-contained guidelines for reviewing web interfaces. Apply these rules when auditing UI code.
## Output Format
Report findings as: `file:line — [RULE_ID] description`
Example: `src/Button.tsx:12 — [A11Y-01] Missing aria-label on icon button`Skills included
- analyzing-projects
- convex-backend
- database-design
- designing-apis
- designing-architecture
- designing-tests
- devops-infrastructure
- error-handling
- managing-git
- optimizing-performance
- parallel-execution
- security-patterns
- vercel-react-best-practices
- web-design-guidelines
Repository facts
- License
- MIT
- Created
- Jan 1, 2026
- Last pushed
- Oct 6, 2026
- Forks
- 189
- Open issues
- 4
- Project activity
- Active
Rank over the last 12 weeks
Now #674 · best #471 · down 144 in 30 days
- #662 on Nov 1
- #664 on Nov 2
- #670 on Nov 3
- #671 from Nov 4 to Nov 5
- #673 on Nov 6
- #674 since Nov 7
33 earlier periods
- #445 on Aug 2
- #462 on Aug 6
- #453 on Aug 8
- #450 on Aug 9
- #460 on Aug 12
- #471 on Aug 13
- #476 on Aug 18
- #474 on Aug 19
- #479 on Aug 23
- #485 on Aug 25
- #477 on Aug 26
- #491 on Aug 27
- #489 on Aug 28
- #483 on Aug 29
- #471 on Aug 30
- #497 on Sep 1
- #503 on Sep 9
- #508 on Sep 10
- #506 on Sep 19
- #529 on Sep 22
- #547 on Sep 29
- #533 on Oct 2
- #521 on Oct 4
- #530 on Oct 5
- #564 on Oct 9
- #562 on Oct 12
- #573 on Oct 14
- #573 on Oct 16
- #638 on Oct 25
- #648 on Oct 28
- #652 on Oct 29
- #655 on Oct 30
- #657 on Oct 31
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 3, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 45 notes
.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed.codex/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzedhooks/hooks.json:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- No dangerous shell commands
- 88 network referencesin 7 files: skills/vercel-react-best-practices/AGENTS.md:194 skills/security-patterns/SKILL.md:294 skills/error-handling/SKILL.md:346 and 4 more
- No hidden or obfuscated text
- No instruction overrides
- 14 executable scriptsin 14 files: hooks/branch-protection.sh:1 hooks/format-on-edit.py:1 hooks/log-commands.sh:1 and 11 more
- 49 references to secretsin 6 files: skills/security-patterns/SKILL.md:39 hooks/security-check.py:13 skills/devops-infrastructure/SKILL.md:103 and 3 more
- No requests to vote in Hot
Show all 151 signals by file
.claude-plugin/marketplace.json
- Network accessline 17
"name": "CloudAI-X" }, "homepage": "https://github.com/CloudAI-X/claude-workflow-v2", - Network accessline 18
}, "homepage": "https://github.com/CloudAI-X/claude-workflow-v2", "repository": "https://github.com/CloudAI-X/claude-workflow-v2", - Network accessline 19
"homepage": "https://github.com/CloudAI-X/claude-workflow-v2", - Network accessline 20
"repository": "https://github.com/CloudAI-X/claude-workflow-v2",
.claude-plugin/plugin.json
- Network accessline 7
}, "license": "MIT", "repository": "https://github.com/CloudAI-X/claude-workflow-v2", - Network accessline 8
"license": "MIT", "repository": "https://github.com/CloudAI-X/claude-workflow-v2", "homepage": "https://github.com/CloudAI-X/claude-workflow-v2#readme", - Network accessline 9
"repository": "https://github.com/CloudAI-X/claude-workflow-v2", - Network accessline 10
"homepage": "https://github.com/CloudAI-X/claude-workflow-v2#readme",
hooks/branch-protection.sh
- Executable scriptline 1
#!/usr/bin/env bash
hooks/format-on-edit.py
- Executable scriptline 1
#!/usr/bin/env python3
hooks/log-commands.sh
- Executable scriptline 1
#!/usr/bin/env bash
hooks/notify-complete.sh
- Executable scriptline 1
#!/usr/bin/env bash
hooks/notify-input.sh
- Executable scriptline 1
#!/usr/bin/env bash
hooks/pre-commit-check.py
- Executable scriptline 1
#!/usr/bin/env python3
hooks/protect-files.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 23
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted]
hooks/security-check.py
- Executable scriptline 1
#!/usr/bin/env python3 - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 15
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted] - Access to secretsline 17
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 22
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted]
hooks/suggest-doc-updates.py
- Executable scriptline 1
#!/usr/bin/env python3
hooks/track-metrics.py
hooks/typescript-check.py
- Executable scriptline 1
#!/usr/bin/env python3
hooks/validate-environment.py
hooks/validate-prompt.py
- Executable scriptline 1
#!/usr/bin/env python3
hooks/verify-on-complete.py
- Executable scriptline 1
#!/usr/bin/env python3
skills/designing-apis/OPENAPI-TEMPLATE.md
skills/devops-infrastructure/SKILL.md
- Access to secretsline 103
[Credential-related source omitted] - Access to secretsline 103
[Credential-related source omitted] - Access to secretsline 427
[Credential-related source omitted] - Access to secretsline 427
[Credential-related source omitted] - Access to secretsline 459
[Credential-related source omitted] - Access to secretsline 459
[Credential-related source omitted] - Access to secretsline 461
[Credential-related source omitted] - Access to secretsline 461
[Credential-related source omitted] - Access to secretsline 472
[Credential-related source omitted] - Access to secretsline 472
[Credential-related source omitted]
skills/error-handling/SKILL.md
- Network accessline 346
const data = await withRetry( async () => { const res = await fetch("https://api.example.com/data"); - Network accessline 346
const data = await withRetry( async () => { const res = await fetch("https://api.example.com/data"); - Network accessline 347
async () => { const res = await fetch("https://api.example.com/data"); if (res.status >= 500 || res.status === 429) - Network accessline 347
async () => { const res = await fetch("https://api.example.com/data"); if (res.status >= 500 || res.status === 429) - Network accessline 348
const res = await fetch("https://api.example.com/data"); - Network accessline 348
const res = await fetch("https://api.example.com/data");
skills/optimizing-performance/SKILL.md
skills/security-patterns/SKILL.md
- Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 94
[Credential-related source omitted] - Access to secretsline 94
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Access to secretsline 114
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Access to secretsline 257
[Credential-related source omitted] - Access to secretsline 257
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted] - Access to secretsline 259
[Credential-related source omitted] - Access to secretsline 264
[Credential-related source omitted] - Access to secretsline 264
[Credential-related source omitted] - Network accessline 294
process.env.NODE_ENV === "production" ) { return res.redirect(301, `https://${req.hostname}${req.url}`); - Network accessline 294
process.env.NODE_ENV === "production" ) { return res.redirect(301, `https://${req.hostname}${req.url}`); - Network accessline 295
) { return res.redirect(301, `https://${req.hostname}${req.url}`); } - Network accessline 295
) { return res.redirect(301, `https://${req.hostname}${req.url}`); } - Network accessline 296
return res.redirect(301, `https://${req.hostname}${req.url}`); - Network accessline 296
return res.redirect(301, `https://${req.hostname}${req.url}`); - Network accessline 359
// CORRECT: Explicit allowed origins const ALLOWED_ORIGINS = [ "https://myapp.com", - Network accessline 359
// CORRECT: Explicit allowed origins const ALLOWED_ORIGINS = [ "https://myapp.com", - Network accessline 360
const ALLOWED_ORIGINS = [ "https://myapp.com", "https://admin.myapp.com", - Network accessline 360
const ALLOWED_ORIGINS = [ "https://myapp.com", "https://admin.myapp.com", - Network accessline 361
"https://myapp.com", - Network accessline 361
"https://myapp.com", - Network accessline 362
"https://admin.myapp.com", - Network accessline 362
"https://admin.myapp.com", - Network accessline 363
...(process.env.NODE_ENV !== "production" ? ["http://localhost:3000"] : []), - Network accessline 363
...(process.env.NODE_ENV !== "production" ? ["http://localhost:3000"] : []), - Network accessline 441
scriptSrc: ["'self'"], styleSrc: ["'self'", "'unsafe-inline'"], imgSrc: ["'self'", "data:", "https://cdn.example.com"], - Network accessline 441
scriptSrc: ["'self'"], styleSrc: ["'self'", "'unsafe-inline'"], imgSrc: ["'self'", "data:", "https://cdn.example.com"], - Network accessline 442
styleSrc: ["'self'", "'unsafe-inline'"], imgSrc: ["'self'", "data:", "https://cdn.example.com"], connectSrc: ["'self'", "https://api.example.com"], - Network accessline 442
styleSrc: ["'self'", "'unsafe-inline'"], imgSrc: ["'self'", "data:", "https://cdn.example.com"], connectSrc: ["'self'", "https://api.example.com"], - Network accessline 443
imgSrc: ["'self'", "data:", "https://cdn.example.com"], - Network accessline 443
imgSrc: ["'self'", "data:", "https://cdn.example.com"], - Network accessline 444
connectSrc: ["'self'", "https://api.example.com"], - Network accessline 444
connectSrc: ["'self'", "https://api.example.com"],
skills/vercel-react-best-practices/AGENTS.md
- Network accessline 194
Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 194
Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 413
Reference: [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 413
Reference: [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 605
**With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests - Network accessline 605
**With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests - Network accessline 609
Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 609
Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 788
Reference: [https://react.dev/reference/react/cache](https://react.dev/reference/react/cache) - Network accessline 788
Reference: [https://react.dev/reference/react/cache](https://react.dev/reference/react/cache) - Network accessline 863
Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after) - Network accessline 863
Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after) - Network accessline 1001
const [users, setUsers] = useState([]); useEffect(() => { fetch("/api/users") - Network accessline 1001
const [users, setUsers] = useState([]); useEffect(() => { fetch("/api/users") - Network accessline 1002
useEffect(() => { fetch("/api/users") .then((r) => r.json()) - Network accessline 1002
useEffect(() => { fetch("/api/users") .then((r) => r.json()) - Network accessline 1003
fetch("/api/users") - Network accessline 1003
fetch("/api/users") - Network accessline 1041
Reference: [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 1041
Reference: [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 1197
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders. - Network accessline 1197
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders. - Network accessline 1344
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu - Network accessline 1344
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu - Network accessline 1542
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary. - Network accessline 1542
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary. - Network accessline 1900
Reference: [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast) - Network accessline 1900
Reference: [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast) - Network accessline 2380
1. [https://react.dev](https://react.dev) - Network accessline 2380
1. [https://react.dev](https://react.dev) - Network accessline 2381
2. [https://nextjs.org](https://nextjs.org) - Network accessline 2381
2. [https://nextjs.org](https://nextjs.org) - Network accessline 2382
3. [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 2382
3. [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 2383
4. [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 2383
4. [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 2384
5. [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 2384
5. [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 2385
6. [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 2385
6. [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 2386
7. [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast) - Network accessline 2386
7. [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
No combined signals at this commit.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest skills/convex-backend/AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md skills/analyzing-projects/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md skills/analyzing-projects/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md skills/analyzing-projects/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md skills/analyzing-projects/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/cloudai-x-claude-workflow-v2/)