#205 by GitHub stars
tech-leads-club/agent-skills
The secure, validated skill registry for professional AI coding agents. Extend Antigravity, Claude Code, Cursor, Copilot and more with absolute confidence.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/component-identification-sizing/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/coupling-analysis/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/decomposition-planning-roadmap/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/domain-analysis/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/domain-identification-grouping/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/frontend-blueprint/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/legacy-migration-planner/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/modular-decomposition/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/modular-design-principles/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/react-composition-patterns/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(architecture)/tactical-ddd/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(cloud)/aws-advisor/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(cloud)/netlify-deploy/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(cloud)/render-deploy/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(cloud)/vercel-deploy/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/create-adr/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/create-rfc/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/create-technical-design-doc/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/cursor-subagent-creator/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/skill-architect/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(creation)/subagent-creator/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(decision-making)/the-fool/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(decision-making)/the-jury/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(design)/figma/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(design)/figma-implement-design/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(design)/frontend-design/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(design)/web-design-guidelines/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/codenavi/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/coding-guidelines/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/confluence-assistant/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/docs-writer/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/gh-address-comments/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/harness-eval/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/jira-assistant/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/nestjs-modular-monolith/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/not-your-babysitter/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/rails-dev/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/react-native-expert/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/shopify-developer/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/spec-driven-eval/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-discover/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-implement/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-plan/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-prd/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-spec-driven/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(development)/tlc-spec-lean/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/ai-cold-outreach/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/ai-pricing/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/ai-sdr/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/ai-seo/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/ai-ugc-ads/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/content-to-pipeline/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/expansion-retention/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/gtm-engineering/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/gtm-metrics/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/lead-enrichment/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/multi-platform-launch/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/paid-creative-ai/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/partner-affiliate/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/positioning-icp/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/sales-motion-design/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/social-selling/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/solo-founder-gtm/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(gtm)/video-outreach/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(learning)/learning-opportunities/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(monitoring)/sentry/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(performance)/core-web-vitals/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(performance)/perf-astro/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(performance)/perf-lighthouse/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(performance)/perf-web-optimization/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/react-best-practices/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/seo/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/the-judge/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/web-accessibility/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/web-best-practices/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(quality)/web-quality-audit/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(security)/security-best-practices/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(security)/security-ownership-map/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(security)/security-threat-model/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/chrome-devtools/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/excalidraw-studio/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/gh-fix-ci/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/mermaid-studio/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/nx-ci-monitor/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/nx-generate/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/nx-run-tasks/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Instructions only
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(tooling)/nx-workspace/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(web-automation)/demo/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → cebf9d4adc13
No earlier version was observed for comparison.
packages/skills-catalog/skills/(web-automation)/playwright-skill/SKILL.md
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Local scripts
First observation → cebf9d4adc13
No earlier version was observed for comparison.
Verified commit cebf9d4adc132f92dede7ec99b81b1ef0976d768
git clone --filter=blob:none --no-checkout https://github.com/tech-leads-club/agent-skills.git .hotskills/tech-leads-club-agent-skills && git -C .hotskills/tech-leads-club-agent-skills checkout --detach cebf9d4adc132f92dede7ec99b81b1ef0976d768
# Copy each selected skill directory from .hotskills/tech-leads-club-agent-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/tech-leads-club/agent-skills.git .hotskills/tech-leads-club-agent-skills && git -C .hotskills/tech-leads-club-agent-skills checkout --detach cebf9d4adc132f92dede7ec99b81b1ef0976d768
# Copy each selected skill directory from .hotskills/tech-leads-club-agent-skills into .agents/skills/<skill-name>/Heat
6.1- Star growth, last 7 daysAhead of 60% of tracked repositories
- Star growth, last 24 hoursAhead of 83% of tracked repositories
- Rank movement, last 7 daysAhead of 60% of tracked repositories
- Commits, last 30 daysAhead of 90% of tracked repositories
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekAhead of 0% of tracked repositories
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
Individual skills in this repository
- component-common-domain-detection
packages/skills-catalog/skills/(architecture)/component-common-domain-detection - component-flattening-analysis
packages/skills-catalog/skills/(architecture)/component-flattening-analysis - component-identification-sizing
packages/skills-catalog/skills/(architecture)/component-identification-sizing - coupling-analysis
packages/skills-catalog/skills/(architecture)/coupling-analysis - decomposition-planning-roadmap
packages/skills-catalog/skills/(architecture)/decomposition-planning-roadmap - domain-analysis
packages/skills-catalog/skills/(architecture)/domain-analysis - domain-identification-grouping
packages/skills-catalog/skills/(architecture)/domain-identification-grouping - evolutionary-modular-architecture
packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture - frontend-blueprint
packages/skills-catalog/skills/(architecture)/frontend-blueprint - legacy-migration-planner
packages/skills-catalog/skills/(architecture)/legacy-migration-planner - modular-decomposition
packages/skills-catalog/skills/(architecture)/modular-decomposition - modular-design-principles
packages/skills-catalog/skills/(architecture)/modular-design-principles - react-composition-patterns
packages/skills-catalog/skills/(architecture)/react-composition-patterns - tactical-ddd
packages/skills-catalog/skills/(architecture)/tactical-ddd - aws-advisor
packages/skills-catalog/skills/(cloud)/aws-advisor - cloudflare-deploy
packages/skills-catalog/skills/(cloud)/cloudflare-deploy - netlify-deploy
packages/skills-catalog/skills/(cloud)/netlify-deploy - render-deploy
packages/skills-catalog/skills/(cloud)/render-deploy - vercel-deploy
packages/skills-catalog/skills/(cloud)/vercel-deploy - create-adr
packages/skills-catalog/skills/(creation)/create-adr - create-rfc
packages/skills-catalog/skills/(creation)/create-rfc - technical-design-doc-creator
packages/skills-catalog/skills/(creation)/create-technical-design-doc - cursor-subagent-creator
packages/skills-catalog/skills/(creation)/cursor-subagent-creator - skill-architect
packages/skills-catalog/skills/(creation)/skill-architect - subagent-creator
packages/skills-catalog/skills/(creation)/subagent-creator - the-fool
packages/skills-catalog/skills/(decision-making)/the-fool - the-jury
packages/skills-catalog/skills/(decision-making)/the-jury - figma
packages/skills-catalog/skills/(design)/figma - figma-implement-design
packages/skills-catalog/skills/(design)/figma-implement-design - frontend-design
packages/skills-catalog/skills/(design)/frontend-design - web-design-guidelines
packages/skills-catalog/skills/(design)/web-design-guidelines - codenavi
packages/skills-catalog/skills/(development)/codenavi - coding-guidelines
packages/skills-catalog/skills/(development)/coding-guidelines - confluence-assistant
packages/skills-catalog/skills/(development)/confluence-assistant - docs-writer
packages/skills-catalog/skills/(development)/docs-writer - gh-address-comments
packages/skills-catalog/skills/(development)/gh-address-comments - harness-eval
packages/skills-catalog/skills/(development)/harness-eval - jira-assistant
packages/skills-catalog/skills/(development)/jira-assistant - nestjs-modular-monolith
packages/skills-catalog/skills/(development)/nestjs-modular-monolith - not-your-babysitter
packages/skills-catalog/skills/(development)/not-your-babysitter - rails-dev
packages/skills-catalog/skills/(development)/rails-dev - react-native-expert
packages/skills-catalog/skills/(development)/react-native-expert - shopify-developer
packages/skills-catalog/skills/(development)/shopify-developer - spec-driven-eval
packages/skills-catalog/skills/(development)/spec-driven-eval - tlc-discover
packages/skills-catalog/skills/(development)/tlc-discover - tlc-implement
packages/skills-catalog/skills/(development)/tlc-implement - tlc-plan
packages/skills-catalog/skills/(development)/tlc-plan - tlc-prd
packages/skills-catalog/skills/(development)/tlc-prd - tlc-spec-driven
packages/skills-catalog/skills/(development)/tlc-spec-driven - tlc-spec-lean
packages/skills-catalog/skills/(development)/tlc-spec-lean - ai-cold-outreach
packages/skills-catalog/skills/(gtm)/ai-cold-outreach - ai-pricing
packages/skills-catalog/skills/(gtm)/ai-pricing - ai-sdr
packages/skills-catalog/skills/(gtm)/ai-sdr - ai-seo
packages/skills-catalog/skills/(gtm)/ai-seo - ai-ugc-ads
packages/skills-catalog/skills/(gtm)/ai-ugc-ads - content-to-pipeline
packages/skills-catalog/skills/(gtm)/content-to-pipeline - expansion-retention
packages/skills-catalog/skills/(gtm)/expansion-retention - gtm-engineering
packages/skills-catalog/skills/(gtm)/gtm-engineering - gtm-metrics
packages/skills-catalog/skills/(gtm)/gtm-metrics - lead-enrichment
packages/skills-catalog/skills/(gtm)/lead-enrichment - multi-platform-launch
packages/skills-catalog/skills/(gtm)/multi-platform-launch - paid-creative-ai
packages/skills-catalog/skills/(gtm)/paid-creative-ai - partner-affiliate
packages/skills-catalog/skills/(gtm)/partner-affiliate - positioning-icp
packages/skills-catalog/skills/(gtm)/positioning-icp - sales-motion-design
packages/skills-catalog/skills/(gtm)/sales-motion-design - social-selling
packages/skills-catalog/skills/(gtm)/social-selling - solo-founder-gtm
packages/skills-catalog/skills/(gtm)/solo-founder-gtm - video-outreach
packages/skills-catalog/skills/(gtm)/video-outreach - learning-opportunities
packages/skills-catalog/skills/(learning)/learning-opportunities - sentry
packages/skills-catalog/skills/(monitoring)/sentry - core-web-vitals
packages/skills-catalog/skills/(performance)/core-web-vitals - perf-astro
packages/skills-catalog/skills/(performance)/perf-astro - perf-lighthouse
packages/skills-catalog/skills/(performance)/perf-lighthouse - perf-web-optimization
packages/skills-catalog/skills/(performance)/perf-web-optimization - react-best-practices
packages/skills-catalog/skills/(quality)/react-best-practices - seo
packages/skills-catalog/skills/(quality)/seo - the-judge
packages/skills-catalog/skills/(quality)/the-judge - tlc-generative-engine-optimization
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization - accessibility
packages/skills-catalog/skills/(quality)/web-accessibility - best-practices
packages/skills-catalog/skills/(quality)/web-best-practices - web-quality-audit
packages/skills-catalog/skills/(quality)/web-quality-audit - security-best-practices
packages/skills-catalog/skills/(security)/security-best-practices - security-ownership-map
packages/skills-catalog/skills/(security)/security-ownership-map - security-threat-model
packages/skills-catalog/skills/(security)/security-threat-model - chrome-devtools
packages/skills-catalog/skills/(tooling)/chrome-devtools - excalidraw-studio
packages/skills-catalog/skills/(tooling)/excalidraw-studio - gh-fix-ci
packages/skills-catalog/skills/(tooling)/gh-fix-ci - mermaid-studio
packages/skills-catalog/skills/(tooling)/mermaid-studio - nx-ci-monitor
packages/skills-catalog/skills/(tooling)/nx-ci-monitor - nx-generate
packages/skills-catalog/skills/(tooling)/nx-generate - nx-run-tasks
packages/skills-catalog/skills/(tooling)/nx-run-tasks - nx-workspace
packages/skills-catalog/skills/(tooling)/nx-workspace - demo
packages/skills-catalog/skills/(web-automation)/demo - playwright-skill
packages/skills-catalog/skills/(web-automation)/playwright-skill
How it works
component-common-domain-detection
When your agent uses it
Finds duplicate business logic spread across multiple components and suggests consolidation. Use when asking "where is this logic duplicated?", "find common code between services", "what can be consolidated?", "detect shared domain logic", or analyzing component overlap before refactoring. Do NOT use for code-level duplication detection (use linters) or dependency analysis (use coupling-analysis).
What it loads into context
Frontmatter
80 tokensAlways available to the agent
SKILL.md
3,715 tokensWhen the skill is activated
Reference documents
4,502 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- When to Use
- Core Concepts
- Analysis Process
- Output Format
- Analysis Checklist
- Implementation Notes
- Fitness Functions
- Best Practices
- Common Patterns to Look For
- Next Steps
- Notes
Files
../../../../../.claude-plugin/marketplace.jsonasset789 bytes../../../../mcp/.claude-plugin/plugin.jsonasset274 bytesQUICK-REFERENCE.mddoc4,011 bytesREADME.mddoc17,237 bytesSKILL.mdcore17,460 bytesSKILL.mdcore17,460 bytesSKILL.mdcore17,460 bytesSKILL.mdcore17,460 bytesSKILL.mdcore17,460 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcomponent-flattening-analysis
When your agent uses it
Detects misplaced classes and fixes component hierarchy problems — finds code that should belong inside a component but sits at the root level. Use when asking "clean up component structure", "find orphaned classes", "fix module hierarchy", "flatten nested components", or analyzing why namespaces have misplaced code. Do NOT use for dependency analysis (use coupling-analysis) or domain grouping (use domain-identification-grouping).
What it loads into context
Frontmatter
90 tokensAlways available to the agent
SKILL.md
4,141 tokensWhen the skill is activated
Reference documents
4,617 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- When to Use
- Core Concepts
- Analysis Process
- Output Format
- Analysis Checklist
- Implementation Notes
- Fitness Functions
- Best Practices
- Common Patterns
- Next Steps
- Notes
Files
QUICK-REFERENCE.mddoc5,141 bytesREADME.mddoc15,298 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytesSKILL.mdcore18,111 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcomponent-identification-sizing
When your agent uses it
Maps architectural components in a codebase and measures their size to identify what should be extracted first. Use when asking "how big is each module?", "what components do I have?", "which service is too large?", "analyze codebase structure", "size my monolith", or planning where to start decomposing. Do NOT use for runtime performance sizing or infrastructure capacity planning.
What it loads into context
Frontmatter
85 tokensAlways available to the agent
SKILL.md
3,068 tokensWhen the skill is activated
Reference documents
4,031 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- When to Use
- Core Concepts
- Analysis Process
- Output Format
- Analysis Checklist
- Implementation Notes
- Fitness Functions
- Best Practices
- Next Steps
- Notes
Files
QUICK-REFERENCE.mddoc2,697 bytesREADME.mddoc16,203 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytesSKILL.mdcore13,876 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcoupling-analysis
When your agent uses it
Analyzes coupling between modules using the three-dimensional model (strength, distance, volatility) from "Balancing Coupling in Software Design". Use when asking "are these modules too coupled?", "show me dependencies", "analyze integration quality", "which modules should I decouple?", "coupling report", or evaluating architectural health. Do NOT use for domain boundary analysis (use domain-analysis) or component sizing (use component-identification-sizing).
What it loads into context
Frontmatter
96 tokensAlways available to the agent
SKILL.md
3,352 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- Process
- Quick Reference: Pattern → Integration Strength
- Quick Heuristics
- Known Limitations
- Book References
Files
SKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytesSKILL.mdcore15,793 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdecomposition-planning-roadmap
When your agent uses it
Creates step-by-step decomposition plans and migration roadmaps for breaking apart monolithic applications. Use when asking "what order should I extract services?", "plan my migration", "create a decomposition roadmap", "prioritize what to split", "monolith to microservices strategy", or tracking decomposition progress. Do NOT use for domain analysis (use domain-analysis) or component sizing (use component-identification-sizing).
What it loads into context
Frontmatter
90 tokensAlways available to the agent
SKILL.md
3,862 tokensWhen the skill is activated
Reference documents
4,069 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- When to Use
- Core Concepts
- Analysis Process
- Output Format
- Analysis Checklist
- Implementation Notes
- Best Practices
- Integration with Other Skills
- Next Steps
- Notes
Files
QUICK-REFERENCE.mddoc4,130 bytesREADME.mddoc13,467 bytesSKILL.mdcore17,282 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdomain-analysis
When your agent uses it
Maps business domains and suggests service boundaries in any codebase using DDD Strategic Design. Use when asking "what are the domains in this codebase?", "where should I draw service boundaries?", "identify bounded contexts", "classify subdomains", "DDD analysis", or analyzing domain cohesion. Do NOT use for grouping existing components into domains (use domain-identification-grouping) or dependency analysis (use coupling-analysis).
What it loads into context
Frontmatter
90 tokensAlways available to the agent
SKILL.md
2,605 tokensWhen the skill is activated
Reference documents
7,060 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- Core Principles
- Analysis Process
- Output Format
- Best Practices
- Analysis Checklist
- Quick Reference
- Anti-Patterns to Avoid
- Notes
- Validation Criteria
Files
EXAMPLES.mddoc12,498 bytesQUICK-REFERENCE.mddoc9,220 bytesREADME.mddoc8,738 bytesSKILL.mdcore11,763 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdomain-identification-grouping
When your agent uses it
Groups existing components into logical business domains to plan service-based architecture. Use when asking "which components belong together?", "group these into services", "organize by domain", "component-to-domain mapping", or planning service extraction from an existing codebase. Do NOT use for identifying new domains from scratch (use domain-analysis) or analyzing coupling (use coupling-analysis).
What it loads into context
Frontmatter
82 tokensAlways available to the agent
SKILL.md
4,288 tokensWhen the skill is activated
Reference documents
4,204 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- When to Use
- Core Concepts
- Analysis Process
- Analysis Checklist
- Implementation Notes
- Fitness Functions
- Best Practices
- Common Domain Patterns
- Next Steps
- Notes
Files
QUICK-REFERENCE.mddoc4,074 bytesREADME.mddoc16,344 bytesSKILL.mdcore21,380 bytesSKILL.mdcore21,380 bytesSKILL.mdcore21,380 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubevolutionary-modular-architecture
When your agent uses it
Guides design and implementation of evolutionary modular-monolith platforms with DDD (strategic + tactical), flat-by-aggregate organization, an Anti-Corruption Layer for vendor independence, a transactional outbox for events, smart resilience (backoff with jitter, circuit breakers, idempotency), and a polished architecture HTML document with elegant SVG diagrams. Use when designing a platform or backend, defining bounded contexts, organizing modules and folders, choosing monolith vs microservices, decoupling from an external service (ERP, storage, AI), making calls resilient, adding real-time push, picking a 2026 TypeScript stack (Nx, NestJS, React), or producing an architecture document or diagram. Also triggers on 'modular monolith', 'bounded contexts', 'flat-by-aggregate', 'ports and adapters', 'architecture diagram'. Do NOT use for simple CRUD, NestJS-only deep implementation (use nestjs-modular-monolith), or pure domain-model review (use tactical-ddd).
What it loads into context
Frontmatter
243 tokensAlways available to the agent
SKILL.md
3,373 tokensWhen the skill is activated
Reference documents
7,964 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use this skill
- When NOT to use it
- The one rule that governs everything
- Core model (load the matching reference when you go deep)
- Workflow
- Decision rules (cheat sheet)
- Hard rules (non-negotiable)
- Automated checks
- Examples
- Anti-patterns / red flags
- Reference guide
Scripts executed separately
scripts/validate-boundaries.mjsscripts/validate-structure.mjs
Files
SKILL.mdcore15,076 bytesassets/architecture-template.htmlasset25,827 bytesreferences/acl-and-communication.mddoc4,198 bytesreferences/architecture-doc.mddoc6,101 bytesreferences/ddd.mddoc4,585 bytesreferences/flat-by-aggregate.mddoc5,894 bytesreferences/principles.mddoc5,746 bytesreferences/resilience.mddoc3,417 bytesreferences/stack-2026.mddoc3,754 bytesscripts/validate-boundaries.mjsruns3,755 bytesscripts/validate-structure.mjsruns3,986 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubfrontend-blueprint
When your agent uses it
AI frontend specialist and design consultant that guides users through a structured discovery process before generating any code. Collects visual references, design tokens, typography, icons, layout preferences, and brand guidelines to ensure the final output matches the user's vision with high fidelity. Use when the user asks to build, design, create, or improve any frontend interface — websites, landing pages, dashboards, components, apps, emails, forms, modals, or any UI element. Also triggers on "build me a UI", "design a page", "create a component", "improve this layout", "make this look better", "frontend", "interface", "redesign", or when the user provides mockups, screenshots, or design references. Do NOT use for backend logic, API design, database schemas, or non-visual code tasks.
What it loads into context
Frontmatter
208 tokensAlways available to the agent
SKILL.md
4,831 tokensWhen the skill is activated
Reference documents
10,372 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Principles
- Workflow
- Reference Files
- Expert Behavior Guidelines
- Technical Quality Standards
- Scaling to Project Size
- Examples
- What This Skill is NOT
Files
SKILL.mdcore21,327 bytesSKILL.mdcore21,327 bytesreferences/collection-guide.mddoc7,647 bytesreferences/design-principles.mddoc11,682 bytesreferences/stitch-integration.mddoc25,076 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHublegacy-migration-planner
When your agent uses it
Use when planning legacy system migrations, codebase modernization, monolith decomposition, microservices consolidation, cross-language rewrites, or framework upgrades. Invoke for strangler fig pattern, incremental migration strategy, or refactoring roadmaps. Do NOT use for domain analysis (use domain-analysis), component sizing (use component-identification-sizing), or step-by-step decomposition plans (use decomposition-planning-roadmap).
What it loads into context
Frontmatter
123 tokensAlways available to the agent
SKILL.md
1,499 tokensWhen the skill is activated
Reference documents
12,582 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Principles
- Workflow
- Output Structure
- Reference Guide
- Constraints
Files
SKILL.mdcore7,416 bytesreferences/assessment-framework.mddoc7,984 bytesreferences/frontend-backend-strategies.mddoc12,147 bytesreferences/plan-phase.mddoc8,841 bytesreferences/research-phase.mddoc8,259 bytesreferences/strangler-fig-patterns.mddoc10,624 bytesreferences/testing-safety-nets.mddoc10,274 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubmodular-decomposition
When your agent uses it
Runs a sequenced monolith-to-modular pipeline that sizes and inventories components, finds shared domain duplication, addresses flattening and hierarchy issues, analyzes coupling, then groups components into candidate domain-aligned units, with optional embedded DDD strategic analysis for bounded contexts. Use when asking how to split a monolith, size components before extraction, find duplicated domain logic, clean up module hierarchy, measure coupling between modules, or group components into services. Do NOT use for phased extraction roadmaps or prioritization without the prior analysis steps (use decomposition-planning-roadmap after this pipeline), end-to-end legacy migration strategy writeups (use legacy-migration-planner), pure infrastructure capacity sizing, or when you only need DDD without the structural pipeline (install domain-analysis standalone).
What it loads into context
Frontmatter
161 tokensAlways available to the agent
SKILL.md
1,415 tokensWhen the skill is activated
Reference documents
29,508 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How to Use
- Prerequisites
- Ordered workflow (Patterns 1–5)
- Pattern 6 — planning and extraction
- Bounded contexts and DDD strategic design
Files
SKILL.mdcore6,989 bytesreferences/domain-analysis-examples.mddoc12,498 bytesreferences/domain-analysis-quick-reference.mddoc9,220 bytesreferences/domain-analysis.mddoc11,579 bytesreferences/pattern-01-identify-and-size-quick-reference.mddoc2,697 bytesreferences/pattern-01-identify-and-size.mddoc13,431 bytesreferences/pattern-02-common-domain-quick-reference.mddoc4,011 bytesreferences/pattern-02-common-domain.mddoc16,997 bytesreferences/pattern-03-flattening-quick-reference.mddoc5,141 bytesreferences/pattern-03-flattening.mddoc17,616 bytesreferences/pattern-04-coupling.mddoc15,283 bytesreferences/pattern-05-domain-grouping-quick-reference.mddoc4,074 bytesreferences/pattern-05-domain-grouping.mddoc20,914 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubmodular-design-principles
When your agent uses it
Technology-agnostic guidance for modular systems: bounded contexts, clear boundaries, composability, state isolation, explicit contracts, failure containment, scaffolding workflows, split/merge criteria, sub-units inside a context, and compliance review signals. Use when designing or reviewing module structure, service boundaries, package layout, cross-cutting dependencies, "how should we split this?", modularity assessments, coupling between domains, greenfield context design, or architecture discussions without assuming a specific framework, language, or repository layout. Do NOT use for executing the full Patterns 1–5 repo decomposition pipeline or per-pattern inventories (use modular-decomposition), phased extraction roadmaps as the main deliverable (use decomposition-planning-roadmap), or end-to-end legacy migration strategy (use legacy-migration-planner).
What it loads into context
Frontmatter
185 tokensAlways available to the agent
SKILL.md
2,644 tokensWhen the skill is activated
Reference documents
1,382 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What to load
- Layered mental model
- The ten principles
- Typical violations (stated abstractly)
- Creating a bounded context (workflow)
- When to split or merge
- Sub-units inside a bounded context
- Architecture compliance pass
- Quick checklist (before proposing structure)
- Relationship to stack-specific skills
Files
SKILL.mdcore12,446 bytesSKILL.mdcore12,446 bytesreferences/principles.mddoc6,809 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubreact-composition-patterns
When your agent uses it
React composition patterns that scale. Use when refactoring components with boolean prop proliferation, building flexible component libraries, or designing reusable APIs. Triggers on tasks involving compound components, render props, context providers, or component architecture. Includes React 19 API changes. Do NOT use for React/Next.js performance optimization (use react-best-practices instead).
What it loads into context
Frontmatter
102 tokensAlways available to the agent
SKILL.md
636 tokensWhen the skill is activated
Reference documents
10,544 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Apply
- Rule Categories by Priority
- Quick Reference
- How to Use
- Full Compiled Document
Files
AGENTS.mddoc22,627 bytesREADME.mddoc2,140 bytesSKILL.mdcore2,965 bytesrules/_sections.mddoc829 bytesrules/_template.mddoc329 bytesrules/architecture-avoid-boolean-props.mddoc2,267 bytesrules/architecture-compound-components.mddoc2,600 bytesrules/patterns-children-over-render-props.mddoc1,886 bytesrules/patterns-explicit-variants.mddoc2,395 bytesrules/react19-no-forwardref.mddoc953 bytesrules/state-context-interface.mddoc4,974 bytesrules/state-decouple-implementation.mddoc2,699 bytesrules/state-lift-state.mddoc3,224 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtactical-ddd
When your agent uses it
Detects anemic domain models, validates and refactors them into rich domain models, and enforces tactical DDD patterns (Entities, Value Objects, Aggregates, Domain Services, Domain Events). Use when the user asks to validate, review, or check domain models or DDD code; detect anemia; refactor domain objects; improve encapsulation; or mentions terms like "anemic model", "rich domain", "aggregate", "value object", "domain event", "ubiquitous language", "is this good DDD", "does this follow DDD", or "check my domain". Do NOT use for module or service boundary design, architectural decomposition, strategic DDD context mapping, or code outside the domain layer (DTOs, controllers, infrastructure adapters).
What it loads into context
Frontmatter
163 tokensAlways available to the agent
SKILL.md
885 tokensWhen the skill is activated
Reference documents
3,425 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Workflow
- Quick Anemia Signals (scan first)
- Golden Rules
- Output Format
Files
SKILL.mdcore3,968 bytesdetection.mddoc2,751 bytesrefactoring.mddoc5,727 bytesreference.mddoc6,369 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubaws-advisor
When your agent uses it
Expert AWS Cloud Advisor for architecture design, security review, and implementation guidance. Leverages AWS MCP tools for accurate, documentation-backed answers. Use when user asks about AWS architecture, security, service selection, migrations, troubleshooting, or learning AWS. Triggers on AWS, Lambda, S3, EC2, ECS, EKS, DynamoDB, RDS, CloudFormation, CDK, Terraform, Serverless, SAM, IAM, VPC, API Gateway, or any AWS service. Do NOT use for non-AWS cloud providers or general infrastructure without AWS context.
What it loads into context
Frontmatter
157 tokensAlways available to the agent
SKILL.md
1,754 tokensWhen the skill is activated
Reference documents
4,894 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Principles
- Adaptive Behavior
- MCP Tools Available
- Search Topic Selection
- Workflows
- Reference Files
- Scripts
- Code Examples
- Response Style
Scripts executed separately
scripts/architecture_validator.pyscripts/cost_considerations.pyscripts/generate_diagram.pyscripts/security_review.pyscripts/well_architected_review.py
Files
SKILL.mdcore8,346 bytesreferences/checklists.mddoc8,907 bytesreferences/decision-trees.mddoc7,931 bytesreferences/mcp-guide.mddoc4,215 bytesscripts/architecture_validator.pyruns13,225 bytesscripts/cost_considerations.pyruns15,420 bytesscripts/generate_diagram.pyruns9,526 bytesscripts/security_review.pyruns13,015 bytesscripts/well_architected_review.pyruns13,454 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcloudflare-deploy
When your agent uses it
Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare. Do NOT use for deploying to Vercel, Netlify, or Render (use their respective skills).
What it loads into context
Frontmatter
90 tokensAlways available to the agent
SKILL.md
1,967 tokensWhen the skill is activated
Reference documents
341,102 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Prerequisites
- Authentication (Required Before Deploy)
- Quick Decision Trees
- Product Index
- Troubleshooting
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore8,848 bytesSKILL.mdcore8,848 bytesreferences/agents-sdk/README.mddoc3,358 bytesreferences/agents-sdk/api.mddoc5,829 bytesreferences/agents-sdk/configuration.mddoc3,384 bytesreferences/agents-sdk/gotchas.mddoc5,706 bytesreferences/agents-sdk/patterns.mddoc5,643 bytesreferences/ai-gateway/README.mddoc7,019 bytesreferences/ai-gateway/configuration.mddoc2,960 bytesreferences/ai-gateway/dynamic-routing.mddoc1,996 bytesreferences/ai-gateway/features.mddoc3,539 bytesreferences/ai-gateway/sdk-integration.mddoc2,754 bytesreferences/ai-gateway/troubleshooting.mddoc2,962 bytesreferences/ai-search/README.mddoc5,410 bytesreferences/ai-search/api.mddoc2,399 bytesreferences/ai-search/configuration.mddoc1,762 bytesreferences/ai-search/gotchas.mddoc2,696 bytesreferences/ai-search/patterns.mddoc2,301 bytesreferences/analytics-engine/README.mddoc3,719 bytesreferences/analytics-engine/api.mddoc3,224 bytesreferences/analytics-engine/configuration.mddoc2,541 bytesreferences/analytics-engine/gotchas.mddoc2,346 bytesreferences/analytics-engine/patterns.mddoc2,598 bytesreferences/api-shield/README.mddoc1,942 bytesreferences/api-shield/api.mddoc3,916 bytesreferences/api-shield/configuration.mddoc5,038 bytesreferences/api-shield/gotchas.mddoc5,519 bytesreferences/api-shield/patterns.mddoc6,823 bytesreferences/api/README.mddoc2,969 bytesreferences/api/api.mddoc4,296 bytesreferences/api/configuration.mddoc3,922 bytesreferences/api/gotchas.mddoc5,750 bytesreferences/api/patterns.mddoc4,664 bytesreferences/argo-smart-routing/README.mddoc4,568 bytesreferences/argo-smart-routing/api.mddoc6,774 bytesreferences/argo-smart-routing/configuration.mddoc4,428 bytesreferences/argo-smart-routing/gotchas.mddoc4,590 bytesreferences/argo-smart-routing/patterns.mddoc3,054 bytesreferences/bindings/README.mddoc4,746 bytesreferences/bindings/api.mddoc6,294 bytesreferences/bindings/configuration.mddoc4,552 bytesreferences/bindings/gotchas.mddoc6,854 bytesreferences/bindings/patterns.mddoc5,041 bytesreferences/bot-management/README.mddoc3,985 bytesreferences/bot-management/api.mddoc5,631 bytesreferences/bot-management/configuration.mddoc6,565 bytesreferences/bot-management/gotchas.mddoc7,318 bytesreferences/bot-management/patterns.mddoc4,909 bytesreferences/browser-rendering/README.mddoc3,332 bytesreferences/browser-rendering/api.mddoc3,544 bytesreferences/browser-rendering/configuration.mddoc2,126 bytesreferences/browser-rendering/gotchas.mddoc2,973 bytesreferences/browser-rendering/patterns.mddoc2,824 bytesreferences/c3/README.mddoc3,747 bytesreferences/c3/api.mddoc3,374 bytesreferences/c3/configuration.mddoc1,641 bytesreferences/c3/gotchas.mddoc2,753 bytesreferences/c3/patterns.mddoc2,204 bytesreferences/cache-reserve/README.mddoc5,991 bytesreferences/cache-reserve/api.mddoc5,937 bytesreferences/cache-reserve/configuration.mddoc3,653 bytesreferences/cache-reserve/gotchas.mddoc6,502 bytesreferences/cache-reserve/patterns.mddoc6,176 bytesreferences/containers/README.mddoc3,715 bytesreferences/containers/api.mddoc4,307 bytesreferences/containers/configuration.mddoc5,717 bytesreferences/containers/gotchas.mddoc4,881 bytesreferences/containers/patterns.mddoc4,869 bytesreferences/cron-triggers/README.mddoc2,932 bytesreferences/cron-triggers/api.mddoc5,848 bytesreferences/cron-triggers/configuration.mddoc4,250 bytesreferences/cron-triggers/gotchas.mddoc6,557 bytesreferences/cron-triggers/patterns.mddoc7,382 bytesreferences/d1/README.mddoc4,891 bytesreferences/d1/api.mddoc6,776 bytesreferences/d1/configuration.mddoc5,554 bytesreferences/d1/gotchas.mddoc4,743 bytesreferences/d1/patterns.mddoc7,333 bytesreferences/ddos/README.mddoc2,733 bytesreferences/ddos/api.mddoc4,169 bytesreferences/ddos/configuration.mddoc3,519 bytesreferences/ddos/gotchas.mddoc4,514 bytesreferences/ddos/patterns.mddoc5,833 bytesreferences/do-storage/README.mddoc2,896 bytesreferences/do-storage/api.mddoc3,861 bytesreferences/do-storage/configuration.mddoc2,208 bytesreferences/do-storage/gotchas.mddoc5,481 bytesreferences/do-storage/patterns.mddoc5,269 bytesreferences/do-storage/testing.mddoc4,800 bytesreferences/durable-objects/README.mddoc6,628 bytesreferences/durable-objects/api.mddoc6,137 bytesreferences/durable-objects/configuration.mddoc4,172 bytesreferences/durable-objects/gotchas.mddoc7,813 bytesreferences/durable-objects/patterns.mddoc6,854 bytesreferences/email-routing/README.mddoc3,419 bytesreferences/email-routing/api.mddoc5,496 bytesreferences/email-routing/configuration.mddoc3,560 bytesreferences/email-routing/gotchas.mddoc4,268 bytesreferences/email-routing/patterns.mddoc5,567 bytesreferences/email-workers/README.mddoc5,953 bytesreferences/email-workers/api.mddoc6,161 bytesreferences/email-workers/configuration.mddoc2,807 bytesreferences/email-workers/gotchas.mddoc3,212 bytesreferences/email-workers/patterns.mddoc2,795 bytesreferences/hyperdrive/README.mddoc3,375 bytesreferences/hyperdrive/api.mddoc3,829 bytesreferences/hyperdrive/configuration.mddoc4,163 bytesreferences/hyperdrive/gotchas.mddoc4,311 bytesreferences/hyperdrive/patterns.mddoc5,949 bytesreferences/images/README.mddoc3,061 bytesreferences/images/api.mddoc2,615 bytesreferences/images/configuration.mddoc4,036 bytesreferences/images/gotchas.mddoc2,826 bytesreferences/images/patterns.mddoc3,584 bytesreferences/kv/README.mddoc3,741 bytesreferences/kv/api.mddoc4,439 bytesreferences/kv/configuration.mddoc3,081 bytesreferences/kv/gotchas.mddoc5,076 bytesreferences/kv/patterns.mddoc4,682 bytesreferences/miniflare/README.mddoc2,981 bytesreferences/miniflare/api.mddoc4,547 bytesreferences/miniflare/configuration.mddoc3,439 bytesreferences/miniflare/gotchas.mddoc3,988 bytesreferences/miniflare/patterns.mddoc4,320 bytesreferences/network-interconnect/README.mddoc3,569 bytesreferences/network-interconnect/api.mddoc5,660 bytesreferences/network-interconnect/configuration.mddoc4,450 bytesreferences/network-interconnect/gotchas.mddoc6,242 bytesreferences/network-interconnect/patterns.mddoc4,150 bytesreferences/observability/README.mddoc4,283 bytesreferences/observability/api.mddoc3,419 bytesreferences/observability/configuration.mddoc3,581 bytesreferences/observability/gotchas.mddoc3,949 bytesreferences/observability/patterns.mddoc2,494 bytesreferences/pages-functions/README.mddoc3,325 bytesreferences/pages-functions/api.mddoc5,016 bytesreferences/pages-functions/configuration.mddoc3,006 bytesreferences/pages-functions/gotchas.mddoc4,938 bytesreferences/pages-functions/patterns.mddoc4,198 bytesreferences/pages/README.mddoc2,838 bytesreferences/pages/api.mddoc5,841 bytesreferences/pages/configuration.mddoc6,581 bytesreferences/pages/gotchas.mddoc8,130 bytesreferences/pages/patterns.mddoc5,998 bytesreferences/pipelines/README.mddoc3,515 bytesreferences/pipelines/api.mddoc5,773 bytesreferences/pipelines/configuration.mddoc3,025 bytesreferences/pipelines/gotchas.mddoc2,860 bytesreferences/pipelines/patterns.mddoc2,312 bytesreferences/pulumi/README.mddoc3,550 bytesreferences/pulumi/api.mddoc5,713 bytesreferences/pulumi/configuration.mddoc5,524 bytesreferences/pulumi/gotchas.mddoc6,981 bytesreferences/pulumi/patterns.mddoc7,150 bytesreferences/queues/README.mddoc3,227 bytesreferences/queues/api.mddoc5,523 bytesreferences/queues/configuration.mddoc4,171 bytesreferences/queues/gotchas.mddoc8,224 bytesreferences/queues/patterns.mddoc5,462 bytesreferences/r2-data-catalog/README.mddoc7,377 bytesreferences/r2-data-catalog/api.mddoc6,706 bytesreferences/r2-data-catalog/configuration.mddoc5,632 bytesreferences/r2-data-catalog/gotchas.mddoc6,547 bytesreferences/r2-data-catalog/patterns.mddoc6,118 bytesreferences/r2-sql/README.mddoc5,219 bytesreferences/r2-sql/api.mddoc4,702 bytesreferences/r2-sql/configuration.mddoc3,900 bytesreferences/r2-sql/gotchas.mddoc6,597 bytesreferences/r2-sql/patterns.mddoc6,767 bytesreferences/r2/README.mddoc3,074 bytesreferences/r2/api.mddoc5,628 bytesreferences/r2/configuration.mddoc3,915 bytesreferences/r2/gotchas.mddoc5,226 bytesreferences/r2/patterns.mddoc5,797 bytesreferences/realtime-sfu/README.mddoc3,518 bytesreferences/realtime-sfu/api.mddoc3,774 bytesreferences/realtime-sfu/configuration.mddoc3,507 bytesreferences/realtime-sfu/gotchas.mddoc5,328 bytesreferences/realtime-sfu/patterns.mddoc5,432 bytesreferences/realtimekit/README.mddoc4,292 bytesreferences/realtimekit/api.mddoc8,283 bytesreferences/realtimekit/configuration.mddoc5,216 bytesreferences/realtimekit/gotchas.mddoc7,176 bytesreferences/realtimekit/patterns.mddoc7,640 bytesreferences/sandbox/README.mddoc3,139 bytesreferences/sandbox/api.mddoc4,933 bytesreferences/sandbox/configuration.mddoc3,404 bytesreferences/sandbox/gotchas.mddoc5,638 bytesreferences/sandbox/patterns.mddoc5,090 bytesreferences/secrets-store/README.mddoc2,522 bytesreferences/secrets-store/api.mddoc4,317 bytesreferences/secrets-store/configuration.mddoc3,875 bytesreferences/secrets-store/gotchas.mddoc4,302 bytesreferences/secrets-store/patterns.mddoc5,579 bytesreferences/smart-placement/README.mddoc5,024 bytesreferences/smart-placement/api.mddoc5,649 bytesreferences/smart-placement/configuration.mddoc6,294 bytesreferences/smart-placement/gotchas.mddoc5,799 bytesreferences/smart-placement/patterns.mddoc5,738 bytesreferences/snippets/README.mddoc3,458 bytesreferences/snippets/api.mddoc4,937 bytesreferences/snippets/configuration.mddoc6,746 bytesreferences/snippets/gotchas.mddoc2,319 bytesreferences/snippets/patterns.mddoc3,503 bytesreferences/spectrum/README.mddoc2,584 bytesreferences/spectrum/api.mddoc4,834 bytesreferences/spectrum/configuration.mddoc4,633 bytesreferences/spectrum/gotchas.mddoc3,982 bytesreferences/spectrum/patterns.mddoc4,776 bytesreferences/static-assets/README.mddoc2,341 bytesreferences/static-assets/api.mddoc4,998 bytesreferences/static-assets/configuration.mddoc5,559 bytesreferences/static-assets/gotchas.mddoc4,435 bytesreferences/static-assets/patterns.mddoc4,852 bytesreferences/stream/README.mddoc4,171 bytesreferences/stream/api-live.mddoc5,196 bytesreferences/stream/api.mddoc5,162 bytesreferences/stream/configuration.mddoc3,240 bytesreferences/stream/gotchas.mddoc4,919 bytesreferences/stream/patterns.mddoc6,482 bytesreferences/tail-workers/README.mddoc3,023 bytesreferences/tail-workers/api.mddoc4,989 bytesreferences/tail-workers/configuration.mddoc3,883 bytesreferences/tail-workers/gotchas.mddoc4,799 bytesreferences/tail-workers/patterns.mddoc4,131 bytesreferences/terraform/README.mddoc3,800 bytesreferences/terraform/api.mddoc4,333 bytesreferences/terraform/configuration.mddoc7,920 bytesreferences/terraform/gotchas.mddoc6,160 bytesreferences/terraform/patterns.mddoc6,640 bytesreferences/tunnel/README.mddoc3,746 bytesreferences/tunnel/api.mddoc4,404 bytesreferences/tunnel/configuration.mddoc3,939 bytesreferences/tunnel/gotchas.mddoc4,252 bytesreferences/tunnel/networking.mddoc4,485 bytesreferences/tunnel/patterns.mddoc3,883 bytesreferences/turn/README.mddoc4,153 bytesreferences/turn/api.mddoc5,224 bytesreferences/turn/configuration.mddoc4,224 bytesreferences/turn/gotchas.mddoc7,737 bytesreferences/turn/patterns.mddoc6,104 bytesreferences/turnstile/README.mddoc3,960 bytesreferences/turnstile/api.mddoc6,605 bytesreferences/turnstile/configuration.mddoc7,279 bytesreferences/turnstile/gotchas.mddoc6,886 bytesreferences/turnstile/patterns.mddoc4,687 bytesreferences/vectorize/README.mddoc4,514 bytesreferences/vectorize/api.mddoc2,548 bytesreferences/vectorize/configuration.mddoc2,122 bytesreferences/vectorize/gotchas.mddoc2,459 bytesreferences/vectorize/patterns.mddoc2,594 bytesreferences/waf/README.mddoc3,667 bytesreferences/waf/api.mddoc5,899 bytesreferences/waf/configuration.mddoc4,848 bytesreferences/waf/gotchas.mddoc6,555 bytesreferences/waf/patterns.mddoc5,589 bytesreferences/web-analytics/README.mddoc5,517 bytesreferences/web-analytics/configuration.mddoc2,173 bytesreferences/web-analytics/gotchas.mddoc2,254 bytesreferences/web-analytics/integration.mddoc2,294 bytesreferences/web-analytics/patterns.mddoc2,259 bytesreferences/workerd/README.mddoc2,931 bytesreferences/workerd/api.mddoc4,975 bytesreferences/workerd/configuration.mddoc5,276 bytesreferences/workerd/gotchas.mddoc4,895 bytesreferences/workerd/patterns.mddoc4,914 bytesreferences/workers-ai/README.mddoc6,268 bytesreferences/workers-ai/api.mddoc2,810 bytesreferences/workers-ai/configuration.mddoc2,137 bytesreferences/workers-ai/gotchas.mddoc2,758 bytesreferences/workers-ai/patterns.mddoc3,177 bytesreferences/workers-for-platforms/README.mddoc4,184 bytesreferences/workers-for-platforms/api.mddoc5,481 bytesreferences/workers-for-platforms/configuration.mddoc3,939 bytesreferences/workers-for-platforms/gotchas.mddoc6,314 bytesreferences/workers-for-platforms/patterns.mddoc5,781 bytesreferences/workers-playground/README.mddoc4,215 bytesreferences/workers-playground/api.mddoc2,138 bytesreferences/workers-playground/configuration.mddoc5,061 bytesreferences/workers-playground/gotchas.mddoc2,240 bytesreferences/workers-playground/patterns.mddoc3,283 bytesreferences/workers-vpc/README.mddoc6,072 bytesreferences/workers-vpc/api.mddoc5,947 bytesreferences/workers-vpc/configuration.mddoc3,901 bytesreferences/workers-vpc/gotchas.mddoc4,835 bytesreferences/workers-vpc/patterns.mddoc5,991 bytesreferences/workers/README.mddoc3,759 bytesreferences/workers/api.mddoc5,110 bytesreferences/workers/configuration.mddoc4,327 bytesreferences/workers/frameworks.mddoc4,303 bytesreferences/workers/gotchas.mddoc4,997 bytesreferences/workers/patterns.mddoc5,491 bytesreferences/workflows/README.mddoc2,406 bytesreferences/workflows/api.mddoc6,468 bytesreferences/workflows/configuration.mddoc3,695 bytesreferences/workflows/gotchas.mddoc5,761 bytesreferences/workflows/patterns.mddoc6,948 bytesreferences/wrangler/README.mddoc4,927 bytesreferences/wrangler/api.mddoc5,114 bytesreferences/wrangler/auth.mddoc2,706 bytesreferences/wrangler/configuration.mddoc4,716 bytesreferences/wrangler/gotchas.mddoc6,056 bytesreferences/wrangler/patterns.mddoc4,839 bytesreferences/zaraz/IMPLEMENTATION_SUMMARY.mddoc3,737 bytesreferences/zaraz/README.mddoc4,365 bytesreferences/zaraz/api.mddoc3,165 bytesreferences/zaraz/configuration.mddoc2,019 bytesreferences/zaraz/gotchas.mddoc2,210 bytesreferences/zaraz/patterns.mddoc2,606 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnetlify-deploy
When your agent uses it
Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish, or link a site/repo on Netlify, including preview and production deploys. Do NOT use for deploying to Vercel, Cloudflare, or Render (use their respective skills).
What it loads into context
Frontmatter
98 tokensAlways available to the agent
SKILL.md
1,689 tokensWhen the skill is activated
Reference documents
3,580 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Prerequisites
- Authentication Pattern
- Workflow
- Handling netlify.toml
- Example Full Workflow
- Error Handling
- Troubleshooting
- Environment Variables
- Tips
- Reference
- Bundled References (Load As Needed)
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesSKILL.mdcore7,173 bytesreferences/cli-commands.mddoc2,652 bytesreferences/deployment-patterns.mddoc6,718 bytesreferences/netlify-toml.mddoc3,972 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubrender-deploy
When your agent uses it
Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform. Do NOT use for deploying to Vercel, Netlify, or Cloudflare (use their respective skills).
What it loads into context
Frontmatter
97 tokensAlways available to the agent
SKILL.md
4,257 tokensWhen the skill is activated
Reference documents
16,346 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Prerequisites
- Security Requirements for API Keys and Secrets
- When to Use This Skill
- Happy Path (New Users)
- Choose Your Source Path
- Choose Your Deployment Method (Git Repo)
- Prerequisites Check
- Blueprint Workflow
- When to Use Direct Creation
- Prerequisites for Direct Creation
- Direct Creation Workflow
- Troubleshooting
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesSKILL.mdcore18,993 bytesreferences/blueprint-spec.mddoc16,101 bytesreferences/codebase-analysis.mddoc2,306 bytesreferences/configuration-guide.mddoc11,778 bytesreferences/deployment-details.mddoc5,360 bytesreferences/direct-creation.mddoc2,794 bytesreferences/error-patterns.mddoc1,284 bytesreferences/post-deploy-checks.mddoc1,025 bytesreferences/runtimes.mddoc10,074 bytesreferences/service-types.mddoc11,772 bytesreferences/troubleshooting-basics.mddoc1,364 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubvercel-deploy
When your agent uses it
Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment". Do NOT use for deploying to Netlify, Cloudflare, or Render (use their respective skills).
What it loads into context
Frontmatter
93 tokensAlways available to the agent
SKILL.md
532 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Prerequisites
- Quick Start
- Fallback (No Auth)
- Production Deploys
- Output
- Troubleshooting
Scripts executed separately
scripts/deploy.sh
Files
LICENSE.txtdoc1,063 bytesSKILL.mdcore2,356 bytesSKILL.mdcore2,356 bytesSKILL.mdcore2,356 bytesSKILL.mdcore2,356 bytesscripts/deploy.shruns8,871 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcreate-adr
When your agent uses it
Creates Architecture Decision Records (ADRs) to document significant architectural choices and their rationale for future team members. Use when the user says "write an ADR", "document this decision", "record why we chose X", "add an architecture decision record", "create an ADR for", or wants to capture the reasoning behind a technical choice so the team understands it later. Do NOT use when the decision hasn't been made yet (use create-rfc instead), for implementation planning (use technical-design-doc-creator), or for general documentation.
What it loads into context
Frontmatter
152 tokensAlways available to the agent
SKILL.md
3,396 tokensWhen the skill is activated
Reference documents
1,938 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- ADR vs RFC — Critical Distinction
- Language Adaptation
- ADR Format Selection
- Interactive Workflow
- Document Templates
- ADR Quality Checklist
- ADR File Naming Convention
- Common Anti-Patterns to Avoid
- Important Notes
- Example Prompts that Trigger This Skill
Files
README.mddoc8,559 bytesSKILL.mdcore13,993 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcreate-rfc
When your agent uses it
Creates structured Request for Comments (RFC) documents for proposing and deciding on significant changes. Use when the user says "write an RFC", "create a proposal", "I need to propose a change", "draft an RFC", "document a decision", or needs stakeholder alignment before making a major technical or process decision. Do NOT use for TDDs/implementation docs (use technical-design-doc-creator instead), README files, or general documentation.
What it loads into context
Frontmatter
135 tokensAlways available to the agent
SKILL.md
2,674 tokensWhen the skill is activated
Reference documents
5,244 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Language Adaptation
- RFC vs TDD
- Interactive Workflow
- Document Structure
- Section Templates
- RFC Quality Checklist
- Common Anti-Patterns to Avoid
- Output Summary Format
- Important Notes
- Example Prompts that Trigger This Skill
Files
README.mddoc13,217 bytesSKILL.mdcore11,537 bytesreferences/section-templates.mddoc9,243 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtechnical-design-doc-creator
When your agent uses it
Creates comprehensive Technical Design Documents (TDD) with mandatory and optional sections through interactive discovery. Use when user asks to "write a design doc", "create a TDD", "technical spec", "architecture document", "RFC", "design proposal", or needs to document a technical decision before implementation. Do NOT use for README files, API docs, or general documentation (use docs-writer instead).
What it loads into context
Frontmatter
89 tokensAlways available to the agent
SKILL.md
11,966 tokensWhen the skill is activated
Reference documents
2,394 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Language Adaptation
- Industry Standards Reference
- High-Level vs Implementation Details
- Document Structure
- Project Size Adaptation
- Interactive Workflow
- Section Templates
- Validation Rules
- Output Format
- Common Anti-Patterns to Avoid
- Important Notes
- Example Prompts that Trigger This Skill
- References
Files
README.mddoc10,534 bytesSKILL.mdcore52,020 bytesSKILL.mdcore52,020 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcursor-subagent-creator
When your agent uses it
Creates Cursor-specific AI subagents with isolated context for complex multi-step workflows. Use when creating subagents for Cursor editor specifically, following Cursor's patterns and directories (.cursor/agents/). Triggers on "cursor subagent", "cursor agent". Do NOT use for generic subagent creation outside Cursor (use subagent-creator instead).
What it loads into context
Frontmatter
77 tokensAlways available to the agent
SKILL.md
4,235 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- What are Subagents?
- Subagent Structure
- Subagent Creation Process
- Field Configuration
- Common Subagent Patterns
- Using Subagents
- Resuming Subagents
- Best Practices
- Skills vs Subagents vs Commands
- Performance and Cost
- Quick Template
- Quality Checklist
- Creation Outputs
- Output Messages
- Complete Examples
- Remember
Files
SKILL.mdcore19,246 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubskill-architect
When your agent uses it
Expert guide for designing and building high-quality skills from scratch through structured conversation. Use when someone wants to create a new skill, build a skill, design a skill, or asks for help making Agents do something consistently. Also use when someone says "turn this into a skill", "I want to automate this workflow", "how do I teach my Agent to do X", or mentions creating SKILL.md files. Covers standalone skills and MCP-enhanced workflows. Do NOT use for creating subagents (use subagent-creator) or technical design documents (use create-technical-design-doc).
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
3,053 tokensWhen the skill is activated
Reference documents
4,172 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Philosophy
- Workflow Overview
- Phase 1: Discovery
- Phase 2: Architecture
- Phase 3: Craft
- Phase 4: Validate
- Phase 5: Deliver
- Conversation Style
- Important Boundaries
Scripts executed separately
scripts/validate_skill.py
Files
SKILL.mdcore13,825 bytesreferences/examples.mddoc7,176 bytesreferences/patterns.mddoc8,196 bytesreferences/quality-checklist.mddoc2,522 bytesscripts/validate_skill.pyruns19,742 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsubagent-creator
When your agent uses it
Guide for creating AI subagents with isolated context for complex multi-step workflows. Use when users want to create a subagent, specialized agent, verifier, debugger, or orchestrator that requires isolated context and deep specialization. Works with any agent that supports subagent delegation. Triggers on "create subagent", "new agent", "specialized assistant", "create verifier". Do NOT use for Cursor-specific subagents (use cursor-subagent-creator instead).
What it loads into context
Frontmatter
100 tokensAlways available to the agent
SKILL.md
1,610 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What are Subagents?
- Subagent Structure
- Subagent Creation Process
- Common Subagent Patterns
- Best Practices
- Quality Checklist
- Output Messages
Files
SKILL.mdcore7,102 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubthe-fool
When your agent uses it
Use when challenging ideas, plans, decisions, or proposals. Invoke to play devil's advocate, run a pre-mortem, red team, stress test assumptions, audit evidence quality, or find blind spots before committing. Do NOT use for building plans, making decisions, or generating solutions — this skill only challenges and critiques. For a multi-agent panel that challenges and then commits to a verdict, use the-jury.
What it loads into context
Frontmatter
125 tokensAlways available to the agent
SKILL.md
1,794 tokensWhen the skill is activated
Reference documents
12,456 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use This Skill
- Core Workflow
- Example
- Constraints
Files
SKILL.mdcore8,703 bytesreferences/cognitive-bias-inventory.mddoc7,727 bytesreferences/dialectic-synthesis.mddoc7,396 bytesreferences/evidence-audit.mddoc9,415 bytesreferences/mode-selection-guide.mddoc5,917 bytesreferences/pre-mortem-analysis.mddoc9,014 bytesreferences/red-team-adversarial.mddoc9,789 bytesreferences/socratic-questioning.mddoc7,339 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubthe-jury
When your agent uses it
Use when a question, decision, plan, tradeoff, or claim needs a rigorous verdict and one perspective is not enough. Spawns a panel of 3 to 5 subagent jurors that form independent blind opinions, deliberate anonymously under an anti-anchoring and anti-sycophancy protocol, and return one committed verdict with confidence, preserved dissent, and a concrete next action. Domain-agnostic across engineering, architecture, data, product, hiring, strategy, vendor choice, build-vs-buy, and research design. Trigger phrases include "convene a jury", "have agents debate and decide", "get a panel to decide", "multi-agent decision", "stress-test this and decide", "monte um juri", "tribunal de agentes", "painel para decidir". Do NOT use to only critique without deciding (use the-fool for that), to build a plan or write the solution itself, or for simple factual lookups.
What it loads into context
Frontmatter
237 tokensAlways available to the agent
SKILL.md
4,162 tokensWhen the skill is activated
Reference documents
3,713 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Why this protocol (apply it, do not lecture about it)
- Core Workflow
- Verdict format (mandatory shape)
- Constraints
- Examples
- Reference files (read on condition)
- Troubleshooting
Scripts executed separately
scripts/tally.py
Files
SKILL.mdcore18,023 bytesreferences/deliberation-craft.mddoc9,464 bytesreferences/juror-archetypes.mddoc7,001 bytesscripts/tally.pyruns9,758 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubfigma
When your agent uses it
Use the Figma MCP server to fetch design context, screenshots, variables, and assets from Figma, and to translate Figma nodes into production code. Use when a task involves Figma URLs, node IDs, design-to-code implementation, or Figma MCP setup and troubleshooting. Covers general Figma data fetching and exploration. Do NOT use when the goal is specifically pixel-perfect code implementation from a Figma design (use figma-implement-design instead).
What it loads into context
Frontmatter
120 tokensAlways available to the agent
SKILL.md
710 tokensWhen the skill is activated
Reference documents
1,182 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Figma MCP Integration Rules
- References
Files
LICENSE.txtdoc11,358 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesSKILL.mdcore3,421 bytesreferences/figma-mcp-config.mddoc2,358 bytesreferences/figma-tools-and-prompts.mddoc2,801 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubfigma-implement-design
When your agent uses it
Translate Figma nodes into production-ready code with 1:1 visual fidelity using the Figma MCP workflow (design context, screenshots, assets, and project-convention translation). Use when the user provides Figma URLs or node IDs and asks to implement designs or components that must match Figma specs. Requires a working Figma MCP server connection. Do NOT use for general Figma data fetching, variable exploration, or MCP troubleshooting (use figma instead).
What it loads into context
Frontmatter
123 tokensAlways available to the agent
SKILL.md
2,738 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Prerequisites
- Required Workflow
- Implementation Rules
- Examples
- Best Practices
- Common Issues and Solutions
- Understanding Design Implementation
- Additional Resources
Files
LICENSE.txtdoc11,358 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytesSKILL.mdcore11,646 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubfrontend-design
When your agent uses it
Create distinctive, production-grade frontend interfaces with high design quality. Use this skill when the user asks to build web components, pages, artifacts, posters, or applications. Generates creative, polished code that avoids generic AI aesthetics. Do NOT use for design review or audit (use web-design-guidelines or web-quality-audit).
What it loads into context
Frontmatter
116 tokensAlways available to the agent
SKILL.md
2,059 tokensWhen the skill is activated
Reference documents
7,610 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Design Direction
- Frontend Aesthetics Guidelines
- The AI Slop Test
- Examples
- Implementation Principles
Files
SKILL.mdcore9,871 bytesreferences/color-and-contrast.mddoc5,291 bytesreferences/interaction-design.mddoc4,204 bytesreferences/motion-design.mddoc4,753 bytesreferences/responsive-design.mddoc3,464 bytesreferences/spatial-design.mddoc3,545 bytesreferences/typography.mddoc5,503 bytesreferences/ux-writing.mddoc4,330 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubweb-design-guidelines
When your agent uses it
Review UI code for Web Interface Guidelines compliance. Use when asked to "review my UI", "check accessibility", "audit design", "review UX", or "check my site against best practices". Focuses on visual design and interaction patterns. Do NOT use for performance audits (use core-web-vitals), SEO (use seo), or comprehensive site audits (use web-quality-audit).
What it loads into context
Frontmatter
114 tokensAlways available to the agent
SKILL.md
466 tokensWhen the skill is activated
Reference documents
1,675 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How It Works
- Guidelines Reference
- Usage
- Output Format
Files
SKILL.mdcore2,035 bytesreferences/guideline.mddoc6,717 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcodenavi
When your agent uses it
Your pathfinder for navigating unknown codebases. Investigates with precision, implements surgically, and never assumes — if it doesn't know, it says so. Maintains a .notebook/ knowledge base that grows across sessions, turning every discovery into lasting intelligence. Summons available skills, MCPs, and docs when the mission demands. Use when fixing bugs, implementing features, refactoring, investigating flows, or any development task in unfamiliar territory. Triggers on "fix this", "implement this", "how does this work", "investigate this flow", "help me with this code". Do NOT use for greenfield scaffolding, CI/CD, or infrastructure provisioning.
What it loads into context
Frontmatter
178 tokensAlways available to the agent
SKILL.md
2,977 tokensWhen the skill is activated
Reference documents
2,455 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- The Golden Rules
- Mission Cycle
- Summon System
- Adapting to Mission Scale
- Consistency Contract
- Examples
Files
SKILL.mdcore13,535 bytesSKILL.mdcore13,535 bytesreferences/coding-principles.mddoc5,240 bytesreferences/notebook-spec.mddoc5,604 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcoding-guidelines
When your agent uses it
Behavioral guidelines to reduce common LLM coding mistakes. Use when writing, modifying, or reviewing code — implementation tasks, code changes, refactoring, bug fixes, or feature development. Do NOT use for architecture design, documentation, or non-code tasks.
What it loads into context
Frontmatter
83 tokensAlways available to the agent
SKILL.md
578 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 1. Think Before Coding
- 2. Simplicity First
- 3. Surgical Changes
- 4. Goal-Driven Execution
Files
SKILL.mdcore2,578 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubconfluence-assistant
When your agent uses it
Expert in Confluence operations using Atlassian MCP. Use when the user says "search Confluence", "create a Confluence page", "update a page", "find documentation in Confluence", "list spaces", or "add a comment to a page". Do NOT use for Jira issues, general web search, or local file creation.
What it loads into context
Frontmatter
114 tokensAlways available to the agent
SKILL.md
1,314 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- Configuration
- Workflow
- Best Practices
- Examples
- Output Format
- Important Notes
Files
SKILL.mdcore5,192 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdocs-writer
When your agent uses it
Write, review, and edit documentation files with consistent structure, tone, and technical accuracy. Use when creating docs, reviewing markdown files, writing READMEs, updating `/docs` directories, or when user says "write documentation", "review this doc", "improve this README", "create a guide", or "edit markdown". Do NOT use for code comments, inline JSDoc, or API reference generation.
What it loads into context
Frontmatter
92 tokensAlways available to the agent
SKILL.md
709 tokensWhen the skill is activated
Reference documents
847 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Step 1: Understand the goal and create a plan
- Step 2: Investigate and gather information
- Step 3: Write or edit the documentation
- Step 4: Verify and finalize
Files
SKILL.mdcore3,350 bytesreferences/style-guide.mddoc3,861 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubgh-address-comments
When your agent uses it
Address review and issue comments on the open GitHub PR for the current branch using gh CLI. Use when user says "address PR comments", "fix review feedback", "respond to PR review", or "handle PR comments". Verifies gh auth first and prompts to authenticate if not logged in. Do NOT use for creating PRs, CI debugging (use gh-fix-ci), or general Git operations.
What it loads into context
Frontmatter
123 tokensAlways available to the agent
SKILL.md
314 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 1) Inspect comments needing attention
- 2) Ask the user for clarification
- 3) If user chooses comments
Scripts executed separately
scripts/fetch_comments.py
Files
LICENSE.txtdoc11,357 bytesSKILL.mdcore1,411 bytesscripts/fetch_comments.pyruns6,537 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubharness-eval
When your agent uses it
Evaluate a repo agent harness (AGENTS.md, rules, skills, skill refs) for broken paths/commands, redundant instructions, and usefulness using a stack-agnostic dual-judge protocol with planted traps. HIGH PRIORITY questionnaires at top: Q1 optional docs, Q2 B/C budget before Track A (certainty/tokens). A always runs after Q2; B/C opt-in. ADRs/RFCs excluded from T2. Mixed apply uses 11-mixed-apply.md (KEEP/CUT). Use when the user says harness eval, harness-eval, harness debug, audit AGENTS.md, audit skills/rules, instruction audit, redundancy of agent instructions, usefulness of skills, Ship/Review/Hold/Slim/Keep-core for harness, or wants Track A/B/C harness evaluation. Do NOT use for harness setup or init, feature spec-driven work (tlc-spec-driven), or applying Ship/Slim trims unless the user explicitly asks after the report.
What it loads into context
Frontmatter
243 tokensAlways available to the agent
SKILL.md
4,067 tokensWhen the skill is activated
Reference documents
5,576 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- User questionnaires (HIGH PRIORITY)
- Loading this skill's files
- Critical rules
- Instructions
- Examples
- Troubleshooting
Scripts executed separately
scripts/doc_scope.pyscripts/inventory_extract.pyscripts/merge_agreement.pyscripts/merge_usefulness.pyscripts/slim_fanin.pyscripts/surfaces_extract.pyscripts/track_a_correctness.py
Files
SKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesSKILL.mdcore15,589 bytesreferences/GLOSSARY.mddoc3,825 bytesreferences/PROTOCOL.mddoc11,425 bytesreferences/claims.schema.jsonasset704 bytesreferences/judge-prompts.mddoc6,276 bytesscripts/doc_scope.pyruns7,176 bytesscripts/inventory_extract.pyruns30,498 bytesscripts/merge_agreement.pyruns6,014 bytesscripts/merge_usefulness.pyruns16,769 bytesscripts/slim_fanin.pyruns7,108 bytesscripts/surfaces_extract.pyruns8,195 bytesscripts/track_a_correctness.pyruns23,284 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubjira-assistant
When your agent uses it
Manage Jira issues via Atlassian MCP — search, create, update, transition status, and handle sprint tasks. Auto-detects workspace configuration. Use when user says "create a Jira ticket", "update my sprint", "check Jira status", "transition this issue", "search Jira", or "move ticket to done". Do NOT use for Confluence pages (use confluence-assistant).
What it loads into context
Frontmatter
87 tokensAlways available to the agent
SKILL.md
2,158 tokensWhen the skill is activated
Reference documents
965 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Use
- Configuration
- Workflow
- Default Task Template
- Best Practices
- Examples
- Common JQL Patterns
- Important Notes
Files
README.mddoc4,258 bytesSKILL.mdcore9,026 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnestjs-modular-monolith
When your agent uses it
Specialist in designing and implementing scalable modular monolith architectures using NestJS with DDD, Clean Architecture, and CQRS patterns. Use when building modular monolith backends, designing bounded contexts, creating domain modules, implementing event-driven module communication, or when user mentions "modular monolith", "bounded contexts", "module boundaries", "DDD", "CQRS", "clean architecture NestJS", or "monolith to microservices". Do NOT use for simple CRUD APIs, frontend work, general NestJS questions without architectural context, or stack-agnostic evolutionary modular monolith design (use evolutionary-modular-architecture).
What it loads into context
Frontmatter
170 tokensAlways available to the agent
SKILL.md
3,257 tokensWhen the skill is activated
Reference documents
14,610 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Role Definition
- When to Use This Skill
- When NOT to Use
- Core Principles
- Behavioral Guidelines
- Core Workflow
- Module Structure
- Reference Guide
- Stack Recommendations
- Constraints
- Output Templates
- Quick Anti-Pattern Detection
- MCP Tools
- Knowledge Reference
Scripts executed separately
scripts/validate-isolation.sh
Files
SKILL.mdcore15,928 bytesSKILL.mdcore15,928 bytesreferences/architecture-patterns.mddoc14,037 bytesreferences/authentication.mddoc9,805 bytesreferences/module-communication.mddoc8,320 bytesreferences/stack-configuration.mddoc11,465 bytesreferences/state-isolation.mddoc8,157 bytesreferences/testing-patterns.mddoc11,200 bytesscripts/validate-isolation.shruns7,808 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnot-your-babysitter
When your agent uses it
Autonomous senior-operator mode for AI agents that resolve tasks end to end without babysitting and never create new problems. The agent verifies every claim against real evidence (web search dated to the current month and year, the codebase, and available tools, MCPs, and CLIs); it never guesses, never fakes confidence, and never claims something is done without proof. It stays silent and keeps working, interrupting the user only on three stops, namely a destructive or irreversible action, a dead-end with no evidence after exhausting sources, or genuine ambiguity that changes the outcome. Output is short, literal, and human. Use when the user says "not-your-babysitter", "nanny mode", "work autonomously", "stop babysitting", or "no hand-holding", or wants an agent that solves problems on its own, especially hands-on engineering and operational tasks. Do not use when the user explicitly wants a tutorial, a verbose walkthrough, or open-ended brainstorming.
What it loads into context
Frontmatter
244 tokensAlways available to the agent
SKILL.md
3,268 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- The core
- Evidence, or nothing
- Where evidence comes from
- The three reasons to stop
- Interrupting is expensive
- Don't spin
- Proving it's done
- Match the effort to the job
- Hold state outside the conversation
- How to write back
- Before you send
- Living alongside other skills
- Examples
Files
SKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytesSKILL.mdcore14,406 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubrails-dev
When your agent uses it
Opinionated Rails conventions: rich models, concerns, CRUD-everything, state-as-records, minimal dependencies, Minitest with fixtures. Load this skill BEFORE any code-level thinking, not only before editing a file. It is required the moment a task touches Rails code in ANY way: designing or even just discussing a data model, schema, migration, entity, association, field, validation, class, or method name; writing, planning, reviewing, analyzing, testing, debugging, or refactoring; or proposing any model, table, column, route, or code snippet inline in chat. If you are about to name a model or sketch a column you are already in scope, even in an exploratory back-and-forth where no file is written yet. Do not let a "we're just discussing" framing defer it. Do NOT use for non-Rails backends, NestJS, or general architecture (use nestjs-modular-monolith or coding-guidelines).
What it loads into context
Frontmatter
231 tokensAlways available to the agent
SKILL.md
2,055 tokensWhen the skill is activated
Reference documents
38,082 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Philosophy
- Reference Selection
- Coding style
- Sources
Files
SKILL.mdcore8,670 bytesSKILL.mdcore8,670 bytesreferences/api.mddoc8,152 bytesreferences/async.mddoc1,759 bytesreferences/auth.mddoc10,082 bytesreferences/caching.mddoc4,929 bytesreferences/concerns.mddoc6,055 bytesreferences/crud.mddoc5,408 bytesreferences/error-handling.mddoc8,557 bytesreferences/events.mddoc4,179 bytesreferences/http-client.mddoc3,478 bytesreferences/jobs.mddoc9,124 bytesreferences/logging.mddoc8,752 bytesreferences/mailer.mddoc3,743 bytesreferences/migration.mddoc6,739 bytesreferences/model.mddoc16,791 bytesreferences/multi-tenant.mddoc3,637 bytesreferences/review.mddoc6,343 bytesreferences/routes.mddoc5,442 bytesreferences/state-records.mddoc7,237 bytesreferences/stimulus.mddoc4,747 bytesreferences/test.mddoc9,011 bytesreferences/turbo.mddoc4,936 bytesreferences/validator.mddoc3,050 bytesreferences/view.mddoc5,364 bytesreferences/webhooks.mddoc9,770 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubreact-native-expert
When your agent uses it
Senior React Native and Expo engineer for building production-ready cross-platform mobile apps. Use when building React Native components, implementing navigation with Expo Router, optimizing list and scroll performance, working with animations via Reanimated, handling platform-specific code (iOS/Android), integrating native modules, or structuring Expo projects. Triggers on React Native, Expo, mobile app, iOS app, Android app, cross-platform, native module, FlatList, FlashList, LegendList, Reanimated, Expo Router, mobile performance, app store. Do NOT use for Flutter, web-only React, or backend Node.js tasks.
What it loads into context
Frontmatter
165 tokensAlways available to the agent
SKILL.md
2,814 tokensWhen the skill is activated
Reference documents
9,990 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Core Principles
- Technology Stack (2026)
- Workflow
- Critical Rules (Always Apply)
- Constraints
- Reference Guide
- Output Format
Files
SKILL.mdcore12,873 bytesreferences/expo-router.mddoc5,616 bytesreferences/performance-rules.mddoc17,449 bytesreferences/platform-handling.mddoc4,308 bytesreferences/project-structure.mddoc5,140 bytesreferences/storage-patterns.mddoc6,387 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubshopify-developer
When your agent uses it
Complete Shopify development reference covering Liquid templating, OS 2.0 themes, GraphQL APIs, Hydrogen, Functions, and performance optimization (API v2026-01). Use when working with .liquid files, building Shopify themes or apps, writing GraphQL queries for Shopify, debugging Liquid errors, creating app extensions, migrating from Scripts to Functions, or building headless storefronts. Triggers on "Shopify", "Liquid template", "Hydrogen", "Storefront API", "theme development", "Shopify Functions", "Polaris". Do NOT use for non-Shopify e-commerce platforms.
What it loads into context
Frontmatter
131 tokensAlways available to the agent
SKILL.md
1,607 tokensWhen the skill is activated
Reference documents
38,290 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Reference
- Choose Your Path
- Deprecation Notices
- Liquid Essentials
- API Essentials
- Reference Files
Files
SKILL.mdcore7,487 bytesreferences/api-admin.mddoc11,460 bytesreferences/api-storefront.mddoc5,156 bytesreferences/app-development.mddoc16,815 bytesreferences/debugging.mddoc13,594 bytesreferences/functions.mddoc7,989 bytesreferences/hydrogen.mddoc9,241 bytesreferences/liquid-filters.mddoc13,537 bytesreferences/liquid-objects.mddoc21,095 bytesreferences/liquid-syntax.mddoc12,409 bytesreferences/performance.mddoc13,717 bytesreferences/theme-development.mddoc24,163 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubspec-driven-eval
When your agent uses it
Scores how completely an implementation fulfills a PRD/spec, case by case, and produces a single comparable final grade. Invoke only when explicitly named (e.g. run spec-driven-eval); do not auto-trigger. Use when benchmarking spec-driven implementations, grading acceptance criteria, evaluating whether a feature was 100% implemented, comparing multiple implementations of the same PRD, or auditing implementation and test coverage (unit and e2e) against product requirements. Do NOT use for planning or building features (use tlc-spec-driven), writing PRDs, or general code review unrelated to a spec.
What it loads into context
Frontmatter
171 tokensAlways available to the agent
SKILL.md
8,488 tokensWhen the skill is activated
Reference documents
8,224 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to use
- Inputs required
- Quick start
- Core rules (read first)
- Reproducibility rules
- Scoring model
- Elicitation `E` — how well the framework *extracts* requirements (reported beside; never folded into Final)
- Calibration (do this once per PRD, before trusting a benchmark)
- Process
- Output
- Worked example
- Anti-patterns
Files
SKILL.mdcore35,475 bytesSKILL.mdcore35,475 bytesSKILL.mdcore35,475 bytesSKILL.mdcore35,475 bytesSKILL.mdcore35,475 bytesreferences/quickstart.mddoc6,979 bytesreferences/reference.mddoc23,708 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-discover
When your agent uses it
Interviews an unshaped idea into a verdict and a design document - decisions, flows, schema, contracts - that anyone can plan from without having been in the room. Use when the user says "research this", "help me understand this problem", "should we build this", "discovery", "explore this problem", or "tlc-discover". Do NOT use to cut a finished design into tasks, or to implement.
What it loads into context
Frontmatter
136 tokensAlways available to the agent
SKILL.md
10,073 tokensWhen the skill is activated
Reference documents
2,567 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Critical rules
- The interview
- Situation
- Problem
- Verdict
- Decide
- Format
- Knowledge chain
- Output
- Examples
- Common failures
Files
SKILL.mdcore47,483 bytesreferences/document-format.mddoc10,788 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-implement
When your agent uses it
Implements work already planned - a plan.md from tlc-plan, or a small ticket - by freezing it into checks with proofs, building, and proving every check with a script and an independent Verifier before declaring done. Use when the user says "implement this plan", "build this ticket", "implement this spec", "write the checks", "verify work", or "tlc-implement". Do NOT use when nobody has decided what to build, or to plan a feature that needs one (that is tlc-plan).
What it loads into context
Frontmatter
155 tokensAlways available to the agent
SKILL.md
2,418 tokensWhen the skill is activated
Reference documents
10,171 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Rules
- Configuration
- Artifacts
- Phases
- Scripts
- Requires
- Output
Scripts executed separately
scripts/check_commit.pyscripts/check_proofs.pyscripts/lean_config.pyscripts/lessons.pyscripts/mutate.pyscripts/runners.pyscripts/selftest.pyscripts/validate_checks.pyscripts/validate_verification.py
Files
SKILL.mdcore10,081 bytesSKILL.mdcore10,081 bytesreferences/build.mddoc4,978 bytesreferences/checks.mddoc8,652 bytesreferences/memory.mddoc5,407 bytesreferences/verify-screens.mddoc4,276 bytesreferences/verify.mddoc5,428 bytesscripts/check_commit.pyruns4,482 bytesscripts/check_proofs.pyruns10,607 bytesscripts/fixtures/checks.mddoc3,468 bytesscripts/fixtures/plan.mddoc5,701 bytesscripts/fixtures/proofs.mddoc1,108 bytesscripts/fixtures/verification.mddoc387 bytesscripts/lean_config.pyruns3,774 bytesscripts/lessons.pyruns15,193 bytesscripts/mutate.pyruns12,005 bytesscripts/runners.pyruns10,606 bytesscripts/selftest.pyruns52,245 bytesscripts/validate_checks.pyruns19,676 bytesscripts/validate_verification.pyruns21,317 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-plan
When your agent uses it
Turns a request, ticket, PRD, design or thread into one plan a human approves and a builder can act on without the conversation: asks every gray area until no product decision is left to the builder, then writes the problem, EARS criteria with concrete values, the path and the data it touches (drawn in mermaid), the interface, and only the decisions that are hard to reverse. Captures that come with the request bind. Use when the user says "plan this", "plan feature", "specify feature", "write the plan", "cut this PRD into tasks", or "tlc-plan". Do NOT use to implement (that is tlc-implement), for a standalone design document, or when nobody has decided what to build.
What it loads into context
Frontmatter
201 tokensAlways available to the agent
SKILL.md
1,722 tokensWhen the skill is activated
Reference documents
5,517 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Rules
- Cut: how many plans
- Artifacts
- Decisions and lessons
- Scripts
- Requires
- Output
Scripts executed separately
scripts/lean_config.pyscripts/lessons.pyscripts/selftest.pyscripts/validate_plan.py
Files
SKILL.mdcore7,262 bytesSKILL.mdcore7,262 bytesSKILL.mdcore7,262 bytesSKILL.mdcore7,262 bytesSKILL.mdcore7,262 bytesSKILL.mdcore7,262 bytesreferences/plan.mddoc16,920 bytesscripts/fixtures/plan.mddoc5,701 bytesscripts/lean_config.pyruns3,774 bytesscripts/lessons.pyruns15,193 bytesscripts/selftest.pyruns52,245 bytesscripts/validate_plan.pyruns33,481 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-prd
When your agent uses it
Interviews an idea into a PRD file covering situation, problem, success, boundary, and journey states, and stops before any technical design. Use when the user says "write the PRD", "create the PRD", "PRD", "product spec", "product requirements", "tlc-prd", or "what does the product need to decide". Do NOT use for designing a solution, choosing technology, publishing the document, or cutting the PRD into tasks.
What it loads into context
Frontmatter
144 tokensAlways available to the agent
SKILL.md
3,373 tokensWhen the skill is activated
Reference documents
968 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Critical rules
- The interview
- Situation
- Problem
- Verdict
- Write the file
- Examples
- Troubleshooting
Files
SKILL.mdcore15,208 bytesreferences/document-format.mddoc4,111 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-spec-driven
When your agent uses it
Feature planning and implementation with 4 adaptive phases (Specify, Design, Tasks, Execute). Auto-sizes depth by complexity. Asks every product decision before the spec is approved, writes testable requirements in EARS notation, atomic tasks with a gate and a commit each, and one check per criterion with the test that proves it. Captures that come with the request bind, and each screen is judged against them. Ships deterministic Python scripts so the gates are enforced by code, not memory; the proofs run once at the end, and an independent Verifier (author != verifier) spends its time on mutations and judgement. Use when (1) planning features, (2) implementing with verification and atomic commits, (3) validating an implementation against a spec. Triggers on "specify feature", "discuss feature", "design", "tasks", "implement", "validate", "verify work", "UAT", "record decision", "pause work", "resume work". Do NOT use for pure architecture decomposition analysis or standalone technical design documents.
What it loads into context
Frontmatter
255 tokensAlways available to the agent
SKILL.md
3,785 tokensWhen the skill is activated
Reference documents
28,668 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Critical Rules (read before acting)
- Auto-Sizing: The Core Principle
- .specs Structure
- Workflow
- Context Loading Strategy
- Sub-Agent Delegation
- Commands
- Knowledge
- Requires
- Output Behavior
Scripts executed separately
scripts/check_commit.pyscripts/check_proofs.pyscripts/lean_config.pyscripts/lessons.pyscripts/mutate.pyscripts/runners.pyscripts/selftest.pyscripts/validate_spec.pyscripts/validate_tasks.pyscripts/validate_verification.py
Files
SKILL.mdcore17,140 bytesSKILL.mdcore17,140 bytesreferences/coding-principles.mddoc3,172 bytesreferences/design.mddoc8,450 bytesreferences/discuss.mddoc5,984 bytesreferences/implement.mddoc19,006 bytesreferences/lessons.mddoc6,860 bytesreferences/memory.mddoc8,037 bytesreferences/specify.mddoc16,631 bytesreferences/sub-agents.mddoc9,125 bytesreferences/tasks.mddoc23,424 bytesreferences/validate.mddoc6,079 bytesreferences/verify-screens.mddoc3,638 bytesscripts/check_commit.pyruns4,482 bytesscripts/check_proofs.pyruns10,814 bytesscripts/fixtures/checks.mddoc3,468 bytesscripts/fixtures/plan.mddoc5,500 bytesscripts/fixtures/proofs.mddoc1,108 bytesscripts/fixtures/verification.mddoc387 bytesscripts/lean_config.pyruns4,988 bytesscripts/lessons.pyruns15,193 bytesscripts/mutate.pyruns12,005 bytesscripts/runners.pyruns10,606 bytesscripts/selftest.pyruns54,041 bytesscripts/validate_spec.pyruns14,676 bytesscripts/validate_tasks.pyruns12,819 bytesscripts/validate_verification.pyruns19,691 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-spec-lean
When your agent uses it
Spec-driven feature work that freezes obligations instead of the plan: one human-reviewed plan with EARS criteria, path, entities, interface and one-way doors, then proof-backed checks, then build, then an independent Verifier. Use when the user says "tlc-spec-lean", "plan feature", "specify feature", "write the checks", "build this plan", or "verify work". Do NOT use for standalone design documents unattached to a feature, architecture decomposition analysis, or work that already has a task list or checklist to execute.
What it loads into context
Frontmatter
160 tokensAlways available to the agent
SKILL.md
2,504 tokensWhen the skill is activated
Reference documents
14,134 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Rules
- Configuration
- Artifacts
- Phases
- Scripts
- Requires
- Output
Scripts executed separately
scripts/check_commit.pyscripts/check_proofs.pyscripts/lean_config.pyscripts/lessons.pyscripts/mutate.pyscripts/runners.pyscripts/selftest.pyscripts/validate_checks.pyscripts/validate_plan.pyscripts/validate_verification.py
Files
SKILL.mdcore10,505 bytesSKILL.mdcore10,505 bytesSKILL.mdcore10,505 bytesreferences/build.mddoc4,978 bytesreferences/checks.mddoc8,596 bytesreferences/memory.mddoc5,433 bytesreferences/plan.mddoc16,444 bytesreferences/verify-screens.mddoc4,276 bytesreferences/verify.mddoc5,428 bytesscripts/check_commit.pyruns4,482 bytesscripts/check_proofs.pyruns10,778 bytesscripts/fixtures/checks.mddoc3,468 bytesscripts/fixtures/plan.mddoc5,555 bytesscripts/fixtures/proofs.mddoc1,108 bytesscripts/fixtures/verification.mddoc387 bytesscripts/lean_config.pyruns3,774 bytesscripts/lessons.pyruns15,193 bytesscripts/mutate.pyruns12,005 bytesscripts/runners.pyruns10,606 bytesscripts/selftest.pyruns52,245 bytesscripts/validate_checks.pyruns19,676 bytesscripts/validate_plan.pyruns33,481 bytesscripts/validate_verification.pyruns21,317 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubai-cold-outreach
When your agent uses it
When the user wants to build an AI-powered outreach system, write cold emails, improve deliverability, or scale personalized outreach. Also use when the user mentions 'cold email,' 'cold outreach,' 'outreach automation,' 'Instantly,' 'Smartlead,' 'Clay,' 'email sequences,' 'deliverability,' 'personalization at scale,' 'reply rate,' or 'outreach stack.' This skill covers the complete AI cold outreach system from signal detection through conversion. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
179 tokensAlways available to the agent
SKILL.md
5,451 tokensWhen the skill is activated
Reference documents
3,133 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- The AI Outreach Stack
- The 3-Line Cold Email Framework
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore22,495 bytesreferences/benchmarks-deliverability-tactics.mddoc9,654 bytesreferences/quick-reference.mddoc1,660 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubai-pricing
When your agent uses it
When the user wants to price an AI product, choose a charge metric, design pricing tiers, or optimize margins. Also use when the user mentions 'AI pricing,' 'usage-based pricing,' 'consumption pricing,' 'outcome pricing,' 'BYOK,' 'bring your own key,' 'per-seat pricing,' 'pricing tiers,' 'AI margins,' 'cost per token,' or 'pricing model.' This skill covers pricing strategy, packaging, and margin management for AI-native products. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
180 tokensAlways available to the agent
SKILL.md
3,430 tokensWhen the skill is activated
Reference documents
4,491 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- The Three Charge Metrics
- Three Product Archetypes and Their Pricing
- Hybrid Pricing Model Design
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore14,577 bytesSKILL.mdcore14,577 bytesreferences/implementation-guide.mddoc17,299 bytesreferences/quick-reference.mddoc2,490 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubai-sdr
When your agent uses it
When the user wants to deploy AI sales development reps, automate sales qualification, build signal-to-action routing, or design AI agent architecture for sales. Also use when the user mentions 'AI SDR,' 'AI sales agent,' 'automated qualification,' 'signal routing,' 'sales automation,' '11x,' 'Artisan,' 'AiSDR,' 'AI BDR,' or 'autonomous sales.' This skill covers AI SDR deployment, qualification automation, and agent architecture for sales development. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
181 tokensAlways available to the agent
SKILL.md
4,053 tokensWhen the skill is activated
Reference documents
4,375 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- Section 1: AI SDR Landscape (2025-2026)
- Section 2: The 4-Week AI SDR Deployment Program
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore17,588 bytesSKILL.mdcore17,588 bytesreferences/implementation-guide.mddoc18,528 bytesreferences/quick-reference.mddoc1,857 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubai-seo
When your agent uses it
When the user wants to build programmatic SEO with AI, create competitor alternative pages, optimize for AI Overviews, or scale content production. Also use when the user mentions 'SEO,' 'programmatic SEO,' 'AI content,' 'competitor alternative pages,' 'AI Overviews,' 'search optimization,' 'DataForSEO,' 'content at scale,' 'keyword strategy,' or 'organic traffic.' This skill covers AI-powered SEO strategy from keyword research through programmatic page generation. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
179 tokensAlways available to the agent
SKILL.md
5,317 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. AI SEO Stack - Tool Selection Framework
- 2. The "[Competitor] Alternative" SEO Play
- 3. Programmatic SEO - Scaling Pages with AI
- 4. AI Overviews and Generative Engine Optimization (GEO)
- 5. Keyword Strategy Framework
- 6. Content Production Pipeline
- 7. Technical SEO for Programmatic Pages
- 8. Measurement and Iteration
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore21,836 bytesSKILL.mdcore21,836 bytesSKILL.mdcore21,836 bytesSKILL.mdcore21,836 bytesSKILL.mdcore21,836 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubai-ugc-ads
When your agent uses it
When the user wants to create UGC ad campaigns, recruit UGC creators, generate AI UGC content, or scale with user-generated content. Also use when the user mentions 'UGC,' 'user-generated content,' 'creator ads,' 'Spark Ads,' 'whitelisting,' 'AI UGC,' 'Arcads,' 'Creatify,' 'creator brief,' or 'UGC testing.' This skill covers the UGC growth framework from creator recruitment through AI-powered scaling. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
181 tokensAlways available to the agent
SKILL.md
5,548 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- Section 1: The UGC-Only Growth Framework
- Section 2: Creator Recruitment
- Section 3: UGC Brief Template
- Section 4: AI UGC Tools
- Section 5: Ad Format Templates
- Section 6: Platform Strategy
- Section 7: Whitelisting and Spark Ads
- Section 8: Creative Testing Matrix
- Section 9: Kill Criteria and Scaling Rules
- Section 10: Benchmarks (2025-2026)
- Section 11: TikTok Shop UGC Integration
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore20,036 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcontent-to-pipeline
When your agent uses it
When the user wants to turn content into revenue, build a content-led GTM motion, reverse engineer distribution, or repurpose content across platforms. Also use when the user mentions 'content marketing,' 'content-led growth,' 'content to pipeline,' 'distribution,' 'content repurposing,' 'content strategy,' 'thought leadership,' 'newsletter,' 'content flywheel,' 'organic growth.' This skill covers content-to-revenue systems from creation through pipeline attribution. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
176 tokensAlways available to the agent
SKILL.md
5,652 tokensWhen the skill is activated
Reference documents
1,700 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. The Content Flywheel
- 2. Distribution Reverse Engineering
- 3. Multi-Platform Content Repurposing Framework
- 4. Newsletter as Pipeline
- 5. Content-to-DM Conversion
- 6. Founder-Led Content vs. Team Content
- 7. Building in Public as GTM
- 8. Content Attribution and Pipeline Tracking
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore25,352 bytesreferences/podcast-community-cadence.mddoc4,428 bytesreferences/quick-reference.mddoc2,865 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubexpansion-retention
When your agent uses it
When the user wants to reduce churn, build expansion revenue, automate customer success, or optimize net revenue retention. Also use when the user mentions 'churn,' 'retention,' 'expansion revenue,' 'upsell,' 'NRR,' 'net revenue retention,' 'customer success,' 'land and expand,' 'closed-lost,' or 'renewal.' This skill covers expansion and retention systems from usage triggers through automated customer success. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
171 tokensAlways available to the agent
SKILL.md
5,469 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. Net Revenue Retention: The Growth Multiplier
- 2. Land-and-Expand: Consumption-Based Upsell Triggers
- 3. Customer Health Scoring
- 4. Product-Qualified Accounts (PQAs)
- 5. Automated Onboarding Sequences
- 6. Closed-Lost Re-engagement
- 7. Usage-Based Billing Optimization
- 8. Customer Advocacy and Renewal Management
- 9. Churn Prevention Playbooks
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore22,290 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubgtm-engineering
When your agent uses it
When the user wants to build GTM automation with code, design workflow architectures, use AI agents for GTM tasks, or implement the 'architecture over tools' principle. Also use when the user mentions 'GTM engineering,' 'GTM automation,' 'n8n,' 'Make,' 'Zapier,' 'workflow automation,' 'Clay API,' 'instruction stacks,' 'AI agents for GTM,' or 'revenue automation.' This skill covers technical GTM infrastructure from workflow design through agent orchestration. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
186 tokensAlways available to the agent
SKILL.md
4,181 tokensWhen the skill is activated
Reference documents
6,556 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. The GTM Engineer Role
- 2. Architecture Over Tools
- 3. Automation Platform Comparison
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore19,074 bytesreferences/implementation-guide.mddoc25,918 bytesreferences/quick-reference.mddoc3,002 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubgtm-metrics
When your agent uses it
When the user wants to define GTM metrics, build a metrics dashboard, measure pipeline efficiency, or track AI product performance. Also use when the user mentions 'GTM metrics,' 'revenue latency,' 'pipeline metrics,' 'TTFV,' 'time-to-first-value,' 'data health,' 'attribution,' 'conversion rate,' 'CAC,' 'LTV,' 'NRR,' 'GTM dashboard,' 'magic number,' 'pipeline velocity,' or 'funnel metrics.' This skill covers GTM measurement from metric selection through dashboard design, including AI-specific cost metrics, attribution models, and weekly review cadences. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
209 tokensAlways available to the agent
SKILL.md
5,310 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. Core GTM Metrics Dashboard
- 2. Funnel Metrics by GTM Motion
- 3. AI Product-Specific Metrics
- 4. Data Health Scoring
- 5. Attribution Models
- 6. Dashboard Architecture
- 7. Leading vs. Lagging Indicators
- 8. Weekly GTM Review Cadence
- 9. PQL Scoring
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore20,946 bytesSKILL.mdcore20,946 bytesSKILL.mdcore20,946 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHublead-enrichment
When your agent uses it
When the user wants to build data enrichment workflows, score leads against ICP, set up Clay waterfalls, or improve contact data quality. Also use when the user mentions 'enrichment,' 'data enrichment,' 'Clay,' 'waterfall enrichment,' 'ICP scoring,' 'lead scoring,' 'intent data,' 'contact verification,' 'Apollo,' 'ZoomInfo,' or 'data quality.' This skill covers lead enrichment waterfalls, ICP scoring frameworks, and contact verification systems. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
175 tokensAlways available to the agent
SKILL.md
5,472 tokensWhen the skill is activated
Reference documents
570 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- Section 1: ICP Scoring Framework
- Section 2: Enrichment Waterfall Architecture
- Section 3: Clay Workflow Design
- Section 4: Contact Verification Pipeline
- Section 5: Performance Benchmarks
- Section 6: Compliance
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore21,401 bytesSKILL.mdcore21,401 bytesreferences/quick-reference.mddoc2,261 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubmulti-platform-launch
When your agent uses it
When the user wants to launch a product across multiple platforms, plan a Product Hunt launch, build a waitlist, or execute a multi-channel launch strategy. Also use when the user mentions 'product launch,' 'Product Hunt,' 'launch strategy,' 'waitlist,' 'beta launch,' 'BetaList,' 'Hacker News,' 'launch day,' 'AppSumo,' 'multi-channel launch.' This skill covers multi-platform launch execution from pre-launch through post-launch optimization. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
178 tokensAlways available to the agent
SKILL.md
3,887 tokensWhen the skill is activated
Reference documents
2,718 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- Platform Landscape (2025-2026)
- Launch Sequence Framework
- Product Hunt Deep Dive
- Hacker News (Show HN) Deep Dive
- Waitlist Building Playbook
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore15,516 bytesSKILL.mdcore15,516 bytesSKILL.mdcore15,516 bytesSKILL.mdcore15,516 bytesreferences/directories-timing-mistakes.mddoc9,311 bytesreferences/quick-reference.mddoc1,544 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubpaid-creative-ai
When your agent uses it
When the user wants to create AI-generated ad creative, test performance creative, manage creative fatigue, or optimize paid media with AI tools. Also use when the user mentions 'ad creative,' 'performance creative,' 'creative testing,' 'creative fatigue,' 'Meta ads,' 'Google ads,' 'TikTok ads,' 'AI ads,' 'ad budget,' 'ROAS,' 'Advantage+,' or 'Performance Max.' This skill covers AI-powered paid creative from generation through performance optimization. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
181 tokensAlways available to the agent
SKILL.md
6,621 tokensWhen the skill is activated
Reference documents
543 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- Section 1: Platform AI Creative Systems
- Section 2: AI Creative Generation Tools
- Section 3: Budget Allocation Framework
- Section 4: Modular Creative Testing Framework
- Section 5: Creative Fatigue Management
- Section 6: Kill Criteria and Scaling Rules
- Section 7: Platform Cost Benchmarks (2025-2026)
- Section 8: Cross-Platform Creative Strategy
- Section 9: Attribution and Measurement
- Section 10: AI Creative Compliance
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore25,678 bytesreferences/quick-reference.mddoc2,336 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubpartner-affiliate
When your agent uses it
When the user wants to build a partner program, launch an affiliate program, design integration partnerships, or create distribution partnerships. Also use when the user mentions 'partnerships,' 'affiliate program,' 'referral program,' 'partner ecosystem,' 'integration partner,' 'reseller,' 'co-marketing,' 'PartnerStack,' or 'revenue share.' This skill covers partner and affiliate program design from recruitment through performance optimization. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
168 tokensAlways available to the agent
SKILL.md
3,505 tokensWhen the skill is activated
Reference documents
4,695 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. Co-Creation vs. Traditional Partner Models
- 2. Partner Program Tiers and Compensation
- 3. Affiliate Program Design and Tooling
- 4. Integration Partnership Strategy
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore15,857 bytesreferences/implementation-guide.mddoc18,899 bytesreferences/quick-reference.mddoc2,586 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubpositioning-icp
When your agent uses it
When the user wants to define their ideal customer profile, position an AI product, build messaging architecture, or validate product-market fit. Also use when the user mentions 'ICP,' 'ideal customer profile,' 'positioning,' 'PMF,' 'product-market fit,' 'messaging,' 'buyer persona,' 'enrichment signals,' 'market positioning,' or 'competitive positioning.' This skill covers market positioning, ICP definition, messaging architecture, and PMF validation for AI-native products. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
180 tokensAlways available to the agent
SKILL.md
6,170 tokensWhen the skill is activated
Reference documents
536 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. Positioning Stack for AI Products
- 2. Defining ICP with Enrichment Signals
- 3. Competitive Positioning in Fast-Moving AI Markets
- 4. Messaging Architecture
- 5. The Buyer Shift: Business Leaders as AI Buyers
- 6. Perishable PMF: Quarterly Revalidation
- 7. April Dunford's Positioning Framework Applied to AI
- 8. Implementation Playbook
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore27,502 bytesSKILL.mdcore27,502 bytesreferences/quick-reference.mddoc2,249 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsales-motion-design
When your agent uses it
When the user wants to choose between PLG and sales-led, design a sales motion, optimize time-to-first-value, or build a value-before-purchase experience. Also use when the user mentions 'PLG,' 'product-led growth,' 'sales-led,' 'sales motion,' 'free trial,' 'freemium,' 'self-serve,' 'demo-first,' 'time-to-first-value,' 'TTFV,' or 'agent-led sales.' This skill covers sales motion selection, value delivery design, and go-to-market motion architecture. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
191 tokensAlways available to the agent
SKILL.md
5,354 tokensWhen the skill is activated
Reference documents
481 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. The Motion Selection Matrix
- 2. Motion Archetypes in Detail
- 3. Value-Before-Purchase Experiences
- 4. Time-to-First-Value (TTFV) as North Star
- 5. Hybrid Motion Architecture
- 6. CAC Benchmarks and Efficiency
- 7. Motion Migration Paths
- 8. Free Trial vs Freemium Decision
- 9. Stage-Specific Playbooks
- 10. Common Mistakes
- Examples
- Troubleshooting
- Related Skills
Files
SKILL.mdcore22,862 bytesreferences/quick-reference.mddoc1,992 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsocial-selling
When your agent uses it
When the user wants to sell through social media, optimize LinkedIn for sales, build DM sequences, or convert content engagement into pipeline. Also use when the user mentions 'social selling,' 'LinkedIn selling,' 'LinkedIn DMs,' 'social prospecting,' 'LinkedIn Sales Navigator,' 'DM sequences,' 'LinkedIn outreach,' 'social pipeline,' or 'LinkedIn optimization.' This skill covers social selling strategy from profile optimization through DM-to-deal conversion. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
176 tokensAlways available to the agent
SKILL.md
4,573 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. LinkedIn Profile Optimization for Sales
- 2. LinkedIn Sales Navigator
- 3. Content-to-Conversation Framework
- 4. DM Sequence Templates
- 5. LinkedIn Automation Tools
- 6. Social Selling Metrics
- 7. Multi-Platform Social Selling
- 8. Thought Leadership as GTM
- 9. Employee Advocacy and Company Pages
- 10. LinkedIn Algorithm (2026)
- Quick Reference
- Examples
- Troubleshooting
- Questions to Ask
- Related Skills
Files
SKILL.mdcore19,591 bytesSKILL.mdcore19,591 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsolo-founder-gtm
When your agent uses it
When the user is a solo founder building their GTM motion, wants to scale without hiring, or needs to design an AI agent team for go-to-market. Also use when the user mentions 'solo founder,' 'one-person startup,' 'solopreneur,' 'bootstrapped,' 'no team,' 'AI agents as team,' 'scaling without hiring,' 'founder-led sales,' 'lean GTM,' 'one-person company,' or 'no employees.' This skill covers the complete solo founder GTM playbook from stack selection through agent team design, revenue-stage transitions, time allocation, and when to finally hire. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
212 tokensAlways available to the agent
SKILL.md
5,973 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- 1. Taste as Moat: Why Judgment Beats Headcount
- 2. The One-Person Startup Stack
- 3. Revenue Stage Playbook
- 4. Self-Serve vs Sales Calls Decision Framework
- 5. AI Agent Team: Your GTM Org Chart
- 6. Building in Public and Personal Brand as Distribution
- 7. When to Make the First GTM Hire
- 8. Enterprise Features to Skip
- 9. Founder-Led Sales Process
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore24,365 bytesSKILL.mdcore24,365 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubvideo-outreach
When your agent uses it
When the user wants to build video-first cold outreach, create personalized video at scale, implement async selling, or use AI demo generation for prospecting. Also use when the user mentions 'video outreach,' 'personalized video,' 'video prospecting,' 'Tavus,' 'Sendspark,' 'HeyGen,' 'video email,' 'async selling,' 'video demo,' or 'made this for you.' This skill covers video-first outreach systems from personalization through conversion optimization. Do NOT use for technical implementation, code review, or software architecture.
What it loads into context
Frontmatter
179 tokensAlways available to the agent
SKILL.md
5,799 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Before Starting
- The "Made This For You" Framework
- Personalized Video at Scale: The Tool Landscape
- Interactive Demo Tools for Async Selling
- Video in the Sales Sequence
- Async Selling: Replacing Meetings with Video
- Conversion Benchmarks
- The Video Prospecting Tech Stack
- Recording Best Practices
- Measuring Performance
- Examples
- Troubleshooting
- Quick Reference
- Questions to Ask
- Related Skills
Files
SKILL.mdcore26,629 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHublearning-opportunities
When your agent uses it
Facilitates deliberate skill development during AI-assisted coding. Offers interactive learning exercises after architectural work (new files, schema changes, refactors). Use when completing features, making design decisions, or when user asks to understand code better. Triggers on "learning exercise", "help me understand", "teach me", "why does this work", or after creating new files/modules. Do NOT use for urgent debugging, quick fixes, or when user says "just ship it".
What it loads into context
Frontmatter
156 tokensAlways available to the agent
SKILL.md
1,072 tokensWhen the skill is activated
Reference documents
549 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to offer exercises
- When NOT to offer
- Core principle: Pause for input
- Exercise types
- Hands-on code exploration
- Techniques to weave in naturally
- Anti-patterns to avoid
Files
SKILL.mdcore5,034 bytesreferences/PRINCIPLES.mddoc2,560 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsentry
When your agent uses it
Inspect Sentry issues, summarize production errors, and pull health data via the Sentry API (read-only). Use when user says "check Sentry", "what errors in production?", "summarize Sentry issues", "recent crashes", or "production error report". Requires SENTRY_AUTH_TOKEN. Do NOT use for setting up Sentry SDK, configuring alerts, or non-Sentry error monitoring.
What it loads into context
Frontmatter
110 tokensAlways available to the agent
SKILL.md
1,089 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick start
- Core tasks (use bundled script)
- Skill path (set once)
- API requirements
- Inputs and defaults
- Output formatting rules
- Golden test inputs
Scripts executed separately
scripts/sentry_api.py
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesSKILL.mdcore4,035 bytesscripts/sentry_api.pyruns7,289 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcore-web-vitals
When your agent uses it
Optimize Core Web Vitals (LCP, INP, CLS) for better page experience and search ranking. Use when asked to "improve Core Web Vitals", "fix LCP", "reduce CLS", "optimize INP", "page experience optimization", or "fix layout shifts". Focuses specifically on the three Core Web Vitals metrics. Do NOT use for general web performance (use perf-web-optimization), Lighthouse audits (use perf-lighthouse), or Astro-specific optimization (use perf-astro).
What it loads into context
Frontmatter
135 tokensAlways available to the agent
SKILL.md
3,050 tokensWhen the skill is activated
Reference documents
1,193 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- The three metrics
- LCP: Largest Contentful Paint
- INP: Interaction to Next Paint
- CLS: Cumulative Layout Shift
- Measurement tools
- Framework quick fixes
- References
Files
SKILL.mdcore12,001 bytesreferences/LCP.mddoc4,567 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubperf-astro
When your agent uses it
Astro-specific performance optimizations for 95+ Lighthouse scores. Covers critical CSS inlining, compression, font loading, and LCP optimization. Use when optimizing Astro site performance, improving Astro Lighthouse scores, or configuring astro-critters. Do NOT use for non-Astro sites (use perf-web-optimization or core-web-vitals) or running Lighthouse audits (use perf-lighthouse).
What it loads into context
Frontmatter
87 tokensAlways available to the agent
SKILL.md
941 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Setup
- Integrations
- Layout Pattern
- Measuring
- Checklist
Files
SKILL.mdcore3,691 bytesSKILL.mdcore3,691 bytesSKILL.mdcore3,691 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubperf-lighthouse
When your agent uses it
Run Lighthouse audits locally via CLI or Node API, parse and interpret reports, and set performance budgets. Use when measuring site performance, understanding Lighthouse scores, setting up budgets, or integrating audits into CI. Triggers on: lighthouse, run lighthouse, lighthouse score, performance audit, performance budget. Do NOT use for fixing specific performance issues (use perf-web-optimization or core-web-vitals) or Astro-specific optimization (use perf-astro).
What it loads into context
Frontmatter
97 tokensAlways available to the agent
SKILL.md
1,617 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- CLI Quick Start
- Common Flags
- Performance Budgets
- Node API
- GitHub Actions
- Lighthouse CI (LHCI)
- Parse JSON Report
- Compare Builds
- Troubleshooting
Files
SKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytesSKILL.mdcore6,401 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubperf-web-optimization
When your agent uses it
Optimize web performance: bundle size, images, caching, lazy loading, and overall page speed. Use when site is slow, reducing bundle size, fixing layout shifts, improving Time to Interactive, or optimizing for Lighthouse scores. Triggers on: web performance, bundle size, page speed, slow site, lazy loading. Do NOT use for Core Web Vitals-specific fixes (use core-web-vitals), running Lighthouse audits (use perf-lighthouse), or Astro-specific optimization (use perf-astro).
What it loads into context
Frontmatter
109 tokensAlways available to the agent
SKILL.md
1,142 tokensWhen the skill is activated
Reference documents
2,694 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Target Metrics
- Quick Wins
- Bundle Analysis
- Code Splitting Patterns
- Caching Headers
- Measurement
- Checklist
- Detailed Examples
Files
SKILL.mdcore4,169 bytesSKILL.mdcore4,169 bytesreferences/bundle-optimization.mddoc3,362 bytesreferences/core-web-vitals.mddoc3,157 bytesreferences/image-optimization.mddoc3,393 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubreact-best-practices
When your agent uses it
React and Next.js performance optimization guidelines from Vercel Engineering. Use when writing, reviewing, or refactoring React/Next.js code to ensure optimal performance patterns. Triggers on tasks involving React components, Next.js pages, data fetching, bundle optimization, or performance improvements. Do NOT use for component API architecture or composition patterns (use react-composition-patterns instead).
What it loads into context
Frontmatter
106 tokensAlways available to the agent
SKILL.md
1,546 tokensWhen the skill is activated
Reference documents
40,739 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- When to Apply
- Rule Categories by Priority
- Quick Reference
- How to Use
- Full Compiled Document
Files
AGENTS.mddoc81,716 bytesREADME.mddoc3,360 bytesSKILL.mdcore6,436 bytesrules/_sections.mddoc1,554 bytesrules/_template.mddoc631 bytesrules/advanced-event-handler-refs.mddoc1,483 bytesrules/advanced-init-once.mddoc958 bytesrules/advanced-use-latest.mddoc1,072 bytesrules/async-api-routes.mddoc1,125 bytesrules/async-defer-await.mddoc2,028 bytesrules/async-dependencies.mddoc1,293 bytesrules/async-parallel.mddoc654 bytesrules/async-suspense-boundaries.mddoc2,510 bytesrules/bundle-barrel-imports.mddoc2,370 bytesrules/bundle-conditional.mddoc949 bytesrules/bundle-defer-third-party.mddoc920 bytesrules/bundle-dynamic-imports.mddoc791 bytesrules/bundle-preload.mddoc1,149 bytesrules/client-event-listeners.mddoc1,969 bytesrules/client-localstorage-schema.mddoc1,950 bytesrules/client-passive-event-listeners.mddoc1,644 bytesrules/client-swr-dedup.mddoc1,159 bytesrules/js-batch-dom-css.mddoc3,266 bytesrules/js-cache-function-results.mddoc1,949 bytesrules/js-cache-property-access.mddoc532 bytesrules/js-cache-storage.mddoc1,651 bytesrules/js-combine-iterations.mddoc753 bytesrules/js-early-exit.mddoc1,133 bytesrules/js-hoist-regexp.mddoc1,028 bytesrules/js-index-maps.mddoc837 bytesrules/js-length-check-first.mddoc1,747 bytesrules/js-min-max-loop.mddoc2,290 bytesrules/js-set-map-lookups.mddoc532 bytesrules/js-tosorted-immutable.mddoc1,782 bytesrules/rendering-activity.mddoc564 bytesrules/rendering-animate-svg-wrapper.mddoc1,185 bytesrules/rendering-conditional-render.mddoc980 bytesrules/rendering-content-visibility.mddoc815 bytesrules/rendering-hoist-jsx.mddoc1,039 bytesrules/rendering-hydration-no-flicker.mddoc2,308 bytesrules/rendering-hydration-suppress-warning.mddoc872 bytesrules/rendering-svg-precision.mddoc588 bytesrules/rendering-usetransition-loading.mddoc2,074 bytesrules/rerender-defer-reads.mddoc973 bytesrules/rerender-dependencies.mddoc824 bytesrules/rerender-derived-state-no-effect.mddoc1,201 bytesrules/rerender-derived-state.mddoc728 bytesrules/rerender-functional-setstate.mddoc2,968 bytesrules/rerender-lazy-state-init.mddoc2,016 bytesrules/rerender-memo-with-default-value.mddoc1,173 bytesrules/rerender-memo.mddoc1,148 bytesrules/rerender-move-effect-to-event.mddoc1,268 bytesrules/rerender-simple-expression-in-memo.mddoc1,018 bytesrules/rerender-transitions.mddoc1,055 bytesrules/rerender-use-ref-transient-values.mddoc1,742 bytesrules/server-after-nonblocking.mddoc2,012 bytesrules/server-auth-actions.mddoc2,649 bytesrules/server-cache-lru.mddoc1,353 bytesrules/server-cache-react.mddoc2,228 bytesrules/server-dedup-props.mddoc2,060 bytesrules/server-parallel-fetching.mddoc1,554 bytesrules/server-serialization.mddoc996 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubseo
When your agent uses it
Optimize for search engine visibility and ranking. Use when asked to "improve SEO", "optimize for search", "fix meta tags", "add structured data", "sitemap optimization", or "search engine optimization". Do NOT use for accessibility (use web-accessibility), performance (use core-web-vitals), or comprehensive site audits covering multiple areas (use web-quality-audit).
What it loads into context
Frontmatter
105 tokensAlways available to the agent
SKILL.md
3,069 tokensWhen the skill is activated
Reference documents
1,633 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- SEO fundamentals
- Technical SEO
- On-page SEO
- Structured data (JSON-LD)
- Mobile SEO
- International SEO
- SEO audit checklist
- Tools
- References
Files
SKILL.mdcore12,232 bytes../web-quality-audit/SKILL.mddoc7,010 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubthe-judge
When your agent uses it
Evidence-first pull request judge that reviews a PR and posts one consolidated GitHub review with inline comments via the gh CLI. Runs the repo's own deterministic checks first, researches current official docs before any claim about external libraries or APIs, then reviews correctness, security, structural quality (code judo, spaghetti growth, file-size limits), and AI slop including useless code comments. Every finding must carry evidence, every comment passes a deterministic noise gate before posting, and the verdict (APPROVE, COMMENT, REQUEST_CHANGES) is weighed by findings. Use when asked to review a PR, judge this PR, review this branch or diff before merge, run the-judge, "revise esse PR", "faca o code review", or "julgue esse PR". Do NOT use for reviewing prose or documents, fixing CI failures, resolving merge conflicts, writing the fix itself, or responding to review comments (use gh-address-comments).
What it loads into context
Frontmatter
230 tokensAlways available to the agent
SKILL.md
4,567 tokensWhen the skill is activated
Reference documents
4,575 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Non-Negotiables
- Severity and Verdict
- Workflow
- Summary Body Template
- Convergence Contract
- Examples
- Troubleshooting
Scripts executed separately
scripts/post_review.pyscripts/review_gate.pyscripts/scan_bypasses.py
Files
SKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesSKILL.mdcore20,045 bytesreferences/comment-voice.mddoc6,818 bytesreferences/review-standards.mddoc14,119 bytesscripts/post_review.pyruns3,117 bytesscripts/review_gate.pyruns8,909 bytesscripts/scan_bypasses.pyruns2,590 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubtlc-generative-engine-optimization
When your agent uses it
Generative Engine Optimization (GEO) specialist — the technical, on-page publishing work that makes a given page or site discoverable, understandable, trustworthy, quotable, and fresh for AI answer engines (Google AI Overviews, ChatGPT Search, Bing Copilot, Perplexity). Use when asked to 'optimize this page/site for GEO', 'optimize for AI search / answer engines', 'get my page cited by ChatGPT/Perplexity', 'improve AI visibility/citability', 'write an llms.txt', 'add citation-ready structure or schema for AI answers', 'otimizar para busca com IA', or to audit/create/improve a codebase for generative search. Do NOT use for AI-driven SEO content strategy or programmatic pages at scale (use ai-seo), classic keyword/SERP ranking (use seo), accessibility (use web-accessibility), or multi-area site audits (use web-quality-audit).
What it loads into context
Frontmatter
235 tokensAlways available to the agent
SKILL.md
2,156 tokensWhen the skill is activated
Reference documents
2,817 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Philosophy
- When to use / not use
- The Six GEO Pillars
- Operating Modes
- Guardrails
- Examples
- Troubleshooting
- References and Templates
Files
SKILL.mdcore10,140 bytesreferences/measurement-and-tools.mddoc5,408 bytesreferences/pillars-and-workflow.mddoc5,716 bytestemplates/faqpage.jsonldasset584 bytestemplates/llms.txtdoc572 bytestemplates/page-metadata.htmlasset1,690 bytestemplates/quotable-article-outline.mddoc1,448 bytestemplates/robots-ai-crawlers.txtdoc1,201 bytestemplates/techarticle.jsonldasset792 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubaccessibility
When your agent uses it
Audit and improve web accessibility following WCAG 2.1 guidelines. Use when asked to "improve accessibility", "a11y audit", "WCAG compliance", "screen reader support", "keyboard navigation", or "make accessible". Do NOT use for SEO (use seo), performance (use core-web-vitals), or comprehensive site audits covering multiple areas (use web-quality-audit).
What it loads into context
Frontmatter
107 tokensAlways available to the agent
SKILL.md
3,383 tokensWhen the skill is activated
Reference documents
3,771 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- WCAG Principles: POUR
- Conformance levels
- Perceivable
- Operable
- Understandable
- Robust
- Testing checklist
- Common issues by impact
- References
Files
SKILL.mdcore13,093 bytesSKILL.mdcore13,093 bytesSKILL.mdcore13,093 bytesSKILL.mdcore13,093 bytesreferences/WCAG.mddoc10,720 bytes../web-quality-audit/SKILL.mddoc7,010 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubbest-practices
When your agent uses it
Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities". Do NOT use for accessibility (use web-accessibility), SEO (use seo), performance (use core-web-vitals), or comprehensive multi-area audits (use web-quality-audit).
What it loads into context
Frontmatter
111 tokensAlways available to the agent
SKILL.md
3,092 tokensWhen the skill is activated
Reference documents
1,633 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Security
- Browser compatibility
- Deprecated APIs
- Console & errors
- Source maps
- Performance best practices
- Code quality
- Permissions & privacy
- Audit checklist
- Tools
- References
Files
SKILL.mdcore12,782 bytesSKILL.mdcore12,782 bytesSKILL.mdcore12,782 bytesSKILL.mdcore12,782 bytesSKILL.mdcore12,782 bytesSKILL.mdcore12,782 bytes../web-quality-audit/SKILL.mddoc7,010 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubweb-quality-audit
When your agent uses it
Comprehensive web quality audit covering performance, accessibility, SEO, and best practices in a single review. Use when asked to "audit my site", "review web quality", "run lighthouse audit", "check page quality", or "optimize my website" across multiple areas at once. Orchestrates specialized skills for depth. Do NOT use for single-area audits — prefer core-web-vitals, web-accessibility, seo, or web-best-practices for focused work.
What it loads into context
Frontmatter
125 tokensAlways available to the agent
SKILL.md
1,633 tokensWhen the skill is activated
Reference documents
3,069 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How it works
- Audit categories
- Severity levels
- Audit output format
- Quick checklist
- References
Scripts executed separately
scripts/analyze.sh
Files
../seo/SKILL.mddoc12,232 bytesSKILL.mdcore7,010 bytesSKILL.mdcore7,010 bytesscripts/analyze.shruns2,013 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsecurity-best-practices
When your agent uses it
Perform language and framework specific security best-practice reviews and suggest improvements. Use when the user explicitly requests security best practices guidance, a security review or report, or secure-by-default coding help. Supports Python, JavaScript/TypeScript, and Go. Do NOT use for general code review, debugging, threat modeling (use security-threat-model), or non-security tasks.
What it loads into context
Frontmatter
105 tokensAlways available to the agent
SKILL.md
1,682 tokensWhen the skill is activated
Reference documents
90,357 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Workflow
- Workflow Decision Tree
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore8,659 bytesreferences/golang-general-backend-security.mddoc38,369 bytesreferences/javascript-express-web-server-security.mddoc49,326 bytesreferences/javascript-general-web-frontend-security.mddoc38,617 bytesreferences/javascript-jquery-web-frontend-security.mddoc32,977 bytesreferences/javascript-typescript-nextjs-web-server-security.mddoc43,327 bytesreferences/javascript-typescript-react-web-frontend-security.mddoc41,671 bytesreferences/javascript-typescript-vue-web-frontend-security.mddoc31,399 bytesreferences/python-django-web-server-security.mddoc38,658 bytesreferences/python-fastapi-web-server-security.mddoc44,667 bytesreferences/python-flask-web-server-security.mddoc31,426 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsecurity-ownership-map
When your agent uses it
Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Use when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do NOT use for general maintainer lists, non-security ownership questions, or threat modeling (use security-threat-model).
What it loads into context
Frontmatter
135 tokensAlways available to the agent
SKILL.md
2,109 tokensWhen the skill is activated
Reference documents
675 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Requirements
- Workflow
- Quick start
- Sensitivity rules
- Output artifacts
- LLM query helper
- Basic security queries
- Graph persistence
- Notes
Scripts executed separately
scripts/build_ownership_map.pyscripts/community_maintainers.pyscripts/query_ownership.pyscripts/run_ownership_map.py
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesSKILL.mdcore8,832 bytesreferences/neo4j-import.mddoc2,428 bytesscripts/build_ownership_map.pyruns34,330 bytesscripts/community_maintainers.pyruns18,122 bytesscripts/query_ownership.pyruns17,991 bytesscripts/run_ownership_map.pyruns5,890 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsecurity-threat-model
When your agent uses it
Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Use when the user asks to threat model a codebase or path, enumerate threats or abuse paths, or perform AppSec threat modeling. Do NOT use for general architecture summaries, code review, security best practices (use security-best-practices), or non-security design work.
What it loads into context
Frontmatter
116 tokensAlways available to the agent
SKILL.md
1,136 tokensWhen the skill is activated
Reference documents
3,034 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick start
- Workflow
- Risk prioritization guidance (illustrative, not exhaustive)
- References
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore5,663 bytesreferences/prompt-template.mddoc12,641 bytesreferences/security-controls-and-assets.mddoc1,683 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubchrome-devtools
When your agent uses it
Browser debugging, performance profiling, and automation via Chrome DevTools MCP. Use when user says "debug this page", "take a screenshot", "check network requests", "profile performance", "inspect console errors", or "analyze page load". Do NOT use for full E2E test suites (use playwright-skill) or non-browser debugging.
What it loads into context
Frontmatter
81 tokensAlways available to the agent
SKILL.md
1,141 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- When to Use
- Security Warning
- Tool Categories
- Workflow Patterns
- Best Practices
Files
SKILL.mdcore5,210 bytesSKILL.mdcore5,210 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubexcalidraw-studio
When your agent uses it
Generate Excalidraw diagrams from natural language descriptions. Outputs .excalidraw JSON files openable in Excalidraw. Use when asked to "create a diagram", "make a flowchart", "visualize a process", "draw a system architecture", "create a mind map", "generate an Excalidraw file", "draw an ER diagram", "create a sequence diagram", or "make a class diagram". Supports flowcharts, relationship diagrams, mind maps, architecture, DFD, swimlane, class, sequence, and ER diagrams. Can use icon libraries (AWS, GCP, etc.) when set up. Do NOT use for code architecture analysis (use the architecture skills), Mermaid diagram rendering (use mermaid-studio), or non-visual documentation (use docs-writer).
What it loads into context
Frontmatter
208 tokensAlways available to the agent
SKILL.md
3,515 tokensWhen the skill is activated
Reference documents
15,127 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Workflow
- Templates
- Icon Libraries
- Best Practices
- Validation Checklist
- Troubleshooting
- Limitations
Scripts executed separately
scripts/.gitignorescripts/add-arrow.pyscripts/add-icon-to-diagram.pyscripts/split-excalidraw-library.py
Files
SKILL.mdcore14,346 bytesassets/business-flow-swimlane-template.jsonasset10,556 bytesassets/class-diagram-template.jsonasset12,175 bytesassets/data-flow-diagram-template.jsonasset10,211 bytesassets/er-diagram-template.jsonasset14,204 bytesassets/flowchart-template.jsonasset16,813 bytesassets/mindmap-template.jsonasset33,108 bytesassets/relationship-template.jsonasset9,419 bytesassets/sequence-diagram-template.jsonasset14,983 bytesreferences/element-types.mddoc17,210 bytesreferences/excalidraw-schema.mddoc25,118 bytesreferences/icon-libraries.mddoc5,305 bytesscripts/.gitignoreruns484 bytesscripts/README.mddoc6,506 bytesscripts/add-arrow.pyruns9,775 bytesscripts/add-icon-to-diagram.pyruns13,391 bytesscripts/split-excalidraw-library.pyruns5,531 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubgh-fix-ci
When your agent uses it
Use when a user asks to debug or fix failing GitHub PR checks that run in GitHub Actions. Uses `gh` to inspect checks and logs, summarize failure context, draft a fix plan, and implement only after explicit approval. Treats external providers (for example Buildkite) as out of scope and reports only the details URL. Do NOT use for addressing PR review comments (use gh-address-comments) or general CI outside GitHub Actions.
What it loads into context
Frontmatter
121 tokensAlways available to the agent
SKILL.md
940 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Overview
- Inputs
- Quick start
- Workflow
- Bundled Resources
Scripts executed separately
scripts/inspect_pr_checks.py
Files
LICENSE.txtdoc10,776 bytesSKILL.mdcore3,824 bytesSKILL.mdcore3,824 bytesSKILL.mdcore3,824 bytesSKILL.mdcore3,824 bytesSKILL.mdcore3,824 bytesSKILL.mdcore3,824 bytesscripts/inspect_pr_checks.pyruns15,222 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubmermaid-studio
When your agent uses it
Expert Mermaid diagram creation, validation, and rendering with dual-engine output (SVG/PNG/ASCII). Supports all 20+ diagram types including C4 architecture, AWS architecture-beta with service icons, flowcharts, sequence, ERD, state, class, mindmap, timeline, git graph, sankey, and more. Features code-to-diagram analysis, batch rendering, 15+ themes, and syntax validation. Use when users ask to create diagrams, visualize architecture, render mermaid files, generate ASCII diagrams, document system flows, model databases, draw AWS infrastructure, analyze code structure, or anything involving "mermaid", "diagram", "flowchart", "architecture diagram", "sequence diagram", "ERD", "C4", "ASCII diagram". Do NOT use for non-Mermaid image generation, data plotting with chart libraries, or general documentation writing.
What it loads into context
Frontmatter
218 tokensAlways available to the agent
SKILL.md
4,555 tokensWhen the skill is activated
Reference documents
21,994 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Golden Rules — Elegant Diagrams by Default
- Modes of Operation
- Step 1: Understand the Request
- Step 2: Create the Diagram
- C4 Diagrams — Mandatory Styling Guide
- Step 3: Validate
- Step 4: Render
- Step 5: Code-to-Diagram (When Requested)
- Troubleshooting Quick Reference
- Output Conventions
Scripts executed separately
scripts/batch.mjsscripts/render-ascii.mjsscripts/render.mjsscripts/setup.shscripts/validate.mjs
Files
SKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesSKILL.mdcore18,601 bytesassets/puppeteer-config.jsonasset167 bytesreferences/aws-architecture.mddoc14,574 bytesreferences/c4-architecture.mddoc19,375 bytesreferences/code-to-diagram.mddoc8,104 bytesreferences/diagram-types.mddoc14,758 bytesreferences/themes.mddoc13,908 bytesreferences/troubleshooting.mddoc12,907 bytesscripts/batch.mjsruns6,731 bytesscripts/render-ascii.mjsruns5,415 bytesscripts/render.mjsruns18,980 bytesscripts/setup.shruns3,253 bytesscripts/validate.mjsruns9,299 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnx-ci-monitor
When your agent uses it
Monitor Nx Cloud CI pipeline status and handle self-healing fixes automatically. Use when user says "watch CI", "monitor pipeline", "check CI status", "fix CI failures", or "self-heal CI". Requires Nx Cloud connection. Do NOT use for local task execution (use nx-run-tasks) or general CI debugging outside Nx Cloud.
What it loads into context
Frontmatter
78 tokensAlways available to the agent
SKILL.md
4,679 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Context
- User Instructions
- Configuration Defaults
- Nx Cloud Connection Check
- Session Context Behavior
- Default Behaviors by Status
- Exit Conditions
- Main Loop
- Status Reporting
- User Instruction Examples
- Error Handling
- Example Session
Files
SKILL.mdcore21,168 bytesSKILL.mdcore21,168 bytesSKILL.mdcore21,168 bytesSKILL.mdcore21,168 bytesSKILL.mdcore21,168 bytesSKILL.mdcore21,168 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnx-generate
When your agent uses it
Generate code using Nx generators — scaffold projects, libraries, features, or run workspace-specific generators with proper discovery, validation, and verification. Use when user says "create a new library", "scaffold a component", "generate code with Nx", "run a generator", "nx generate", or any code scaffolding task in a monorepo. Prefers local workspace-plugin generators over external plugins. Do NOT use for running build/test/lint tasks (use nx-run-tasks) or workspace configuration (use nx-workspace).
What it loads into context
Frontmatter
114 tokensAlways available to the agent
SKILL.md
1,837 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Generator Discovery Flow
- Pre-Execution Checklist
- Execution
- Post-Generation
- Error Handling
- Key Principles
Files
SKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytesSKILL.mdcore8,873 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnx-run-tasks
When your agent uses it
Execute build, test, lint, serve, and other tasks in an Nx workspace using single runs, run-many, and affected commands. Use when user says "run tests", "build my app", "lint affected", "serve the project", "run all tasks", or "nx affected". Do NOT use for code generation (use nx-generate) or workspace configuration (use nx-workspace).
What it loads into context
Frontmatter
89 tokensAlways available to the agent
SKILL.md
647 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Understand which tasks can be run
- Run a single task
- Run multiple tasks
- Run tasks for affected projects
- Useful flags
Files
SKILL.mdcore2,651 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnx-workspace
When your agent uses it
Configure, explore, and optimize Nx monorepo workspaces. Use when setting up Nx, exploring workspace structure, configuring project boundaries, analyzing affected projects, optimizing build caching, or implementing CI/CD with affected commands. Keywords — nx, monorepo, workspace, projects, targets, affected. Do NOT use for running tasks (use nx-run-tasks) or code generation with generators (use nx-generate).
What it loads into context
Frontmatter
91 tokensAlways available to the agent
SKILL.md
942 tokensWhen the skill is activated
Reference documents
7,097 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Quick Start
- Core Commands
- Workspace Architecture
- Detailed Resources
- Common Workflows
- Quick Troubleshooting
Files
SKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesSKILL.mdcore4,009 bytesreference/best-practices.mddoc6,489 bytesreference/ci-cd.mddoc6,834 bytesreference/commands.mddoc6,373 bytesreference/configuration.mddoc7,258 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdemo
When your agent uses it
Record a demo video of a web app feature or flow on a real desktop (Docker, Xvfb, XFCE, real X cursor), producing an mp4 plus a click/hover/scroll/type telemetry file. Takes a flow description, an existing demo name or path, or init. Use when the user says "record a demo of the checkout", "gravar um demo dessa feature", "make a screencast of this flow", "video for the changelog", "re-record the checkout demo", "refresh the demo video", or "demo init". Do NOT use for general browser testing or automation that needs no video (use playwright-skill), page debugging or network inspection (use chrome-devtools), or static screenshots.
What it loads into context
Frontmatter
177 tokensAlways available to the agent
SKILL.md
2,278 tokensWhen the skill is activated
Reference documents
337 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Input forms
- Layout
- Workflow
- Script
- Config
- Gotchas
- Failures
- events.json
Scripts executed separately
assets/config.mjsassets/docker/Dockerfileassets/docker/package.jsonassets/docker/record.shassets/lib.mjsscripts/configscripts/record
Files
SKILL.mdcore8,976 bytesSKILL.mdcore8,976 bytesassets/config.mjsruns9,811 bytesassets/docker/Dockerfileruns722 bytesassets/docker/package.jsonruns121 bytesassets/docker/record.shruns7,421 bytesassets/docker/wallpaper.jpgasset18,230 bytesassets/lib.mjsruns9,906 bytesreferences/init.mddoc1,393 bytesscripts/configruns830 bytesscripts/recordruns2,499 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubplaywright-skill
When your agent uses it
Complete browser automation with Playwright. Auto-detects dev servers, writes clean test scripts to /tmp. Test pages, fill forms, take screenshots, check responsive design, validate UX, test login flows, check links, automate any browser task. Use when user wants to test websites, automate browser interactions, validate web functionality, or perform any browser-based testing. Do NOT use for quick page debugging or network inspection (use chrome-devtools instead).
What it loads into context
Frontmatter
98 tokensAlways available to the agent
SKILL.md
3,416 tokensWhen the skill is activated
Reference documents
3,988 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- How It Works
- Setup (First Time)
- Execution Pattern
- Common Patterns
- Inline Execution (Simple Tasks)
- Available Helpers
- Custom HTTP Headers
- Advanced Usage
- Tips
- Troubleshooting
- Example Usage
- Notes
Scripts executed separately
lib/helpers.jspackage.jsonrun.js
Files
API_REFERENCE.mddoc16,366 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 bytesSKILL.mdcore14,448 byteslib/helpers.jsruns12,605 bytespackage.jsonruns652 bytesrun.jsruns5,788 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- component-common-domain-detection
- component-flattening-analysis
- component-identification-sizing
- coupling-analysis
- decomposition-planning-roadmap
- domain-analysis
- domain-identification-grouping
- evolutionary-modular-architecture
- frontend-blueprint
- legacy-migration-planner
- modular-decomposition
- modular-design-principles
- react-composition-patterns
- tactical-ddd
- aws-advisor
- cloudflare-deploy
- netlify-deploy
- render-deploy
- vercel-deploy
- create-adr
- create-rfc
- technical-design-doc-creator
- cursor-subagent-creator
- skill-architect
- subagent-creator
- the-fool
- the-jury
- figma
- figma-implement-design
- frontend-design
- web-design-guidelines
- codenavi
- coding-guidelines
- confluence-assistant
- docs-writer
- gh-address-comments
- harness-eval
- jira-assistant
- nestjs-modular-monolith
- not-your-babysitter
- rails-dev
- react-native-expert
- shopify-developer
- spec-driven-eval
- tlc-discover
- tlc-implement
- tlc-plan
- tlc-prd
- tlc-spec-driven
- tlc-spec-lean
- ai-cold-outreach
- ai-pricing
- ai-sdr
- ai-seo
- ai-ugc-ads
- content-to-pipeline
- expansion-retention
- gtm-engineering
- gtm-metrics
- lead-enrichment
- multi-platform-launch
- paid-creative-ai
- partner-affiliate
- positioning-icp
- sales-motion-design
- social-selling
- solo-founder-gtm
- video-outreach
- learning-opportunities
- sentry
- core-web-vitals
- perf-astro
- perf-lighthouse
- perf-web-optimization
- react-best-practices
- seo
- the-judge
- tlc-generative-engine-optimization
- accessibility
- best-practices
- web-quality-audit
- security-best-practices
- security-ownership-map
- security-threat-model
- chrome-devtools
- excalidraw-studio
- gh-fix-ci
- mermaid-studio
- nx-ci-monitor
- nx-generate
- nx-run-tasks
- nx-workspace
- demo
- playwright-skill
Repository facts
- License
- No license detected
- Created
- Jan 19, 2026
- Last pushed
- Nov 5, 2026
- Forks
- 568
- Open issues
- 30
- Project activity
- Active
Rank over the last 12 weeks
Now #205 · best #186 · down 13 in 30 days
- #202 on Oct 30
- #204 on Oct 31
- #203 on Nov 1
- #205 on Nov 2
- #206 on Nov 3
- #205 since Nov 4
69 earlier periods
- #192 on Aug 2
- #196 on Aug 7
- #195 on Aug 8
- #196 on Aug 9
- #204 on Aug 10
- #203 on Aug 11
- #202 on Aug 12
- #206 on Aug 13
- #207 from Aug 14 to Aug 17
- #211 from Aug 18 to Aug 19
- #209 on Aug 20
- #211 on Aug 21
- #208 on Aug 22
- #213 on Aug 23
- #212 on Aug 24
- #214 from Aug 25 to Aug 26
- #216 on Aug 27
- #214 from Aug 28 to Aug 29
- #215 from Aug 30 to Aug 31
- #220 on Sep 1
- #214 on Sep 2
- #223 on Sep 3
- #220 on Sep 4
- #222 on Sep 5
- #219 on Sep 6
- #223 from Sep 7 to Sep 8
- #224 on Sep 9
- #223 on Sep 10
- #224 on Sep 11
- #220 on Sep 12
- #209 on Sep 13
- #198 on Sep 14
- #196 on Sep 15
- #193 on Sep 16
- #191 on Sep 17
- #193 on Sep 18
- #188 on Sep 19
- #190 on Sep 20
- #192 on Sep 21
- #190 from Sep 22 to Sep 24
- #188 from Sep 25 to Sep 27
- #189 from Sep 28 to Sep 29
- #186 on Sep 30
- #188 on Oct 1
- #191 on Oct 2
- #188 on Oct 3
- #186 on Oct 4
- #189 on Oct 5
- #190 on Oct 6
- #192 on Oct 7
- #190 on Oct 8
- #192 on Oct 9
- #190 on Oct 10
- #191 on Oct 11
- #192 on Oct 12
- #194 on Oct 13
- #193 on Oct 14
- #192 on Oct 15
- #191 on Oct 16
- #193 on Oct 17
- #195 from Oct 18 to Oct 19
- #194 on Oct 20
- #196 on Oct 21
- #195 on Oct 22
- #194 on Oct 23
- #196 on Oct 24
- #197 on Oct 25
- #199 on Oct 28
- #201 on Oct 29
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 2, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 232 notes
packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedpackages/skills-catalog/skills/(architecture)/component-flattening-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 39 dangerous shell commandsin 21 files: demo/assets/docker/record.sh:13 security-best-practices/references/javascript-general-web-frontend-security.md:213 security-best-practices/references/javascript-express-web-server-security.md:782 and 18 more
- 3,120 network referencesin 400 files: seo/SKILL.md:47 security-best-practices/references/javascript-jquery-web-frontend-security.md:199 security-best-practices/references/python-fastapi-web-server-security.md:812 and 397 more
- 8 obfuscation signalsin 8 files: cloudflare-deploy/references/stream/patterns.md:159 tlc-implement/scripts/mutate.py:92 tlc-implement/scripts/selftest.py:207 and 5 more
- No instruction overrides
- 81 executable scriptsin 81 files: evolutionary-modular-architecture/scripts/validate-boundaries.mjs:1 evolutionary-modular-architecture/scripts/validate-structure.mjs:1 aws-advisor/scripts/architecture_validator.py:1 and 78 more
- 462 references to secretsin 159 files: cloudflare-deploy/references/tunnel/api.md:10 cloudflare-deploy/references/secrets-store/configuration.md:13 cloudflare-deploy/references/secrets-store/patterns.md:19 and 156 more
- No requests to vote in Hot
Show all 3,710 signals by file
.claude-plugin/marketplace.json
- Network accessline 10
"version": "0.0.1", "author": { "name": "Tech Leads Club" }, "homepage": "https://github.com/tech-leads-club/agent-skills", - Network accessline 11
"author": { "name": "Tech Leads Club" }, "homepage": "https://github.com/tech-leads-club/agent-skills", "repository": "https://github.com/tech-leads-club/agent-skills", - Network accessline 12
"homepage": "https://github.com/tech-leads-club/agent-skills", - Network accessline 13
"repository": "https://github.com/tech-leads-club/agent-skills",
packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/assets/architecture-template.html
- Network accessline 11
<meta name="viewport" content="width=device-width, initial-scale=1.0" /> <title>Platform — Architecture</title> <link rel="preconnect" href="https://fonts.googleapis.com" /> - Network accessline 12
<title>Platform — Architecture</title> <link rel="preconnect" href="https://fonts.googleapis.com" /> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /> - Network accessline 13
<link rel="preconnect" href="https://fonts.googleapis.com" /> - Network accessline 14
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /> - Network accessline 15
<link href="https://fonts.googleapis.com/css2?family=Lato:wght@300;400;700;900&family=JetBrains+Mono:wght@400;500;700&display=swap" rel="stylesheet" /> - Network accessline 211
<!-- EXAMPLE DIAGRAM — context map. Replace the labels with your contexts. --> <div class="diagram"> <svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map"> - Network accessline 212
<div class="diagram"> <svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map"> <rect x="20" y="34" width="840" height="104" rx="14" fill="#FDEAEC" stroke="#F25461" stroke-op - Network accessline 213
<svg viewBox="0 0 880 520" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Domain context map"> - Network accessline 277
<!-- EXAMPLE DIAGRAM — monorepo layers. --> <div class="diagram"> <svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers"> - Network accessline 278
<div class="diagram"> <svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers"> <defs> - Network accessline 279
<svg viewBox="0 0 880 360" xmlns="http://www.w3.org/2000/svg" role="img" aria-label="Monorepo layers">
packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/scripts/validate-boundaries.mjs
- Executable scriptline 1
#!/usr/bin/env node
packages/skills-catalog/skills/(architecture)/evolutionary-modular-architecture/scripts/validate-structure.mjs
- Executable scriptline 1
#!/usr/bin/env node
packages/skills-catalog/skills/(architecture)/frontend-blueprint/references/stitch-integration.md
- Network accessline 95
MCP Server URL: https://stitch.googleapis.com/mcp - Network accessline 111
Server URL: https://stitch.googleapis.com/mcp - Network accessline 127
{ "url": "https://stitch.googleapis.com/mcp", - Network accessline 128
"url": "https://stitch.googleapis.com/mcp", - Network accessline 138
[Credential-related source omitted] - Access to secretsline 155
[Credential-related source omitted] - Network accessline 175
| "Permission denied" | For OAuth: ensure `serviceUsageConsumer` role is granted | | Connection timeout | Stitch MCP is remote — check internet, retry in 30s | | Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp` - Network accessline 176
| Connection timeout | Stitch MCP is remote — check internet, retry in 30s | | Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp` | | Config not recognized | Check your tool's MCP docs for the correct config form - Network accessline 177
| Tool not found | Ensure MCP URL is exactly `https://stitch.googleapis.com/mcp` |
packages/skills-catalog/skills/(architecture)/react-composition-patterns/AGENTS.md
- Network accessline 944
1. [https://react.dev](https://react.dev) - Network accessline 945
2. [https://react.dev/learn/passing-data-deeply-with-context](https://react.dev/learn/passing-data-deeply-with-context) - Network accessline 946
3. [https://react.dev/reference/react/use](https://react.dev/reference/react/use)
packages/skills-catalog/skills/(architecture)/react-composition-patterns/rules/_template.md
- Network accessline 24
Reference: [Link](https://example.com)
packages/skills-catalog/skills/(cloud)/aws-advisor/references/mcp-guide.md
packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/architecture_validator.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/cost_considerations.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 35
"Use Provisioned Concurrency only when needed", ], "calculator_link": "https://calculator.aws/#/addService/Lambda" - Network accessline 36
], "calculator_link": "https://calculator.aws/#/addService/Lambda" }, - Network accessline 37
"calculator_link": "https://calculator.aws/#/addService/Lambda" - Network accessline 54
"Use request validation to reject invalid requests early", ], "calculator_link": "https://calculator.aws/#/addService/APIGateway" - Network accessline 55
], "calculator_link": "https://calculator.aws/#/addService/APIGateway" }, - Network accessline 56
"calculator_link": "https://calculator.aws/#/addService/APIGateway" - Network accessline 78
"Use sparse indexes to reduce storage", ], "calculator_link": "https://calculator.aws/#/addService/DynamoDB" - Network accessline 79
], "calculator_link": "https://calculator.aws/#/addService/DynamoDB" }, - Network accessline 80
"calculator_link": "https://calculator.aws/#/addService/DynamoDB" - Network accessline 99
"Enable S3 Analytics to understand access patterns", ], "calculator_link": "https://calculator.aws/#/addService/S3" - Network accessline 100
], "calculator_link": "https://calculator.aws/#/addService/S3" }, - Network accessline 101
"calculator_link": "https://calculator.aws/#/addService/S3" - Network accessline 121
"Use Graviton instances for better price/performance", ], "calculator_link": "https://calculator.aws/#/addService/RDS" - Network accessline 122
], "calculator_link": "https://calculator.aws/#/addService/RDS" }, - Network accessline 123
"calculator_link": "https://calculator.aws/#/addService/RDS" - Network accessline 142
"Consider ARM/Graviton for Fargate", ], "calculator_link": "https://calculator.aws/#/addService/Fargate" - Network accessline 143
], "calculator_link": "https://calculator.aws/#/addService/Fargate" }, - Network accessline 144
"calculator_link": "https://calculator.aws/#/addService/Fargate" - Network accessline 161
"Set appropriate cache TTLs", ], "calculator_link": "https://calculator.aws/#/addService/CloudFront" - Network accessline 162
], "calculator_link": "https://calculator.aws/#/addService/CloudFront" }, - Network accessline 163
"calculator_link": "https://calculator.aws/#/addService/CloudFront" - Network accessline 178
"Review if all traffic really needs NAT Gateway", ], "calculator_link": "https://calculator.aws/#/addService/VPC" - Network accessline 179
], "calculator_link": "https://calculator.aws/#/addService/VPC" }, - Network accessline 180
"calculator_link": "https://calculator.aws/#/addService/VPC" - Network accessline 194
"Interface endpoints have cost per AZ - minimize AZ count if possible", ], "calculator_link": "https://calculator.aws/#/addService/VPC" - Network accessline 195
], "calculator_link": "https://calculator.aws/#/addService/VPC" }, - Network accessline 196
"calculator_link": "https://calculator.aws/#/addService/VPC" - Network accessline 209
"Batch secrets when possible", ], "calculator_link": "https://calculator.aws/#/addService/SecretsManager" - Network accessline 210
], "calculator_link": "https://calculator.aws/#/addService/SecretsManager" }, - Network accessline 211
"calculator_link": "https://calculator.aws/#/addService/SecretsManager" - Network accessline 250
"Review monthly for optimization opportunities", ], "calculator_link": "https://calculator.aws/#/" - Network accessline 251
], "calculator_link": "https://calculator.aws/#/" } - Network accessline 252
"calculator_link": "https://calculator.aws/#/"
packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/generate_diagram.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/security_review.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(cloud)/aws-advisor/scripts/well_architected_review.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/LICENSE.txt
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/configuration.md
- Access to secretsline 30
[Credential-related source omitted] - Access to secretsline 32
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Network accessline 59
export default { fetch(request: Request, env: Env) { - Network accessline 60
fetch(request: Request, env: Env) { - Network accessline 71
export default { async fetch(request: Request, env: Env) { - Network accessline 72
async fetch(request: Request, env: Env) { - Network accessline 81
const stub = env.MyAgent.get(id) return stub.fetch(request) - Network accessline 82
return stub.fetch(request) - Network accessline 92
export default { fetch(request: Request, env: Env) { - Network accessline 93
fetch(request: Request, env: Env) { - Access to secretsline 136
[Credential-related source omitted] - Network accessline 167
{ "vars": { "MCP_SERVER_URL": "https://mcp.example.com" - Network accessline 168
"vars": { "MCP_SERVER_URL": "https://mcp.example.com" } - Network accessline 169
"MCP_SERVER_URL": "https://mcp.example.com" - Access to secretsline 175
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/agents-sdk/patterns.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 102
[Credential-related source omitted] - Access to secretsline 131
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Access to secretsline 168
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/README.md
- Access to secretsline 40
[Credential-related source omitted] - Network accessline 68
[Credential-related source omitted] - Network accessline 69
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Network accessline 70
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/compat`, - Network accessline 88
export default { async fetch(request, env, ctx) { - Network accessline 89
async fetch(request, env, ctx) { - Network accessline 150
- Unified API (OpenAI-compatible): `https://gateway.ai.cloudflare.com/v1/{account_id}/{gateway_id}/compat/chat/completions` - Network accessline 151
- Provider-specific: `https://gateway.ai.cloudflare.com/v1/{account_id}/{gateway_id}/{provider}/{endpoint}` - Network accessline 173
- [Official Docs](https://developers.cloudflare.com/ai-gateway/) - Network accessline 174
- [API Reference](https://developers.cloudflare.com/api/resources/ai_gateway/) - Network accessline 175
- [Provider Guides](https://developers.cloudflare.com/ai-gateway/usage/providers/) - Network accessline 176
- [Discord Community](https://discord.cloudflare.com)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/configuration.md
- Network accessline 12
[Credential-related source omitted] - Access to secretsline 12
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Network accessline 39
const client = new OpenAI({ baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 40
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 50
const client = new OpenAI({ baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 51
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 63
[Credential-related source omitted] - Network accessline 64
[Credential-related source omitted] - Access to secretsline 64
[Credential-related source omitted] - Network accessline 65
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 78
# List curl https://api.cloudflare.com/client/v4/accounts/{account_id}/ai-gateway/gateways \ - Network accessline 79
[Credential-related source omitted] - Access to secretsline 79
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Network accessline 82
# Get curl .../gateways/{gateway_id} - Network accessline 83
curl .../gateways/{gateway_id} - Network accessline 85
# Update curl -X PUT .../gateways/{gateway_id} \ - Network accessline 86
curl -X PUT .../gateways/{gateway_id} \ - Network accessline 89
# Delete curl -X DELETE .../gateways/{gateway_id} - Network accessline 90
curl -X DELETE .../gateways/{gateway_id} - Network accessline 104
[Credential-related source omitted] - Network accessline 105
[Credential-related source omitted] - Access to secretsline 105
[Credential-related source omitted] - Network accessline 106
[Credential-related source omitted] - Access to secretsline 106
[Credential-related source omitted] - Access to secretsline 107
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/sdk-integration.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 16
[Credential-related source omitted] - Network accessline 45
[Credential-related source omitted] - Network accessline 46
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Network accessline 47
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 58
[Credential-related source omitted] - Network accessline 59
[Credential-related source omitted] - Access to secretsline 59
[Credential-related source omitted] - Network accessline 60
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/anthropic`, - Network accessline 86
new ChatOpenAI({ configuration: { baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 87
configuration: { baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, }, - Network accessline 88
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 96
[Credential-related source omitted] - Access to secretsline 96
[Credential-related source omitted] - Access to secretsline 97
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-gateway/troubleshooting.md
- Network accessline 14
const client = new OpenAI({ baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Network accessline 15
baseURL: `https://gateway.ai.cloudflare.com/v1/${accountId}/${gatewayId}/openai`, - Access to secretsline 16
[Credential-related source omitted] - Network accessline 70
# Test connectivity curl -v https://gateway.ai.cloudflare.com/v1/{account}/{gateway}/openai/models \ - Network accessline 71
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 73
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-search/README.md
- Network accessline 53
export default { async fetch(request, env) { - Network accessline 54
async fetch(request, env) { - Network accessline 143
- [Cloudflare AI Search Docs](https://developers.cloudflare.com/ai-search/) - Network accessline 144
- [Workers AI Docs](https://developers.cloudflare.com/workers-ai/) - Network accessline 145
- [Vectorize Docs](https://developers.cloudflare.com/vectorize/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ai-search/api.md
- Network accessline 82
curl https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/autorag/rags/{NAME}/ai-search \
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/configuration.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/gotchas.md
- Access to secretsline 41
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/analytics-engine/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/api.md
- Network accessline 45
export default { async fetch(req, env) { - Network accessline 46
async fetch(req, env) { - Network accessline 60
export default { async fetch(req, env) { - Network accessline 61
async fetch(req, env) { - Network accessline 74
export default { async scheduled(event, env) { const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json() - Network accessline 75
async scheduled(event, env) { const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json() await fetch( - Network accessline 76
const jwks = await (await fetch('https://auth.example.com/.well-known/jwks.json')).json() - Network accessline 77
await fetch( - Network accessline 78
`https://api.cloudflare.com/client/v4/zones/${env.ZONE_ID}/api_gateway/token_validation/${env.CONFIG_ID}`, - Access to secretsline 81
[Credential-related source omitted] - Network accessline 148
- [configuration.md](configuration.md) - Setup guides for all features - [patterns.md](patterns.md) - Firewall rules and common patterns - [API Gateway API Docs](https://developers.cloudflare.com/api/resources/api_gateway/) - Network accessline 150
- [API Gateway API Docs](https://developers.cloudflare.com/api/resources/api_gateway/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/configuration.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api-shield/gotchas.md
- Network accessline 130
- [configuration.md](configuration.md) - Setup guides to avoid common issues - [patterns.md](patterns.md) - Best practices and progressive rollout - [API Shield Docs](https://developers.cloudflare.com/api-shield/) - Network accessline 132
- [API Shield Docs](https://developers.cloudflare.com/api-shield/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/README.md
- Network accessline 9
├─ From Workers runtime → Use bindings, not REST API (see ../bindings/) ├─ Server-side (Node/Python/Go) → Official SDK (see api.md) ├─ CLI/scripts → Wrangler or curl (see configuration.md) - Network accessline 10
├─ Server-side (Node/Python/Go) → Official SDK (see api.md) ├─ CLI/scripts → Wrangler or curl (see configuration.md) ├─ Infrastructure-as-code → See ../pulumi/ or ../terraform/ - Network accessline 11
├─ CLI/scripts → Wrangler or curl (see configuration.md) - Network accessline 13
└─ One-off requests → curl examples (see api.md) - Network accessline 63
- [Cloudflare API Docs](https://developers.cloudflare.com/api/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/api.md
- Access to secretsline 11
[Credential-related source omitted] - Access to secretsline 20
[Credential-related source omitted] - Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted] - Access to secretsline 47
[Credential-related source omitted] - Network accessline 49
[Credential-related source omitted] - Access to secretsline 49
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Network accessline 58
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 60
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/configuration.md
- Access to secretsline 9
[Credential-related source omitted] - Access to secretsline 10
[Credential-related source omitted] - Access to secretsline 15
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Access to secretsline 28
[Credential-related source omitted] - Access to secretsline 37
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Network accessline 47
timeout: 120000, // 2 min (default 60s), in milliseconds maxRetries: 5, // default 2 baseURL: 'https://...', // proxy (rare) - Network accessline 48
maxRetries: 5, // default 2 baseURL: 'https://...', // proxy (rare) }) - Network accessline 49
baseURL: 'https://...', // proxy (rare) - Access to secretsline 60
[Credential-related source omitted] - Network accessline 61
timeout=120, # seconds (default 60) max_retries=5, # default 2 base_url="https://...", # proxy (rare) - Network accessline 62
max_retries=5, # default 2 base_url="https://...", # proxy (rare) ) - Network accessline 63
base_url="https://...", # proxy (rare) - Access to secretsline 74
[Credential-related source omitted] - Network accessline 75
option.WithMaxRetries(5), // default 10 (higher than TS/Python) option.WithRequestTimeout(2 * time.Minute), // default 60s option.WithBaseURL("https://..."), // proxy (rare) - Network accessline 76
option.WithRequestTimeout(2 * time.Minute), // default 60s option.WithBaseURL("https://..."), // proxy (rare) ) - Network accessline 77
option.WithBaseURL("https://..."), // proxy (rare) - Access to secretsline 128
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/api/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/README.md
- Network accessline 14
curl -X PATCH "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \ - Access to secretsline 25
[Credential-related source omitted] - Network accessline 93
- [Cloudflare Argo Smart Routing Docs](https://developers.cloudflare.com/argo-smart-routing/) - Network accessline 94
- [Cloudflare Smart Shield](https://developers.cloudflare.com/smart-shield/) - Network accessline 95
- [Spectrum Documentation](https://developers.cloudflare.com/spectrum/) - Network accessline 96
- [Tiered Cache](https://developers.cloudflare.com/cache/how-to/tiered-cache/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/api.md
- Network accessline 8
https://api.cloudflare.com/client/v4 - Network accessline 27
**cURL Example:** - Network accessline 30
curl -X GET "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \ - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Network accessline 89
**cURL Example:** - Network accessline 92
curl -X PATCH "https://api.cloudflare.com/client/v4/zones/{zone_id}/argo/smart_routing" \
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/configuration.md
- Access to secretsline 117
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/argo-smart-routing/gotchas.md
- Network accessline 111
- [Official Argo Smart Routing Docs](https://developers.cloudflare.com/argo-smart-routing/) - Network accessline 112
- [Cloudflare Smart Shield](https://developers.cloudflare.com/smart-shield/) - Network accessline 113
- [API Authentication](https://developers.cloudflare.com/fundamentals/api/get-started/create-token/) - Network accessline 114
- [Cloudflare TypeScript SDK](https://github.com/cloudflare/cloudflare-typescript) - Network accessline 115
- [Cloudflare Python SDK](https://github.com/cloudflare/cloudflare-python)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/README.md
- Network accessline 32
| Binding | Use Case | Access Pattern | | --------------------- | -------------------- | --------------------------- | | **Service** | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` | - Network accessline 33
| --------------------- | -------------------- | --------------------------- | | **Service** | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` | | **Workers AI** | LLM inference | `env.AI.run(model, input)` | - Network accessline 34
| **Service** | Worker-to-Worker RPC | `env.MY_SERVICE.fetch(req)` | - Network accessline 36
| **Browser Rendering** | Headless Chrome | `env.BROWSER.fetch(url)` | - Access to secretsline 53
[Credential-related source omitted] - Network accessline 100
export default { async fetch(request, env, ctx) { - Network accessline 101
async fetch(request, env, ctx) { - Network accessline 126
- [Cloudflare Docs: Bindings](https://developers.cloudflare.com/workers/runtime-apis/bindings/) - Network accessline 127
- [Wrangler Configuration](https://developers.cloudflare.com/workers/wrangler/configuration/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/api.md
- Access to secretsline 24
[Credential-related source omitted] - Network accessline 50
### Method 1: fetch() Handler (Recommended) - Network accessline 53
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 54
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 93
**Avoid:** Use fetch() handler instead (Method 1). - Network accessline 148
await env.MY_SERVICE.fetch(new Request('https://fake/path')) - Network accessline 166
const id = env.MY_DO.idFromName('user-123') const stub = env.MY_DO.get(id) await stub.fetch(new Request('https://fake/increment')) - Network accessline 168
await stub.fetch(new Request('https://fake/increment')) - Network accessline 190
// ❌ BAD async fetch(request: Request, env: any) { } - Network accessline 191
async fetch(request: Request, env: any) { } - Network accessline 193
// ✅ GOOD async fetch(request: Request, env: Env) { } - Network accessline 194
async fetch(request: Request, env: Env) { } - Network accessline 213
- [Workers Types Package](https://www.npmjs.com/package/@cloudflare/workers-types) - Network accessline 214
- [Wrangler Types Command](https://developers.cloudflare.com/workers/wrangler/commands/#types)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/configuration.md
- Network accessline 72
{ "vars": { "API_URL": "https://api.example.com", - Network accessline 73
"vars": { "API_URL": "https://api.example.com", "MAX_RETRIES": "3", - Network accessline 74
"API_URL": "https://api.example.com", - Access to secretsline 86
[Credential-related source omitted] - Network accessline 142
"vars": { "API_URL": "https://api.example.com" }, - Network accessline 168
private env: Env, ) {} async fetch(request: Request) { - Network accessline 169
) {} async fetch(request: Request) { /* ... */ - Network accessline 170
async fetch(request: Request) { - Network accessline 200
- [Wrangler Configuration](https://developers.cloudflare.com/workers/wrangler/configuration/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/gotchas.md
- Access to secretsline 9
[Credential-related source omitted] - Network accessline 11
export default { async fetch(request: Request, env: Env) { - Network accessline 12
async fetch(request: Request, env: Env) { - Network accessline 27
export default { async fetch(request: Request, env: Env) { - Network accessline 28
async fetch(request: Request, env: Env) { - Access to secretsline 29
[Credential-related source omitted] - Access to secretsline 123
[Credential-related source omitted] - Access to secretsline 150
[Credential-related source omitted] - Access to secretsline 151
[Credential-related source omitted] - Network accessline 209
- [Workers Limits](https://developers.cloudflare.com/workers/platform/limits/) - Network accessline 210
- [Wrangler Commands](https://developers.cloudflare.com/workers/wrangler/commands/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bindings/patterns.md
- Network accessline 8
// auth-worker export default { async fetch(request: Request, env: Env) { - Network accessline 9
[Credential-related source omitted] - Network accessline 10
async fetch(request: Request, env: Env) { - Network accessline 16
// api-worker const response = await env.AUTH_SERVICE.fetch( - Network accessline 17
const response = await env.AUTH_SERVICE.fetch( - Network accessline 18
new Request('https://fake-host/validate', { - Network accessline 29
// ❌ HTTP (slow, paid, cross-region latency) await fetch('https://auth-worker.example.com/validate') - Network accessline 30
await fetch('https://auth-worker.example.com/validate') - Network accessline 32
// ✅ Service binding (fast, free, same isolate) await env.AUTH_SERVICE.fetch(new Request('https://fake-host/validate')) - Network accessline 33
await env.AUTH_SERVICE.fetch(new Request('https://fake-host/validate')) - Network accessline 50
// auth-worker export default { async fetch(request: Request): Promise<Response> { - Network accessline 51
export default { async fetch(request: Request): Promise<Response> { const body: AuthRequest = await request.json() - Network accessline 52
async fetch(request: Request): Promise<Response> { - Network accessline 59
// api-worker const response = await env.AUTH_SERVICE.fetch( - Network accessline 60
const response = await env.AUTH_SERVICE.fetch( - Network accessline 61
new Request('https://fake/validate', { - Access to secretsline 73
[Credential-related source omitted] - Access to secretsline 74
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Network accessline 79
// Use secret const response = await fetch('https://api.example.com', { - Network accessline 80
const response = await fetch('https://api.example.com', { - Access to secretsline 81
[Credential-related source omitted] - Access to secretsline 89
[Credential-related source omitted] - Network accessline 113
const response = await worker.fetch(new Request('http://localhost/test'), mockEnv, mockCtx) - Network accessline 177
const id = env.COUNTER.idFromName('global') const stub = env.COUNTER.get(id) await stub.fetch(new Request('https://fake/increment')) - Network accessline 179
await stub.fetch(new Request('https://fake/increment')) - Access to secretsline 188
[Credential-related source omitted] - Network accessline 190
**❌ Using REST API:** `fetch('https://api.cloudflare.com/.../kv/...')` - Network accessline 199
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Network accessline 200
[Credential-related source omitted] - Access to secretsline 200
[Credential-related source omitted] - Network accessline 204
- [Service Bindings Docs](https://developers.cloudflare.com/workers/runtime-apis/bindings/service-bindings/) - Network accessline 205
- [Miniflare Testing](https://miniflare.dev/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/README.md
- Network accessline 64
// Workers: Check bot score export default { async fetch(request: Request): Promise<Response> { - Network accessline 65
export default { async fetch(request: Request): Promise<Response> { const botScore = request.cf?.botManagement?.score - Network accessline 66
async fetch(request: Request): Promise<Response> { - Network accessline 69
return new Response('Bot detected', { status: 403 }) } return fetch(request) - Network accessline 70
} return fetch(request) }, - Network accessline 71
return fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/api.md
- Network accessline 25
export default { async fetch(request: Request): Promise<Response> { - Network accessline 26
async fetch(request: Request): Promise<Response> { - Network accessline 30
if (!botMgmt) return fetch(request) - Network accessline 31
if (botMgmt.verifiedBot) return fetch(request) // Allow verified bots - Network accessline 35
return fetch(request) - Network accessline 84
export default { async fetch(request: Request): Promise<Response> { - Network accessline 85
async fetch(request: Request): Promise<Response> { - Network accessline 89
if (!ja4Signals) return fetch(request) // Not available for HTTP or Worker routing - Network accessline 100
return fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/bot-management/patterns.md
- Network accessline 69
// Low score + not corporate proxy = likely datacenter bot export default { async fetch(request: Request): Promise<Response> { - Network accessline 70
export default { async fetch(request: Request): Promise<Response> { const cf = request.cf as IncomingRequestCfProperties | undefined - Network accessline 71
async fetch(request: Request): Promise<Response> { - Network accessline 79
return fetch(request) - Network accessline 89
// Add delay proportional to bot suspicion export default { async fetch(request: Request): Promise<Response> { - Network accessline 90
export default { async fetch(request: Request): Promise<Response> { const cf = request.cf as IncomingRequestCfProperties | undefined - Network accessline 91
async fetch(request: Request): Promise<Response> { - Network accessline 101
return fetch(request) - Network accessline 138
export default { async fetch(request: Request): Promise<Response> { - Network accessline 139
async fetch(request: Request): Promise<Response> { - Network accessline 144
if (botMgmt?.staticResource) return fetch(request) // Skip static - Network accessline 156
return fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/README.md
- Network accessline 84
- [Cloudflare Docs](https://developers.cloudflare.com/browser-rendering/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/api.md
- Network accessline 5
**Base:** `https://api.cloudflare.com/client/v4/accounts/{accountId}/browser-rendering` - Network accessline 22
curl -X POST '.../browser-rendering/screenshot' \ - Network accessline 24
-d '{"url":"https://example.com","screenshotOptions":{"fullPage":true}}' - Network accessline 39
const browser = await puppeteer.launch(env.MYBROWSER, { keep_alive: 600000 }) const page = await browser.newPage() await page.goto('https://example.com', { waitUntil: 'networkidle0' }) - Network accessline 41
await page.goto('https://example.com', { waitUntil: 'networkidle0' }) - Network accessline 71
await page.goto('https://example.com', { waitUntil: 'networkidle' })
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/configuration.md
- Network accessline 34
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 35
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 38
[Credential-related source omitted] - Network accessline 54
curl -X POST \ - Network accessline 55
'https://api.cloudflare.com/client/v4/accounts/{accountId}/browser-rendering/screenshot' \ - Network accessline 57
-d '{"url": "https://example.com"}' --output screenshot.png
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/browser-rendering/patterns.md
- Network accessline 8
export default { async fetch(request, env) { - Network accessline 9
async fetch(request, env) { - Network accessline 11
try { const page = await browser.newPage() await page.goto('https://example.com') - Network accessline 12
const page = await browser.newPage() await page.goto('https://example.com') return new Response(await page.content()) - Network accessline 13
await page.goto('https://example.com')
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/c3/configuration.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/c3/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/README.md
- Network accessline 102
# Enable via Dashboard https://dash.cloudflare.com/caching/cache-reserve - Network accessline 103
https://dash.cloudflare.com/caching/cache-reserve - Network accessline 115
# Check Cache Reserve status curl -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \ - Network accessline 116
[Credential-related source omitted] - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 117
[Credential-related source omitted] - Network accessline 119
# Enable Cache Reserve curl -X PATCH "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \ - Network accessline 120
[Credential-related source omitted] - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 121
[Credential-related source omitted] - Network accessline 125
# Check asset cache status curl -I https://example.com/asset.jpg | grep -i cache - Network accessline 126
curl -I https://example.com/asset.jpg | grep -i cache
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/api.md
- Network accessline 10
│ • Cache Reserve → zone-level setting, automatic, no per-req │ │ • You CANNOT selectively write to Cache Reserve from Workers │ │ • Cache Reserve works with standard fetch(), not cache.put() │ - Network accessline 11
│ • You CANNOT selectively write to Cache Reserve from Workers │ │ • Cache Reserve works with standard fetch(), not cache.put() │ └────────────────────────────────────────────────────────────────┘ - Network accessline 12
│ • Cache Reserve works with standard fetch(), not cache.put() │ - Network accessline 18
### Standard Fetch (Recommended) - Network accessline 21
// Cache Reserve works automatically via standard fetch export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 22
export default { async fetch(request: Request, env: Env): Promise<Response> { // Standard fetch uses Cache Reserve automatically - Network accessline 23
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 24
// Standard fetch uses Cache Reserve automatically return await fetch(request) }, - Network accessline 25
return await fetch(request) - Network accessline 37
let response = await cache.match(request) if (!response) { response = await fetch(request) - Network accessline 38
if (!response) { response = await fetch(request) await cache.put(request, response.clone()) // Bypasses Cache Reserve! - Network accessline 39
response = await fetch(request) - Network accessline 43
// ✅ CORRECT: Use standard fetch for Cache Reserve compatibility return await fetch(request) - Network accessline 44
return await fetch(request) - Network accessline 48
let response = await customCache.match(request) if (!response) { response = await fetch(request) - Network accessline 49
if (!response) { response = await fetch(request) await customCache.put(request, response.clone()) // Custom cache OK - Network accessline 50
response = await fetch(request) - Network accessline 60
// Purge specific URL from Cache Reserve immediately const purgeCacheReserveByURL = async (zoneId: string, apiToken: string, urls: string[]) => { const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cac - Network accessline 61
const purgeCacheReserveByURL = async (zoneId: string, apiToken: string, urls: string[]) => { const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, { method: 'POST', - Network accessline 62
const response = await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, { - Network accessline 73
// Example usage await purgeCacheReserveByURL('zone123', 'token456', ['https://example.com/image.jpg', 'https://example.com/video.mp4']) - Network accessline 74
await purgeCacheReserveByURL('zone123', 'token456', ['https://example.com/image.jpg', 'https://example.com/video.mp4']) - Network accessline 80
// Purge by cache tag - forces revalidation, not immediate removal await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, { - Network accessline 81
await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/purge_cache`, { - Network accessline 96
// Requires Cache Reserve OFF first await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/cache/cache_reserve_clear`, { - Network accessline 97
await fetch(`https://api.cloudflare.com/client/v4/zones/${zoneId}/cache/cache_reserve_clear`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/configuration.md
- Network accessline 8
# Navigate to dashboard https://dash.cloudflare.com/caching/cache-reserve - Network accessline 9
https://dash.cloudflare.com/caching/cache-reserve - Network accessline 24
# Enable curl -X PATCH "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \ - Network accessline 25
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 26
[Credential-related source omitted] - Network accessline 29
# Check status curl -X GET "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/cache/cache_reserve" \ - Network accessline 30
[Credential-related source omitted] - Access to secretsline 30
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 44
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/gotchas.md
- Network accessline 81
- **Official Docs**: https://developers.cloudflare.com/cache/advanced-configuration/cache-reserve/ - Network accessline 82
- **API Reference**: https://developers.cloudflare.com/api/resources/cache/subresources/cache_reserve/ - Network accessline 83
- **Cache Rules**: https://developers.cloudflare.com/cache/how-to/cache-rules/ - Network accessline 84
- **Workers Cache API**: https://developers.cloudflare.com/workers/runtime-apis/cache/ - Network accessline 85
- **R2 Documentation**: https://developers.cloudflare.com/r2/ - Network accessline 86
- **Smart Shield**: https://developers.cloudflare.com/smart-shield/ - Network accessline 87
- **Tiered Cache**: https://developers.cloudflare.com/cache/how-to/tiered-cache/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cache-reserve/patterns.md
- Network accessline 66
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 67
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 68
const response = await fetch(request) - Network accessline 96
// Optimal: L1 (visitor) → L2 (region) → L3 (Cache Reserve) → Origin export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 97
export default { async fetch(request: Request, env: Env): Promise<Response> { const url = new URL(request.url) - Network accessline 98
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 99
const url = new URL(request.url) const isImmutable = /\.[a-f0-9]{8,}\.(js|css|jpg|png|woff2)$/.test(url.pathname) const response = await fetch(request) - Network accessline 101
const response = await fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/README.md
- Network accessline 31
export default { async fetch(request: Request, env: Env) { - Network accessline 32
async fetch(request: Request, env: Env) { - Network accessline 33
const container = env.MY_CONTAINER.getByName('instance-1') await container.startAndWaitForPorts() return container.fetch(request) - Network accessline 34
await container.startAndWaitForPorts() return container.fetch(request) }, - Network accessline 35
return container.fetch(request) - Network accessline 85
- [Workflows](../workflows/) - Orchestrate container operations - [Queues](../queues/) - Trigger containers from queue messages - [Cloudflare Docs](https://developers.cloudflare.com/containers/) - Network accessline 87
- [Cloudflare Docs](https://developers.cloudflare.com/containers/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/api.md
- Network accessline 78
### fetch() - HTTP with WebSocket support - Network accessline 81
// ✅ Supports WebSocket upgrades const response = await container.fetch(request) - Network accessline 82
const response = await container.fetch(request) - Network accessline 83
const response = await container.fetch('http://container/api', { - Network accessline 98
**⚠<U+FE0F> Critical:** Use `fetch()` for WebSocket, not `containerFetch()`. - Network accessline 114
this.switchPort(8081) // Subsequent fetch() uses this port - Network accessline 163
export class ScheduledContainer extends Container { async fetch(request: Request) { - Network accessline 164
async fetch(request: Request) { - Network accessline 190
export class MyContainer extends Container { async fetch(request: Request) { - Network accessline 191
async fetch(request: Request) {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/configuration.md
- Network accessline 105
export class MyContainer extends Container { // Port Configuration defaultPort = 8080 // Default port for fetch() calls - Network accessline 106
// Port Configuration defaultPort = 8080 // Default port for fetch() calls requiredPorts = [8080, 9090] // Ports to wait for in startAndWaitForPorts() - Network accessline 107
defaultPort = 8080 // Default port for fetch() calls - Network accessline 133
- **`defaultPort`**: Port used when calling `container.fetch()` without explicit port. Falls back to port 33 if not set.
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/gotchas.md
- Network accessline 3
### ⚠<U+FE0F> WebSocket: fetch() vs containerFetch() - Network accessline 9
**Fix:** Always use `fetch()` for WebSocket - Network accessline 15
// ✅ CORRECT return container.fetch(request) - Network accessline 16
return container.fetch(request) - Network accessline 28
// ❌ WRONG await container.start() return container.fetch(request) - Network accessline 30
return container.fetch(request) - Network accessline 32
// ✅ CORRECT await container.startAndWaitForPorts() return container.fetch(request) - Network accessline 34
return container.fetch(request) - Network accessline 103
**Cause:** Calling `fetch()` before port ready - Network accessline 164
1. **Use `startAndWaitForPorts()` by default** - Prevents port errors 2. **Set appropriate `sleepAfter`** - Balance resources vs cold starts 3. **Use `fetch()` for WebSocket** - Not `containerFetch()` - Network accessline 165
2. **Set appropriate `sleepAfter`** - Balance resources vs cold starts 3. **Use `fetch()` for WebSocket** - Not `containerFetch()` 4. **Design for restarts** - Ephemeral disk, implement graceful shutdown - Network accessline 166
3. **Use `fetch()` for WebSocket** - Not `containerFetch()`
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/containers/patterns.md
- Network accessline 11
export default { async fetch(request: Request, env: Env) { - Network accessline 12
async fetch(request: Request, env: Env) { - Network accessline 14
const container = env.SESSION_BACKEND.getByName(sessionId) await container.startAndWaitForPorts() return container.fetch(request) - Network accessline 15
await container.startAndWaitForPorts() return container.fetch(request) }, - Network accessline 16
return container.fetch(request) - Network accessline 26
export default { async fetch(request: Request, env: Env) { - Network accessline 27
async fetch(request: Request, env: Env) { - Network accessline 28
const container = env.STATELESS_API.getRandom() await container.startAndWaitForPorts() return container.fetch(request) - Network accessline 29
await container.startAndWaitForPorts() return container.fetch(request) }, - Network accessline 30
return container.fetch(request) - Network accessline 40
export default { async fetch(request: Request, env: Env) { - Network accessline 41
async fetch(request: Request, env: Env) { - Network accessline 42
const container = env.GLOBAL_SERVICE.getByName('singleton') await container.startAndWaitForPorts() return container.fetch(request) - Network accessline 43
await container.startAndWaitForPorts() return container.fetch(request) }, - Network accessline 44
return container.fetch(request) - Network accessline 54
export default { async fetch(request: Request, env: Env) { - Network accessline 55
async fetch(request: Request, env: Env) { - Network accessline 61
// ⚠<U+FE0F> MUST use fetch(), not containerFetch() - Network accessline 62
return container.fetch(request) - Network accessline 69
**⚠<U+FE0F> Critical:** Always use `fetch()` for WebSocket. - Network accessline 97
async fetch(request: Request) { - Network accessline 102
} }) return super.fetch(request) - Network accessline 103
}) return super.fetch(request) } - Network accessline 104
return super.fetch(request) - Network accessline 139
async fetch(request: Request) { - Network accessline 141
if (path.startsWith('/grpc')) this.switchPort(8081) else if (path.startsWith('/metrics')) this.switchPort(9090) return super.fetch(request) - Network accessline 142
else if (path.startsWith('/metrics')) this.switchPort(9090) return super.fetch(request) } - Network accessline 143
return super.fetch(request) - Network accessline 163
const result = await step.do('process', async () => { return container .fetch('/process', { - Network accessline 164
return container .fetch('/process', { method: 'POST', - Network accessline 165
.fetch('/process', { - Network accessline 189
const response = await container.fetch('/process', {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/api.md
- Network accessline 132
# Trigger any cron curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 133
curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 135
# Trigger specific cron with custom time curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000" - Network accessline 136
curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/configuration.md
- Network accessline 119
curl "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \ - Network accessline 126
curl -X PUT "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \ - Network accessline 135
curl -X PUT "https://api.cloudflare.com/client/v4/accounts/{account_id}/workers/scripts/{script_name}/schedules" \ - Network accessline 177
- [crontab.guru](https://crontab.guru/) - Interactive validator
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/gotchas.md
- Network accessline 61
# Correct curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 62
curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 64
# Wrong (will fail) curl "http://localhost:8787/__scheduled?cron=*/5 * * * *" - Network accessline 65
curl "http://localhost:8787/__scheduled?cron=*/5 * * * *" - Network accessline 128
export default { async fetch(request, env, ctx) { - Network accessline 129
async fetch(request, env, ctx) { - Access to secretsline 146
[Credential-related source omitted] - Network accessline 151
export default { async fetch(request, env, ctx) { - Network accessline 152
async fetch(request, env, ctx) { - Network accessline 202
- [Cron Triggers Docs](https://developers.cloudflare.com/workers/configuration/cron-triggers/) - Network accessline 203
- [Scheduled Handler API](https://developers.cloudflare.com/workers/runtime-apis/handlers/scheduled/) - Network accessline 204
- [Cloudflare Workflows](https://developers.cloudflare.com/workflows/) - Network accessline 205
- [Workers Limits](https://developers.cloudflare.com/workers/platform/limits/) - Network accessline 206
- [Crontab Guru](https://crontab.guru/) - Validator - Network accessline 207
- [Vitest Pool Workers](https://github.com/cloudflare/workers-sdk/tree/main/fixtures/vitest-pool-workers-examples)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/cron-triggers/patterns.md
- Network accessline 6
export default { async scheduled(controller, env, ctx) { const response = await fetch('https://api.example.com/data', { - Network accessline 7
[Credential-related source omitted] - Network accessline 8
const response = await fetch('https://api.example.com/data', { - Access to secretsline 9
[Credential-related source omitted] - Network accessline 48
await env.REPORTS_BUCKET.put(reportKey, JSON.stringify(report)) ctx.waitUntil( env.SEND_EMAIL.fetch('https://example.com/send', { - Network accessline 49
ctx.waitUntil( env.SEND_EMAIL.fetch('https://example.com/send', { method: 'POST', - Network accessline 50
env.SEND_EMAIL.fetch('https://example.com/send', { - Network accessline 53
to: 'team@example.com', subject: 'Weekly Report', reportUrl: `https://reports.example.com/${reportKey}`, - Network accessline 54
subject: 'Weekly Report', reportUrl: `https://reports.example.com/${reportKey}`, }), - Network accessline 55
reportUrl: `https://reports.example.com/${reportKey}`, - Network accessline 67
async scheduled(controller, env, ctx) { const services = [ { name: 'API', url: 'https://api.example.com/health' }, - Network accessline 68
const services = [ { name: 'API', url: 'https://api.example.com/health' }, { name: 'CDN', url: 'https://cdn.example.com/health' }, - Network accessline 69
{ name: 'API', url: 'https://api.example.com/health' }, - Network accessline 70
{ name: 'CDN', url: 'https://cdn.example.com/health' }, - Network accessline 74
const start = Date.now() try { const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) }) - Network accessline 75
try { const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) }) return { name: service.name, status: response.ok ? 'up' : 'down', responseTime: Date.now() - start } - Network accessline 76
const response = await fetch(service.url, { signal: AbortSignal.timeout(5000) }) - Network accessline 85
if (failures.length > 0) ctx.waitUntil( fetch(env.ALERT_WEBHOOK, { - Network accessline 86
ctx.waitUntil( fetch(env.ALERT_WEBHOOK, { method: 'POST', - Network accessline 87
fetch(env.ALERT_WEBHOOK, { - Network accessline 106
const results = await Promise.allSettled( batch.map((item) => fetch('https://api.example.com/process', { - Network accessline 107
batch.map((item) => fetch('https://api.example.com/process', { method: 'POST', - Network accessline 108
fetch('https://api.example.com/process', { - Access to secretsline 110
[Credential-related source omitted] - Network accessline 155
console.error('[ERROR]', { ...meta, duration: Date.now() - startTime, error: error.message }) ctx.waitUntil( fetch(env.ALERT_WEBHOOK, { - Network accessline 156
ctx.waitUntil( fetch(env.ALERT_WEBHOOK, { method: 'POST', - Network accessline 157
fetch(env.ALERT_WEBHOOK, { - Network accessline 209
# Test specific cron curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 210
curl "http://localhost:8787/__scheduled?cron=*/5+*+*+*+*" - Network accessline 212
# Test with specific time curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000" - Network accessline 213
curl "http://localhost:8787/__scheduled?cron=0+2+*+*+*&scheduledTime=1704067200000"
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/api.md
- Network accessline 134
// Single query const response = await fetch( - Network accessline 135
const response = await fetch( - Network accessline 136
`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/d1/database/${DATABASE_ID}/query`, - Access to secretsline 140
[Credential-related source omitted] - Network accessline 153
// Batch queries via HTTP const response = await fetch( - Network accessline 154
const response = await fetch( - Network accessline 155
`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/d1/database/${DATABASE_ID}/query`, - Access to secretsline 159
[Credential-related source omitted] - Network accessline 184
}) it('queries users', async () => { expect((await worker.fetch('/users')).status).toBe(200) - Network accessline 185
it('queries users', async () => { expect((await worker.fetch('/users')).status).toBe(200) }) - Network accessline 186
expect((await worker.fetch('/users')).status).toBe(200)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/configuration.md
- Network accessline 41
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 42
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Access to secretsline 133
[Credential-related source omitted] - Network accessline 147
import { users } from './schema' export default { async fetch(request: Request, env: Env) { - Network accessline 148
export default { async fetch(request: Request, env: Env) { const db = drizzle(env.DB) - Network accessline 149
async fetch(request: Request, env: Env) {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/d1/patterns.md
- Network accessline 104
// Each tenant gets own database export default { async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) { - Network accessline 105
export default { async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) { const tenantId = request.headers.get('X-Tenant-ID') - Network accessline 106
async fetch(request: Request, env: { [key: `TENANT_${string}`]: D1Database }) { - Network accessline 159
export default { async fetch(request: Request, env: Env) { - Network accessline 160
async fetch(request: Request, env: Env) {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ddos/api.md
- Access to secretsline 32
[Credential-related source omitted] - Network accessline 99
// Create alert await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/alerting/v3/policies`, { - Network accessline 100
await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/alerting/v3/policies`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/ddos/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/do-storage/configuration.md
- Network accessline 61
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 62
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 70
// Legacy: forward request (still works) // return stub.fetch(request); - Network accessline 71
// return stub.fetch(request);
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/do-storage/gotchas.md
- Network accessline 46
**fetch() breaks input/output gates** → allows request interleaving: - Network accessline 49
// UNSAFE: fetch() allows another request to interleave - Network accessline 50
async unsafe() { const val = await this.ctx.storage.get("counter"); await fetch("https://api.example.com"); // Gate broken! - Network accessline 51
const val = await this.ctx.storage.get("counter"); await fetch("https://api.example.com"); // Gate broken! await this.ctx.storage.put("counter", val + 1); // Race condition possible - Network accessline 52
await fetch("https://api.example.com"); // Gate broken! - Network accessline 62
return await this.ctx.blockConcurrencyWhile(async () => { const val = await this.ctx.storage.get("counter"); await fetch("https://api.example.com"); - Network accessline 63
const val = await this.ctx.storage.get("counter"); await fetch("https://api.example.com"); await this.ctx.storage.put("counter", val + 1); - Network accessline 64
await fetch("https://api.example.com");
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/README.md
- Network accessline 58
**RPC vs fetch() decision:** - Network accessline 61
├─ New project + compat ≥2024-04-03 → RPC (type-safe, simpler) ├─ Need HTTP semantics (headers, status) → fetch() - Network accessline 62
├─ Need HTTP semantics (headers, status) → fetch() - Network accessline 63
├─ Proxying requests to DO → fetch() - Network accessline 64
└─ Legacy compatibility → fetch() - Network accessline 67
See [Patterns: RPC vs fetch()](./patterns.md) for examples. - Access to secretsline 103
[Credential-related source omitted] - Network accessline 116
// Worker access export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 117
export default { async fetch(request: Request, env: Env): Promise<Response> { const id = env.COUNTER.idFromName('global') - Network accessline 118
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 151
├─ New project + typed methods → RPC (compat ≥2024-04-03) ├─ Need HTTP semantics → fetch() - Network accessline 152
├─ Need HTTP semantics → fetch() - Network accessline 153
├─ Proxying to DO → fetch() - Network accessline 154
└─ Legacy compat → fetch() - Network accessline 157
See [Patterns: RPC vs fetch()](./patterns.md) for examples. - Network accessline 179
**Docs**: https://developers.cloudflare.com/durable-objects/ - Network accessline 180
**API Reference**: https://developers.cloudflare.com/durable-objects/api/ - Network accessline 181
**Examples**: https://developers.cloudflare.com/durable-objects/examples/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/api.md
- Access to secretsline 8
[Credential-related source omitted] - Network accessline 19
// fetch handler (legacy/HTTP semantics) async fetch(req: Request): Promise<Response> { - Network accessline 20
async fetch(req: Request): Promise<Response> { - Network accessline 152
async fetch(req: Request): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/configuration.md
- Access to secretsline 128
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/durable-objects/patterns.md
- Network accessline 14
## RPC vs fetch() - Network accessline 16
**RPC** (compat ≥2024-04-03): Type-safe, simpler, default for new projects **fetch()**: Legacy compat, HTTP semantics, proxying - Network accessline 17
**fetch()**: Legacy compat, HTTP semantics, proxying - Network accessline 20
const count = await stub.increment() // RPC const count = await (await stub.fetch(req)).json() // fetch() - Network accessline 21
const count = await (await stub.fetch(req)).json() // fetch() - Network accessline 29
export default { async fetch(req: Request, env: Env): Promise<Response> { - Network accessline 30
async fetch(req: Request, env: Env): Promise<Response> { - Network accessline 32
const hash = hashCode(userId) % 100 // 100 shards const id = env.COUNTER.idFromName(`shard:${hash}`) return env.COUNTER.get(id).fetch(req) - Network accessline 33
const id = env.COUNTER.idFromName(`shard:${hash}`) return env.COUNTER.get(id).fetch(req) }, - Network accessline 34
return env.COUNTER.get(id).fetch(req) - Network accessline 81
async fetch(req: Request): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/README.md
- Access to secretsline 25
[Credential-related source omitted] - Network accessline 87
- [Cloudflare Docs: Email Routing](https://developers.cloudflare.com/email-routing/) - Network accessline 88
- [Cloudflare Docs: Email Workers](https://developers.cloudflare.com/email-routing/email-workers/) - Network accessline 89
- [postal-mime npm package](https://www.npmjs.com/package/postal-mime)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/api.md
- Network accessline 132
export default { async fetch(request, env, ctx): Promise<Response> { - Network accessline 133
async fetch(request, env, ctx): Promise<Response> { - Network accessline 136
to: [{ name: 'Alice', email: 'alice@example.com' }, 'bob@example.com'], subject: 'Your order #12345 has shipped', text: 'Track your package at: https://track.example.com/12345', - Network accessline 137
subject: 'Your order #12345 has shipped', text: 'Track your package at: https://track.example.com/12345', html: "<p>Track your package at: <a href='https://track.example.com/12345'>View tracking</a></p>", - Network accessline 138
text: 'Track your package at: https://track.example.com/12345', - Network accessline 139
html: "<p>Track your package at: <a href='https://track.example.com/12345'>View tracking</a></p>", - Access to secretsline 145
[Credential-related source omitted] - Network accessline 158
Base URL: `https://api.cloudflare.com/client/v4` - Network accessline 163
[Credential-related source omitted] - Access to secretsline 163
[Credential-related source omitted] - Network accessline 180
[Credential-related source omitted] - Access to secretsline 180
[Credential-related source omitted] - Access to secretsline 181
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/configuration.md
- Network accessline 52
# Test with curl curl -X POST 'http://localhost:8787/__email' \ - Network accessline 53
curl -X POST 'http://localhost:8787/__email' \ - Network accessline 75
[Credential-related source omitted] - Access to secretsline 75
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 93
[Credential-related source omitted] - Access to secretsline 102
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/gotchas.md
- Network accessline 127
curl -X POST 'http://localhost:8787/__email' \
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-routing/patterns.md
- Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted] - Access to secretsline 152
[Credential-related source omitted] - Access to secretsline 178
[Credential-related source omitted] - Access to secretsline 203
[Credential-related source omitted] - Access to secretsline 225
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/README.md
- Network accessline 149
- [Email Routing Documentation](https://developers.cloudflare.com/email-routing/) - Network accessline 150
- [Workers Platform](https://developers.cloudflare.com/workers/) - Network accessline 151
- [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/) - Network accessline 152
- [postal-mime on npm](https://www.npmjs.com/package/postal-mime) - Network accessline 153
- [mimetext on npm](https://www.npmjs.com/package/mimetext)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/configuration.md
- Network accessline 16
"kv_namespaces": [{ "binding": "ARCHIVE", "id": "xxx" }], "r2_buckets": [{ "binding": "ATTACHMENTS", "bucket_name": "email-attachments" }], "vars": { "WEBHOOK_URL": "https://hooks.example.com" }, - Network accessline 17
"r2_buckets": [{ "binding": "ATTACHMENTS", "bucket_name": "email-attachments" }], "vars": { "WEBHOOK_URL": "https://hooks.example.com" }, } - Network accessline 18
"vars": { "WEBHOOK_URL": "https://hooks.example.com" }, - Network accessline 66
# Test receiving curl --request POST 'http://localhost:8787/cdn-cgi/handler/email' \ - Network accessline 67
curl --request POST 'http://localhost:8787/cdn-cgi/handler/email' \ - Access to secretsline 97
[Credential-related source omitted] - Access to secretsline 98
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/gotchas.md
- Network accessline 21
// ❌ Errors dropped silently ctx.waitUntil(fetch(webhookUrl, { method: 'POST', body: data })) - Network accessline 22
ctx.waitUntil(fetch(webhookUrl, { method: 'POST', body: data })) - Network accessline 24
// ✅ Catch and log ctx.waitUntil( fetch(webhookUrl, { method: 'POST', body: data }).catch((err) => - Network accessline 25
ctx.waitUntil( fetch(webhookUrl, { method: 'POST', body: data }).catch((err) => env.ERROR_LOG.put(`error:${Date.now()}`, err.message), - Network accessline 26
fetch(webhookUrl, { method: 'POST', body: data }).catch((err) =>
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/email-workers/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/hyperdrive/gotchas.md
- Network accessline 72
- [Docs](https://developers.cloudflare.com/hyperdrive/) - Network accessline 73
- [Getting Started](https://developers.cloudflare.com/hyperdrive/get-started/) - Network accessline 74
- [Wrangler Reference](https://developers.cloudflare.com/hyperdrive/reference/wrangler-commands/) - Network accessline 75
- [Supported DBs](https://developers.cloudflare.com/hyperdrive/reference/supported-databases-and-features/) - Network accessline 76
- [Discord #hyperdrive](https://discord.cloudflare.com) - Network accessline 77
- [Limit Increase Form](https://forms.gle/ukpeZVLWLnKeixDu7)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/api.md
- Network accessline 55
curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 \ - Network accessline 70
https://imagedelivery.net/{hash}/{id}/width=800,height=600,fit=cover,format=avif - Network accessline 78
// 1. Get upload URL (backend) const { result } = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v2/direct_upload`, { - Network accessline 79
const { result } = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v2/direct_upload`, { - Network accessline 86
const formData = new FormData() formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData }) - Network accessline 88
await fetch(result.uploadURL, { method: 'POST', body: formData })
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/configuration.md
- Network accessline 25
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 26
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 43
[Credential-related source omitted] - Network accessline 48
const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/images/v1`, { - Network accessline 76
const imageUrl = `https://imagedelivery.net/${env.IMAGES_ACCOUNT_HASH}/${imageId}/public` - Network accessline 93
curl -X POST \ - Network accessline 94
https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1/variants \ - Network accessline 111
https://imagedelivery.net/{account_hash}/{image_id}/thumbnail - Network accessline 155
[Credential-related source omitted] - Network accessline 156
https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 - Network accessline 162
[Credential-related source omitted] - Access to secretsline 162
[Credential-related source omitted] - Access to secretsline 163
[Credential-related source omitted] - Network accessline 164
https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 - Network accessline 172
# Upload with signed URLs required curl -X POST \ - Network accessline 173
curl -X POST \ - Network accessline 174
https://api.cloudflare.com/client/v4/accounts/{account_id}/images/v1 \ - Network accessline 190
return `https://imagedelivery.net/{hash}${path}?exp=${expiry}&sig=${signature}` - Access to secretsline 194
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/images/patterns.md
- Network accessline 15
<img src="https://imagedelivery.net/{hash}/{id}/width=800" - Network accessline 16
src="https://imagedelivery.net/{hash}/{id}/width=800" - Network accessline 25
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 35
// Backend: Generate upload URL const response = await fetch( - Network accessline 36
const response = await fetch( - Network accessline 37
`https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/images/v2/direct_upload`, - Access to secretsline 40
[Credential-related source omitted] - Network accessline 46
const formData = new FormData() formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData }) - Network accessline 47
formData.append('file', file) await fetch(result.uploadURL, { method: 'POST', body: formData }) // Use: https://imagedelivery.net/{hash}/${result.id}/public - Network accessline 48
await fetch(result.uploadURL, { method: 'POST', body: formData }) - Network accessline 49
// Use: https://imagedelivery.net/{hash}/${result.id}/public - Network accessline 55
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 69
const watermark = await env.ASSETS.fetch(new URL('/watermark.png', request.url)) - Network accessline 91
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/kv/configuration.md
- Network accessline 47
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 48
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Access to secretsline 53
[Credential-related source omitted] - Access to secretsline 113
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/kv/patterns.md
- Network accessline 25
// L3: Origin (slow) const origin = await fetch(`https://api.example.com/${key}`).then((r) => r.json()) - Network accessline 26
const origin = await fetch(`https://api.example.com/${key}`).then((r) => r.json()) - Network accessline 48
const apiData = await getCachedData(env, 'cache:users', () => fetch('https://api.example.com/users').then((r) => r.json()), - Network accessline 49
fetch('https://api.example.com/users').then((r) => r.json()),
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/README.md
- Network accessline 78
script: ` export default { async fetch(request, env, ctx) { - Network accessline 79
export default { async fetch(request, env, ctx) { return new Response("Hello Miniflare!"); - Network accessline 80
async fetch(request, env, ctx) { - Network accessline 87
const res = await mf.dispatchFetch('http://localhost:8787/')
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/api.md
- Network accessline 36
**Fetch (no HTTP server):** - Network accessline 39
const res = await mf.dispatchFetch('http://localhost:8787/path', { - Network accessline 49
const res = await mf.dispatchFetch('http://localhost:8787/', { - Access to secretsline 85
[Credential-related source omitted] - Access to secretsline 86
[Credential-related source omitted] - Network accessline 118
const id = ns.idFromName('test') const stub = ns.get(id) const res = await stub.fetch('http://localhost/') - Network accessline 120
const res = await stub.fetch('http://localhost/') - Network accessline 138
const caches = await mf.getCaches() const defaultCache = caches.default await defaultCache.put('http://example.com', new Response('cached')) - Network accessline 140
await defaultCache.put('http://example.com', new Response('cached')) - Network accessline 194
const mf = new Miniflare({ scriptPath: 'worker.js' }) const url = await mf.ready // Promise<URL> console.log(`Server running at ${url}`) // http://127.0.0.1:8787 - Network accessline 196
console.log(`Server running at ${url}`) // http://127.0.0.1:8787 - Network accessline 198
// Note: dispatchFetch() waits automatically, no need to await ready const res = await mf.dispatchFetch('http://localhost/') // Works immediately - Network accessline 199
const res = await mf.dispatchFetch('http://localhost/') // Works immediately
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/configuration.md
- Network accessline 30
'streams_enable_constructors', // Stream constructors ], upstream: 'https://example.com', // Fallback for unhandled requests - Network accessline 31
], upstream: 'https://example.com', // Fallback for unhandled requests }) - Network accessline 32
upstream: 'https://example.com', // Fallback for unhandled requests - Network accessline 90
bindings: { SECRET_KEY: 'my-secret-value', API_URL: 'https://api.example.com', - Network accessline 91
SECRET_KEY: 'my-secret-value', API_URL: 'https://api.example.com', DEBUG: true, - Network accessline 92
API_URL: 'https://api.example.com',
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/gotchas.md
- Access to secretsline 166
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/miniflare/patterns.md
- Network accessline 64
it('handles fetch', async () => { const res = await SELF.fetch('http://example.com/') - Network accessline 65
const res = await SELF.fetch('http://example.com/') - Network accessline 85
test('fetch', async () => { const res = await mf.dispatchFetch('http://localhost/') - Network accessline 86
const res = await mf.dispatchFetch('http://localhost/') - Network accessline 97
const ns = await mf.getDurableObjectNamespace('COUNTER') const stub = ns.get(ns.idFromName('test-counter')) await stub.fetch('http://localhost/increment') - Network accessline 99
await stub.fetch('http://localhost/increment') - Network accessline 124
workers: [ { name: 'main', serviceBindings: { API: 'mock-api' }, script: `...` }, { name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` }, - Network accessline 125
{ name: 'main', serviceBindings: { API: 'mock-api' }, script: `...` }, { name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` }, ], - Network accessline 126
{ name: 'mock-api', script: `export default { async fetch() { return Response.json({mock: true}); } }` }, - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Network accessline 144
export default { async fetch(req: Request, env: Env) { - Network accessline 145
async fetch(req: Request, env: Env) { - Access to secretsline 148
[Credential-related source omitted] - Network accessline 154
const res = await mf.dispatchFetch('http://localhost/ws', { - Network accessline 178
// Use dispatchFetch (no port conflicts) await mf.dispatchFetch('http://localhost/') - Network accessline 179
await mf.dispatchFetch('http://localhost/')
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/README.md
- Network accessline 30
- IPv4 /24+ or IPv6 /48+ prefixes - BGP ASN for v1 - See [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf) - Network accessline 32
- See [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/api.md
- Network accessline 8
https://api.cloudflare.com/client/v4 - Network accessline 85
Rates: `high` | `medium` | `low`. Types: `request` | `reply`. See [Magic Transit docs](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels). - Access to secretsline 101
[Credential-related source omitted] - Network accessline 136
// LOA (use fetch) const res = await fetch(`https://api.cloudflare.com/client/v4/accounts/${id}/cni/interconnects/${iconId}/loa`, { - Network accessline 137
const res = await fetch(`https://api.cloudflare.com/client/v4/accounts/${id}/cni/interconnects/${iconId}/loa`, { - Access to secretsline 166
[Credential-related source omitted] - Network accessline 181
# List interconnects curl "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects" \ - Network accessline 182
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 183
[Credential-related source omitted] - Network accessline 185
# Create interconnect curl -X POST "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects?validate_only=true" \ - Network accessline 186
[Credential-related source omitted] - Access to secretsline 186
[Credential-related source omitted] - Access to secretsline 187
[Credential-related source omitted] - Network accessline 190
# LOA PDF curl "https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/cni/interconnects/${ICON_ID}/loa" \ - Network accessline 191
[Credential-related source omitted] - Access to secretsline 191
[Credential-related source omitted] - Access to secretsline 192
[Credential-related source omitted] - Network accessline 208
- [API Docs](https://developers.cloudflare.com/api/resources/network_interconnects/) - Network accessline 209
- [TypeScript SDK](https://github.com/cloudflare/cloudflare-typescript) - Network accessline 210
- [Python SDK](https://github.com/cloudflare/cloudflare-python)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/configuration.md
- Network accessline 13
4. **Configure** (Week 3): Both sides configure per doc 5. **Test** (Week 3-4): Ping, verify BGP, check routes 6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel- - Network accessline 14
5. **Test** (Week 3-4): Ping, verify BGP, check routes 6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels) or [Magic WAN](https://developer - Network accessline 15
6. **Health checks** (Week 4): Configure [Magic Transit](https://developers.cloudflare.com/magic-transit/how-to/configure-tunnel-endpoints/#add-tunnels) or [Magic WAN](https://developers.cloudflare.com/magic-wan/configuration/manually/how-t - Network accessline 17
8. **Monitor**: Enable [maintenance notifications](https://developers.cloudflare.com/network-interconnect/monitoring-and-alerts/#enable-cloudflare-status-maintenance-notification) - Network accessline 57
**Post-setup:** Add [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) to Magic WAN. Enable [bidirectional health checks](https://developers.cloudflare.com/ma - Network accessline 68
**Routing to GCP:** Add [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes). BGP routes from GCP Cloud Router **ignored**. - Network accessline 70
**Routing to CF:** Configure [custom learned routes](https://cloud.google.com/network-connectivity/docs/router/how-to/configure-custom-learned-routes) in Cloud Router. Request prefixes from CF account team.
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/gotchas.md
- Network accessline 69
**Cause:** Typo or unsupported facility **Solution:** Check [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf) for valid codes - Network accessline 70
**Solution:** Check [locations PDF](https://developers.cloudflare.com/network-interconnect/static/cni-locations-2026-01.pdf) for valid codes - Network accessline 109
**Cause:** BGP routes from GCP Cloud Router **ignored by design** **Solution:** Use [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) in Magic WAN instead - Network accessline 110
**Solution:** Use [static routes](https://developers.cloudflare.com/magic-wan/configuration/manually/how-to/configure-routes/#configure-static-routes) in Magic WAN instead
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/network-interconnect/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/README.md
- Network accessline 90
- [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/) - Network accessline 91
- [Analytics Engine Docs](https://developers.cloudflare.com/analytics/analytics-engine/) - Network accessline 92
- [Workers Traces Docs](https://developers.cloudflare.com/workers/observability/traces/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/configuration.md
- Network accessline 62
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 63
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 100
// Send to external monitoring ctx.waitUntil( fetch('https://monitoring.example.com/errors', { - Network accessline 101
ctx.waitUntil( fetch('https://monitoring.example.com/errors', { method: 'POST', - Network accessline 102
fetch('https://monitoring.example.com/errors', { - Network accessline 127
curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/logpush/jobs" \
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/gotchas.md
- Network accessline 15
# Test with curl curl https://your-worker.workers.dev - Network accessline 16
curl https://your-worker.workers.dev - Network accessline 60
// Date.now() is coarsened - trace spans are accurate export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 61
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { // For user-facing timing, Date.now() is fine - Network accessline 62
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 101
// Pass correlationId through headers to downstream services await fetch('https://api.example.com', { - Network accessline 102
await fetch('https://api.example.com', {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/observability/patterns.md
- Network accessline 22
const start = Date.now() const response = await fetch(url) - Network accessline 23
const response = await fetch(url) - Network accessline 64
ctx.waitUntil( fetch('https://logging.example.com/ingest', { - Network accessline 65
fetch('https://logging.example.com/ingest', { - Access to secretsline 67
[Credential-related source omitted] - Network accessline 96
ctx.waitUntil( fetch('https://api.honeycomb.io/v1/traces', { - Network accessline 97
fetch('https://api.honeycomb.io/v1/traces', { - Access to secretsline 99
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/api.md
- Access to secretsline 64
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 90
[Credential-related source omitted] - Network accessline 104
[Credential-related source omitted] - Access to secretsline 104
[Credential-related source omitted] - Network accessline 105
const stub = ctx.env.COUNTER.get(ctx.env.COUNTER.idFromName('global')) return stub.fetch(ctx.request) } - Network accessline 106
return stub.fetch(ctx.request) - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 127
[Credential-related source omitted] - Network accessline 129
[Credential-related source omitted] - Access to secretsline 129
[Credential-related source omitted] - Network accessline 131
return ctx.env.AUTH.fetch(ctx.request) - Access to secretsline 134
[Credential-related source omitted] - Network accessline 140
When using `_worker.js`, access static assets via `env.ASSETS.fetch()`: - Network accessline 148
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 149
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 152
return Response.json({ data: await env.KV.get('key') }) } return env.ASSETS.fetch(request) // Fallback to static - Network accessline 153
} return env.ASSETS.fetch(request) // Fallback to static }, - Network accessline 154
return env.ASSETS.fetch(request) // Fallback to static - Access to secretsline 156
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/configuration.md
- Access to secretsline 15
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Network accessline 44
"vars": { "API_URL": "https://api.example.com" }, - Network accessline 61
{ "vars": { "API_URL": "http://localhost:8787" }, - Network accessline 62
"vars": { "API_URL": "http://localhost:8787" }, - Network accessline 63
"env": { "production": { "vars": { "API_URL": "https://api.example.com" } }, }, - Network accessline 64
"production": { "vars": { "API_URL": "https://api.example.com" } }, - Access to secretsline 80
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/gotchas.md
- Access to secretsline 28
[Credential-related source omitted] - Access to secretsline 35
[Credential-related source omitted] - Network accessline 86
- `export default { fetch(req, env) {} }` → `export function onRequest(ctx) { const { request, env } = ctx; }` - Network accessline 87
- Use `_worker.js` for complex routing: `env.ASSETS.fetch(request)` for static files - Network accessline 97
- [Official Docs](https://developers.cloudflare.com/pages/functions/) - Network accessline 98
- [Workers APIs](https://developers.cloudflare.com/workers/runtime-apis/) - Network accessline 99
- [Examples](https://github.com/cloudflare/pages-example-projects) - Network accessline 100
- [Discord](https://discord.gg/cloudflaredev)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages-functions/patterns.md
- Access to secretsline 8
[Credential-related source omitted] - Network accessline 13
Promise.all([ ctx.env.ANALYTICS.writeDataPoint({ event: 'view' }), fetch('https://webhook.site/...', { method: 'POST' }), - Network accessline 14
ctx.env.ANALYTICS.writeDataPoint({ event: 'view' }), fetch('https://webhook.site/...', { method: 'POST' }), ]), - Network accessline 15
fetch('https://webhook.site/...', { method: 'POST' }), - Access to secretsline 38
[Credential-related source omitted] - Access to secretsline 63
[Credential-related source omitted] - Network accessline 115
it('returns JSON', async () => { const req = new Request('http://localhost/api') - Network accessline 116
const req = new Request('http://localhost/api') - Network accessline 135
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 136
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 139
return Response.json({ data: await env.KV.get('key') }) } return env.ASSETS.fetch(request) // Static files - Network accessline 140
} return env.ASSETS.fetch(request) // Static files }, - Network accessline 141
return env.ASSETS.fetch(request) // Static files - Access to secretsline 143
[Credential-related source omitted] - Network accessline 148
**See also:** [api.md](./api.md) for `env.ASSETS.fetch()` | [gotchas.md](./gotchas.md) for debugging
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/README.md
- Network accessline 64
- [Pages Docs](https://developers.cloudflare.com/pages/) - Network accessline 65
- [Functions API](https://developers.cloudflare.com/pages/functions/api-reference/) - Network accessline 66
- [Framework Guides](https://developers.cloudflare.com/pages/framework-guides/) - Network accessline 67
- [Discord #functions](https://discord.com/channels/595317990191398933/910978223968518144)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/api.md
- Access to secretsline 26
[Credential-related source omitted] - Access to secretsline 31
[Credential-related source omitted] - Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 113
[Credential-related source omitted] - Network accessline 132
// functions/_worker.js export default { async fetch(request, env, ctx) { - Network accessline 133
export default { async fetch(request, env, ctx) { const url = new URL(request.url) - Network accessline 134
async fetch(request, env, ctx) { - Network accessline 142
// REQUIRED: Serve static assets return env.ASSETS.fetch(request) - Network accessline 143
return env.ASSETS.fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/configuration.md
- Network accessline 21
"ai": { "binding": "AI" }, "analytics_engine_datasets": [{ "binding": "ANALYTICS" }], "vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" }, - Network accessline 22
"analytics_engine_datasets": [{ "binding": "ANALYTICS" }], "vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" }, "env": { - Network accessline 23
"vars": { "API_URL": "https://api.example.com", "ENVIRONMENT": "production" }, - Network accessline 24
"env": { "preview": { "vars": { "API_URL": "https://staging-api.example.com" }, - Network accessline 25
"preview": { "vars": { "API_URL": "https://staging-api.example.com" }, "kv_namespaces": [{ "binding": "KV", "id": "preview-namespace-id" }], - Network accessline 26
"vars": { "API_URL": "https://staging-api.example.com" }, - Access to secretsline 56
[Credential-related source omitted] - Network accessline 212
[Full limits](https://developers.cloudflare.com/pages/platform/limits/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/gotchas.md
- Network accessline 11
**Problem**: Static files not serving **Causes**: Build output dir misconfigured; Functions catching requests; Advanced mode missing `env.ASSETS.fetch()` - Network accessline 12
**Causes**: Build output dir misconfigured; Functions catching requests; Advanced mode missing `env.ASSETS.fetch()` - Network accessline 13
**Solution**: Verify output dir, add exclusions to `_routes.json`, call `env.ASSETS.fetch()` in `_worker.js` - Network accessline 211
[Full limits](https://developers.cloudflare.com/pages/platform/limits/) - Network accessline 215
1. Check [Pages Docs](https://developers.cloudflare.com/pages/) - Network accessline 216
2. Search [Discord #functions](https://discord.com/channels/595317990191398933/910978223968518144) - Network accessline 217
3. Review [Workers Examples](https://developers.cloudflare.com/workers/examples/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pages/patterns.md
- Access to secretsline 7
[Credential-related source omitted] - Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 35
[Credential-related source omitted] - Access to secretsline 69
[Credential-related source omitted] - Network accessline 80
const data = await request.json() waitUntil( fetch('https://api.example.com/webhook', { - Network accessline 81
waitUntil( fetch('https://api.example.com/webhook', { method: 'POST', - Network accessline 82
fetch('https://api.example.com/webhook', { - Access to secretsline 116
[Credential-related source omitted] - Access to secretsline 149
[Credential-related source omitted] - Network accessline 205
[Framework Guides](https://developers.cloudflare.com/pages/framework-guides/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/api.md
- Network accessline 15
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 16
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 21
[Credential-related source omitted] - Network accessline 64
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 65
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 95
https://{stream-id}.ingest.cloudflare.com - Network accessline 105
# ✅ Correct curl -X POST https://{stream-id}.ingest.cloudflare.com \ - Network accessline 106
curl -X POST https://{stream-id}.ingest.cloudflare.com \ - Network accessline 110
# ❌ Wrong - will fail curl -X POST https://{stream-id}.ingest.cloudflare.com \ - Network accessline 111
curl -X POST https://{stream-id}.ingest.cloudflare.com \ - Network accessline 119
curl -X POST https://{stream-id}.ingest.cloudflare.com \ - Network accessline 157
Full reference: [Pipelines SQL Reference](https://developers.cloudflare.com/pipelines/sql-reference/) - Access to secretsline 199
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pipelines/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/api.md
- Network accessline 61
db.id.apply(async (dbId) => { const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/d1/database/${dbId}/query`, { - Network accessline 62
const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/d1/database/${dbId}/query`, { - Network accessline 78
class D1MigrationProvider implements pulumi.dynamic.ResourceProvider { async create(inputs: any): Promise<pulumi.dynamic.CreateResult> { const response = await fetch( - Network accessline 79
async create(inputs: any): Promise<pulumi.dynamic.CreateResult> { const response = await fetch( `https://api.cloudflare.com/client/v4/accounts/${inputs.accountId}/d1/database/${inputs.databaseId}/query`, - Network accessline 80
const response = await fetch( - Network accessline 81
`https://api.cloudflare.com/client/v4/accounts/${inputs.accountId}/d1/database/${inputs.databaseId}/query`, - Access to secretsline 158
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/configuration.md
- Access to secretsline 31
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/pulumi/gotchas.md
- Network accessline 119
// Worker code export default { async fetch(request, env) { - Network accessline 120
export default { async fetch(request, env) { await env.MY_KV.get('key') - Network accessline 121
async fetch(request, env) { - Network accessline 197
- **Pulumi Registry:** https://www.pulumi.com/registry/packages/cloudflare/ - Network accessline 198
- **API Docs:** https://www.pulumi.com/registry/packages/cloudflare/api-docs/ - Network accessline 199
- **GitHub:** https://github.com/pulumi/pulumi-cloudflare - Network accessline 200
- **Cloudflare Docs:** https://developers.cloudflare.com/ - Network accessline 201
- **Workers Docs:** https://developers.cloudflare.com/workers/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/api.md
- Access to secretsline 56
[Credential-related source omitted] - Network accessline 158
// Pull messages const response = await fetch( - Network accessline 159
const response = await fetch( - Network accessline 160
`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/pull`, - Access to secretsline 163
[Credential-related source omitted] - Network accessline 170
// Acknowledge await fetch(`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/ack`, { - Network accessline 171
await fetch(`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/queues/${QUEUE_ID}/messages/ack`, { - Access to secretsline 173
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/configuration.md
- Access to secretsline 91
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/queues/patterns.md
- Network accessline 6
// Producer: Accept request, queue work export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 7
export default { async fetch(request: Request, env: Env): Promise<Response> { const { userId, reportType } = await request.json() - Network accessline 8
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 39
async queue(batch: MessageBatch, env: Env): Promise<void> { const logs = batch.messages.map(m => m.body); await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) }); - Network accessline 40
const logs = batch.messages.map(m => m.body); await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) }); batch.ackAll(); - Network accessline 41
await fetch(env.LOG_ENDPOINT, { method: 'POST', body: JSON.stringify({ logs }) }); - Network accessline 124
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 209
try { await stub.fetch(new Request('https://do/process', { - Network accessline 210
await stub.fetch(new Request('https://do/process', {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/api.md
- Network accessline 3
R2 Data Catalog exposes standard [Apache Iceberg REST Catalog API](https://github.com/apache/iceberg/blob/main/open-api/rest-catalog-open-api.yaml).
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/configuration.md
- Network accessline 7
- Cloudflare account with [R2 subscription](https://developers.cloudflare.com/r2/pricing/) - Network accessline 43
curl -X POST \ - Network accessline 44
"https://api.cloudflare.com/client/v4/accounts/<account-id>/r2/buckets/<bucket>/catalog" \ - Network accessline 128
# Store credentials in environment variables WAREHOUSE = os.getenv("R2_WAREHOUSE") # e.g., "my-bucket" CATALOG_URI = os.getenv("R2_CATALOG_URI") # e.g., "https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket" - Network accessline 129
[Credential-related source omitted] - Network accessline 130
CATALOG_URI = os.getenv("R2_CATALOG_URI") # e.g., "https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket" - Access to secretsline 131
[Credential-related source omitted] - Access to secretsline 179
[Credential-related source omitted] - Access to secretsline 193
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/gotchas.md
- Network accessline 162
- [Cloudflare Community](https://community.cloudflare.com/c/developers/workers/40) - Network accessline 163
- [Cloudflare Discord](https://discord.cloudflare.com) - #r2 channel - Network accessline 164
- [PyIceberg GitHub](https://github.com/apache/iceberg-python/issues) - Network accessline 165
- [Apache Iceberg Slack](https://iceberg.apache.org/community/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-data-catalog/patterns.md
- Access to secretsline 16
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/README.md
- Access to secretsline 104
[Credential-related source omitted] - Network accessline 135
- [pipelines](../pipelines/) - Streaming ingestion to Iceberg tables - [r2](../r2/) - R2 object storage fundamentals - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/) - Network accessline 136
- [r2](../r2/) - R2 object storage fundamentals - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/) - [R2 SQL Deep Dive Blog](https://blog.cloudflare.com/r2-sql-deep-dive/) - Network accessline 137
- [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/) - Network accessline 138
- [R2 SQL Deep Dive Blog](https://blog.cloudflare.com/r2-sql-deep-dive/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/configuration.md
- Network accessline 29
Catalog enabled successfully Warehouse: my-bucket Catalog URI: https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket - Network accessline 31
Catalog URI: https://abc123.r2.cloudflarestorage.com/iceberg/my-bucket - Access to secretsline 77
[Credential-related source omitted] - Access to secretsline 83
[Credential-related source omitted] - Network accessline 93
curl -X POST https://api.cloudflare.com/client/v4/accounts/{account_id}/r2/sql/query \ - Access to secretsline 126
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/gotchas.md
- Network accessline 12
// ❌ This doesn't exist export default { async fetch(request, env) { - Network accessline 13
export default { async fetch(request, env) { const result = await env.R2_SQL.query('SELECT * FROM table') // Not possible - Network accessline 14
async fetch(request, env) { - Access to secretsline 104
[Credential-related source omitted] - Access to secretsline 105
[Credential-related source omitted] - Access to secretsline 107
[Credential-related source omitted] - Access to secretsline 108
[Credential-related source omitted] - Access to secretsline 215
[Credential-related source omitted] - Network accessline 226
- [patterns.md](patterns.md) - Query optimization - [configuration.md](configuration.md) - Setup - [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/) - Network accessline 228
- [Cloudflare R2 SQL Docs](https://developers.cloudflare.com/r2-sql/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2-sql/patterns.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/api.md
- Network accessline 99
const s3 = new S3Client({ region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 100
region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, credentials: { accessKeyId: env.R2_ACCESS_KEY_ID, secretAccessKey: env.R2_SECRET_ACCESS_KEY }, - Network accessline 101
endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Access to secretsline 102
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/configuration.md
- Network accessline 25
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 26
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 38
const s3 = new S3Client({ region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 39
region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, credentials: { - Network accessline 40
endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Access to secretsline 43
[Credential-related source omitted] - Network accessline 73
const s3 = new S3Client({ region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 74
region: 'auto', endpoint: `https://${accountId}.r2.cloudflarestorage.com`, credentials: { - Network accessline 75
endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Access to secretsline 78
[Credential-related source omitted] - Network accessline 86
CORSRules: [ { AllowedOrigins: ['https://example.com'], - Network accessline 87
{ AllowedOrigins: ['https://example.com'], AllowedMethods: ['GET', 'PUT', 'HEAD'], - Network accessline 88
AllowedOrigins: ['https://example.com'],
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/gotchas.md
- Network accessline 82
// ❌ WRONG: Streaming unknown length fails silently const response = await fetch(url) - Network accessline 83
const response = await fetch(url) - Network accessline 103
// ❌ WRONG: Missing region breaks ALL S3 SDK calls const s3 = new S3Client({ endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 104
const s3 = new S3Client({ endpoint: `https://${accountId}.r2.cloudflarestorage.com`, credentials: { ... } - Network accessline 105
endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 110
const s3 = new S3Client({ region: 'auto', // REQUIRED endpoint: `https://${accountId}.r2.cloudflarestorage.com`, - Network accessline 111
region: 'auto', // REQUIRED endpoint: `https://${accountId}.r2.cloudflarestorage.com`, credentials: { ... } - Network accessline 112
endpoint: `https://${accountId}.r2.cloudflarestorage.com`,
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/r2/patterns.md
- Network accessline 111
const s3 = new S3Client({ region: 'auto', endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`, - Network accessline 112
region: 'auto', endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`, credentials: { accessKeyId: env.R2_ACCESS_KEY_ID, secretAccessKey: env.R2_SECRET_ACCESS_KEY }, - Network accessline 113
endpoint: `https://${env.ACCOUNT_ID}.r2.cloudflarestorage.com`, - Access to secretsline 114
[Credential-related source omitted] - Network accessline 120
// Client: Upload directly const { uploadUrl } = await fetch('/api/upload-url').then((r) => r.json()) - Network accessline 121
const { uploadUrl } = await fetch('/api/upload-url').then((r) => r.json()) - Network accessline 122
await fetch(uploadUrl, { method: 'PUT', body: file }) - Network accessline 128
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 129
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 161
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 162
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 193
Enable r2.dev in dashboard for simple public access: `https://pub-${hashId}.r2.dev/${key}` - Network accessline 194
Or add custom domain via dashboard: `https://files.example.com/${key}`
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/README.md
- Network accessline 56
Dashboard: https://dash.cloudflare.com/?to=/:account/calls - Network accessline 62
- [Orange Meets Demo](https://demo.orange.cloudflare.dev/) - Network accessline 63
- [Orange Source](https://github.com/cloudflare/orange) - Network accessline 64
- [Calls Examples](https://github.com/cloudflare/calls-examples) - Network accessline 65
- [API Reference](https://developers.cloudflare.com/api/resources/calls/) - Network accessline 66
- [RealtimeKit Docs](https://developers.cloudflare.com/workers-ai/realtimekit/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/api.md
- Network accessline 6
[Credential-related source omitted] - Access to secretsline 6
[Credential-related source omitted] - Access to secretsline 7
[Credential-related source omitted] - Network accessline 109
// 4. Send to backend → Cloudflare API const response = await fetch('/api/new-session', { - Network accessline 110
const response = await fetch('/api/new-session', { - Network accessline 126
const res = await fetch(`/api/sessions/${sessionId}/tracks`, { - Network accessline 142
const res = await fetch(`/api/sessions/${sessionId}/tracks`, { - Network accessline 155
await fetch(`/api/sessions/${sessionId}/renegotiate`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/configuration.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/gotchas.md
- Network accessline 47
// Send to backend → Cloudflare API await fetch(`/api/sessions/${sessionId}/renegotiate`, { - Network accessline 48
await fetch(`/api/sessions/${sessionId}/renegotiate`, { - Network accessline 88
for (let i = 0; i < maxRetries; i++) { try { const res = await fetch(url, options) - Network accessline 89
try { const res = await fetch(url, options) if (res.ok) return res - Network accessline 90
const res = await fetch(url, options)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtime-sfu/patterns.md
- Network accessline 76
app.post('/api/new-session', async (req, res) => { const r = await fetch(`${CALLS_API}/apps/${process.env.CALLS_APP_ID}/sessions/new`, { - Network accessline 77
const r = await fetch(`${CALLS_API}/apps/${process.env.CALLS_APP_ID}/sessions/new`, { - Access to secretsline 79
[Credential-related source omitted] - Access to secretsline 85
[Credential-related source omitted] - Network accessline 142
toAdd.forEach(async (id) => { await fetch(`/api/subscribe`, { method: 'POST', body: JSON.stringify({ trackId: id }) }) - Network accessline 143
await fetch(`/api/subscribe`, { method: 'POST', body: JSON.stringify({ trackId: id }) })
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/README.md
- Network accessline 26
# Create app curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \ - Network accessline 27
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \ - Network accessline 31
# Create meeting curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings' \ - Network accessline 32
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings' \ - Network accessline 36
# Add participant curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings/<meeting_id>/participants' \ - Network accessline 37
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/meetings/<meeting_id>/participants' \ - Access to secretsline 51
[Credential-related source omitted] - Network accessline 115
- **Official Docs**: https://developers.cloudflare.com/realtime/realtimekit/ - Network accessline 116
- **API Reference**: https://developers.cloudflare.com/api/resources/realtime_kit/ - Network accessline 117
- **Examples**: https://github.com/cloudflare/realtimekit-web-examples - Network accessline 118
- **Dashboard**: https://dash.cloudflare.com/?to=/:account/realtime/kit
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/api.md
- Network accessline 144
Base: `https://api.cloudflare.com/client/v4/accounts/{account_id}/realtime/kit/{app_id}` - Network accessline 213
GET /webhooks # List all POST /webhooks # Create: {"url": "https://...", "events": ["session.started", "session.ended"]} - Network accessline 214
POST /webhooks # Create: {"url": "https://...", "events": ["session.started", "session.ended"]}
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/configuration.md
- Network accessline 47
<script type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js" - Network accessline 48
type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js" ></script> - Network accessline 49
src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js" - Network accessline 80
**Dashboard**: https://dash.cloudflare.com/?to=/:account/realtime/kit - Network accessline 85
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/apps' \ - Network accessline 96
curl -X POST 'https://api.cloudflare.com/client/v4/accounts/<account_id>/realtime/kit/<app_id>/presets' \ - Network accessline 175
theme: 'dark' // 'light' | 'dark' }, logo: { url: 'https://example.com/logo.png', altText: 'Company' } - Network accessline 176
}, logo: { url: 'https://example.com/logo.png', altText: 'Company' } }; - Network accessline 177
logo: { url: 'https://example.com/logo.png', altText: 'Company' }
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/realtimekit/patterns.md
- Network accessline 14
// HTML/Web Components <script type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"></script> - Network accessline 15
<script type="module" src="https://cdn.jsdelivr.net/npm/@cloudflare/realtimekit-ui/dist/realtimekit-ui/realtimekit-ui.esm.js"></script> - Network accessline 44
**See full catalog**: https://docs.realtime.cloudflare.com/ui-kit - Network accessline 123
// Approve from waitlist (backend only) await fetch( - Network accessline 124
await fetch( - Network accessline 125
`https://api.cloudflare.com/client/v4/accounts/${accountId}/realtime/kit/${appId}/meetings/${meetingId}/active-session/waitlist/approve`, - Network accessline 189
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 190
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 193
if (url.pathname === '/api/join-meeting') { const { meetingId, userName, presetName } = await request.json() const response = await fetch( - Network accessline 194
const { meetingId, userName, presetName } = await request.json() const response = await fetch( `https://api.cloudflare.com/client/v4/accounts/${env.CLOUDFLARE_ACCOUNT_ID}/realtime/kit/${env.REALTIMEKIT_APP_ID}/meetings/${meeti - Network accessline 195
const response = await fetch( - Network accessline 196
`https://api.cloudflare.com/client/v4/accounts/${env.CLOUDFLARE_ACCOUNT_ID}/realtime/kit/${env.REALTIMEKIT_APP_ID}/meetings/${meetingId}/participants`, - Access to secretsline 199
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/api.md
- Access to secretsline 13
[Credential-related source omitted] - Network accessline 123
// Proxy WebSocket to sandbox service export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 124
export default { async fetch(request: Request, env: Env): Promise<Response> { const proxyResponse = await proxyToSandbox(request, env) - Network accessline 125
async fetch(request: Request, env: Env): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/configuration.md
- Network accessline 78
"vars": { "ENVIRONMENT": "production", "API_URL": "https://api.example.com", - Network accessline 79
"ENVIRONMENT": "production", "API_URL": "https://api.example.com", }, - Network accessline 80
"API_URL": "https://api.example.com", - Access to secretsline 94
[Credential-related source omitted] - Access to secretsline 96
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/gotchas.md
- Access to secretsline 153
[Credential-related source omitted] - Access to secretsline 157
[Credential-related source omitted] - Network accessline 166
https://8080-sandbox-abc123def456.yourdomain.com - Dangerous shell operationline 182
| exec() | 120s | `timeout` option | - Network accessline 193
See: https://developers.cloudflare.com/sandbox/guides/production-deployment/ - Network accessline 197
- [Official Docs](https://developers.cloudflare.com/sandbox/) - Network accessline 198
- [API Reference](https://developers.cloudflare.com/sandbox/api/) - Network accessline 199
- [Examples](https://github.com/cloudflare/sandbox-sdk/tree/main/examples) - Network accessline 200
- [npm Package](https://www.npmjs.com/package/@cloudflare/sandbox) - Network accessline 201
- [Discord Support](https://discord.cloudflare.com)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/sandbox/patterns.md
- Network accessline 6
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 7
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 32
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 33
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 39
if (request.url.endsWith('/start')) { await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh') - Dangerous shell operationline 40
await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh') - Network accessline 40
await sandbox.exec('curl -fsSL https://code-server.dev/install.sh | sh') - Network accessline 57
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 58
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 88
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 89
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 108
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 109
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 131
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 132
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 162
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 163
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 190
// Clone repo await sandbox.exec('git clone https://github.com/user/repo.git /workspace/repo') - Network accessline 191
await sandbox.exec('git clone https://github.com/user/repo.git /workspace/repo') - Network accessline 193
// Authenticated (use env secrets) await sandbox.exec(`git clone https://${env.GITHUB_TOKEN}@github.com/user/repo.git`) - Network accessline 194
[Credential-related source omitted] - Access to secretsline 194
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/api.md
- Access to secretsline 13
[Credential-related source omitted] - Network accessline 16
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 17
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 18
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Network accessline 19
return fetch('https://api.example.com', { - Network accessline 29
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 30
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 31
[Credential-related source omitted] - Network accessline 32
[Credential-related source omitted] - Access to secretsline 32
[Credential-related source omitted] - Network accessline 33
return fetch('https://api.example.com', { - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Network accessline 62
Base: `https://api.cloudflare.com/client/v4` - Network accessline 67
[Credential-related source omitted] - Access to secretsline 67
[Credential-related source omitted] - Network accessline 68
https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/secrets_store/stores - Access to secretsline 162
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/configuration.md
- Access to secretsline 13
[Credential-related source omitted] - Access to secretsline 15
[Credential-related source omitted] - Access to secretsline 25
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 46
[Credential-related source omitted] - Access to secretsline 48
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Access to secretsline 57
[Credential-related source omitted] - Access to secretsline 70
[Credential-related source omitted] - Access to secretsline 72
[Credential-related source omitted] - Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 131
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted] - Access to secretsline 167
[Credential-related source omitted] - Access to secretsline 169
[Credential-related source omitted] - Access to secretsline 179
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/secrets-store/patterns.md
- Network accessline 13
[Credential-related source omitted] - Network accessline 14
[Credential-related source omitted] - Network accessline 17
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 18
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 19
[Credential-related source omitted] - Access to secretsline 19
[Credential-related source omitted] - Network accessline 21
// Fallback during rotation if (!resp.ok && env.FALLBACK_KEY) { resp = await fetchWithAuth('https://api.example.com', await env.FALLBACK_KEY.get()) - Network accessline 22
[Credential-related source omitted] - Access to secretsline 22
[Credential-related source omitted] - Network accessline 23
[Credential-related source omitted] - Access to secretsline 23
[Credential-related source omitted] - Network accessline 53
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 54
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 55
[Credential-related source omitted] - Network accessline 79
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 80
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 81
[Credential-related source omitted] - Network accessline 92
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext) { - Network accessline 93
async fetch(request: Request, env: Env, ctx: ExecutionContext) { - Network accessline 95
[Credential-related source omitted] - Network accessline 96
[Credential-related source omitted] - Access to secretsline 96
[Credential-related source omitted] - Network accessline 97
const resp = await fetch('https://api.example.com', { - Network accessline 101
ctx.waitUntil( fetch('https://log.example.com/log', { - Network accessline 102
fetch('https://log.example.com/log', { - Access to secretsline 106
[Credential-related source omitted] - Network accessline 114
} catch (error) { ctx.waitUntil( fetch('https://log.example.com/log', { - Network accessline 115
ctx.waitUntil( fetch('https://log.example.com/log', { method: 'POST', - Network accessline 116
fetch('https://log.example.com/log', { - Access to secretsline 120
[Credential-related source omitted] - Access to secretsline 137
[Credential-related source omitted] - Access to secretsline 138
[Credential-related source omitted] - Access to secretsline 139
[Credential-related source omitted] - Access to secretsline 141
[Credential-related source omitted] - Network accessline 168
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 169
async fetch(request: Request, env: Env): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/api.md
- Network accessline 8
curl -X GET "https://api.cloudflare.com/client/v4/accounts/{ACCOUNT_ID}/workers/services/{WORKER_NAME}" \ - Network accessline 73
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 74
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 87
[Credential-related source omitted] - Network accessline 139
[Credential-related source omitted] - Network accessline 140
[Credential-related source omitted] - Network accessline 141
https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/services/$WORKER_NAME \ - Network accessline 180
// Example Worker with Service Binding export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 181
export default { async fetch(request: Request, env: Env): Promise<Response> { // Forward to backend Worker with Smart Placement enabled - Network accessline 182
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 183
// Forward to backend Worker with Smart Placement enabled const response = await env.BACKEND_SERVICE.fetch(request) return response - Network accessline 184
const response = await env.BACKEND_SERVICE.fetch(request) - Access to secretsline 187
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/configuration.md
- Network accessline 87
// ✅ Smart Placement affects this: export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 88
export default { async fetch(request: Request, env: Env): Promise<Response> { // This runs close to backend when Smart Placement enabled - Network accessline 89
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 148
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 149
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 153
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/gotchas.md
- Network accessline 137
// ✅ Fetch - Smart Placement WORKS export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 138
export default { async fetch(request: Request, env: Env): Promise<Response> { // Runs close to DATABASE when Smart Placement enabled - Network accessline 139
async fetch(request: Request, env: Env): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/smart-placement/patterns.md
- Network accessline 6
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 7
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 30
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 31
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 32
if (new URL(request.url).pathname.startsWith('/api/')) { return env.BACKEND.fetch(request) // Forward to backend } - Network accessline 33
return env.BACKEND.fetch(request) // Forward to backend - Network accessline 44
export default { async fetch(request: Request, env: BackendEnv): Promise<Response> { - Network accessline 45
async fetch(request: Request, env: BackendEnv): Promise<Response> { - Network accessline 65
// ✅ Fetch - Smart Placement WORKS export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 66
export default { async fetch(request: Request, env: Env): Promise<Response> { // Runs close to DATABASE when Smart Placement enabled - Network accessline 67
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 78
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 79
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 80
const apiUrl = 'https://api.partner.com' - Access to secretsline 81
[Credential-related source omitted] - Network accessline 83
const [profile, transactions] = await Promise.all([ fetch(`${apiUrl}/profile`, { headers }), - Network accessline 84
fetch(`${apiUrl}/profile`, { headers }), - Network accessline 85
fetch(`${apiUrl}/transactions`, { headers }), - Network accessline 99
// Frontend (edge) - auth/routing close to user export default { async fetch(request: Request, env: Env) { - Network accessline 100
export default { async fetch(request: Request, env: Env) { if (!request.headers.get('Authorization')) { - Network accessline 101
async fetch(request: Request, env: Env) { - Network accessline 103
return new Response('Unauthorized', { status: 401 }) } const data = await env.BACKEND.fetch(request) - Network accessline 104
} const data = await env.BACKEND.fetch(request) return new Response(renderPage(await data.json()), { - Network accessline 105
const data = await env.BACKEND.fetch(request) - Network accessline 112
// Backend (Smart Placement) - DB operations close to data export default { async fetch(request: Request, env: Env) { - Network accessline 113
export default { async fetch(request: Request, env: Env) { const data = await env.DATABASE.prepare('SELECT * FROM pages WHERE id = ?').bind(pageId).first() - Network accessline 114
async fetch(request: Request, env: Env) { - Network accessline 130
// Worker with Smart Placement - aggregates data from multiple DOs export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 131
export default { async fetch(request: Request, env: Env): Promise<Response> { const userId = new URL(request.url).searchParams.get('user') - Network accessline 132
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 140
// Fetch from multiple DOs const [userData, analyticsData] = await Promise.all([ userDO.fetch(new Request('https://do/profile')), - Network accessline 141
const [userData, analyticsData] = await Promise.all([ userDO.fetch(new Request('https://do/profile')), analyticsDO.fetch(new Request('https://do/stats')), - Network accessline 142
userDO.fetch(new Request('https://do/profile')), - Network accessline 143
analyticsDO.fetch(new Request('https://do/stats')),
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/README.md
- Network accessline 58
// Snippet: Add security headers export default { async fetch(request) { - Network accessline 59
export default { async fetch(request) { const response = await fetch(request) - Network accessline 60
async fetch(request) { - Network accessline 61
const response = await fetch(request) - Network accessline 74
- [Cloudflare Docs](https://developers.cloudflare.com/rules/snippets/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/api.md
- Network accessline 96
// Redirect Response.redirect('https://example.com', 301) // or 302 - Network accessline 97
Response.redirect('https://example.com', 301) // or 302 - Network accessline 186
- `fetch()` - HTTP requests (2-5 subrequests per plan) - Network accessline 200
- `HTMLRewriter` - HTML parsing (use Workers) - `import` statements - No module imports - `addEventListener` - Use `export default { async fetch() {}` pattern - Network accessline 202
- `addEventListener` - Use `export default { async fetch() {}` pattern - Network accessline 207
export default { async fetch(request) { - Network accessline 208
async fetch(request) { - Network accessline 209
// Your logic here const response = await fetch(request) return response // or modified response - Network accessline 210
const response = await fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/configuration.md
- Network accessline 26
# Create/update snippet curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/$SNIPPET_NAME" \ - Network accessline 27
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Access to secretsline 29
[Credential-related source omitted] - Network accessline 33
# Create snippet rule curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/snippet_rules" \ - Network accessline 34
[Credential-related source omitted] - Access to secretsline 34
[Credential-related source omitted] - Access to secretsline 36
[Credential-related source omitted] - Network accessline 49
# List snippets curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets" \ - Network accessline 50
[Credential-related source omitted] - Access to secretsline 50
[Credential-related source omitted] - Access to secretsline 51
[Credential-related source omitted] - Network accessline 53
# Delete snippet curl "https://api.cloudflare.com/client/v4/zones/$ZONE_ID/snippets/$SNIPPET_NAME" \ - Network accessline 54
[Credential-related source omitted] - Access to secretsline 54
[Credential-related source omitted] - Access to secretsline 56
[Credential-related source omitted] - Network accessline 229
# Create token at: https://dash.cloudflare.com/profile/api-tokens - Access to secretsline 231
[Credential-related source omitted] - Access to secretsline 238
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/gotchas.md
- Network accessline 10
try { return await fetch(request) - Network accessline 11
return await fetch(request) - Network accessline 23
Call `fetch(request)` exactly once: - Network accessline 26
// ❌ Multiple origin fetches const r1 = await fetch(request) - Network accessline 27
const r1 = await fetch(request) - Network accessline 28
const r2 = await fetch(request) - Network accessline 30
const response = await fetch(request) - Network accessline 77
curl -H "X-Test: true" https://example.com -v - Network accessline 82
**✅ Available:** `fetch()`, `Request`, `Response`, `Headers`, `URL`, `crypto.subtle`, `crypto.randomUUID()`, `atob()`/`btoa()`, `JSON` - Network accessline 99
| Header set | <0.1ms | | URL parsing | <0.2ms | | fetch() | 1-3ms | - Network accessline 100
| URL parsing | <0.2ms | | fetch() | 1-3ms | | SHA-256 | 0.5-1ms | - Network accessline 101
| fetch() | 1-3ms |
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/snippets/patterns.md
- Network accessline 6
export default { async fetch(request) { - Network accessline 7
async fetch(request) { - Network accessline 8
const response = await fetch(request) - Network accessline 23
export default { async fetch(request) { - Network accessline 24
async fetch(request) { - Network accessline 29
return Response.redirect(url.toString(), 302) } return fetch(request) - Network accessline 30
} return fetch(request) }, - Network accessline 31
return fetch(request) - Network accessline 39
export default { async fetch(request) { - Network accessline 40
async fetch(request) { - Network accessline 44
const req = new Request(request) req.headers.set('X-Variant', variant) const response = await fetch(req) - Network accessline 46
const response = await fetch(req) - Network accessline 61
export default { async fetch(request) { - Network accessline 62
async fetch(request) { - Network accessline 63
const botScore = request.cf.botManagement?.score if (botScore && botScore < 30) return new Response('Denied', { status: 403 }) return fetch(request) - Network accessline 64
if (botScore && botScore < 30) return new Response('Denied', { status: 403 }) return fetch(request) }, - Network accessline 65
return fetch(request) - Network accessline 75
export default { async fetch(request) { - Network accessline 76
async fetch(request) { - Network accessline 79
req.headers.set('X-Internal-Auth', 'secret_token') req.headers.delete('Authorization') return fetch(req) - Network accessline 80
req.headers.delete('Authorization') return fetch(req) } - Network accessline 81
return fetch(req) - Network accessline 82
} return fetch(request) }, - Network accessline 83
return fetch(request) - Network accessline 91
export default { async fetch(request) { - Network accessline 92
async fetch(request) { - Network accessline 101
}) } const response = await fetch(request) - Network accessline 102
} const response = await fetch(request) const newResponse = new Response(response.body, response) - Network accessline 103
const response = await fetch(request) - Network accessline 114
export default { async fetch(request) { - Network accessline 115
async fetch(request) { - Network accessline 116
if (request.headers.get('X-Bypass-Token') === 'admin') return fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/README.md
- Network accessline 24
1. **Create/manage Spectrum app** - Via Dashboard → See [Cloudflare Dashboard](https://dash.cloudflare.com) - Network accessline 25
- Via Dashboard → See [Cloudflare Dashboard](https://dash.cloudflare.com) - Network accessline 52
- [Cloudflare Docs](https://developers.cloudflare.com/spectrum/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/spectrum/gotchas.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/README.md
- Network accessline 20
// src/index.ts export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 21
export default { async fetch(request: Request, env: Env): Promise<Response> { return env.ASSETS.fetch(request) - Network accessline 22
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 23
return env.ASSETS.fetch(request) - Network accessline 63
- [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/) - Network accessline 64
- [Static Assets Docs](https://developers.cloudflare.com/workers/static-assets/) - Network accessline 65
- [Cloudflare Pages](https://developers.cloudflare.com/pages/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/api.md
- Network accessline 14
interface Fetcher { fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response> - Network accessline 15
fetch(input: RequestInfo | URL, init?: RequestInit): Promise<Response> - Network accessline 22
// 1. Forward entire request await env.ASSETS.fetch(request) - Network accessline 23
await env.ASSETS.fetch(request) - Network accessline 25
// 2. String path (hostname ignored, only path matters) await env.ASSETS.fetch('https://any-host/path/to/asset.png') - Network accessline 26
await env.ASSETS.fetch('https://any-host/path/to/asset.png') - Network accessline 28
// 3. URL object await env.ASSETS.fetch(new URL('/index.html', request.url)) - Network accessline 29
await env.ASSETS.fetch(new URL('/index.html', request.url)) - Network accessline 31
// 4. Constructed Request object await env.ASSETS.fetch( - Network accessline 32
await env.ASSETS.fetch( - Network accessline 52
// All resolve to same asset: env.ASSETS.fetch('https://example.com/logo.png') - Network accessline 53
env.ASSETS.fetch('https://example.com/logo.png') - Network accessline 54
env.ASSETS.fetch('https://ignored.host/logo.png') - Network accessline 55
env.ASSETS.fetch('/logo.png') - Network accessline 160
const response = await env.ASSETS.fetch(request) - Network accessline 178
const response = await env.ASSETS.fetch(request) - Network accessline 193
// Serve different assets based on conditions if (url.pathname === '/') { return env.ASSETS.fetch('/index.html') - Network accessline 194
if (url.pathname === '/') { return env.ASSETS.fetch('/index.html') } - Network accessline 195
return env.ASSETS.fetch('/index.html') - Network accessline 198
return env.ASSETS.fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/configuration.md
- Network accessline 161
Use current date for new projects. See [Compatibility Dates](https://developers.cloudflare.com/workers/configuration/compatibility-dates/) for full list.
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/static-assets/patterns.md
- Network accessline 6
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 7
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 8
return env.ASSETS.fetch(request) - Network accessline 16
const response = await env.ASSETS.fetch('https://assets.local/logo.png') - Network accessline 22
const url = new URL(request.url) url.pathname = '/index.html' return env.ASSETS.fetch(new Request(url, request)) - Network accessline 24
return env.ASSETS.fetch(new Request(url, request)) - Network accessline 30
const response = await env.ASSETS.fetch(request) - Network accessline 40
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 41
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 42
const url = new URL(request.url) if (url.pathname === '/') { return env.ASSETS.fetch('/index.html') - Network accessline 43
if (url.pathname === '/') { return env.ASSETS.fetch('/index.html') } - Network accessline 44
return env.ASSETS.fetch('/index.html') - Network accessline 45
} return env.ASSETS.fetch(request) }, - Network accessline 46
return env.ASSETS.fetch(request) - Network accessline 56
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 57
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 60
return handleAPI(request, env) } return env.ASSETS.fetch(request) - Network accessline 61
} return env.ASSETS.fetch(request) }, - Network accessline 62
return env.ASSETS.fetch(request) - Network accessline 78
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 79
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 85
} } return env.ASSETS.fetch(request) - Network accessline 86
} return env.ASSETS.fetch(request) }, - Network accessline 87
return env.ASSETS.fetch(request) - Network accessline 97
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 98
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 99
const response = await env.ASSETS.fetch(request) - Network accessline 112
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 113
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 116
const url = new URL(request.url) if (url.pathname === '/') { return env.ASSETS.fetch(`/index-${variant}.html`) - Network accessline 117
if (url.pathname === '/') { return env.ASSETS.fetch(`/index-${variant}.html`) } - Network accessline 118
return env.ASSETS.fetch(`/index-${variant}.html`) - Network accessline 119
} return env.ASSETS.fetch(request) }, - Network accessline 120
return env.ASSETS.fetch(request) - Network accessline 128
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 129
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 131
const url = new URL(request.url) if (url.pathname === '/') { return env.ASSETS.fetch(`/${locale}/index.html`) - Network accessline 132
if (url.pathname === '/') { return env.ASSETS.fetch(`/${locale}/index.html`) } - Network accessline 133
return env.ASSETS.fetch(`/${locale}/index.html`) - Network accessline 136
url.pathname = `/${locale}${url.pathname}` } return env.ASSETS.fetch(url) - Network accessline 137
} return env.ASSETS.fetch(url) }, - Network accessline 138
return env.ASSETS.fetch(url) - Network accessline 146
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 147
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 160
} } return env.ASSETS.fetch(request) - Network accessline 161
} return env.ASSETS.fetch(request) }, - Network accessline 162
return env.ASSETS.fetch(request) - Network accessline 172
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 173
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 174
const response = await env.ASSETS.fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/README.md
- Network accessline 54
curl -X POST \ - Network accessline 55
"https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/copy" \ - Network accessline 56
[Credential-related source omitted] - Network accessline 58
-d '{"url": "https://example.com/video.mp4"}' - Network accessline 64
<iframe src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe" - Network accessline 65
src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe" - Network accessline 77
curl -X POST \ - Network accessline 78
"https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/live_inputs" \ - Network accessline 97
- Dashboard: https://dash.cloudflare.com/?to=/:account/stream - Network accessline 98
- API Docs: https://developers.cloudflare.com/api/resources/stream/ - Network accessline 99
- Stream Docs: https://developers.cloudflare.com/stream/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/api-live.md
- Access to secretsline 12
[Credential-related source omitted] - Network accessline 26
async function createLiveInput(accountId: string, apiToken: string) { const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs`, { - Network accessline 27
const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs`, { - Network accessline 48
async function getLiveStatus(accountId: string, liveInputId: string, apiToken: string) { const response = await fetch( - Network accessline 49
const response = await fetch( - Network accessline 50
`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}`, - Network accessline 72
streamKey: string, ) { return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, { - Network accessline 73
) { return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, { method: 'POST', - Network accessline 74
return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/live_inputs/${liveInputId}/outputs`, { - Network accessline 114
// Send to Stream via WHIP const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${liveInputId}/webRTC/publish`, { - Network accessline 115
const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${liveInputId}/webRTC/publish`, { - Network accessline 138
const response = await fetch(`https://customer-<CODE>.cloudflarestream.com/${videoId}/webRTC/play`, { - Network accessline 162
timeoutSeconds: 30, // Auto-stop 30s after stream ends requireSignedURLs: true, // Require token for VOD playback allowedOrigins: ['https://yourdomain.com'], - Network accessline 163
requireSignedURLs: true, // Require token for VOD playback allowedOrigins: ['https://yourdomain.com'], } - Network accessline 164
allowedOrigins: ['https://yourdomain.com'],
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/api.md
- Access to secretsline 14
[Credential-related source omitted] - Network accessline 29
const formData = new FormData() formData.append('file', file) return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json()) - Network accessline 30
formData.append('file', file) return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json()) } - Network accessline 31
return fetch(uploadURL, { method: 'POST', body: formData }).then((r) => r.json()) - Network accessline 38
const video = await client.stream.copy.create({ account_id: env.CF_ACCOUNT_ID, url: 'https://example.com/video.mp4', - Network accessline 39
account_id: env.CF_ACCOUNT_ID, url: 'https://example.com/video.mp4', meta: { name: 'My Video' }, - Network accessline 40
url: 'https://example.com/video.mp4', - Network accessline 51
<iframe src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe?autoplay=true&muted=true" - Network accessline 52
src="https://customer-<CODE>.cloudflarestream.com/<VIDEO_ID>/iframe?autoplay=true&muted=true" - Network accessline 64
// HLS const hlsUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.m3u8` - Network accessline 65
const hlsUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.m3u8` - Network accessline 67
// DASH const dashUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.mpd` - Network accessline 68
const dashUrl = `https://customer-<CODE>.cloudflarestream.com/${videoId}/manifest/video.mpd` - Network accessline 74
// At specific time (seconds) const thumb = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=10s` - Network accessline 75
const thumb = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=10s` - Network accessline 77
// By percentage const thumbPct = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=50%` - Network accessline 78
const thumbPct = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.jpg?time=50%` - Network accessline 80
// Animated GIF const gif = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.gif` - Network accessline 81
const gif = `https://customer-<CODE>.cloudflarestream.com/${videoId}/thumbnails/thumbnail.gif` - Network accessline 87
// Low volume (<1k/day): Use API async function getSignedToken(accountId: string, videoId: string, apiToken: string) { const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, { - Network accessline 88
async function getSignedToken(accountId: string, videoId: string, apiToken: string) { const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, { method: 'POST', - Network accessline 89
const response = await fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/token`, { - Network accessline 115
const formData = new FormData() formData.append('file', captionFile) return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, { - Network accessline 116
formData.append('file', captionFile) return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, { method: 'PUT', - Network accessline 117
return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/${language}`, { - Network accessline 128
// TODO: Requires Workers AI integration - see workers-ai reference async function generateAICaptions(accountId: string, videoId: string, apiToken: string) { return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/ - Network accessline 129
async function generateAICaptions(accountId: string, videoId: string, apiToken: string) { return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/generate`, { method: 'POST', - Network accessline 130
return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/${videoId}/captions/generate`, { - Network accessline 141
async function clipVideo(accountId: string, videoId: string, apiToken: string, startTime: number, endTime: number) { return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/clip`, { - Network accessline 142
return fetch(`https://api.cloudflare.com/client/v4/accounts/${accountId}/stream/clip`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/configuration.md
- Network accessline 60
curl -X POST \ - Network accessline 61
"https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/keys" \ - Network accessline 79
curl -X PUT \ - Network accessline 80
"https://api.cloudflare.com/client/v4/accounts/{account_id}/stream/webhook" \ - Network accessline 81
[Credential-related source omitted] - Network accessline 83
-d '{"notificationUrl": "https://your-worker.workers.dev/webhook"}' - Network accessline 100
expiry: new Date(Date.now() + 3600000).toISOString(), requireSignedURLs: true, allowedOrigins: ['https://yourdomain.com'], - Network accessline 101
requireSignedURLs: true, allowedOrigins: ['https://yourdomain.com'], meta: { creator: 'user-123' }, - Network accessline 102
allowedOrigins: ['https://yourdomain.com'],
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/gotchas.md
- Network accessline 109
const formData = new FormData() formData.append('file', file) const response = await fetch(url, { method: 'POST', body: formData }) - Network accessline 110
formData.append('file', file) const response = await fetch(url, { method: 'POST', body: formData }) const result = await response.json() - Network accessline 111
const response = await fetch(url, { method: 'POST', body: formData })
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/stream/patterns.md
- Network accessline 24
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 25
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 27
[Credential-related source omitted] - Network accessline 48
async function handleUpload(file: File) { setUploading(true) const { uploadURL, uid } = await fetch('/api/upload-url', { - Network accessline 49
setUploading(true) const { uploadURL, uid } = await fetch('/api/upload-url', { method: 'POST', - Network accessline 50
const { uploadURL, uid } = await fetch('/api/upload-url', { - Network accessline 120
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 121
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 124
[Credential-related source omitted] - Possible obfuscationline 159
JSON.parse(atob(jwkBase64)),
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/configuration.md
- Network accessline 12
// Process events from producer Worker ctx.waitUntil( fetch(env.LOG_ENDPOINT, { - Network accessline 13
ctx.waitUntil( fetch(env.LOG_ENDPOINT, { method: 'POST', - Network accessline 14
fetch(env.LOG_ENDPOINT, { - Network accessline 99
"name": "my-tail-worker", "vars": { "LOG_ENDPOINT": "https://logs.example.com/ingest", - Network accessline 100
"vars": { "LOG_ENDPOINT": "https://logs.example.com/ingest", }, - Network accessline 101
"LOG_ENDPOINT": "https://logs.example.com/ingest",
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/gotchas.md
- Network accessline 13
export default { async tail(events) { fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 14
async tail(events) { fetch(endpoint, { body: JSON.stringify(events) }) }, - Network accessline 15
fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 20
export default { async tail(events, env, ctx) { await fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 21
async tail(events, env, ctx) { await fetch(endpoint, { body: JSON.stringify(events) }) }, - Network accessline 22
await fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 29
ctx.waitUntil( (async () => { await fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 30
(async () => { await fetch(endpoint, { body: JSON.stringify(events) }) await processMore() - Network accessline 31
await fetch(endpoint, { body: JSON.stringify(events) }) - Network accessline 134
(async () => { try { await fetch(env.ENDPOINT, { body: JSON.stringify(events) }) - Network accessline 135
try { await fetch(env.ENDPOINT, { body: JSON.stringify(events) }) } catch (error) { - Network accessline 136
await fetch(env.ENDPOINT, { body: JSON.stringify(events) }) - Network accessline 179
export default { async fetch(request) { - Network accessline 180
async fetch(request) { - Network accessline 190
Trigger: `curl https://producer.example.workers.dev/test`
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tail-workers/patterns.md
- Network accessline 36
ctx.waitUntil( fetch(env.LOG_ENDPOINT, { - Network accessline 37
fetch(env.LOG_ENDPOINT, { - Network accessline 55
ctx.waitUntil( fetch(env.ERROR_ENDPOINT, { - Network accessline 56
fetch(env.ERROR_ENDPOINT, { - Network accessline 122
if (errors.length > 0) { tasks.push( fetch(env.ERROR_ENDPOINT, { - Network accessline 123
tasks.push( fetch(env.ERROR_ENDPOINT, { method: 'POST', - Network accessline 124
fetch(env.ERROR_ENDPOINT, { - Network accessline 130
if (success.length > 0) { tasks.push( fetch(env.SUCCESS_ENDPOINT, { - Network accessline 131
tasks.push( fetch(env.SUCCESS_ENDPOINT, { method: 'POST', - Network accessline 132
fetch(env.SUCCESS_ENDPOINT, { - Network accessline 151
if (Math.random() > 0.1) return // 10% sample rate ctx.waitUntil( fetch(env.LOG_ENDPOINT, { - Network accessline 152
ctx.waitUntil( fetch(env.LOG_ENDPOINT, { method: 'POST', - Network accessline 153
fetch(env.LOG_ENDPOINT, { - Network accessline 171
const batch = env.BATCH_DO.get(env.BATCH_DO.idFromName('batch')) ctx.waitUntil( batch.fetch('https://batch/add', { - Network accessline 172
ctx.waitUntil( batch.fetch('https://batch/add', { method: 'POST', - Network accessline 173
batch.fetch('https://batch/add', {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/README.md
- Access to secretsline 48
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/configuration.md
- Access to secretsline 67
[Credential-related source omitted] - Network accessline 141
rules { action = "redirect"; enabled = true; expression = "(http.request.uri.path eq \"/old\")" action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}} - Network accessline 142
action = "redirect"; enabled = true; expression = "(http.request.uri.path eq \"/old\")" action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}} } - Network accessline 143
action_parameters { from_value { status_code = 301; target_url { value = "https://example.com/new" }}} - Access to secretsline 188
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/gotchas.md
- Access to secretsline 22
[Credential-related source omitted] - Dangerous shell operationline 110
**Solution:** Import resource back into state with `terraform import cloudflare_zone.example <zone-id>` or remove from state with `terraform state rm cloudflare_zone.example` - Network accessline 148
- [API](./api.md) - Data sources - [Patterns](./patterns.md) - Use cases - Provider docs: https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs - Network accessline 150
- Provider docs: https://registry.terraform.io/providers/cloudflare/cloudflare/latest/docs
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/terraform/patterns.md
- Access to secretsline 71
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/README.md
- Network accessline 95
ingress: - hostname: app.example.com service: http://localhost:8000 - Network accessline 96
- hostname: app.example.com service: http://localhost:8000 - hostname: api.example.com - Network accessline 97
service: http://localhost:8000 - Network accessline 98
- hostname: api.example.com service: https://localhost:8443 originRequest: - Network accessline 99
service: https://localhost:8443
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/api.md
- Network accessline 5
**Base URL**: `https://api.cloudflare.com/client/v4` - Access to secretsline 10
[Credential-related source omitted] - Access to secretsline 21
[Credential-related source omitted] - Network accessline 32
[Credential-related source omitted] - Access to secretsline 32
[Credential-related source omitted] - Access to secretsline 33
[Credential-related source omitted] - Network accessline 58
[Credential-related source omitted] - Access to secretsline 58
[Credential-related source omitted] - Access to secretsline 59
[Credential-related source omitted] - Network accessline 79
[Credential-related source omitted] - Access to secretsline 79
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Network accessline 99
[Credential-related source omitted] - Access to secretsline 99
[Credential-related source omitted] - Access to secretsline 100
[Credential-related source omitted] - Network accessline 104
"ingress": [ {"hostname": "app.example.com", "service": "http://localhost:8000"}, - Network accessline 105
{"hostname": "app.example.com", "service": "http://localhost:8000"}, - Network accessline 116
account_id: accountId, config: { ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], - Network accessline 117
config: { ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], }, - Network accessline 118
ingress: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], - Network accessline 128
[Credential-related source omitted] - Access to secretsline 128
[Credential-related source omitted] - Access to secretsline 129
[Credential-related source omitted] - Access to secretsline 160
[Credential-related source omitted] - Access to secretsline 163
[Credential-related source omitted] - Network accessline 181
# Create DNS route curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/connections" \ - Network accessline 182
[Credential-related source omitted] - Access to secretsline 182
[Credential-related source omitted] - Access to secretsline 183
[Credential-related source omitted] - Network accessline 186
# Delete route curl -X DELETE "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/connections/{route_id}" \ - Network accessline 187
[Credential-related source omitted] - Access to secretsline 187
[Credential-related source omitted] - Access to secretsline 188
[Credential-related source omitted] - Network accessline 194
# Add IP route curl -X POST "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/routes" \ - Network accessline 195
[Credential-related source omitted] - Access to secretsline 195
[Credential-related source omitted] - Access to secretsline 196
[Credential-related source omitted] - Network accessline 199
# List IP routes curl -X GET "https://api.cloudflare.com/client/v4/accounts/{account_id}/tunnels/{tunnel_id}/routes" \ - Network accessline 200
[Credential-related source omitted] - Access to secretsline 200
[Credential-related source omitted] - Access to secretsline 201
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/configuration.md
- Network accessline 28
ingress: - hostname: app.example.com service: http://localhost:8000 - Network accessline 29
- hostname: app.example.com service: http://localhost:8000 - service: http_status:404 # Required catch-all - Network accessline 30
service: http://localhost:8000 - Network accessline 41
- hostname: static.example.com path: \.(jpg|png|css|js)$ service: https://localhost:8001 - Network accessline 43
service: https://localhost:8001 - Network accessline 45
# Wildcard hostname - hostname: '*.example.com' service: https://localhost:8002 - Network accessline 47
service: https://localhost:8002 - Network accessline 49
# Path only (all hostnames) - path: /api/.* service: http://localhost:9000 - Network accessline 51
service: http://localhost:9000 - Network accessline 60
cloudflared tunnel ingress validate cloudflared tunnel ingress rule https://foo.example.com - Network accessline 61
cloudflared tunnel ingress rule https://foo.example.com - Network accessline 66
| Protocol | Format | Client Requirement | | -------- | ------------------------ | ------------------------ | | HTTP | `http://localhost:8000` | Browser | - Network accessline 67
| -------- | ------------------------ | ------------------------ | | HTTP | `http://localhost:8000` | Browser | | HTTPS | `https://localhost:8443` | Browser | - Network accessline 68
| HTTP | `http://localhost:8000` | Browser | - Network accessline 69
| HTTPS | `https://localhost:8443` | Browser | - Network accessline 131
ingress: - hostname: app.example.com service: http://localhost:8000 - Network accessline 132
- hostname: app.example.com service: http://localhost:8000 - service: http_status:404 - Network accessline 133
service: http://localhost:8000
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/gotchas.md
- Network accessline 130
cloudflared tunnel --loglevel debug run my-tunnel cloudflared tunnel ingress rule https://app.example.com - Network accessline 131
cloudflared tunnel ingress rule https://app.example.com - Network accessline 141
ingress: - hostname: app.example.com service: http://localhost:8000 - Network accessline 142
- hostname: app.example.com service: http://localhost:8000 - service: http_status:404 - Network accessline 143
service: http://localhost:8000
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/networking.md
- Network accessline 69
# Test port 7844 (QUIC/UDP) nc -zvu edge.argotunnel.com 7844 - Network accessline 70
nc -zvu edge.argotunnel.com 7844 - Network accessline 72
# Test port 443 (HTTP/2 fallback) nc -zv edge.argotunnel.com 443 - Network accessline 73
nc -zv edge.argotunnel.com 443 - Network accessline 150
# Enable metrics endpoint cloudflared tunnel --metrics localhost:9090 run my-tunnel curl localhost:9090/metrics | grep cloudflared_tunnel - Network accessline 152
curl localhost:9090/metrics | grep cloudflared_tunnel - Network accessline 154
# Test latency curl -w "time_total: %{time_total}\n" -o /dev/null https://myapp.example.com - Network accessline 155
curl -w "time_total: %{time_total}\n" -o /dev/null https://myapp.example.com
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/tunnel/patterns.md
- Access to secretsline 11
[Credential-related source omitted] - Network accessline 68
ingress: - hostname: app.example.com service: http://localhost:8000 - Network accessline 69
- hostname: app.example.com service: http://localhost:8000 - service: http_status:404 - Network accessline 70
service: http://localhost:8000 - Network accessline 81
ingress: - hostname: myapp.example.com service: http://localhost:3000 - Network accessline 82
- hostname: myapp.example.com service: http://localhost:3000 - service: http_status:404 - Network accessline 83
service: http://localhost:3000 - Network accessline 101
ingress: - hostname: grpc.example.com service: http://localhost:50051 - Network accessline 102
- hostname: grpc.example.com service: http://localhost:50051 originRequest: - Network accessline 103
service: http://localhost:50051 - Network accessline 128
ingress_rule { hostname = "app.example.com" service = "http://localhost:8000" - Network accessline 129
hostname = "app.example.com" service = "http://localhost:8000" } - Network accessline 130
service = "http://localhost:8000" - Network accessline 166
tunnelId: tunnel.id, config: { ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], - Network accessline 167
config: { ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], }, - Network accessline 168
ingressRules: [{ hostname: 'app.example.com', service: 'http://localhost:8000' }, { service: 'http_status:404' }], - Dangerous shell operationline 194
sudo cloudflared service install - Dangerous shell operationline 195
sudo launchctl start com.cloudflare.cloudflared
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/README.md
- Network accessline 83
- [Cloudflare Calls Documentation](https://developers.cloudflare.com/calls/) - Network accessline 84
- [Cloudflare TURN Service Docs](https://developers.cloudflare.com/realtime/turn/) - Network accessline 85
- [Cloudflare API Reference](https://developers.cloudflare.com/api/resources/calls/subresources/turn/) - Network accessline 86
- [Orange Meets (Open Source Example)](https://github.com/cloudflare/orange)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/api.md
- Network accessline 9
Base URL: `https://api.cloudflare.com/client/v4` - Network accessline 64
POST https://rtc.live.cloudflare.com/v1/turn/keys/{key_id}/credentials/generate - Network accessline 106
POST https://rtc.live.cloudflare.com/v1/turn/keys/{key_id}/credentials/revoke - Network accessline 192
const response = await fetch(`https://rtc.live.cloudflare.com/v1/turn/keys/${config.keyId}/credentials/generate`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/configuration.md
- Access to secretsline 8
[Credential-related source omitted] - Network accessline 70
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 71
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 80
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 81
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 89
const response = await fetch( - Network accessline 90
`https://rtc.live.cloudflare.com/v1/turn/keys/${env.TURN_KEY_ID}/credentials/generate`, - Access to secretsline 94
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/gotchas.md
- Network accessline 101
[Credential-related source omitted] - Network accessline 102
[Credential-related source omitted] - Network accessline 103
const response = await fetch(`https://rtc.live.cloudflare.com/v1/turn/...`, { - Network accessline 107
// ✅ GOOD: Generate credentials server-side const response = await fetch('/api/turn-credentials') - Network accessline 108
const response = await fetch('/api/turn-credentials') - Network accessline 134
Reference: [RFC 8445 Section 2.4](https://datatracker.ietf.org/doc/html/rfc8445#section-2.4)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turn/patterns.md
- Network accessline 22
async function getTURNConfig(): Promise<RTCIceServer[]> { const response = await fetch('/api/turn-credentials') - Network accessline 23
const response = await fetch('/api/turn-credentials') - Network accessline 80
async function refreshTURNCredentials(pc: RTCPeerConnection): Promise<void> { const newCreds = await fetch('/turn-credentials').then((r) => r.json()) - Network accessline 81
const newCreds = await fetch('/turn-credentials').then((r) => r.json()) - Network accessline 133
const res = await fetch(`https://rtc.live.cloudflare.com/v1/turn/keys/${keyId}/credentials/generate`, {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/README.md
- Network accessline 22
<!-- 1. Add script --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 23
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 35
<div id="turnstile-container"></div> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 36
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 48
// Cloudflare Workers export default { async fetch(request) { - Network accessline 49
export default { async fetch(request) { const formData = await request.formData() - Network accessline 50
async fetch(request) { - Network accessline 54
const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Access to secretsline 58
[Credential-related source omitted] - Network accessline 101
- [Cloudflare Turnstile Docs](https://developers.cloudflare.com/turnstile/) - Network accessline 102
- [Dashboard](https://dash.cloudflare.com/?to=/:account/turnstile)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/api.md
- Network accessline 115
**Endpoint:** `https://challenges.cloudflare.com/turnstile/v0/siteverify` - Network accessline 134
// Cloudflare Workers const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Network accessline 135
const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Access to secretsline 139
[Credential-related source omitted] - Network accessline 240
<!-- Standard --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 241
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 243
<!-- Explicit render mode --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 244
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 246
<!-- With load callback --> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script> - Network accessline 247
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback"></script>
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/configuration.md
- Network accessline 8
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 16
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 24
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?onload=myCallback"></script> - Network accessline 36
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha"></script> - Network accessline 148
script-src https://challenges.cloudflare.com; - Network accessline 149
frame-src https://challenges.cloudflare.com; - Network accessline 156
http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' https://challenges.cloudflare.com; - Network accessline 157
content="default-src 'self'; script-src 'self' https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com;" - Network accessline 158
script-src 'self' https://challenges.cloudflare.com; - Network accessline 159
frame-src https://challenges.cloudflare.com;"
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/gotchas.md
- Network accessline 13
[Credential-related source omitted] - Network accessline 14
[Credential-related source omitted] - Network accessline 15
const validation = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Network accessline 144
<meta http-equiv="Content-Security-Policy" content="script-src 'self' https://challenges.cloudflare.com; - Network accessline 145
http-equiv="Content-Security-Policy" content="script-src 'self' https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com;" - Network accessline 146
content="script-src 'self' https://challenges.cloudflare.com; - Network accessline 147
frame-src https://challenges.cloudflare.com;" - Access to secretsline 229
[Credential-related source omitted] - Access to secretsline 236
[Credential-related source omitted] - Access to secretsline 239
[Credential-related source omitted] - Access to secretsline 243
[Credential-related source omitted] - Network accessline 248
- [Turnstile Docs](https://developers.cloudflare.com/turnstile/) - Network accessline 249
- [Dashboard](https://dash.cloudflare.com/?to=/:account/turnstile) - Network accessline 250
- [Error Codes](https://developers.cloudflare.com/turnstile/troubleshooting/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/turnstile/patterns.md
- Network accessline 9
<html> <head> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 10
<head> <script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> </head> - Network accessline 11
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js" async defer></script> - Network accessline 26
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Network accessline 38
const response = await fetch('/submit', { - Network accessline 62
e.preventDefault() if (!token) return await fetch('/api/submit', { - Network accessline 63
if (!token) return await fetch('/api/submit', { method: 'POST', - Network accessline 64
await fetch('/api/submit', { - Network accessline 96
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 97
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 109
// Validate token const ip = request.headers.get('CF-Connecting-IP') const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Network accessline 110
const ip = request.headers.get('CF-Connecting-IP') const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { method: 'POST', - Network accessline 111
const result = await fetch('https://challenges.cloudflare.com/turnstile/v0/siteverify', { - Access to secretsline 115
[Credential-related source omitted] - Access to secretsline 139
[Credential-related source omitted] - Network accessline 153
<script src="https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit"></script> - Access to secretsline 188
[Credential-related source omitted] - Access to secretsline 191
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/vectorize/README.md
- Network accessline 128
- [Official Docs](https://developers.cloudflare.com/vectorize/) - Network accessline 129
- [Client API Reference](https://developers.cloudflare.com/vectorize/reference/client-api/) - Network accessline 130
- [Workers AI Models](https://developers.cloudflare.com/workers-ai/models/#text-embeddings) - Network accessline 131
- [Discord: #vectorize](https://discord.cloudflare.com)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/README.md
- Access to secretsline 30
[Credential-related source omitted] - Network accessline 123
- [Cloudflare WAF Docs](https://developers.cloudflare.com/waf/) - Network accessline 124
- [Ruleset Engine](https://developers.cloudflare.com/ruleset-engine/) - Network accessline 125
- [Expression Reference](https://developers.cloudflare.com/ruleset-engine/rules-language/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/api.md
- Access to secretsline 9
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/configuration.md
- Network accessline 5
**API Token**: Create at https://dash.cloudflare.com/profile/api-tokens - Access to secretsline 14
[Credential-related source omitted] - Access to secretsline 27
[Credential-related source omitted] - Network accessline 208
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 209
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 210
return fetch(`https://api.cloudflare.com/client/v4/zones/${env.ZONE_ID}/rulesets`, { - Access to secretsline 211
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/waf/patterns.md
- Access to secretsline 167
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/configuration.md
- Network accessline 21
script-src https://static.cloudflareinsights.com https://cloudflareinsights.com; - Network accessline 29
<script defer src="https://static.cloudflareinsights.com/beacon.min.js" - Network accessline 30
[Credential-related source omitted] - Network accessline 31
src="https://static.cloudflareinsights.com/beacon.min.js"
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/gotchas.md
- Network accessline 20
script-src 'self' https://static.cloudflareinsights.com https://cloudflareinsights.com;
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/integration.md
- Network accessline 8
<script defer src="https://static.cloudflareinsights.com/beacon.min.js" - Network accessline 9
[Credential-related source omitted] - Network accessline 10
src="https://static.cloudflareinsights.com/beacon.min.js" - Network accessline 48
script-src 'self' https://static.cloudflareinsights.com; - Network accessline 49
connect-src 'self' https://cloudflareinsights.com; - Network accessline 56
if (localStorage.getItem('analytics-consent') === 'true') { const script = document.createElement('script') script.src = 'https://static.cloudflareinsights.com/beacon.min.js' - Network accessline 57
const script = document.createElement('script') script.src = 'https://static.cloudflareinsights.com/beacon.min.js' script.defer = true - Network accessline 58
script.src = 'https://static.cloudflareinsights.com/beacon.min.js'
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/web-analytics/patterns.md
- Network accessline 53
if (consent === 'accepted') { const script = document.createElement('script') script.src = 'https://static.cloudflareinsights.com/beacon.min.js' - Network accessline 54
[Credential-related source omitted] - Network accessline 55
script.src = 'https://static.cloudflareinsights.com/beacon.min.js' - Access to secretsline 76
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/api.md
- Network accessline 8
export default { async fetch(request, env, ctx) { - Network accessline 9
async fetch(request, env, ctx) { - Network accessline 10
const value = await env.KV.get('key') // Bindings in env const response = await env.API.fetch(request) // Service binding ctx.waitUntil(logRequest(request)) // Background task - Network accessline 11
const response = await env.API.fetch(request) // Service binding - Access to secretsline 43
[Credential-related source omitted] - Network accessline 46
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 47
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 86
async fetch(request) { - Network accessline 116
- `fetch()`, `Request`, `Response`, `Headers` - Network accessline 153
const response = await fetch('https://example.com')
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/configuration.md
- Access to secretsline 78
[Credential-related source omitted] - Network accessline 137
const derived :Workerd.Worker = ( inherit = "base-service", bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")] - Network accessline 138
inherit = "base-service", bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")] ); - Network accessline 139
bindings = [(name = "API_URL", text = "https://api.com"), (name = "DB", service = "postgres")] - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 175
[Credential-related source omitted] - Access to secretsline 185
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/gotchas.md
- Network accessline 63
**Cause:** Socket misconfigured, no fetch handler, or port unavailable **Solution:** Verify socket `address` matches, worker exports `fetch()`, port available - Network accessline 64
**Solution:** Verify socket `address` matches, worker exports `fetch()`, port available - Network accessline 125
**Problem:** Breaking changes after compat date update **Cause:** New flags enabled between dates **Solution:** Review [compat dates docs](https://developers.cloudflare.com/workers/configuration/compatibility-dates/), test locally first - Network accessline 127
**Solution:** Review [compat dates docs](https://developers.cloudflare.com/workers/configuration/compatibility-dates/), test locally first - Network accessline 147
5. **Check versions**: Workerd version vs compat date 6. **Isolate issue**: Minimal repro config 7. **Review schema**: [workerd.capnp](https://github.com/cloudflare/workerd/blob/main/src/workerd/server/workerd.capnp) - Network accessline 149
7. **Review schema**: [workerd.capnp](https://github.com/cloudflare/workerd/blob/main/src/workerd/server/workerd.capnp)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workerd/patterns.md
- Network accessline 47
const prodWorker :Workerd.Worker = ( inherit = "base-service", bindings = [(name = "API_URL", text = "https://api.prod.com")] - Network accessline 48
inherit = "base-service", bindings = [(name = "API_URL", text = "https://api.prod.com")] ); - Network accessline 49
bindings = [(name = "API_URL", text = "https://api.prod.com")] - Network accessline 178
export default { async fetch(request, env, ctx) { - Network accessline 179
async fetch(request, env, ctx) { - Network accessline 193
export default { async fetch(request, env, ctx) { - Network accessline 194
async fetch(request, env, ctx) {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/README.md
- Network accessline 25
export default { async fetch(request: Request, env: Env) { - Network accessline 26
async fetch(request: Request, env: Env) { - Network accessline 99
curl https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/run/@cf/meta/llama-3.1-8b-instruct \ - Network accessline 112
const model = openai('model-name', { baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1', - Network accessline 113
baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1', - Network accessline 179
# View model catalog # https://developers.cloudflare.com/workers-ai/models/ - Network accessline 180
# https://developers.cloudflare.com/workers-ai/models/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/api.md
- Network accessline 97
curl https://api.cloudflare.com/client/v4/accounts/{account_id}/ai/run/@cf/meta/llama-3.1-8b-instruct \
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/configuration.md
- Network accessline 27
export default { async fetch(request: Request, env: Env) { - Network accessline 28
async fetch(request: Request, env: Env) { - Network accessline 46
const response = await fetch( - Network accessline 47
`https://api.cloudflare.com/client/v4/accounts/${ACCOUNT_ID}/ai/run/@cf/meta/llama-3.1-8b-instruct`, - Access to secretsline 50
[Credential-related source omitted] - Network accessline 64
[Credential-related source omitted] - Network accessline 65
[Credential-related source omitted] - Access to secretsline 65
[Credential-related source omitted] - Network accessline 66
baseURL: `https://api.cloudflare.com/client/v4/accounts/${env.ACCOUNT_ID}/ai/v1`,
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-ai/gotchas.md
- Network accessline 9
// ✅ CORRECT - Use native binding export default { async fetch(request: Request, env: Env) { - Network accessline 10
export default { async fetch(request: Request, env: Env) { await env.AI.run('@cf/meta/llama-3.1-8b-instruct', { messages: [...] }); - Network accessline 11
async fetch(request: Request, env: Env) { - Network accessline 125
import { openai } from '@ai-sdk/openai' const model = openai('gpt-3.5-turbo', { baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1', - Network accessline 126
[Credential-related source omitted] - Network accessline 127
baseURL: 'https://api.cloudflare.com/client/v4/accounts/<ACCOUNT_ID>/ai/v1',
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/README.md
- Network accessline 18
**One-click deploy:** [Platform Starter Kit](https://github.com/cloudflare/workers-for-platforms-example) deploys complete WfP setup with dispatch namespace, dispatch worker, and user worker example. - Network accessline 20
[](https://deploy.workers.cloudflare.com/?url=https://github.com/cloudflare/workers-for-platforms-example) - Network accessline 92
- [durable-objects](../durable-objects/) - Stateful multi-tenant patterns - [sandbox](../sandbox/) - Alternative for untrusted code execution - [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-arc - Network accessline 93
- [sandbox](../sandbox/) - Alternative for untrusted code execution - [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-architecture/diagrams/serverless/programmable-platforms/) - [Reference Archit - Network accessline 94
- [Reference Architecture: Programmable Platforms](https://developers.cloudflare.com/reference-architecture/diagrams/serverless/programmable-platforms/) - Network accessline 95
- [Reference Architecture: AI Vibe Coding Platform](https://developers.cloudflare.com/reference-architecture/diagrams/ai/ai-vibe-coding-platform/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/api.md
- Network accessline 6
[Credential-related source omitted] - Access to secretsline 6
[Credential-related source omitted] - Network accessline 7
"https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE/scripts/$SCRIPT_NAME" \ - Access to secretsline 8
[Credential-related source omitted] - Access to secretsline 18
[Credential-related source omitted] - Network accessline 45
interface DynamicDispatchLimits { cpuMs?: number // Max CPU milliseconds subRequests?: number // Max fetch() calls - Network accessline 46
cpuMs?: number // Max CPU milliseconds subRequests?: number // Max fetch() calls } - Network accessline 47
subRequests?: number // Max fetch() calls - Network accessline 64
curl -X PUT ".../scripts/$SCRIPT_NAME" \ - Network accessline 79
# List curl "https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE/scripts" \ - Network accessline 80
[Credential-related source omitted] - Access to secretsline 80
[Credential-related source omitted] - Access to secretsline 81
[Credential-related source omitted] - Network accessline 83
[Credential-related source omitted] - Network accessline 84
[Credential-related source omitted] - Access to secretsline 84
[Credential-related source omitted] - Network accessline 86
[Credential-related source omitted] - Network accessline 87
[Credential-related source omitted] - Access to secretsline 87
[Credential-related source omitted] - Network accessline 99
[Credential-related source omitted] - Access to secretsline 99
[Credential-related source omitted] - Access to secretsline 100
[Credential-related source omitted] - Network accessline 114
curl -X POST ".../workers/assets/upload?base64=true" \ - Network accessline 125
curl -X PUT ".../scripts/$SCRIPT_NAME" \ - Network accessline 141
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 142
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 143
const userWorkerName = new URL(request.url).hostname.split('.')[0] const userWorker = env.DISPATCHER.get(userWorkerName) return await userWorker.fetch(request) - Network accessline 144
const userWorker = env.DISPATCHER.get(userWorkerName) return await userWorker.fetch(request) }, - Network accessline 145
return await userWorker.fetch(request) - Network accessline 153
const pathParts = new URL(request.url).pathname.split('/').filter(Boolean) const userWorker = env.DISPATCHER.get(pathParts[0]) return await userWorker.fetch(request) - Network accessline 155
return await userWorker.fetch(request) - Network accessline 162
const userWorkerName = await env.ROUTING_KV.get(hostname) const userWorker = env.DISPATCHER.get(userWorkerName) return await userWorker.fetch(request) - Network accessline 164
return await userWorker.fetch(request) - Network accessline 184
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 185
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 196
const headers = new Headers(request.headers) headers.set('Authorization', `Bearer ${generateJWT(customerName)}`) return fetch(new Request(request, { headers })) - Network accessline 197
headers.set('Authorization', `Bearer ${generateJWT(customerName)}`) return fetch(new Request(request, { headers })) } - Network accessline 198
return fetch(new Request(request, { headers })) - Network accessline 201
return fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/configuration.md
- Network accessline 32
[Credential-related source omitted] - Access to secretsline 32
[Credential-related source omitted] - Network accessline 33
"https://api.cloudflare.com/client/v4/accounts/$ACCOUNT_ID/workers/dispatch/namespaces/$NAMESPACE" \ - Access to secretsline 34
[Credential-related source omitted] - Network accessline 82
limits: { cpuMs: 10, // Max CPU ms subRequests: 5, // Max fetch() calls - Network accessline 83
cpuMs: 10, // Max CPU ms subRequests: 5, // Max fetch() calls }, - Network accessline 84
subRequests: 5, // Max fetch() calls - Network accessline 93
try { return await userWorker.fetch(request) - Network accessline 94
return await userWorker.fetch(request) - Network accessline 139
# Set tags curl -X PUT ".../tags" -d '["customer-123", "pro", "production"]' - Network accessline 140
curl -X PUT ".../tags" -d '["customer-123", "pro", "production"]' - Network accessline 142
# Filter by tag curl ".../scripts?tags=production%3Ayes" - Network accessline 143
curl ".../scripts?tags=production%3Ayes" - Network accessline 145
# Delete by tag curl -X DELETE ".../scripts?tags=customer-123%3Ayes" - Network accessline 146
curl -X DELETE ".../scripts?tags=customer-123%3Ayes"
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/gotchas.md
- Network accessline 11
try { const userWorker = env.DISPATCHER.get(workerName) return userWorker.fetch(request) - Network accessline 12
const userWorker = env.DISPATCHER.get(workerName) return userWorker.fetch(request) } catch (e) { - Network accessline 13
return userWorker.fetch(request) - Network accessline 59
**Cause:** Outbound Worker enabled blocks `connect()` API for TCP sockets **Solution:** Outbound Workers only intercept `fetch()` calls; TCP socket connections unavailable when outbound configured. Remove outbound if TCP needed, or use pr - Network accessline 60
**Solution:** Outbound Workers only intercept `fetch()` calls; TCP socket connections unavailable when outbound configured. Remove outbound if TCP needed, or use proxy pattern. - Network accessline 123
See [Cloudflare API Rate Limits](https://developers.cloudflare.com/fundamentals/api/reference/limits/) for details. - Network accessline 129
| CPU time (custom limits) | Up to Workers plan limit | Set per-invocation in dispatch worker | | Subrequests (custom limits) | Up to Workers plan limit | Set per-invocation in dispatch worker | | Outbound Worker subrequests | Not - Network accessline 130
| Subrequests (custom limits) | Up to Workers plan limit | Set per-invocation in dispatch worker | | Outbound Worker subrequests | Not intercepted for DO/mTLS | Only regular fetch() calls | | TCP sockets with outbound | Disa - Network accessline 131
| Outbound Worker subrequests | Not intercepted for DO/mTLS | Only regular fetch() calls |
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-for-platforms/patterns.md
- Network accessline 11
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 12
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 23
const userWorker = env.DISPATCHER.get(userWorkerName, {}, { limits }) return await userWorker.fetch(request) - Network accessline 24
return await userWorker.fetch(request) - Network accessline 69
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 70
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 78
const userWorker = env.DISPATCHER.get(hostnameData.workerName) return await userWorker.fetch(request) - Network accessline 79
return await userWorker.fetch(request) - Network accessline 164
**VibeSDK:** For AI-powered code generation + deployment platforms, see [VibeSDK](https://github.com/cloudflare/vibesdk) - handles AI generation, sandbox execution, live preview, and deployment. - Network accessline 166
Reference: [AI Vibe Coding Platform Architecture](https://developers.cloudflare.com/reference-architecture/diagrams/ai/ai-vibe-coding-platform/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/README.md
- Network accessline 7
**URL:** [workers.cloudflare.com/playground](https://workers.cloudflare.com/playground) - Network accessline 27
export default { async fetch(request, env, ctx) { - Network accessline 28
async fetch(request, env, ctx) { - Network accessline 37
export default { async fetch(request, env, ctx) { - Network accessline 38
async fetch(request, env, ctx) { - Network accessline 48
export default { async fetch(request, env, ctx) { - Network accessline 49
async fetch(request, env, ctx) { - Network accessline 50
const response = await fetch('https://example.com') - Network accessline 61
import { Hono } from 'https://esm.sh/hono@3' - Network accessline 63
export default { async fetch(request) { - Network accessline 64
async fetch(request) { - Network accessline 65
const app = new Hono() app.get('/', (c) => c.text('Hello Hono!')) return app.fetch(request) - Network accessline 66
app.get('/', (c) => c.text('Hello Hono!')) return app.fetch(request) }, - Network accessline 67
return app.fetch(request) - Network accessline 128
- [Cloudflare Workers Docs](https://developers.cloudflare.com/workers/) - Network accessline 129
- [Workers Examples](https://developers.cloudflare.com/workers/examples/) - Network accessline 130
- [Wrangler CLI](https://developers.cloudflare.com/workers/wrangler/) - Network accessline 131
- [Workers API Reference](https://developers.cloudflare.com/workers/runtime-apis/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/api.md
- Network accessline 6
export default { async fetch(request, env, ctx) { - Network accessline 7
async fetch(request, env, ctx) { - Network accessline 52
// Background work (after response sent) ctx.waitUntil(fetch('https://logs.example.com', { method: 'POST', body: '...' })) - Network accessline 53
ctx.waitUntil(fetch('https://logs.example.com', { method: 'POST', body: '...' })) - Network accessline 60
const response = await fetch('https://api.example.com') - Network accessline 63
// With options await fetch(url, { - Network accessline 64
await fetch(url, { - Network accessline 77
let response = await cache.match(request) if (!response) { response = await fetch(origin) - Network accessline 78
if (!response) { response = await fetch(origin) await cache.put(request, response.clone()) // Clone before put! - Network accessline 79
response = await fetch(origin)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/configuration.md
- Network accessline 5
Navigate to [workers.cloudflare.com/playground](https://workers.cloudflare.com/playground) - Network accessline 35
export default { async fetch(request, env, ctx) { - Network accessline 36
async fetch(request, env, ctx) { - Network accessline 54
// Import from CDN import { Hono } from 'https://esm.sh/hono@3' - Network accessline 55
import { Hono } from 'https://esm.sh/hono@3' - Network accessline 60
export default { async fetch(request) { - Network accessline 61
async fetch(request) { - Network accessline 62
const app = new Hono() app.get('/', (c) => c.text('Hello')) return app.fetch(request) - Network accessline 63
app.get('/', (c) => c.text('Hello')) return app.fetch(request) }, - Network accessline 64
return app.fetch(request) - Network accessline 113
Example: `https://workers.cloudflare.com/playground#abc123...`
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/gotchas.md
- Network accessline 17
// ❌ Body consumed twice const body = await request.text() await fetch(url, { body: request.body }) // Error! - Network accessline 19
await fetch(url, { body: request.body }) // Error! - Network accessline 22
const clone = request.clone() const body = await request.text() await fetch(url, { body: clone.body }) - Network accessline 24
await fetch(url, { body: clone.body }) - Network accessline 32
// ✅ Move slow work to background ctx.waitUntil(fetch('https://analytics.example.com', {...})); - Network accessline 33
ctx.waitUntil(fetch('https://analytics.example.com', {...})); - Network accessline 42
// ❌ 100 individual fetches // ✅ Batch into single API call await fetch('https://api.example.com/batch', { - Network accessline 43
// ✅ Batch into single API call await fetch('https://api.example.com/batch', { body: JSON.stringify({ ids: [...] }) - Network accessline 44
await fetch('https://api.example.com/batch', {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-playground/patterns.md
- Network accessline 6
export default { async fetch(request) { - Network accessline 7
async fetch(request) { - Network accessline 26
export default { async fetch(request) { - Network accessline 27
async fetch(request) { - Network accessline 37
export default { async fetch(request) { - Network accessline 38
async fetch(request) { - Network accessline 39
const url = new URL(request.url) url.hostname = 'api.example.com' return fetch(url.toString(), { - Network accessline 40
url.hostname = 'api.example.com' return fetch(url.toString(), { method: request.method, - Network accessline 41
return fetch(url.toString(), { - Network accessline 53
export default { async fetch(request) { - Network accessline 54
async fetch(request) { - Network accessline 62
}) } const response = await fetch('https://api.example.com', request) - Network accessline 63
} const response = await fetch('https://api.example.com', request) const modified = new Response(response.body, response) - Network accessline 64
const response = await fetch('https://api.example.com', request) - Network accessline 75
export default { async fetch(request) { - Network accessline 76
async fetch(request) { - Network accessline 77
if (request.method !== 'GET') return fetch(request) - Network accessline 79
let response = await cache.match(request) if (!response) { response = await fetch('https://api.example.com') - Network accessline 80
if (!response) { response = await fetch('https://api.example.com') if (response.status === 200) await cache.put(request, response.clone()) - Network accessline 81
response = await fetch('https://api.example.com') - Network accessline 92
import { Hono } from 'https://esm.sh/hono@3' - Network accessline 103
export default { async fetch(request) { - Network accessline 104
async fetch(request) { - Network accessline 121
export default { async fetch(request) { - Network accessline 122
async fetch(request) { - Network accessline 123
try { const response = await fetch('https://api.example.com') if (!response.ok) throw new Error(`API returned ${response.status}`) - Network accessline 124
const response = await fetch('https://api.example.com')
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/README.md
- Network accessline 41
- ❌ You just need HTTP/HTTPS (use `fetch()` or VPC Services) - Network accessline 50
export default { async fetch(req: Request): Promise<Response> { - Network accessline 51
async fetch(req: Request): Promise<Response> { - Network accessline 111
2. **Validate destinations** - Prevent SSRF by allowlisting hosts 3. **Use Hyperdrive for databases** - Better performance than raw TCP 4. **Prefer fetch() for HTTP** - Only use TCP when necessary - Network accessline 112
3. **Use Hyperdrive for databases** - Better performance than raw TCP 4. **Prefer fetch() for HTTP** - Only use TCP when necessary 5. **Combine with Smart Placement** - Reduce latency to private networks - Network accessline 113
4. **Prefer fetch() for HTTP** - Only use TCP when necessary - Network accessline 125
- [TCP Sockets API Documentation](https://developers.cloudflare.com/workers/runtime-apis/tcp-sockets/) - Network accessline 126
- [Connect to databases guide](https://developers.cloudflare.com/workers/tutorials/connect-to-postgres/) - Network accessline 127
- [Cloudflare Tunnel setup](https://developers.cloudflare.com/cloudflare-one/connections/connect-networks/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/api.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/configuration.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/gotchas.md
- Network accessline 42
**Solution:** Create inside handler: `export default { async fetch() { const socket = connect(...); } }` - Network accessline 156
| ------------------------- | ---------------------------- | --------------------------- | | PostgreSQL/MySQL | [Hyperdrive](../hyperdrive/) | Connection pooling, caching | | HTTP/HTTPS | `fetch()` - Network accessline 157
| PostgreSQL/MySQL | [Hyperdrive](../hyperdrive/) | Connection pooling, caching | | HTTP/HTTPS | `fetch()` | Simpler, built-in | | HTTP with SSRF protection | VPC Services (beta 2025+) - Network accessline 158
| HTTP/HTTPS | `fetch()` | Simpler, built-in |
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers-vpc/patterns.md
- Network accessline 143
export default { async fetch(req: Request): Promise<Response> { - Network accessline 144
async fetch(req: Request): Promise<Response> { - Network accessline 208
export default { async fetch(req: Request): Promise<Response> { - Network accessline 209
async fetch(req: Request): Promise<Response> {
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/README.md
- Network accessline 19
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 20
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Access to secretsline 40
[Credential-related source omitted] - Network accessline 65
// HTTP requests async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> - Network accessline 66
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> - Network accessline 80
**Docs**: https://developers.cloudflare.com/workers/ - Network accessline 81
**Examples**: https://developers.cloudflare.com/workers/examples/ - Network accessline 82
**Runtime APIs**: https://developers.cloudflare.com/workers/runtime-apis/
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/api.md
- Network accessline 6
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 7
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 13
}) } return fetch(request) // Subrequest to origin - Network accessline 14
} return fetch(request) // Subrequest to origin }, - Network accessline 15
return fetch(request) // Subrequest to origin - Access to secretsline 52
[Credential-related source omitted] - Network accessline 61
if (!response) { response = await fetch(request) - Network accessline 62
response = await fetch(request) - Network accessline 156
async fetch(request: Request): Promise<Response> { - Network accessline 161
return new Response(String(this.value)); } // Usage: await stub.fetch('http://x/increment') - Network accessline 163
// Usage: await stub.fetch('http://x/increment') - Network accessline 179
// Worker-to-worker RPC (zero latency, no internet round-trip) return env.SERVICE_B.fetch(request) - Network accessline 180
return env.SERVICE_B.fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/configuration.md
- Access to secretsline 76
[Credential-related source omitted] - Access to secretsline 79
[Credential-related source omitted] - Network accessline 127
export default { async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Network accessline 128
async fetch(request: Request, env: Env, ctx: ExecutionContext): Promise<Response> { - Access to secretsline 143
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/frameworks.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/gotchas.md
- Network accessline 63
**Cause:** Using old `stub.fetch()` pattern instead of RPC (2024+) - Network accessline 67
// ❌ Old fetch pattern export class MyDO { async fetch(request: Request) { - Network accessline 68
export class MyDO { async fetch(request: Request) { const { method } = await request.json() - Network accessline 69
async fetch(request: Request) { - Network accessline 76
} const stub = env.DO.get(id) const res = await stub.fetch('http://x', { method: 'POST', body: JSON.stringify({ method: 'increment' }) }) - Network accessline 78
const res = await stub.fetch('http://x', { method: 'POST', body: JSON.stringify({ method: 'increment' }) })
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workers/patterns.md
- Network accessline 15
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 16
async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 86
// ❌ Sequential const user = await fetch('/api/user/1') - Network accessline 87
const user = await fetch('/api/user/1') - Network accessline 88
const posts = await fetch('/api/posts?user=1') - Network accessline 90
// ✅ Parallel const [user, posts] = await Promise.all([fetch('/api/user/1'), fetch('/api/posts?user=1')]) - Network accessline 91
const [user, posts] = await Promise.all([fetch('/api/user/1'), fetch('/api/posts?user=1')]) - Network accessline 129
describe('Worker', () => { it('returns 200', async () => { const req = new Request('http://localhost/') - Network accessline 130
it('returns 200', async () => { const req = new Request('http://localhost/') const env = { MY_VAR: 'test' } - Network accessline 131
const req = new Request('http://localhost/') - Network accessline 132
const env = { MY_VAR: 'test' } const ctx = { waitUntil: () => {}, passThroughOnException: () => {} } expect((await worker.fetch(req, env, ctx)).status).toBe(200) - Network accessline 133
const ctx = { waitUntil: () => {}, passThroughOnException: () => {} } expect((await worker.fetch(req, env, ctx)).status).toBe(200) }) - Network accessline 134
expect((await worker.fetch(req, env, ctx)).status).toBe(200) - Network accessline 203
async run(event: WorkflowEvent<{ userId: string }>, step: WorkflowStep) { const user = await step.do('fetch-user', async () => fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()), - Network accessline 204
const user = await step.do('fetch-user', async () => fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()), ) - Network accessline 205
fetch(`/api/users/${event.payload.userId}`).then((r) => r.json()),
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/api.md
- Network accessline 64
// From Worker export default { async fetch(req, env) { - Network accessline 65
export default { async fetch(req, env) { const instance = await env.MY_WORKFLOW.create({ id: crypto.randomUUID(), params: { userId: 'user123' } }) - Network accessline 66
async fetch(req, env) { - Network accessline 105
await step.do('validate', async () => { if (!event.params.paymentMethod) throw new NonRetryableError('Payment method required') const res = await fetch('https://api.example.com/charge', { method: 'POST' }) - Network accessline 106
if (!event.params.paymentMethod) throw new NonRetryableError('Payment method required') const res = await fetch('https://api.example.com/charge', { method: 'POST' }) if (res.status === 401) throw new NonRetryableError('Invalid credentia - Network accessline 107
const res = await fetch('https://api.example.com/charge', { method: 'POST' }) - Network accessline 122
// Idempotency await step.do('charge', async () => { const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json()) - Network accessline 123
await step.do('charge', async () => { const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json()) if (sub.charged) return sub // Already done - Network accessline 124
const sub = await fetch(`https://api/subscriptions/${id}`).then((r) => r.json()) - Network accessline 125
if (sub.charged) return sub // Already done return await fetch(`https://api/subscriptions/${id}`, { method: 'POST', - Network accessline 126
return await fetch(`https://api/subscriptions/${id}`, { - Network accessline 217
[Credential-related source omitted] - Network accessline 218
[Credential-related source omitted] - Network accessline 220
[Credential-related source omitted] - Network accessline 221
[Credential-related source omitted] - Network accessline 223
[Credential-related source omitted] - Network accessline 224
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/configuration.md
- Network accessline 43
}, async () => { const res = await fetch('https://api.example.com/data') - Network accessline 44
async () => { const res = await fetch('https://api.example.com/data') if (!res.ok) throw new Error('Failed') - Network accessline 45
const res = await fetch('https://api.example.com/data') - Access to secretsline 148
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/gotchas.md
- Network accessline 89
- [Official Docs](https://developers.cloudflare.com/workflows/) - Network accessline 90
- [Get Started Guide](https://developers.cloudflare.com/workflows/get-started/guide/) - Network accessline 91
- [Workers API](https://developers.cloudflare.com/workflows/build/workers-api/) - Network accessline 92
- [REST API](https://developers.cloudflare.com/api/resources/workflows/) - Network accessline 93
- [Examples](https://developers.cloudflare.com/workflows/examples/) - Network accessline 94
- [Limits](https://developers.cloudflare.com/workflows/reference/limits/) - Network accessline 95
- [Pricing](https://developers.cloudflare.com/workflows/reference/pricing/)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/workflows/patterns.md
- Network accessline 52
{ retries: { limit: 10, delay: '30s', backoff: 'exponential' } }, async () => { const res = await fetch(event.params.sourceUrl) - Network accessline 53
async () => { const res = await fetch(event.params.sourceUrl) if (!res.ok) throw new Error('Fetch failed') - Network accessline 54
const res = await fetch(event.params.sourceUrl)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/api.md
- Network accessline 28
it('responds with 200', async () => { const response = await worker.fetch('http://example.com') - Network accessline 29
const response = await worker.fetch('http://example.com') - Access to secretsline 71
[Credential-related source omitted] - Network accessline 82
// Platform APIs await caches.default.put('https://example.com', new Response('cached')) - Network accessline 83
await caches.default.put('https://example.com', new Response('cached')) - Network accessline 165
const response = await api.fetch('http://example.com/api/login') - Network accessline 166
// API Worker calls AUTH Worker via env.AUTH.fetch()
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/auth.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/configuration.md
- Access to secretsline 15
[Credential-related source omitted] - Network accessline 59
// Variables { "vars": { "API_URL": "https://api.example.com" } } - Network accessline 60
{ "vars": { "API_URL": "https://api.example.com" } } - Network accessline 128
export default { async fetch(request, env) { - Network accessline 129
async fetch(request, env) { - Network accessline 130
// Try serving static asset first const asset = await env.ASSETS.fetch(request) if (asset.status !== 404) return asset - Network accessline 131
const asset = await env.ASSETS.fetch(request)
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/gotchas.md
- Network accessline 118
**Cause:** Mock function not returning Response **Solution:** Always return Response, use `fetch(req)` for passthrough: - Network accessline 119
**Solution:** Always return Response, use `fetch(req)` for passthrough: - Network accessline 125
return new Response('mocked') } return fetch(req) // Required for non-mocked requests - Network accessline 126
} return fetch(req) // Required for non-mocked requests }, - Network accessline 127
return fetch(req) // Required for non-mocked requests - Dangerous shell operationline 180
rm -rf .wrangler/state # Clear local state - Network accessline 201
- Docs: https://developers.cloudflare.com/workers/wrangler/ - Network accessline 202
- Config: https://developers.cloudflare.com/workers/wrangler/configuration/ - Network accessline 203
- Commands: https://developers.cloudflare.com/workers/wrangler/commands/ - Network accessline 204
- Examples: https://github.com/cloudflare/workers-sdk/tree/main/templates - Network accessline 205
- Discord: https://discord.gg/cloudflaredev
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/wrangler/patterns.md
- Network accessline 89
it('creates user', async () => { const response = await worker.fetch('http://example.com/api/users', { - Network accessline 90
const response = await worker.fetch('http://example.com/api/users', { - Network accessline 118
it('fetches users', async () => { const response = await SELF.fetch('https://example.com/api/users') - Network accessline 119
const response = await SELF.fetch('https://example.com/api/users') - Network accessline 138
// Test API calling AUTH const response = await apiWorker.fetch('http://example.com/api/protected') - Network accessline 139
const response = await apiWorker.fetch('http://example.com/api/protected') - Network accessline 154
}) } return fetch(req) // Pass through other requests - Network accessline 155
} return fetch(req) // Pass through other requests }, - Network accessline 156
return fetch(req) // Pass through other requests - Network accessline 160
// Test Worker that calls external API const response = await worker.fetch('http://example.com/proxy') - Network accessline 161
const response = await worker.fetch('http://example.com/proxy') - Network accessline 181
export default { async fetch(request: Request, env: Env): Promise<Response> { - Network accessline 182
async fetch(request: Request, env: Env): Promise<Response> { - Access to secretsline 185
[Credential-related source omitted] - Network accessline 195
export default { async fetch(request, env) { - Network accessline 196
async fetch(request, env) { - Network accessline 199
return Response.json({ data: 'from API' }) } return env.ASSETS.fetch(request) // Static assets - Network accessline 200
} return env.ASSETS.fetch(request) // Static assets }, - Network accessline 201
return env.ASSETS.fetch(request) // Static assets
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/zaraz/README.md
packages/skills-catalog/skills/(cloud)/cloudflare-deploy/references/zaraz/patterns.md
packages/skills-catalog/skills/(cloud)/netlify-deploy/LICENSE.txt
packages/skills-catalog/skills/(cloud)/netlify-deploy/SKILL.md
- Access to secretsline 41
[Credential-related source omitted] - Access to secretsline 71
[Credential-related source omitted] - Network accessline 74
Tokens can be generated at: https://app.netlify.com/user/applications#personal-access-tokens - Network accessline 93
# If Git-based, extract remote URL # Format: https://github.com/username/repo or git@github.com:username/repo.git - Network accessline 94
# Format: https://github.com/username/repo or git@github.com:username/repo.git - Network accessline 187
# Try Git-based linking first git remote show origin npx netlify link --git-remote-url https://github.com/user/repo - Network accessline 189
npx netlify link --git-remote-url https://github.com/user/repo - Network accessline 252
- Netlify CLI Docs: https://docs.netlify.com/cli/get-started/ - Network accessline 253
- netlify.toml Reference: https://docs.netlify.com/configure-builds/file-based-configuration/
packages/skills-catalog/skills/(cloud)/netlify-deploy/references/cli-commands.md
packages/skills-catalog/skills/(cloud)/netlify-deploy/references/deployment-patterns.md
- Network accessline 57
1. Check authentication: `npx netlify status` 2. Get Git remote: `git remote show origin` 3. Extract URL (e.g., `https://github.com/user/repo.git`) - Network accessline 58
2. Get Git remote: `git remote show origin` 3. Extract URL (e.g., `https://github.com/user/repo.git`) 4. Link by remote: `npx netlify link --git-remote-url <URL>` - Network accessline 59
3. Extract URL (e.g., `https://github.com/user/repo.git`) - Network accessline 66
git remote show origin # * remote origin # Fetch URL: https://github.com/user/my-app.git - Network accessline 68
# Fetch URL: https://github.com/user/my-app.git - Network accessline 70
npx netlify link --git-remote-url https://github.com/user/my-app.git - Network accessline 91
npx netlify deploy # Draft deploy URL: https://507f1f77bcf86cd799439011-my-app.netlify.app - Network accessline 92
# Draft deploy URL: https://507f1f77bcf86cd799439011-my-app.netlify.app - Access to secretsline 157
[Credential-related source omitted] - Access to secretsline 160
[Credential-related source omitted] - Network accessline 317
- Netlify CLI Documentation: https://docs.netlify.com/cli/get-started/ - Network accessline 318
- Framework Integration Guides: https://docs.netlify.com/frameworks/ - Network accessline 319
- Build Configuration: https://docs.netlify.com/configure-builds/
packages/skills-catalog/skills/(cloud)/netlify-deploy/references/netlify-toml.md
- Network accessline 98
[[redirects]] from = "/api/*" to = "https://api.example.com/:splat" - Network accessline 99
from = "/api/*" to = "https://api.example.com/:splat" status = 200 - Network accessline 100
to = "https://api.example.com/:splat" - Network accessline 174
[plugins.inputs] baseUrl = "https://example.com" - Network accessline 175
baseUrl = "https://example.com" - Network accessline 258
- Full configuration reference: https://docs.netlify.com/configure-builds/file-based-configuration/ - Network accessline 259
- Framework-specific guides: https://docs.netlify.com/frameworks/
packages/skills-catalog/skills/(cloud)/render-deploy/LICENSE.txt
packages/skills-catalog/skills/(cloud)/render-deploy/SKILL.md
- Access to secretsline 39
[Credential-related source omitted] - Access to secretsline 42
[Credential-related source omitted] - Network accessline 49
4. **When users need an API key**, provide this guidance: - "Get your API key from: https://dashboard.render.com/u/*/settings#api-keys" - Network accessline 50
- "Get your API key from: https://dashboard.render.com/u/*/settings#api-keys" - Access to secretsline 51
[Credential-related source omitted] - Access to secretsline 55
[Credential-related source omitted] - Network accessline 158
- macOS: `brew install render` - Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh` - Dangerous shell operationline 159
- Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh` - Network accessline 159
- Linux/macOS: `curl -fsSL https://raw.githubusercontent.com/render-oss/cli/main/bin/install.sh | sh` - Network accessline 172
https://dashboard.render.com/u/*/settings#api-keys - Access to secretsline 175
[Credential-related source omitted] - Network accessline 179
"mcpServers": { "render": { "url": "https://mcp.render.com/mcp", - Network accessline 180
"render": { "url": "https://mcp.render.com/mcp", "headers": { - Network accessline 181
"url": "https://mcp.render.com/mcp", - Access to secretsline 183
[Credential-related source omitted] - Network accessline 199
https://dashboard.render.com/u/*/settings#api-keys - Access to secretsline 202
[Credential-related source omitted] - Network accessline 205
[Credential-related source omitted] - Access to secretsline 205
[Credential-related source omitted] - Network accessline 235
[Credential-related source omitted] - Access to secretsline 235
[Credential-related source omitted] - Access to secretsline 326
[Credential-related source omitted] - Network accessline 380
| SSH Format | HTTPS Format | | --------------------------------- | --------------------------------- | | `git@github.com:user/repo.git` | `https://github.com/user/repo` | - Network accessline 381
| --------------------------------- | --------------------------------- | | `git@github.com:user/repo.git` | `https://github.com/user/repo` | | `git@gitlab.com:user/repo.git` | `https://gitlab.com/user/repo` | - Network accessline 382
| `git@github.com:user/repo.git` | `https://github.com/user/repo` | - Network accessline 383
| `git@gitlab.com:user/repo.git` | `https://gitlab.com/user/repo` | - Network accessline 384
| `git@bitbucket.org:user/repo.git` | `https://bitbucket.org/user/repo` | - Network accessline 391
https://dashboard.render.com/blueprint/new?repo=<REPOSITORY_URL> - Network accessline 397
https://dashboard.render.com/blueprint/new?repo=https://github.com/username/repo-name
packages/skills-catalog/skills/(cloud)/render-deploy/references/blueprint-spec.md
- Network accessline 336
value: production - key: API_URL value: https://api.example.com - Network accessline 337
- key: API_URL value: https://api.example.com - key: LOG_LEVEL - Network accessline 338
value: https://api.example.com - Access to secretsline 365
[Credential-related source omitted] - Network accessline 754
- Official Blueprint Specification: https://render.com/docs/blueprint-spec - Network accessline 755
- Render CLI Documentation: https://render.com/docs/cli - Network accessline 756
- Environment Variables Guide: https://render.com/docs/environment-variables
packages/skills-catalog/skills/(cloud)/render-deploy/references/configuration-guide.md
- Network accessline 20
value: info - key: API_URL value: https://api.example.com - Network accessline 22
value: https://api.example.com - Access to secretsline 33
[Credential-related source omitted] - Access to secretsline 184
[Credential-related source omitted] - Access to secretsline 213
[Credential-related source omitted] - Network accessline 251
port ENV.fetch("PORT") { 3000 } - Network accessline 252
bind "tcp://0.0.0.0:#{ENV.fetch('PORT', 3000)}" - Access to secretsline 390
[Credential-related source omitted] - Access to secretsline 400
[Credential-related source omitted] - Network accessline 657
- Service Types: [service-types.md](service-types.md) - Runtimes: [runtimes.md](runtimes.md) - Official Render Docs: https://render.com/docs - Network accessline 659
- Official Render Docs: https://render.com/docs
packages/skills-catalog/skills/(cloud)/render-deploy/references/deployment-details.md
packages/skills-catalog/skills/(cloud)/render-deploy/references/direct-creation.md
- Network accessline 17
name: "my-api", runtime: "node", # or python, go, rust, ruby, elixir, docker repo: "https://github.com/username/repo", - Network accessline 18
runtime: "node", # or python, go, rust, ruby, elixir, docker repo: "https://github.com/username/repo", branch: "main", # optional, defaults to repo default branch - Network accessline 19
repo: "https://github.com/username/repo", - Network accessline 34
create_static_site( name: "my-frontend", repo: "https://github.com/username/repo", - Network accessline 35
name: "my-frontend", repo: "https://github.com/username/repo", branch: "main", - Network accessline 36
repo: "https://github.com/username/repo", - Network accessline 39
publishPath: "dist", # or build, public, out envVars: [ {"key": "VITE_API_URL", "value": "https://api.example.com"} - Network accessline 40
envVars: [ {"key": "VITE_API_URL", "value": "https://api.example.com"} ] - Network accessline 41
{"key": "VITE_API_URL", "value": "https://api.example.com"} - Network accessline 50
name: "daily-cleanup", runtime: "node", repo: "https://github.com/username/repo", - Network accessline 51
runtime: "node", repo: "https://github.com/username/repo", schedule: "0 0 * * *", # Daily at midnight (cron syntax) - Network accessline 52
repo: "https://github.com/username/repo", - Access to secretsline 91
[Credential-related source omitted]
packages/skills-catalog/skills/(cloud)/render-deploy/references/service-types.md
- Network accessline 22
- **Public URL**: Automatically assigned `https://[service-name].onrender.com` - Access to secretsline 102
[Credential-related source omitted] - Network accessline 389
// Use .render-internal.com domain const API_URL = 'http://internal-api.render-internal.com:10000' - Network accessline 390
const API_URL = 'http://internal-api.render-internal.com:10000'
packages/skills-catalog/skills/(cloud)/vercel-deploy/scripts/deploy.sh
- Executable scriptline 1
#!/bin/bash - Network accessline 9
DEPLOY_ENDPOINT="https://deploy-skills.vercel.sh/api/deploy" - Dangerous shell operationline 175
rm -rf "$TEMP_DIR" - Access to secretsline 201
[Credential-related source omitted] - Access to secretsline 204
[Credential-related source omitted] - Network accessline 238
echo "Deploying..." >&2 RESPONSE=$(curl -s -X POST "$DEPLOY_ENDPOINT" -F "file=@$TARBALL" -F "framework=$FRAMEWORK") - Network accessline 239
RESPONSE=$(curl -s -X POST "$DEPLOY_ENDPOINT" -F "file=@$TARBALL" -F "framework=$FRAMEWORK") - Network accessline 265
while [ $ATTEMPT -lt $MAX_ATTEMPTS ]; do HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$PREVIEW_URL") - Network accessline 266
HTTP_STATUS=$(curl -s -o /dev/null -w "%{http_code}" "$PREVIEW_URL")
packages/skills-catalog/skills/(creation)/create-adr/README.md
- Network accessline 264
For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).
packages/skills-catalog/skills/(creation)/create-rfc/README.md
- Network accessline 346
For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).
packages/skills-catalog/skills/(creation)/create-technical-design-doc/README.md
- Network accessline 411
For issues or questions about this skill, refer to the main [agent-skills repository](https://github.com/tech-leads-club/agent-skills).
packages/skills-catalog/skills/(creation)/create-technical-design-doc/SKILL.md
- Network accessline 74
| **Diagrams** | Sequence, architecture, flow | Mermaid/PlantUML diagrams showing interactions | | **Structures** | Log format, event schemas | JSON structure for structured logging | - Network accessline 76
| **Strategies** | Approach, not commands | "Rollback via feature flag" (not the curl command) | - Network accessline 96
curl -X PATCH https://api.launchdarkly.com/flags/FEATURE_X \ - Access to secretsline 97
[Credential-related source omitted] - Network accessline 1477
- [Google Engineering Practices](https://google.github.io/eng-practices/) - Network accessline 1478
- [Google SRE Book](https://sre.google/sre-book/table-of-contents/) - Network accessline 1479
- [OWASP Top 10](https://owasp.org/www-project-top-ten/) - Network accessline 1480
- [Architecture Decision Records](https://adr.github.io/)
packages/skills-catalog/skills/(creation)/skill-architect/scripts/validate_skill.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(decision-making)/the-fool/SKILL.md
packages/skills-catalog/skills/(decision-making)/the-jury/scripts/tally.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(design)/figma-implement-design/LICENSE.txt
packages/skills-catalog/skills/(design)/figma-implement-design/SKILL.md
- Network accessline 17
- Figma MCP server must be connected and accessible - User must provide a Figma URL in the format: `https://figma.com/design/:fileKey/:fileName?node-id=1-2` - Network accessline 18
- User must provide a Figma URL in the format: `https://figma.com/design/:fileKey/:fileName?node-id=1-2` - Network accessline 32
1. Add the Figma MCP server to your agent's MCP configuration: - URL: `https://mcp.figma.com/mcp` - Network accessline 33
- URL: `https://mcp.figma.com/mcp` - Network accessline 45
**URL format:** `https://figma.com/design/:fileKey/:fileName?node-id=1-2` - Network accessline 56
- URL: `https://figma.com/design/kL9xQn2VwM8pYrTb4ZcHjF/DesignSystem?node-id=42-15` - Network accessline 173
User says: "Implement this Figma button component: https://figma.com/design/kL9xQn2VwM8pYrTb4ZcHjF/DesignSystem?node-id=42-15" - Network accessline 190
User says: "Build this dashboard: https://figma.com/design/pR8mNv5KqXzGwY2JtCfL4D/Dashboard?node-id=10-5" - Network accessline 262
- [Figma MCP Server Documentation](https://developers.figma.com/docs/figma-mcp-server/) - Network accessline 263
- [Figma MCP Server Tools and Prompts](https://developers.figma.com/docs/figma-mcp-server/tools-and-prompts/) - Network accessline 264
- [Figma Variables and Design Tokens](https://help.figma.com/hc/en-us/articles/15339657135383-Guide-to-variables-in-Figma)
packages/skills-catalog/skills/(design)/figma/LICENSE.txt
packages/skills-catalog/skills/(design)/figma/references/figma-mcp-config.md
packages/skills-catalog/skills/(design)/frontend-design/SKILL.md
- Network accessline 5
author: Impeccable (Paul Bakaus), based on Anthropic frontend-design version: '1.0.0' source: https://github.com/pbakaus/impeccable - Network accessline 6
version: '1.0.0' source: https://github.com/pbakaus/impeccable --- - Network accessline 7
source: https://github.com/pbakaus/impeccable
packages/skills-catalog/skills/(design)/frontend-design/references/color-and-contrast.md
packages/skills-catalog/skills/(design)/frontend-design/references/typography.md
packages/skills-catalog/skills/(development)/confluence-assistant/SKILL.md
- Network accessline 37
1. Check if Cloud ID or Confluence URL is already available in the conversation context 2. If not found, ask: "Which Confluence site should I use? Please provide a Cloud ID (UUID) or site URL (e.g. `https://example.atlassian.net/`)" - Network accessline 38
2. If not found, ask: "Which Confluence site should I use? Please provide a Cloud ID (UUID) or site URL (e.g. `https://example.atlassian.net/`)" - Network accessline 43
- Can be a site URL (e.g., `https://example.atlassian.net/`) - Network accessline 64
- **If you have ARI** (Atlassian Resource Identifier): `fetch(ari)`
packages/skills-catalog/skills/(development)/gh-address-comments/LICENSE.txt
packages/skills-catalog/skills/(development)/gh-address-comments/scripts/fetch_comments.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/references/claims.schema.json
packages/skills-catalog/skills/(development)/harness-eval/scripts/doc_scope.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/inventory_extract.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/merge_agreement.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/merge_usefulness.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/slim_fanin.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/surfaces_extract.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/harness-eval/scripts/track_a_correctness.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/jira-assistant/README.md
- Network accessline 11
- **Project Key** - The Jira project key (e.g., `KAN`, `PROJ`, `DEV`) - **Cloud ID** - Your Atlassian Cloud ID (UUID format or site URL) - **URL** - Your Atlassian site URL (e.g., `https://example.atlassian.net/`) - Network accessline 13
- **URL** - Your Atlassian site URL (e.g., `https://example.atlassian.net/`) - Network accessline 37
- **Project Key:** YOUR_PROJECT_KEY - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - Network accessline 38
- **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - **Project Name:** Your Project Name (optional) - Network accessline 39
- **URL:** https://your-site.atlassian.net/ - Network accessline 41
- **Board URL:** https://your-site.atlassian.net/jira/software/projects/YOUR_PROJECT_KEY/boards/1 (optional) - Network accessline 51
- **Project Key:** YOUR_PROJECT_KEY - **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - Network accessline 52
- **Cloud ID:** your-cloud-id-uuid-or-url - **URL:** https://your-site.atlassian.net/ - **Project Name:** Your Project Name (optional) - Network accessline 53
- **URL:** https://your-site.atlassian.net/ - Network accessline 55
- **Board URL:** https://your-site.atlassian.net/jira/software/projects/YOUR_PROJECT_KEY/boards/1 (optional) - Network accessline 97
- **Project Key:** KAN - **Cloud ID:** d58e860b-469d-4463-8f46-684934a5a851 - **URL:** https://techleadsclub.atlassian.net/ - Network accessline 98
- **Cloud ID:** d58e860b-469d-4463-8f46-684934a5a851 - **URL:** https://techleadsclub.atlassian.net/ - **Project Name:** Tech Leads Club - Network accessline 99
- **URL:** https://techleadsclub.atlassian.net/ - Network accessline 101
- **Board URL:** https://techleadsclub.atlassian.net/jira/software/projects/KAN/boards/1
packages/skills-catalog/skills/(development)/jira-assistant/SKILL.md
- Network accessline 81
- **If you have ARI**: `fetch(ari)`
packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/authentication.md
packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/stack-configuration.md
packages/skills-catalog/skills/(development)/nestjs-modular-monolith/references/testing-patterns.md
- Access to secretsline 279
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/nestjs-modular-monolith/scripts/validate-isolation.sh
- Executable scriptline 1
#!/bin/bash
packages/skills-catalog/skills/(development)/rails-dev/SKILL.md
packages/skills-catalog/skills/(development)/rails-dev/references/async.md
- Network accessline 13
Sync do feeds.map do |feed| Async { results << [feed, fetch(feed.url)] } - Network accessline 14
feeds.map do |feed| Async { results << [feed, fetch(feed.url)] } end.each(&:wait) - Network accessline 15
Async { results << [feed, fetch(feed.url)] } - Network accessline 27
# Don't: a DB write inside the fiber shares one connection Sync do feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait) - Network accessline 28
Sync do feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait) end - Network accessline 29
feeds.map { |feed| Async { feed.save_entries(fetch(feed.url)) } }.each(&:wait) - Network accessline 33
fetched = [] Sync do feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait) - Network accessline 34
Sync do feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait) end - Network accessline 35
feeds.map { |feed| Async { fetched << [feed, fetch(feed.url)] } }.each(&:wait)
packages/skills-catalog/skills/(development)/rails-dev/references/caching.md
packages/skills-catalog/skills/(development)/rails-dev/references/concerns.md
- Access to secretsline 163
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/rails-dev/references/jobs.md
- Network accessline 130
Full API: <https://api.rubyonrails.org/classes/ActiveJob/Continuation.html>.
packages/skills-catalog/skills/(development)/rails-dev/references/mailer.md
packages/skills-catalog/skills/(development)/rails-dev/references/test.md
- Access to secretsline 53
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/rails-dev/references/validator.md
packages/skills-catalog/skills/(development)/rails-dev/references/webhooks.md
- Network accessline 139
When you can't re-fetch (no API, or the payload *is* the event), converge regardless of order with two markers:
packages/skills-catalog/skills/(development)/react-native-expert/SKILL.md
- Network accessline 210
- **Modals:** Use native `<Modal presentationStyle="formSheet">` or React Navigation v7 `presentation: 'formSheet'` with `sheetAllowedDetents`. Avoid JS-based bottom sheet libraries. - **Menus:** Use [zeego](https://zeego.dev) for native dr - Network accessline 211
- **Menus:** Use [zeego](https://zeego.dev) for native dropdown and context menus. Never build custom JS menus.
packages/skills-catalog/skills/(development)/react-native-expert/references/expo-router.md
packages/skills-catalog/skills/(development)/react-native-expert/references/performance-rules.md
- Network accessline 688
1. [React Native](https://reactnative.dev) - Network accessline 689
2. [Expo](https://docs.expo.dev) - Network accessline 690
3. [Reanimated](https://docs.swmansion.com/react-native-reanimated) - Network accessline 691
4. [Gesture Handler](https://docs.swmansion.com/react-native-gesture-handler) - Network accessline 692
5. [LegendList](https://legendapp.com/open-source/legend-list) - Network accessline 693
6. [Galeria](https://github.com/nandorojo/galeria) - Network accessline 694
7. [Zeego](https://zeego.dev) - Network accessline 695
8. [React Compiler](https://react.dev/learn/react-compiler)
packages/skills-catalog/skills/(development)/react-native-expert/references/project-structure.md
packages/skills-catalog/skills/(development)/react-native-expert/references/storage-patterns.md
- Access to secretsline 133
[Credential-related source omitted] - Access to secretsline 139
[Credential-related source omitted] - Access to secretsline 142
[Credential-related source omitted] - Access to secretsline 145
[Credential-related source omitted] - Access to secretsline 159
[Credential-related source omitted] - Access to secretsline 165
[Credential-related source omitted] - Access to secretsline 170
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/shopify-developer/SKILL.md
- Network accessline 13
| ---------------- | ------------------------------------------------------------------- | | API version | `2026-01` (stable) | | GraphQL Admin | `POST https://{store}.myshopify.com/a - Network accessline 14
| API version | `2026-01` (stable) | | GraphQL Admin | `POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json` | | Storefront API | `POST https://{store}.myshopify.com/a - Network accessline 15
| GraphQL Admin | `POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json` | - Network accessline 16
| Storefront API | `POST https://{store}.myshopify.com/api/2026-01/graphql.json` | - Network accessline 20
| App dev | `shopify app dev` | | Deploy | `shopify app deploy` | | Docs | [shopify.dev](https://shopify.dev) - Network accessline 22
| Docs | [shopify.dev](https://shopify.dev) | - Network accessline 98
// GraphQL Admin - always use GraphQL over REST const response = await fetch(`https://${store}.myshopify.com/admin/api/2026-01/graphql.json`, { - Network accessline 99
const response = await fetch(`https://${store}.myshopify.com/admin/api/2026-01/graphql.json`, { - Network accessline 110
// Ajax API (theme-only cart operations) fetch('/cart/add.js', { - Network accessline 111
fetch('/cart/add.js', {
packages/skills-catalog/skills/(development)/shopify-developer/references/api-admin.md
- Network accessline 9
POST https://{store}.myshopify.com/admin/api/2026-01/graphql.json - Network accessline 107
const response = await fetch( - Network accessline 108
`https://${store}.myshopify.com/admin/api/2026-01/graphql.json`, - Network accessline 196
https://{store}.myshopify.com/admin/api/2026-01/ - Network accessline 212
// JavaScript const response = await fetch( - Network accessline 213
const response = await fetch( - Network accessline 214
`https://${store}.myshopify.com/admin/api/2026-01/products.json?limit=50`, - Network accessline 275
GET https://{shop}.myshopify.com/admin/oauth/authorize? - Access to secretsline 276
[Credential-related source omitted] - Network accessline 323
[Credential-related source omitted] - Access to secretsline 323
[Credential-related source omitted] - Access to secretsline 327
[Credential-related source omitted] - Access to secretsline 328
[Credential-related source omitted] - Access to secretsline 334
[Credential-related source omitted] - Network accessline 338
// Node.js example async function getAccessToken(shop, code, apiKey, apiSecret) { const response = await fetch( - Network accessline 339
async function getAccessToken(shop, code, apiKey, apiSecret) { const response = await fetch( `https://${shop}/admin/oauth/access_token`, - Network accessline 340
const response = await fetch( - Network accessline 341
[Credential-related source omitted] - Access to secretsline 341
[Credential-related source omitted] - Access to secretsline 347
[Credential-related source omitted] - Access to secretsline 353
[Credential-related source omitted] - Access to secretsline 354
[Credential-related source omitted] - Network accessline 369
const response = await fetch(graphqlEndpoint, options); - Network accessline 384
async function fetchWithRetry(url, options, maxRetries = 3) { for (let i = 0; i < maxRetries; i++) { const response = await fetch(url, options); - Network accessline 386
const response = await fetch(url, options); - Network accessline 466
"topic": "ORDERS_CREATE", "webhookSubscription": { "callbackUrl": "https://your-app.com/webhooks/orders", - Network accessline 467
"webhookSubscription": { "callbackUrl": "https://your-app.com/webhooks/orders", "format": "JSON" - Network accessline 468
"callbackUrl": "https://your-app.com/webhooks/orders", - Network accessline 528
const response = await fetch(endpoint, { - Network accessline 554
async function safeApiCall(query, variables) { try { const response = await fetch(endpoint, { - Network accessline 555
try { const response = await fetch(endpoint, { method: 'POST', - Network accessline 556
const response = await fetch(endpoint, {
packages/skills-catalog/skills/(development)/shopify-developer/references/api-storefront.md
- Network accessline 9
POST https://{store}.myshopify.com/api/2026-01/graphql.json - Network accessline 147
fetch('/cart.js') - Network accessline 159
fetch('/cart/add.js', { - Network accessline 182
fetch('/cart/change.js', { - Network accessline 196
fetch('/cart/clear.js', { method: 'POST' }) - Network accessline 203
fetch('/cart/update.js', { - Network accessline 224
POST https://{store}.myshopify.com/account/customer/api/2026-01/graphql - Network accessline 233
**Note:** This API uses a different authentication flow via customer access tokens. See [Shopify docs](https://shopify.dev/docs/api/customer) for implementation details.
packages/skills-catalog/skills/(development)/shopify-developer/references/app-development.md
- Network accessline 53
name = "my-app" client_id = "your-client-id" application_url = "https://your-app.com" - Network accessline 54
client_id = "your-client-id" application_url = "https://your-app.com" embedded = true - Network accessline 55
application_url = "https://your-app.com" - Network accessline 62
[auth] redirect_urls = [ "https://your-app.com/auth/callback", - Network accessline 63
redirect_urls = [ "https://your-app.com/auth/callback", "https://your-app.com/auth/shopify/callback" - Network accessline 64
"https://your-app.com/auth/callback", - Network accessline 65
"https://your-app.com/auth/shopify/callback" - Network accessline 84
# Server starts with: # - Local development URL: http://localhost:3000 - Network accessline 85
# - Local development URL: http://localhost:3000 - Network accessline 86
# - Public tunnel URL: https://random-subdomain.ngrok.io - Access to secretsline 102
[Credential-related source omitted] - Network accessline 104
SCOPES=write_products,read_orders HOST=your-app-domain.com SHOPIFY_APP_URL=https://your-app.com - Network accessline 105
HOST=your-app-domain.com SHOPIFY_APP_URL=https://your-app.com DATABASE_URL=postgresql://... - Network accessline 106
SHOPIFY_APP_URL=https://your-app.com - Network accessline 330
onPress: async () => { // Call your app API const response = await fetch("/api/export", { - Network accessline 331
// Call your app API const response = await fetch("/api/export", { method: "POST", - Network accessline 332
const response = await fetch("/api/export", { - Network accessline 398
// Fetch and render reviews // Note: In production, sanitise HTML to prevent XSS vulnerabilities fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`) - Network accessline 399
// Note: In production, sanitise HTML to prevent XSS vulnerabilities fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`) .then(r => r.json()) - Network accessline 400
fetch(`/apps/reviews/api/reviews?product_id={{ product.id }}&limit={{ block.settings.reviews_to_show }}`) - Access to secretsline 513
[Credential-related source omitted] - Access to secretsline 514
[Credential-related source omitted] - Network accessline 553
Subpath prefix: apps Subpath: reviews Proxy URL: https://your-app.com/api/proxy - Network accessline 555
Proxy URL: https://your-app.com/api/proxy - Network accessline 561
https://store.com/apps/reviews → proxies to → https://your-app.com/api/proxy - Access to secretsline 723
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/shopify-developer/references/debugging.md
- Network accessline 104
// Time operations console.time('API Call'); await fetch('/api/data'); - Network accessline 105
console.time('API Call'); await fetch('/api/data'); console.timeEnd('API Call'); - Network accessline 106
await fetch('/api/data'); - Network accessline 124
// ❌ Unhandled error const data = await fetch('/api/data').then(r => r.json()); - Network accessline 125
const data = await fetch('/api/data').then(r => r.json()); - Network accessline 127
// ✅ Proper error handling try { const response = await fetch('/api/data'); - Network accessline 129
const response = await fetch('/api/data'); - Network accessline 182
const response = await fetch(graphqlEndpoint, { - Network accessline 268
// Check rate limit header const response = await fetch(graphqlEndpoint, options); - Network accessline 269
const response = await fetch(graphqlEndpoint, options); - Network accessline 284
const response = await fetch(`https://${shop}/admin/api/2026-01/products/999999.json`, { - Network accessline 309
const response = await fetch(endpoint, { - Network accessline 341
// ❌ Common mistake: Wrong variant ID fetch('/cart/add.js', { - Network accessline 342
fetch('/cart/add.js', { - Network accessline 351
// ✅ Fixed: Use variant ID fetch('/cart/add.js', { - Network accessline 352
fetch('/cart/add.js', { - Network accessline 380
// Debug current cart state fetch('/cart.js') - Network accessline 381
fetch('/cart.js') - Access to secretsline 512
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/shopify-developer/references/hydrogen.md
- Network accessline 12
| Hosting | Shopify Oxygen (default) or any Node.js host | | CLI | `npx shopify hydrogen` | | Docs | [hydrogen.shopify.dev](https://hydrogen.shopify.dev) | - Network accessline 14
| Docs | [hydrogen.shopify.dev](https://hydrogen.shopify.dev) | - Access to secretsline 43
[Credential-related source omitted] - Access to secretsline 53
[Credential-related source omitted] - Network accessline 315
title: data.product.title, description: data.product.description, url: `https://store.com/products/${data.product.handle}`, - Network accessline 316
description: data.product.description, url: `https://store.com/products/${data.product.handle}`, image: data.product.images.nodes[0]?.url, - Network accessline 317
url: `https://store.com/products/${data.product.handle}`,
packages/skills-catalog/skills/(development)/shopify-developer/references/liquid-objects.md
packages/skills-catalog/skills/(development)/shopify-developer/references/performance.md
- Network accessline 152
// Instead of: $.ajax() // Use: fetch() - Network accessline 153
// Use: fetch() - Network accessline 357
{# ❌ Blocking third-party script #} <script src="https://external.com/script.js"></script> - Network accessline 358
<script src="https://external.com/script.js"></script> - Network accessline 360
{# ✅ Async or defer #} <script src="https://external.com/script.js" async></script> - Network accessline 361
<script src="https://external.com/script.js" async></script> - Network accessline 367
if (gaLoaded) return; const script = document.createElement('script'); script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID'; - Network accessline 368
const script = document.createElement('script'); script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID'; script.async = true; - Network accessline 369
script.src = 'https://www.googletagmanager.com/gtag/js?id=GA_ID'; - Network accessline 392
const videoId = facade.dataset.videoId; const iframe = document.createElement('iframe'); iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`; - Network accessline 393
const iframe = document.createElement('iframe'); iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`; facade.replaceWith(iframe); - Network accessline 394
iframe.src = `https://www.youtube.com/embed/${videoId}?autoplay=1`; - Network accessline 434
event.respondWith( caches.match(event.request).then(response => { return response || fetch(event.request); - Network accessline 435
caches.match(event.request).then(response => { return response || fetch(event.request); }) - Network accessline 436
return response || fetch(event.request);
packages/skills-catalog/skills/(development)/shopify-developer/references/theme-development.md
- Network accessline 454
"theme_version": "1.0.0", "theme_author": "Your Name", "theme_documentation_url": "https://...", - Network accessline 455
"theme_author": "Your Name", "theme_documentation_url": "https://...", "theme_support_url": "https://..." - Network accessline 456
"theme_documentation_url": "https://...", - Network accessline 457
"theme_support_url": "https://..." - Network accessline 574
"id": "social_twitter", "label": "Twitter URL", "info": "https://twitter.com/username" - Network accessline 575
"label": "Twitter URL", "info": "https://twitter.com/username" }, - Network accessline 576
"info": "https://twitter.com/username" - Network accessline 897
"label": "Promo Video", "accept": ["youtube", "vimeo"], "placeholder": "https://www.youtube.com/watch?v=...", - Network accessline 898
"accept": ["youtube", "vimeo"], "placeholder": "https://www.youtube.com/watch?v=...", "info": "YouTube or Vimeo URL" - Network accessline 899
"placeholder": "https://www.youtube.com/watch?v=...", - Network accessline 1095
"id": "twitter_url", "label": "Twitter URL", "placeholder": "https://twitter.com/username", - Network accessline 1096
"label": "Twitter URL", "placeholder": "https://twitter.com/username", "info": "Your Twitter profile URL" - Network accessline 1097
"placeholder": "https://twitter.com/username",
packages/skills-catalog/skills/(development)/tlc-implement/references/build.md
packages/skills-catalog/skills/(development)/tlc-implement/scripts/check_commit.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 112
print(f" ERROR {e}") if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") - Network accessline 113
if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") return 1 - Network accessline 114
print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
packages/skills-catalog/skills/(development)/tlc-implement/scripts/check_proofs.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-implement/scripts/lean_config.py
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(development)/tlc-implement/scripts/lessons.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-implement/scripts/mutate.py
packages/skills-catalog/skills/(development)/tlc-implement/scripts/runners.py
packages/skills-catalog/skills/(development)/tlc-implement/scripts/selftest.py
- Executable scriptline 1
#!/usr/bin/env python3 - Possible obfuscationline 207
+ width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00") - Network accessline 397
1, "does not exist"), ("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Network accessline 398
("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, 1, "is a link, not a capture"), - Network accessline 399
{"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Access to secretsline 494
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/tlc-implement/scripts/validate_checks.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-implement/scripts/validate_verification.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-plan/scripts/lean_config.py
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(development)/tlc-plan/scripts/lessons.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-plan/scripts/selftest.py
- Executable scriptline 1
#!/usr/bin/env python3 - Possible obfuscationline 207
+ width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00") - Network accessline 397
1, "does not exist"), ("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Network accessline 398
("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, 1, "is a link, not a capture"), - Network accessline 399
{"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Access to secretsline 494
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/tlc-plan/scripts/validate_plan.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-driven/references/implement.md
- Network accessline 185
**Format:** the repo's commit convention; [Conventional Commits 1.0.0](https://www.conventionalcommits.org/en/v1.0.0/) when it has none - `<type>(<scope>): <description>`, imperative, lowercase, no period.
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/check_commit.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 112
print(f" ERROR {e}") if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") - Network accessline 113
if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") return 1 - Network accessline 114
print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/check_proofs.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/lean_config.py
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/lessons.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/mutate.py
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/runners.py
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/selftest.py
- Executable scriptline 1
#!/usr/bin/env python3 - Possible obfuscationline 207
+ width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00") - Network accessline 375
1, "does not exist"), ("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Network accessline 376
("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, 1, "is a link, not a capture"), - Network accessline 377
{"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Access to secretsline 475
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_spec.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_tasks.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-driven/scripts/validate_verification.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-lean/references/build.md
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/check_commit.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 112
print(f" ERROR {e}") if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") - Network accessline 113
if errors: print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/") return 1 - Network accessline 114
print("\ncheck_commit: FAIL - see https://www.conventionalcommits.org/en/v1.0.0/")
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/check_proofs.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/lean_config.py
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/lessons.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/mutate.py
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/runners.py
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/selftest.py
- Executable scriptline 1
#!/usr/bin/env python3 - Possible obfuscationline 207
+ width.to_bytes(4, "big") + height.to_bytes(4, "big") + b"\x08\x02\x00\x00\x00") - Network accessline 397
1, "does not exist"), ("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Network accessline 398
("validate_plan", "a design-file link where an exported capture belongs", {"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, 1, "is a link, not a capture"), - Network accessline 399
{"plan.md": with_diff(f"`{CAPTURE}`", "`https://design.example.com/file/abc?node-id=12-34`")}, - Access to secretsline 494
[Credential-related source omitted]
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_checks.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_plan.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(development)/tlc-spec-lean/scripts/validate_verification.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(gtm)/ai-cold-outreach/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/ai-pricing/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/ai-sdr/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/ai-seo/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 75
[Credential-related source omitted] - Network accessline 77
https://mcp.dataforseo.com/sse - Network accessline 82
git clone https://github.com/AminForou/mcp-gsc
packages/skills-catalog/skills/(gtm)/ai-ugc-ads/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/content-to-pipeline/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/expansion-retention/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/gtm-engineering/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/gtm-metrics/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/lead-enrichment/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/multi-platform-launch/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/paid-creative-ai/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/partner-affiliate/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/positioning-icp/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/sales-motion-design/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/social-selling/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/solo-founder-gtm/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(gtm)/video-outreach/SKILL.md
- Network accessline 5
original_author: Chad Boyda / agent-gtm-skills modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills - Network accessline 6
modified_by: Felipe Rodrigues - github.com/felipfr source: https://github.com/chadboyda/agent-gtm-skills version: '1.0.0' - Network accessline 7
source: https://github.com/chadboyda/agent-gtm-skills
packages/skills-catalog/skills/(learning)/learning-opportunities/SKILL.md
- Network accessline 6
original_author: Chris Hicks modified_by: Felipe Rodrigues - github.com/felipfr source: https://www.fightforthehuman.com - Network accessline 7
modified_by: Felipe Rodrigues - github.com/felipfr source: https://www.fightforthehuman.com version: 1.1.0 - Network accessline 8
source: https://www.fightforthehuman.com
packages/skills-catalog/skills/(monitoring)/sentry/LICENSE.txt
packages/skills-catalog/skills/(monitoring)/sentry/SKILL.md
packages/skills-catalog/skills/(monitoring)/sentry/scripts/sentry_api.py
- Executable scriptline 1
#!/usr/bin/env python3 - Network accessline 12
DEFAULT_BASE_URL = "https://sentry.io" - Network accessline 160
"--base-url", default=os.environ.get("SENTRY_BASE_URL", DEFAULT_BASE_URL), help="Sentry base URL (default: https://sentry.io)", - Network accessline 161
[Credential-related source omitted] - Access to secretsline 161
[Credential-related source omitted] - Network accessline 162
help="Sentry base URL (default: https://sentry.io)", - Access to secretsline 166
[Credential-related source omitted] - Access to secretsline 171
[Credential-related source omitted] - Access to secretsline 210
[Credential-related source omitted] - Access to secretsline 212
[Credential-related source omitted]
packages/skills-catalog/skills/(performance)/core-web-vitals/SKILL.md
- Network accessline 70
// ❌ Content loads after JavaScript useEffect(() => { fetch('/api/hero-text') - Network accessline 71
useEffect(() => { fetch('/api/hero-text') .then((r) => r.json()) - Network accessline 72
fetch('/api/hero-text') - Network accessline 181
// ❌ Eagerly loaded, blocks interactions ;<script src="https://heavy-widget.com/widget.js"></script> - Network accessline 182
;<script src="https://heavy-widget.com/widget.js"></script> - Network accessline 184
// ✅ Lazy loaded on interaction or visibility const loadWidget = () => { import('https://heavy-widget.com/widget.js').then((widget) => widget.init()) - Network accessline 185
const loadWidget = () => { import('https://heavy-widget.com/widget.js').then((widget) => widget.init()) } - Network accessline 186
import('https://heavy-widget.com/widget.js').then((widget) => widget.init()) - Network accessline 276
<!-- ❌ Unknown size until loaded --> <iframe src="https://ad-network.com/ad"></iframe> - Network accessline 277
<iframe src="https://ad-network.com/ad"></iframe> - Network accessline 279
<!-- ✅ Reserve space with min-height --> <div style="min-height: 250px;"> <iframe src="https://ad-network.com/ad" height="250"></iframe> - Network accessline 280
<div style="min-height: 250px;"> <iframe src="https://ad-network.com/ad" height="250"></iframe> </div> - Network accessline 281
<iframe src="https://ad-network.com/ad" height="250"></iframe> - Network accessline 284
<!-- ✅ Or use aspect-ratio container --> <div style="aspect-ratio: 16/9;"> <iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe> - Network accessline 285
<div style="aspect-ratio: 16/9;"> <iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe> </div> - Network accessline 286
<iframe src="https://youtube.com/embed/..." style="width: 100%; height: 100%;"></iframe> - Network accessline 463
- [web.dev LCP](https://web.dev/articles/lcp) - Network accessline 464
- [web.dev INP](https://web.dev/articles/inp) - Network accessline 465
- [web.dev CLS](https://web.dev/articles/cls)
packages/skills-catalog/skills/(performance)/perf-astro/SKILL.md
- Network accessline 94
<!-- Non-blocking Google Fonts --> <link rel="preconnect" href="https://fonts.googleapis.com"> - Network accessline 95
<link rel="preconnect" href="https://fonts.googleapis.com"> - Network accessline 96
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin> - Network accessline 97
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap" - Network accessline 98
rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap" media="print" - Network accessline 99
href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap" - Network accessline 102
/> <noscript> <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"> - Network accessline 103
<noscript> <link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"> </noscript> - Network accessline 104
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&display=swap"> - Network accessline 135
npx lighthouse https://your-site.com --preset=perf --form-factor=mobile
packages/skills-catalog/skills/(performance)/perf-lighthouse/SKILL.md
- Network accessline 14
# Basic audit lighthouse https://example.com - Network accessline 15
lighthouse https://example.com - Network accessline 17
# Mobile performance only (faster) lighthouse https://example.com --preset=perf --form-factor=mobile - Network accessline 18
lighthouse https://example.com --preset=perf --form-factor=mobile - Network accessline 20
# Output JSON for parsing lighthouse https://example.com --output=json --output-path=./report.json - Network accessline 21
lighthouse https://example.com --output=json --output-path=./report.json - Network accessline 23
# Output HTML report lighthouse https://example.com --output=html --output-path=./report.html - Network accessline 24
lighthouse https://example.com --output=html --output-path=./report.html - Network accessline 64
lighthouse https://example.com --budget-path=./budget.json - Network accessline 119
with: urls: | http://localhost:3000 - Network accessline 120
urls: | http://localhost:3000 http://localhost:3000/about - Network accessline 121
http://localhost:3000 - Network accessline 122
http://localhost:3000/about - Network accessline 146
ci: { collect: { url: ['http://localhost:3000/', 'http://localhost:3000/about'], - Network accessline 147
collect: { url: ['http://localhost:3000/', 'http://localhost:3000/about'], startServerCommand: 'npm run start', - Network accessline 148
url: ['http://localhost:3000/', 'http://localhost:3000/about'], - Network accessline 205
# Save baseline lighthouse https://prod.example.com --output=json --output-path=baseline.json - Network accessline 206
lighthouse https://prod.example.com --output=json --output-path=baseline.json - Network accessline 208
# Run on PR lighthouse https://preview.example.com --output=json --output-path=pr.json - Network accessline 209
lighthouse https://preview.example.com --output=json --output-path=pr.json
packages/skills-catalog/skills/(performance)/perf-web-optimization/SKILL.md
- Network accessline 36
<!-- Preconnect to font origin --> <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /> - Network accessline 37
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin /> - Network accessline 40
<link rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter&display=swap" - Network accessline 41
rel="stylesheet" href="https://fonts.googleapis.com/css2?family=Inter&display=swap" media="print" - Network accessline 42
href="https://fonts.googleapis.com/css2?family=Inter&display=swap"
packages/skills-catalog/skills/(quality)/react-best-practices/AGENTS.md
- Network accessline 218
Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 437
Reference: [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 684
Reference: [https://nextjs.org/docs/app/guides/authentication](https://nextjs.org/docs/app/guides/authentication) - Network accessline 778
**With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests - Network accessline 782
Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 961
Reference: [https://react.dev/reference/react/cache](https://react.dev/reference/react/cache) - Network accessline 1035
Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after) - Network accessline 1169
const [users, setUsers] = useState([]) useEffect(() => { fetch('/api/users') - Network accessline 1170
useEffect(() => { fetch('/api/users') .then(r => r.json()) - Network accessline 1171
fetch('/api/users') - Network accessline 1209
Reference: [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 1320
Reference: [https://react.dev/learn/you-might-not-need-an-effect](https://react.dev/learn/you-might-not-need-an-effect) - Network accessline 1459
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders. - Network accessline 1541
Reference: [https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler) - Network accessline 1644
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu - Network accessline 1930
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary. - Network accessline 2190
Reference: [https://react.dev/reference/react/useTransition](https://react.dev/reference/react/useTransition) - Network accessline 2286
See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations. - Network accessline 2420
Reference: [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast) - Network accessline 2728
This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see - Network accessline 2851
Reference: [https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application) - Network accessline 2928
1. [https://react.dev](https://react.dev) - Network accessline 2929
2. [https://nextjs.org](https://nextjs.org) - Network accessline 2930
3. [https://swr.vercel.app](https://swr.vercel.app) - Network accessline 2931
4. [https://github.com/shuding/better-all](https://github.com/shuding/better-all) - Network accessline 2932
5. [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache) - Network accessline 2933
6. [https://vercel.com/blog/how-we-optimized-package-imports-in-next-js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js) - Network accessline 2934
7. [https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
packages/skills-catalog/skills/(quality)/react-best-practices/README.md
packages/skills-catalog/skills/(quality)/react-best-practices/rules/_template.md
- Network accessline 28
Reference: [Link to documentation or resource](https://example.com)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/advanced-init-once.md
- Network accessline 42
Reference: [Initializing the application](https://react.dev/learn/you-might-not-need-an-effect#initializing-the-application)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/async-dependencies.md
- Network accessline 51
Reference: [https://github.com/shuding/better-all](https://github.com/shuding/better-all)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/bundle-barrel-imports.md
- Network accessline 59
Reference: [How we optimized package imports in Next.js](https://vercel.com/blog/how-we-optimized-package-imports-in-next-js)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/client-swr-dedup.md
packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-batch-dom-css.md
- Network accessline 107
See [this gist](https://gist.github.com/paulirish/5d52fb081b3570c81e3a) and [CSS Triggers](https://csstriggers.com/) for more information on layout-forcing operations.
packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-cache-function-results.md
- Network accessline 80
Reference: [How we made the Vercel Dashboard twice as fast](https://vercel.com/blog/how-we-made-the-vercel-dashboard-twice-as-fast)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/js-min-max-loop.md
- Network accessline 82
This works for small arrays, but can be slower or just throw an error for very large arrays due to spread operator limitations. Maximal array length is approximately 124000 in Chrome 143 and 638000 in Safari 18; exact numbers may vary - see
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rendering-hoist-jsx.md
- Network accessline 46
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler automatically hoists static JSX elements and optimizes component re-renders, making manual hoisting unnecessary.
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rendering-usetransition-loading.md
- Network accessline 75
Reference: [useTransition](https://react.dev/reference/react/useTransition)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-derived-state-no-effect.md
- Network accessline 40
References: [You Might Not Need an Effect](https://react.dev/learn/you-might-not-need-an-effect)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-functional-setstate.md
- Network accessline 74
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, the compiler can automatically optimize some cases, but functional updates are still recommended for correctness and to prevent stale closure bu
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-memo.md
- Network accessline 44
**Note:** If your project has [React Compiler](https://react.dev/learn/react-compiler) enabled, manual memoization with `memo()` and `useMemo()` is not necessary. The compiler automatically optimizes re-renders.
packages/skills-catalog/skills/(quality)/react-best-practices/rules/rerender-move-effect-to-event.md
- Network accessline 45
Reference: [Should this code move to an event handler?](https://react.dev/learn/removing-effect-dependencies#should-this-code-move-to-an-event-handler)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-after-nonblocking.md
- Network accessline 73
Reference: [https://nextjs.org/docs/app/api-reference/functions/after](https://nextjs.org/docs/app/api-reference/functions/after)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-auth-actions.md
- Network accessline 96
Reference: [https://nextjs.org/docs/app/guides/authentication](https://nextjs.org/docs/app/guides/authentication)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-cache-lru.md
- Network accessline 37
**With Vercel's [Fluid Compute](https://vercel.com/docs/fluid-compute):** LRU caching is especially effective because multiple concurrent requests can share the same function instance and cache. This means the cache persists across requests - Network accessline 41
Reference: [https://github.com/isaacs/node-lru-cache](https://github.com/isaacs/node-lru-cache)
packages/skills-catalog/skills/(quality)/react-best-practices/rules/server-cache-react.md
- Network accessline 76
Reference: [React.cache documentation](https://react.dev/reference/react/cache)
packages/skills-catalog/skills/(quality)/seo/SKILL.md
- Network accessline 47
Sitemap: https://example.com/sitemap.xml - Network accessline 47
Sitemap: https://example.com/sitemap.xml - Network accessline 69
<!-- Prevent duplicate content issues --> <link rel="canonical" href="https://example.com/page" /> - Network accessline 69
<!-- Prevent duplicate content issues --> <link rel="canonical" href="https://example.com/page" /> - Network accessline 70
<link rel="canonical" href="https://example.com/page" /> - Network accessline 70
<link rel="canonical" href="https://example.com/page" /> - Network accessline 72
<!-- Self-referencing canonical (recommended) --> <link rel="canonical" href="https://example.com/current-page" /> - Network accessline 72
<!-- Self-referencing canonical (recommended) --> <link rel="canonical" href="https://example.com/current-page" /> - Network accessline 73
<link rel="canonical" href="https://example.com/current-page" /> - Network accessline 73
<link rel="canonical" href="https://example.com/current-page" /> - Network accessline 75
<!-- For paginated content --> <link rel="canonical" href="https://example.com/products" /> - Network accessline 75
<!-- For paginated content --> <link rel="canonical" href="https://example.com/products" /> - Network accessline 76
<link rel="canonical" href="https://example.com/products" /> - Network accessline 76
<link rel="canonical" href="https://example.com/products" /> - Network accessline 83
<?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"> - Network accessline 83
<?xml version="1.0" encoding="UTF-8"?> <urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"> - Network accessline 84
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"> - Network accessline 84
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"> - Network accessline 85
<url> <loc>https://example.com/</loc> <lastmod>2024-01-15</lastmod> - Network accessline 85
<url> <loc>https://example.com/</loc> <lastmod>2024-01-15</lastmod> - Network accessline 86
<loc>https://example.com/</loc> - Network accessline 86
<loc>https://example.com/</loc> - Network accessline 90
</url> <url> <loc>https://example.com/products</loc> - Network accessline 90
</url> <url> <loc>https://example.com/products</loc> - Network accessline 91
<url> <loc>https://example.com/products</loc> <lastmod>2024-01-14</lastmod> - Network accessline 91
<url> <loc>https://example.com/products</loc> <lastmod>2024-01-14</lastmod> - Network accessline 92
<loc>https://example.com/products</loc> - Network accessline 92
<loc>https://example.com/products</loc> - Network accessline 111
✅ Good URLs: https://example.com/products/blue-widget - Network accessline 111
✅ Good URLs: https://example.com/products/blue-widget - Network accessline 112
https://example.com/products/blue-widget - Network accessline 112
https://example.com/products/blue-widget - Network accessline 113
https://example.com/blog/how-to-use-widgets - Network accessline 113
https://example.com/blog/how-to-use-widgets - Network accessline 115
❌ Poor URLs: https://example.com/p?id=12345 - Network accessline 115
❌ Poor URLs: https://example.com/p?id=12345 - Network accessline 116
https://example.com/p?id=12345 - Network accessline 116
https://example.com/p?id=12345 - Network accessline 117
https://example.com/products/item/category/subcategory/blue-widget-2024-sale-discount - Network accessline 117
https://example.com/products/item/category/subcategory/blue-widget-2024-sale-discount - Network accessline 132
<!-- Ensure all resources use HTTPS --> <img src="https://example.com/image.jpg" /> - Network accessline 132
<!-- Ensure all resources use HTTPS --> <img src="https://example.com/image.jpg" /> - Network accessline 133
<img src="https://example.com/image.jpg" /> - Network accessline 133
<img src="https://example.com/image.jpg" /> - Network accessline 135
<!-- Not: --> <img src="http://example.com/image.jpg" /> - Network accessline 135
<!-- Not: --> <img src="http://example.com/image.jpg" /> - Network accessline 136
<img src="http://example.com/image.jpg" /> - Network accessline 136
<img src="http://example.com/image.jpg" /> - Network accessline 266
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 266
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 267
{ "@context": "https://schema.org", "@type": "Organization", - Network accessline 267
{ "@context": "https://schema.org", "@type": "Organization", - Network accessline 268
"@context": "https://schema.org", - Network accessline 268
"@context": "https://schema.org", - Network accessline 269
"@type": "Organization", "name": "Example Company", "url": "https://example.com", - Network accessline 269
"@type": "Organization", "name": "Example Company", "url": "https://example.com", - Network accessline 270
"name": "Example Company", "url": "https://example.com", "logo": "https://example.com/logo.png", - Network accessline 270
"name": "Example Company", "url": "https://example.com", "logo": "https://example.com/logo.png", - Network accessline 271
"url": "https://example.com", - Network accessline 271
"url": "https://example.com", - Network accessline 272
"logo": "https://example.com/logo.png", - Network accessline 272
"logo": "https://example.com/logo.png", - Network accessline 273
"sameAs": ["https://twitter.com/example", "https://linkedin.com/company/example"], - Network accessline 273
"sameAs": ["https://twitter.com/example", "https://linkedin.com/company/example"], - Network accessline 286
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 286
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 287
{ "@context": "https://schema.org", "@type": "Article", - Network accessline 287
{ "@context": "https://schema.org", "@type": "Article", - Network accessline 288
"@context": "https://schema.org", - Network accessline 288
"@context": "https://schema.org", - Network accessline 290
"headline": "How to Choose the Right Widget", "description": "Complete guide to selecting widgets for your needs.", "image": "https://example.com/article-image.jpg", - Network accessline 290
"headline": "How to Choose the Right Widget", "description": "Complete guide to selecting widgets for your needs.", "image": "https://example.com/article-image.jpg", - Network accessline 291
"description": "Complete guide to selecting widgets for your needs.", "image": "https://example.com/article-image.jpg", "author": { - Network accessline 291
"description": "Complete guide to selecting widgets for your needs.", "image": "https://example.com/article-image.jpg", "author": { - Network accessline 292
"image": "https://example.com/article-image.jpg", - Network accessline 292
"image": "https://example.com/article-image.jpg", - Network accessline 294
"@type": "Person", "name": "Jane Smith", "url": "https://example.com/authors/jane-smith" - Network accessline 294
"@type": "Person", "name": "Jane Smith", "url": "https://example.com/authors/jane-smith" - Network accessline 295
"name": "Jane Smith", "url": "https://example.com/authors/jane-smith" }, - Network accessline 295
"name": "Jane Smith", "url": "https://example.com/authors/jane-smith" }, - Network accessline 296
"url": "https://example.com/authors/jane-smith" - Network accessline 296
"url": "https://example.com/authors/jane-smith" - Network accessline 301
"logo": { "@type": "ImageObject", "url": "https://example.com/logo.png" - Network accessline 301
"logo": { "@type": "ImageObject", "url": "https://example.com/logo.png" - Network accessline 302
"@type": "ImageObject", "url": "https://example.com/logo.png" } - Network accessline 302
"@type": "ImageObject", "url": "https://example.com/logo.png" } - Network accessline 303
"url": "https://example.com/logo.png" - Network accessline 303
"url": "https://example.com/logo.png" - Network accessline 315
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 315
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 316
{ "@context": "https://schema.org", "@type": "Product", - Network accessline 316
{ "@context": "https://schema.org", "@type": "Product", - Network accessline 317
"@context": "https://schema.org", - Network accessline 317
"@context": "https://schema.org", - Network accessline 318
"@type": "Product", "name": "Blue Widget Pro", "image": "https://example.com/blue-widget.jpg", - Network accessline 318
"@type": "Product", "name": "Blue Widget Pro", "image": "https://example.com/blue-widget.jpg", - Network accessline 319
"name": "Blue Widget Pro", "image": "https://example.com/blue-widget.jpg", "description": "Premium blue widget with advanced features.", - Network accessline 319
"name": "Blue Widget Pro", "image": "https://example.com/blue-widget.jpg", "description": "Premium blue widget with advanced features.", - Network accessline 320
"image": "https://example.com/blue-widget.jpg", - Network accessline 320
"image": "https://example.com/blue-widget.jpg", - Network accessline 328
"price": "49.99", "priceCurrency": "USD", "availability": "https://schema.org/InStock", - Network accessline 328
"price": "49.99", "priceCurrency": "USD", "availability": "https://schema.org/InStock", - Network accessline 329
"priceCurrency": "USD", "availability": "https://schema.org/InStock", "url": "https://example.com/products/blue-widget" - Network accessline 329
"priceCurrency": "USD", "availability": "https://schema.org/InStock", "url": "https://example.com/products/blue-widget" - Network accessline 330
"availability": "https://schema.org/InStock", - Network accessline 330
"availability": "https://schema.org/InStock", - Network accessline 331
"url": "https://example.com/products/blue-widget" - Network accessline 331
"url": "https://example.com/products/blue-widget" - Network accessline 345
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 345
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 346
{ "@context": "https://schema.org", "@type": "FAQPage", - Network accessline 346
{ "@context": "https://schema.org", "@type": "FAQPage", - Network accessline 347
"@context": "https://schema.org", - Network accessline 347
"@context": "https://schema.org", - Network accessline 374
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 374
<script type="application/ld+json"> { "@context": "https://schema.org", - Network accessline 375
{ "@context": "https://schema.org", "@type": "BreadcrumbList", - Network accessline 375
{ "@context": "https://schema.org", "@type": "BreadcrumbList", - Network accessline 376
"@context": "https://schema.org", - Network accessline 376
"@context": "https://schema.org", - Network accessline 381
"position": 1, "name": "Home", "item": "https://example.com" - Network accessline 381
"position": 1, "name": "Home", "item": "https://example.com" - Network accessline 382
"name": "Home", "item": "https://example.com" }, - Network accessline 382
"name": "Home", "item": "https://example.com" }, - Network accessline 383
"item": "https://example.com" - Network accessline 383
"item": "https://example.com" - Network accessline 387
"position": 2, "name": "Products", "item": "https://example.com/products" - Network accessline 387
"position": 2, "name": "Products", "item": "https://example.com/products" - Network accessline 388
"name": "Products", "item": "https://example.com/products" }, - Network accessline 388
"name": "Products", "item": "https://example.com/products" }, - Network accessline 389
"item": "https://example.com/products" - Network accessline 389
"item": "https://example.com/products" - Network accessline 393
"position": 3, "name": "Blue Widgets", "item": "https://example.com/products/blue-widgets" - Network accessline 393
"position": 3, "name": "Blue Widgets", "item": "https://example.com/products/blue-widgets" - Network accessline 394
"name": "Blue Widgets", "item": "https://example.com/products/blue-widgets" } - Network accessline 394
"name": "Blue Widgets", "item": "https://example.com/products/blue-widgets" } - Network accessline 395
"item": "https://example.com/products/blue-widgets" - Network accessline 395
"item": "https://example.com/products/blue-widgets" - Network accessline 406
- [Google Rich Results Test](https://search.google.com/test/rich-results) - Network accessline 406
- [Google Rich Results Test](https://search.google.com/test/rich-results) - Network accessline 407
- [Schema.org Validator](https://validator.schema.org/) - Network accessline 407
- [Schema.org Validator](https://validator.schema.org/) - Network accessline 463
<!-- For multi-language sites --> <link rel="alternate" hreflang="en" href="https://example.com/page" /> - Network accessline 463
<!-- For multi-language sites --> <link rel="alternate" hreflang="en" href="https://example.com/page" /> - Network accessline 464
<link rel="alternate" hreflang="en" href="https://example.com/page" /> - Network accessline 464
<link rel="alternate" hreflang="en" href="https://example.com/page" /> - Network accessline 465
<link rel="alternate" hreflang="es" href="https://example.com/es/page" /> - Network accessline 465
<link rel="alternate" hreflang="es" href="https://example.com/es/page" /> - Network accessline 466
<link rel="alternate" hreflang="fr" href="https://example.com/fr/page" /> - Network accessline 466
<link rel="alternate" hreflang="fr" href="https://example.com/fr/page" /> - Network accessline 467
<link rel="alternate" hreflang="x-default" href="https://example.com/page" /> - Network accessline 467
<link rel="alternate" hreflang="x-default" href="https://example.com/page" /> - Network accessline 529
- [Google Search Central](https://developers.google.com/search) - Network accessline 529
- [Google Search Central](https://developers.google.com/search) - Network accessline 530
- [Schema.org](https://schema.org/) - Network accessline 530
- [Schema.org](https://schema.org/)
packages/skills-catalog/skills/(quality)/the-judge/SKILL.md
- Network accessline 121
"evidence": [ {"type": "internal", "ref": "src/billing/invoice.ts:142"}, {"type": "external", "ref": "https://official-docs.example/api#behavior"} - Network accessline 122
{"type": "internal", "ref": "src/billing/invoice.ts:142"}, {"type": "external", "ref": "https://official-docs.example/api#behavior"} ] - Network accessline 123
{"type": "external", "ref": "https://official-docs.example/api#behavior"}
packages/skills-catalog/skills/(quality)/the-judge/scripts/post_review.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(quality)/the-judge/scripts/review_gate.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(quality)/the-judge/scripts/scan_bypasses.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/SKILL.md
- Network accessline 123
| Schema validation error: "required property missing" | `datePublished`, `author`, or `headline` absent | Add all required fields; check Schema.org/TechArticle for the full list | | `OAI-SearchBot` n - Network accessline 124
| `OAI-SearchBot` not crawling | `User-agent: *` `Disallow: /` in `robots.txt` blocks all bots | Add explicit `Allow: /` for `OAI-SearchBot` above the wildcard rule | | `llms.txt` not pi - Network accessline 125
| `llms.txt` not picked up by agents | File not at `https://example.com/llms.txt` (must be root) | Move file to domain root; verify it returns `Content-Type: text/plain` |
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/references/measurement-and-tools.md
- Network accessline 19
**Access:** [search.google.com/search-console](https://search.google.com/search-console) - Network accessline 33
**Access:** [bing.com/webmasters](https://www.bing.com/webmasters) - Network accessline 46
**Access:** [search.google.com/test/rich-results](https://search.google.com/test/rich-results) - Network accessline 56
**Access:** [validator.schema.org](https://validator.schema.org) - Network accessline 69
**Access:** [ijonis.com](https://ijonis.com) or via the `geo-lint` CLI if available. - Network accessline 83
**Access:** [pagespeed.web.dev](https://pagespeed.web.dev)
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/faqpage.jsonld
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/llms.txt
- Network accessline 7
- [Page Title](https://example.com/page-path/): One sentence describing what this page covers and what an AI agent would use it for. - Network accessline 8
- [Page Title](https://example.com/another-page/): One sentence description. - Network accessline 9
- [Page Title](https://example.com/guide/): One sentence description. - Network accessline 13
- [OpenAPI spec](https://example.com/openapi.json): Machine-readable API definition. - Network accessline 14
- [Sitemap](https://example.com/sitemap.xml): Full list of indexed pages.
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/page-metadata.html
- Network accessline 9
<!-- Canonical URL (required — prevents duplicate content signals) --> <link rel="canonical" href="https://example.com/page-path/" /> - Network accessline 10
<link rel="canonical" href="https://example.com/page-path/" /> - Network accessline 12
<!-- Language (required for Understandable pillar) --> <!-- Remove hreflang block if page has no translations --> <link rel="alternate" hreflang="en" href="https://example.com/page-path/" /> - Network accessline 13
<!-- Remove hreflang block if page has no translations --> <link rel="alternate" hreflang="en" href="https://example.com/page-path/" /> <link rel="alternate" hreflang="pt-BR" href="https://example.com/pt/page-path/" /> - Network accessline 14
<link rel="alternate" hreflang="en" href="https://example.com/page-path/" /> - Network accessline 15
<link rel="alternate" hreflang="pt-BR" href="https://example.com/pt/page-path/" /> - Network accessline 16
<link rel="alternate" hreflang="x-default" href="https://example.com/page-path/" /> - Network accessline 20
<meta property="og:title" content="PAGE_TITLE" /> <meta property="og:description" content="BRIEF_DESCRIPTION_150_CHARS_MAX" /> <meta property="og:url" content="https://example.com/page-path/" /> - Network accessline 21
<meta property="og:description" content="BRIEF_DESCRIPTION_150_CHARS_MAX" /> <meta property="og:url" content="https://example.com/page-path/" /> <meta property="og:image" content="https://example.com/images/page-og.png" /> - Network accessline 22
<meta property="og:url" content="https://example.com/page-path/" /> - Network accessline 23
<meta property="og:image" content="https://example.com/images/page-og.png" />
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/quotable-article-outline.md
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/robots-ai-crawlers.txt
- Network accessline 1
# robots.txt — AI crawler controls template # Place at: https://example.com/robots.txt - Network accessline 2
# Place at: https://example.com/robots.txt - Network accessline 11
User-agent: * Allow: / Sitemap: https://example.com/sitemap.xml - Network accessline 13
Sitemap: https://example.com/sitemap.xml - Network accessline 36
# Sitemap: https://example.com/sitemap.xml
packages/skills-catalog/skills/(quality)/tlc-generative-engine-optimization/templates/techarticle.jsonld
- Network accessline 1
{ "@context": "https://schema.org", - Network accessline 2
"@context": "https://schema.org", - Network accessline 9
"@type": "Person", "name": "AUTHOR_FULL_NAME", "url": "https://example.com/about/author-name/" - Network accessline 10
"name": "AUTHOR_FULL_NAME", "url": "https://example.com/about/author-name/" }, - Network accessline 11
"url": "https://example.com/about/author-name/" - Network accessline 14
"@type": "Organization", "name": "SITE_OR_COMPANY_NAME", "url": "https://example.com", - Network accessline 15
"name": "SITE_OR_COMPANY_NAME", "url": "https://example.com", "logo": { - Network accessline 16
"url": "https://example.com", - Network accessline 17
"logo": { "@type": "ImageObject", "url": "https://example.com/images/logo.png" - Network accessline 18
"@type": "ImageObject", "url": "https://example.com/images/logo.png" } - Network accessline 19
"url": "https://example.com/images/logo.png" - Network accessline 22
"mainEntityOfPage": { "@type": "WebPage", "@id": "https://example.com/page-path/" - Network accessline 23
"@type": "WebPage", "@id": "https://example.com/page-path/" }, - Network accessline 24
"@id": "https://example.com/page-path/" - Network accessline 25
}, "image": "https://example.com/images/page-og.png", "articleSection": "TOPIC_CATEGORY", - Network accessline 26
"image": "https://example.com/images/page-og.png",
packages/skills-catalog/skills/(quality)/web-accessibility/SKILL.md
- Network accessline 470
# Lighthouse accessibility audit npx lighthouse https://example.com --only-categories=accessibility - Network accessline 471
npx lighthouse https://example.com --only-categories=accessibility - Network accessline 473
# axe-core npm install @axe-core/cli -g axe https://example.com - Network accessline 475
axe https://example.com - Network accessline 528
- [WCAG 2.1 Quick Reference](https://www.w3.org/WAI/WCAG21/quickref/) - Network accessline 529
- [WAI-ARIA Authoring Practices](https://www.w3.org/WAI/ARIA/apg/) - Network accessline 530
- [Deque axe Rules](https://dequeuniversity.com/rules/axe/)
packages/skills-catalog/skills/(quality)/web-accessibility/references/WCAG.md
- Network accessline 103
<a href="/page">Descriptive link text</a> <!-- External links --> <a href="https://external.com" target="_blank" rel="noopener"> - Network accessline 104
<!-- External links --> <a href="https://external.com" target="_blank" rel="noopener"> External site - Network accessline 105
<a href="https://external.com" target="_blank" rel="noopener"> - Network accessline 162
| Tool | Type | URL | | ------------------------ | ----------------------- | -------------------------------------------------------- | | axe DevToo - Network accessline 163
| ------------------------ | ----------------------- | -------------------------------------------------------- | | axe DevTools | Browser extension | [deque.com/axe](https://www.deque.com/axe/) | | WAVE - Network accessline 164
| axe DevTools | Browser extension | [deque.com/axe](https://www.deque.com/axe/) | - Network accessline 165
| WAVE | Browser extension | [wave.webaim.org](https://wave.webaim.org/) | - Network accessline 166
| Lighthouse | Built into Chrome | DevTools → Lighthouse | | NVDA | Screen reader (Windows) | [nvaccess.org](https://www.nvaccess.org/) | | VoiceOver - Network accessline 167
| NVDA | Screen reader (Windows) | [nvaccess.org](https://www.nvaccess.org/) | - Network accessline 169
| Colour Contrast Analyser | Desktop app | [tpgi.com](https://www.tpgi.com/color-contrast-checker/) |
packages/skills-catalog/skills/(quality)/web-best-practices/SKILL.md
- Network accessline 21
<!-- ❌ Mixed content --> <img src="http://example.com/image.jpg" /> - Network accessline 22
<img src="http://example.com/image.jpg" /> - Network accessline 23
<script src="http://cdn.example.com/script.js"></script> - Network accessline 25
<!-- ✅ HTTPS only --> <img src="https://example.com/image.jpg" /> - Network accessline 26
<img src="https://example.com/image.jpg" /> - Network accessline 27
<script src="https://cdn.example.com/script.js"></script> - Network accessline 44
http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' https://trusted-cdn.com; - Network accessline 45
content="default-src 'self'; script-src 'self' https://trusted-cdn.com; style-src 'self' 'unsafe-inline'; - Network accessline 46
script-src 'self' https://trusted-cdn.com; - Network accessline 47
style-src 'self' 'unsafe-inline'; img-src 'self' data: https:; connect-src 'self' https://api.example.com;" - Network accessline 48
img-src 'self' data: https:; connect-src 'self' https://api.example.com;" /> - Network accessline 49
connect-src 'self' https://api.example.com;" - Network accessline 58
Content-Security-Policy: default-src 'self'; script-src 'self' 'nonce-abc123' https://trusted.com; - Network accessline 59
default-src 'self'; script-src 'self' 'nonce-abc123' https://trusted.com; style-src 'self' 'nonce-abc123'; - Network accessline 60
script-src 'self' 'nonce-abc123' https://trusted.com; - Network accessline 61
style-src 'self' 'nonce-abc123'; img-src 'self' data: https:; connect-src 'self' https://api.example.com; - Network accessline 62
img-src 'self' data: https:; connect-src 'self' https://api.example.com; frame-ancestors 'self'; - Network accessline 63
connect-src 'self' https://api.example.com; - Network accessline 262
<!-- Or use polyfill.io --> <script src="https://polyfill.io/v3/polyfill.min.js?features=fetch,IntersectionObserver"></script> - Network accessline 263
<script src="https://polyfill.io/v3/polyfill.min.js?features=fetch,IntersectionObserver"></script> - Network accessline 285
// ✅ Async fetch const response = await fetch(url); - Network accessline 286
const response = await fetch(url); - Network accessline 563
<!-- Or allow for specific origins --> <meta http-equiv="Permissions-Policy" content="geolocation=(self 'https://maps.example.com')" /> - Network accessline 564
<meta http-equiv="Permissions-Policy" content="geolocation=(self 'https://maps.example.com')" /> - Network accessline 605
| -------------------------------------------------- | -------------------------- | | `npm audit` | Dependency vulnerabilities | | [SecurityHeaders.com](https://securityheaders.com) | Header analysis - Network accessline 606
| `npm audit` | Dependency vulnerabilities | | [SecurityHeaders.com](https://securityheaders.com) | Header analysis | | [W3C Validator](https://validator.w3.org) | HTML validation - Network accessline 607
| [SecurityHeaders.com](https://securityheaders.com) | Header analysis | - Network accessline 608
| [W3C Validator](https://validator.w3.org) | HTML validation | - Network accessline 610
| [Observatory](https://observatory.mozilla.org) | Security scan | - Network accessline 614
- [MDN Web Security](https://developer.mozilla.org/en-US/docs/Web/Security) - Network accessline 615
- [OWASP Top 10](https://owasp.org/www-project-top-ten/)
packages/skills-catalog/skills/(quality)/web-quality-audit/scripts/analyze.sh
- Executable scriptline 1
#!/bin/bash
packages/skills-catalog/skills/(security)/security-best-practices/LICENSE.txt
packages/skills-catalog/skills/(security)/security-best-practices/references/golang-general-backend-security.md
- Access to secretsline 216
[Credential-related source omitted] - Access to secretsline 220
[Credential-related source omitted] - Access to secretsline 458
[Credential-related source omitted] - Network accessline 708
- MUST set an overall timeout on `http.Client` usage (or equivalent per-request deadlines via context + transport timeouts). - MUST ensure `resp.Body.Close()` is called for all successful requests (typically `defer resp.Body.Close()` immedi - Network accessline 721
- Search for `http.Get(`, `http.Post(`, `client := &http.Client{}` without `Timeout`, `client.Do(` and missing closes. - Network accessline 732
- The net/http package exposes `DefaultClient` as a zero-valued `http.Client`, which can easily lead to “no timeout” behavior unless configured. - Network accessline 964
- Go Security Policy — https://go.dev/doc/security/policy - Network accessline 965
- Go Release History (security fixes in patch releases) — https://go.dev/doc/devel/release - Network accessline 966
- Go 1.25 Release Notes — https://go.dev/doc/go1.25 - Network accessline 967
- net/http (server timeouts, MaxHeaderBytes, DefaultClient) — https://pkg.go.dev/net/http - Network accessline 968
- html/template (auto-escaping and trusted-template assumptions) — https://pkg.go.dev/html/template - Network accessline 969
- crypto/tls (MinVersion defaults, InsecureSkipVerify warnings) — https://pkg.go.dev/crypto/tls - Network accessline 970
- crypto/rand (secure randomness, token helpers) — https://pkg.go.dev/crypto/rand - Network accessline 971
- crypto/subtle (constant-time comparisons) — https://pkg.go.dev/crypto/subtle - Dangerous shell operationline 972
- os/exec (no shell by default; command execution guidance) — https://pkg.go.dev/os/exec - Network accessline 972
- os/exec (no shell by default; command execution guidance) — https://pkg.go.dev/os/exec - Network accessline 973
- unsafe (bypasses type safety) — https://go.dev/src/unsafe/unsafe.go - Network accessline 974
- net/http/pprof (debug endpoints) — https://pkg.go.dev/net/http/pprof - Network accessline 975
- cmd/go (module authentication via go.sum/checksum DB; env vars like GOINSECURE) — https://pkg.go.dev/cmd/go - Network accessline 976
- Module Mirror and Checksum Database Launched (Go blog) — https://go.dev/blog/module-mirror-launch - Network accessline 977
- govulncheck documentation — https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck - Network accessline 978
- Go Race Detector documentation — https://go.dev/doc/articles/race_detector - Network accessline 979
- bcrypt (password hashing) — https://pkg.go.dev/golang.org/x/crypto/bcrypt - Network accessline 980
- Go vulnerability entry example (multipart resource consumption) — https://pkg.go.dev/vuln/GO-2023-1569 - Network accessline 984
- Session Management — https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html - Network accessline 985
- CSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html - Network accessline 986
- SSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html - Network accessline 987
- XSS Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html - Network accessline 988
- HTTP Security Response Headers — https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-express-web-server-security.md
- Access to secretsline 377
[Credential-related source omitted] - Dangerous shell operationline 782
- `exec(req.query.cmd)` - Dangerous shell operationline 783
- `exec(`convert ${userPath} ...`)` - Dangerous shell operationline 789
- Search for `child_process`, `exec(`, `execSync(`, `spawn(`, `fork(`. - Network accessline 822
- `fetch(req.query.url)` - Network accessline 827
- Search for `fetch(`, `axios(`, `got(`, `request(`, `node-fetch` usage where URL originates from users/DB. - Network accessline 1102
- Express: Production Best Practices — Security: `https://expressjs.com/en/advanced/best-practice-security.html` ([Express][1]) - Network accessline 1103
- Express: Behind Proxies (`trust proxy`): `https://expressjs.com/en/guide/behind-proxies.html` ([Express][2]) - Network accessline 1104
- Express 5.x API Reference (parsers, static, sendFile, redirect, cookies): `https://expressjs.com/en/5x/api.html` ([Express][5]) - Network accessline 1105
- Express: Error Handling: `https://expressjs.com/en/guide/error-handling.html` ([Express][11]) - Network accessline 1109
- express-session docs (cookie flags, secret rotation, fixation mitigation, MemoryStore warning): `https://expressjs.com/en/resources/middleware/session.html` ([Express][1]) - Network accessline 1113
- Node.js — Security Best Practices (DoS, proxy guidance, inspector risks, request smuggling notes): `https://nodejs.org/en/learn/getting-started/security-best-practices` ([Node.js][15]) - Network accessline 1114
- npm Docs — `npm audit`: `https://docs.npmjs.com/cli/v9/commands/npm-audit/` ([npm Docs][16]) - Network accessline 1118
- Session Management: `https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][12]) - Network accessline 1119
- CSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][3]) - Network accessline 1120
- XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4]) - Network accessline 1121
- Input Validation: `https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][17]) - Network accessline 1122
- SQL Injection Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6]) - Network accessline 1123
- OS Command Injection Defense: `https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][14]) - Network accessline 1124
- SSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][7]) - Network accessline 1125
- File Upload: `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][13]) - Network accessline 1126
- Unvalidated Redirects: `https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][18]) - Network accessline 1127
- HTTP Headers: `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][10]) - Network accessline 1131
- Express package version (npm): `https://www.npmjs.com/package/express` - Network accessline 1132
- Express open redirect advisory (CVE): `https://nvd.nist.gov/vuln/detail/CVE-2024-29041` ([NVD][9]) - Network accessline 1134
[1]: https://expressjs.com/en/advanced/best-practice-security.html 'Security Best Practices for Express in Production' - Network accessline 1135
[2]: https://expressjs.com/en/guide/behind-proxies.html 'Express behind proxies' - Network accessline 1136
[3]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention - OWASP Cheat Sheet Series' - Network accessline 1137
[4]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series' - Network accessline 1138
[5]: https://expressjs.com/en/5x/api.html 'Express 5.x - API Reference' - Network accessline 1139
[6]: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html 'SQL Injection Prevention - OWASP Cheat Sheet Series' - Network accessline 1140
[7]: https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html 'Server Side Request Forgery Prevention - OWASP Cheat Sheet Series' - Network accessline 1141
[8]: https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html 'Nodejs Security - OWASP Cheat Sheet Series' - Network accessline 1142
[9]: https://nvd.nist.gov/vuln/detail/cve-2024-29041 'CVE-2024-29041 Detail - NVD' - Network accessline 1143
[10]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Headers - OWASP Cheat Sheet Series' - Network accessline 1144
[11]: https://expressjs.com/en/guide/error-handling.html 'Express error handling' - Network accessline 1145
[12]: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html 'Session Management - OWASP Cheat Sheet Series' - Network accessline 1146
[13]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'File Upload - OWASP Cheat Sheet Series' - Network accessline 1147
[14]: https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html 'OS Command Injection Defense - OWASP Cheat Sheet Series' - Network accessline 1148
[15]: https://nodejs.org/en/learn/getting-started/security-best-practices 'Node.js — Security Best Practices' - Network accessline 1149
[16]: https://docs.npmjs.com/cli/v9/commands/npm-audit/ 'npm-audit | npm Docs' - Network accessline 1150
[17]: https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html 'Input Validation - OWASP Cheat Sheet Series' - Network accessline 1151
[18]: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html 'Unvalidated Redirects and Forwards - OWASP Cheat Sheet Series'
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-general-web-frontend-security.md
- Dangerous shell operationline 213
- `eval()` - Dangerous shell operationline 222
- `eval(userInput)` - Dangerous shell operationline 228
- Search for `eval(`, `new Function`, `setTimeout("`, `setInterval("`. - Dangerous shell operationline 239
- CSP that blocks `eval()`-like APIs by default, and avoid `unsafe-eval`. ([MDN Web Docs][10]) - Network accessline 480
- Define an allowlist: - `const ALLOWED = new Set(["https://app.example.com", "https://accounts.example.com"]);` - Network accessline 481
- `const ALLOWED = new Set(["https://app.example.com", "https://accounts.example.com"]);` - Access to secretsline 510
[Credential-related source omitted] - Network accessline 547
- Search HTML for `<script src="https://...">` and `tag manager` snippets. - Network accessline 571
- `<script src="https://cdn.example.com/lib.js"></script>` with no `integrity`. - Network accessline 576
- Search for `<script src="https://` and `<link rel="stylesheet" href="https://` without `integrity=`. - Dangerous shell operationline 630
- `eval(`, `new Function`, `setTimeout("`, `setInterval("` ([MDN Web Docs][10]) - Network accessline 649
- Third-party scripts: - `<script src="https://...">` without `integrity=` - Network accessline 650
- `<script src="https://...">` without `integrity=` - Network accessline 669
- W3C Content Security Policy Level 2 (HTML `<meta>` delivery restrictions; unsupported directives in meta CSP): `https://www.w3.org/TR/CSP2/` ([W3C][3]) - Network accessline 670
- MDN: CSP Guide (strict CSP, nonces/hashes, `unsafe-inline`/`unsafe-eval`, eval blocking): `https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP` ([MDN Web Docs][10]) - Network accessline 671
- MDN: `<meta http-equiv>` (CSP via meta and warning about meta-based security headers): `https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv` ([MDN Web Docs][1]) - Network accessline 672
- MDN: `frame-ancestors` (and note it’s not supported in `<meta>`): `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors` ([MDN Web Docs][18]) - Network accessline 676
- OWASP: DOM Based XSS Prevention Cheat Sheet (dangerous sinks + safe patterns like `textContent`): `https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2]) - Network accessline 677
- MDN: `innerHTML` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML` ([MDN Web Docs][19]) - Network accessline 678
- MDN: `insertAdjacentHTML` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML` ([MDN Web Docs][20]) - Network accessline 679
- MDN: `document.write()` / `document.writeln()` (security considerations): `https://developer.mozilla.org/en-US/docs/Web/API/Document/write` and `https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln` ([MDN Web Docs][13]) - Network accessline 683
- MDN: `javascript:` URLs (execution on navigation; discouraged; references `window.location`): `https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript` ([MDN Web Docs][4]) - Network accessline 687
- W3C: Trusted Types spec (DOM XSS sinks include `Element.innerHTML` and `Location.href` setters; goals and limitations): `https://www.w3.org/TR/trusted-types/` ([W3C][15]) - Network accessline 688
- MDN: `require-trusted-types-for` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for` ([MDN Web Docs][11]) - Network accessline 689
- MDN: `trusted-types` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types` ([MDN Web Docs][16]) - Network accessline 693
- MDN: `window.postMessage` (security guidance: specify targetOrigin; validate origin): `https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage` ([MDN Web Docs][5]) - Network accessline 694
- OWASP: HTML5 Security Cheat Sheet (Web Messaging guidance: explicit origin, strict checks, no `innerHTML`): `https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6]) - Network accessline 698
- OWASP: Third Party JavaScript Management Cheat Sheet (risks and mitigations including SRI/mirroring): `https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][7]) - Network accessline 699
- MDN: Subresource Integrity overview: `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity` ([MDN Web Docs][12]) - Network accessline 700
- W3C: Subresource Integrity spec: `https://www.w3.org/TR/sri-2/` ([W3C][21]) - Network accessline 704
- OWASP: DOM Clobbering Prevention Cheat Sheet (named property access risk; example attacks involving `location.assign` and `javascript:`): `https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html` ([OWASP - Network accessline 706
[1]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Elements/meta/http-equiv' - Network accessline 707
[2]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html' - Network accessline 708
[3]: https://www.w3.org/TR/CSP2/ 'Content Security Policy Level 2' - Network accessline 709
[4]: https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript 'javascript: URLs - URIs | MDN' - Network accessline 710
[5]: https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage 'https://developer.mozilla.org/en-US/docs/Web/API/Window/postMessage' - Network accessline 711
[6]: https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html' - Network accessline 712
[7]: https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html' - Network accessline 713
[8]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/DOM_Clobbering_Prevention_Cheat_Sheet.html' - Network accessline 714
[9]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener' - Network accessline 715
[10]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP' - Network accessline 716
[11]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-f - Network accessline 717
[12]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity' - Network accessline 718
[13]: https://developer.mozilla.org/en-US/docs/Web/API/Document/write 'https://developer.mozilla.org/en-US/docs/Web/API/Document/write' - Network accessline 719
[14]: https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln 'https://developer.mozilla.org/en-US/docs/Web/API/Document/writeln' - Network accessline 720
[15]: https://www.w3.org/TR/trusted-types/ 'https://www.w3.org/TR/trusted-types/' - Network accessline 721
[16]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/trusted-types' - Network accessline 722
[18]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors 'https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/frame-ancestors' - Network accessline 723
[19]: https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML 'https://developer.mozilla.org/en-US/docs/Web/API/Element/innerHTML' - Network accessline 724
[20]: https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML 'https://developer.mozilla.org/en-US/docs/Web/API/Element/insertAdjacentHTML' - Network accessline 725
[21]: https://www.w3.org/TR/sri-2/ 'https://www.w3.org/TR/sri-2/'
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-jquery-web-frontend-security.md
- Network accessline 199
- `<script src="https://…/jquery.min.js"></script>` with no `integrity`. - Network accessline 325
- SHOULD prefer `fetch()`/XHR to retrieve data, then render with safe DOM creation or sanitize explicitly. - Network accessline 340
- Replace `.load()` with: - `fetch()` to retrieve JSON, then render via `.text()` / node construction, or - Network accessline 341
- `fetch()` to retrieve JSON, then render via `.text()` / node construction, or - Network accessline 342
- `fetch()` to retrieve HTML, sanitize it, then inject. - Network accessline 607
- jQuery 4.0.0 release notes (Trusted Types/CSP changes; version info): `https://blog.jquery.com/2026/01/17/jquery-4-0-0/`. ([blog.jquery.com][7]) - Download jQuery (latest version info; CDN + SRI guidance): `https://jquery.com/download/`. - Network accessline 608
- Download jQuery (latest version info; CDN + SRI guidance): `https://jquery.com/download/`. ([jquery.com][8]) - Network accessline 609
- jQuery API: `.html()`: `https://api.jquery.com/html/`. ([jQuery API][21]) - Network accessline 610
- jQuery API: `.text()`: `https://api.jquery.com/text/`. ([jQuery API][14]) - Network accessline 611
- jQuery API: `.append()`: `https://api.jquery.com/append/`. ([jQuery API][22]) - Network accessline 612
- jQuery API: `.load()` (script execution behavior): `https://api.jquery.com/load/`. ([jQuery API][3]) - Network accessline 613
- jQuery API: `jQuery.parseHTML(…, keepScripts)`: `https://api.jquery.com/jQuery.parseHTML/`. ([jQuery API][2]) - Network accessline 614
- jQuery API: `$.ajax()` (`jsonp: false` security note): `https://api.jquery.com/jQuery.ajax/`. ([jQuery API][5]) - Network accessline 615
- jQuery API: `$.getScript()` (executes script): `https://api.jquery.com/jQuery.getScript/`. ([jQuery API][4]) - Network accessline 616
- jQuery API: `jQuery.escapeSelector()`: `https://api.jquery.com/jQuery.escapeSelector/`. ([jQuery API][20]) - Network accessline 620
- NVD CVE-2019-11358 (prototype pollution; jQuery < 3.4.0): `https://nvd.nist.gov/vuln/detail/CVE-2019-11358`. ([NVD][13]) - Network accessline 621
- NVD CVE-2020-11022 (XSS risk in DOM manipulation methods; patched in 3.5.0): `https://nvd.nist.gov/vuln/detail/CVE-2020-11022`. ([NVD][1]) - Network accessline 622
- NVD CVE-2020-11023 (XSS risk involving `<option>`; patched in 3.5.0): `https://nvd.nist.gov/vuln/detail/CVE-2020-11023`. ([NVD][23]) - Network accessline 623
- GitHub Security Advisory GHSA-gxr4-xjj5-5px2 (jQuery htmlPrefilter XSS; patched in 3.5.0): `https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2`. ([GitHub][16]) - Network accessline 627
- XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][24]) - Network accessline 628
- DOM-based XSS Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][25]) - Network accessline 629
- CSRF Prevention: `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][19]) - Network accessline 630
- HTTP Security Headers: `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][12]) - Network accessline 631
- Content Security Policy Cheat Sheet: `https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html`. ([OWASP Cheat Sheet Series][9]) - Network accessline 635
- MDN: Subresource Integrity (SRI): `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity`. ([MDN Web Docs][26]) - Network accessline 636
- W3C: SRI specification: `https://www.w3.org/TR/sri-2/`. ([W3C][27]) - Network accessline 637
- MDN: CSP guide: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP`. ([MDN Web Docs][28]) - Network accessline 638
- MDN: `require-trusted-types-for` directive: `https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for`. ([MDN Web Docs][11]) - Network accessline 639
- MDN: Trusted Types API: `https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API`. ([MDN Web Docs][29]) - Network accessline 640
- W3C: Trusted Types specification: `https://www.w3.org/TR/trusted-types/`. ([W3C][10]) - Network accessline 641
- MDN: `javascript:` URL scheme warning: `https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript`. ([MDN Web Docs][6]) - Network accessline 642
- DOMPurify project documentation: `https://github.com/cure53/DOMPurify`. ([GitHub][17]) - Network accessline 644
[1]: https://nvd.nist.gov/vuln/detail/cve-2020-11022 'CVE-2020-11022 Detail - NVD' - Network accessline 645
[2]: https://api.jquery.com/jQuery.parseHTML/ 'jQuery.parseHTML()' - Network accessline 646
[3]: https://api.jquery.com/load/ '.load() | jQuery API Documentation' - Network accessline 647
[4]: https://api.jquery.com/jQuery.getScript/ 'jQuery.getScript()' - Network accessline 648
[5]: https://api.jquery.com/jQuery.ajax/ 'jQuery.ajax()' - Network accessline 649
[6]: https://developer.mozilla.org/en-US/docs/Web/URI/Reference/Schemes/javascript 'javascript: URLs - URIs - MDN Web Docs' [7]: https://blog.jquery.com/2026/01/17/jquery-4-0-0/ 'jQuery 4.0.0 | Official jQuery Blog' [8]: https://jquery.com/ - Network accessline 650
[7]: https://blog.jquery.com/2026/01/17/jquery-4-0-0/ 'jQuery 4.0.0 | Official jQuery Blog' [8]: https://jquery.com/download/ 'Download jQuery | jQuery' [9]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet - Network accessline 651
[8]: https://jquery.com/download/ 'Download jQuery | jQuery' - Network accessline 652
[9]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html 'Content Security Policy - OWASP Cheat Sheet Series' - Network accessline 653
[10]: https://www.w3.org/TR/trusted-types/ 'Trusted Types' - Network accessline 654
[11]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Reference/Headers/Content-Security-Policy/require-trusted-types-for 'Content-Security-Policy: require-trusted-types-for directive' - Network accessline 655
[12]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Security Response Headers Cheat Sheet' - Network accessline 656
[13]: https://nvd.nist.gov/vuln/detail/cve-2019-11358 'CVE-2019-11358 Detail - NVD' - Network accessline 657
[14]: https://api.jquery.com/text/ '.text() | jQuery API Documentation' - Network accessline 658
[15]: https://api.jquery.com/val/ '.val() | jQuery API Documentation' - Network accessline 659
[16]: https://github.com/jquery/jquery/security/advisories/GHSA-gxr4-xjj5-5px2 'Potential XSS vulnerability in jQuery.htmlPrefilter and related methods · Advisory · jquery/jquery · GitHub' - Network accessline 660
[17]: https://github.com/cure53/DOMPurify 'DOMPurify - a DOM-only, super-fast, uber-tolerant XSS ...' - Network accessline 661
[18]: https://developer.mozilla.org/en-US/docs/Web/API/HTML_Sanitizer_API 'HTML Sanitizer API - MDN Web Docs' - Network accessline 662
[19]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention Cheat Sheet' - Network accessline 663
[20]: https://api.jquery.com/jQuery.escapeSelector/ 'jQuery.escapeSelector()' - Network accessline 664
[21]: https://api.jquery.com/html/ '.html() | jQuery API Documentation' - Network accessline 665
[22]: https://api.jquery.com/append/ '.append() | jQuery API Documentation' - Network accessline 666
[23]: https://nvd.nist.gov/vuln/detail/cve-2020-11023 'CVE-2020-11023 Detail - NVD' - Network accessline 667
[24]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series' - Network accessline 668
[25]: https://cheatsheetseries.owasp.org/cheatsheets/DOM_based_XSS_Prevention_Cheat_Sheet.html 'DOM based XSS Prevention Cheat Sheet' - Network accessline 669
[26]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security - MDN Web Docs' - Network accessline 670
[27]: https://www.w3.org/TR/sri-2/ 'Subresource Integrity' - Network accessline 671
[28]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CSP 'Content Security Policy (CSP) - HTTP - MDN Web Docs' - Network accessline 672
[29]: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API 'Trusted Types API - MDN Web Docs'
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-nextjs-web-server-security.md
- Network accessline 197
IMPORTANT: Any versions older than these minor versions are vulnerable to "react2shell" vulnerability (https://nextjs.org/blog/CVE-2025-66478): - Access to secretsline 226
[Credential-related source omitted] - Access to secretsline 231
[Credential-related source omitted] - Network accessline 712
- MUST treat any server-side `fetch()` to a user-provided URL as high-risk. - Network accessline 723
- `await fetch(req.query.url)` or `await fetch((await request.json()).url)` - Network accessline 728
- Search for `fetch(` in server code and trace where the URL comes from. - Dangerous shell operationline 861
- `exec("convert " + filename)` - Dangerous shell operationline 887
- `eval(req.body.code)` - Dangerous shell operationline 892
- Search for `eval(`, `new Function`, `vm.`, `require(` with non-literals. - Network accessline 972
- Blindly cloning all request headers to an outbound `fetch()` call. - Network accessline 1008
- Use a configured, allowlisted canonical app origin (e.g., `APP_ORIGIN=https://example.com`). - Network accessline 1076
- SSRF: - `fetch(userProvidedUrl)` from Route Handlers / Server Actions - Network accessline 1077
- `fetch(userProvidedUrl)` from Route Handlers / Server Actions - Network accessline 1104
- Next.js Docs: Installation (system requirements / Node version) — `https://nextjs.org/docs/app/getting-started/installation` - Network accessline 1105
- Next.js Docs: Route Handlers — `https://nextjs.org/docs/app/getting-started/route-handlers` - Network accessline 1106
- Next.js Docs: API Routes (Pages Router) — `https://nextjs.org/docs/pages/building-your-application/routing/api-routes` - Network accessline 1107
- Next.js Docs: Environment Variables — `https://nextjs.org/docs/pages/guides/environment-variables` - Network accessline 1108
- Next.js Docs: Data Security — `https://nextjs.org/docs/app/guides/data-security` - Network accessline 1109
- Next.js Docs: Content Security Policy — `https://nextjs.org/docs/app/guides/content-security-policy` - Network accessline 1110
- Next.js Docs: Proxy — `https://nextjs.org/docs/app/getting-started/proxy` - Network accessline 1111
- Next.js Docs: `serverActions.allowedOrigins` and `serverActions.bodySizeLimit` — `https://nextjs.org/docs/app/api-reference/config/next-config-js/serverActions` - Network accessline 1112
- Next.js Docs: `cookies()` — `https://nextjs.org/docs/app/api-reference/functions/cookies` - Network accessline 1113
- Next.js Docs: `headers()` — `https://nextjs.org/docs/app/api-reference/functions/headers` - Network accessline 1114
- Next.js Docs: Self-hosting (reverse proxy guidance) — `https://nextjs.org/docs/pages/guides/self-hosting` - Network accessline 1115
- Next.js Docs: Support policy (supported versions/LTS) — `https://nextjs.org/docs/support-policy` - Network accessline 1119
- Next.js Blog: How to think about security in Next.js — `https://nextjs.org/blog/security-nextjs-server-components-actions` - Network accessline 1120
- GitHub Security Advisory: Next.js DoS via Server Components / Server Actions (CVE-2026-23864) — `https://github.com/advisories/GHSA-fq29-rrrv-cq2m` - Network accessline 1121
- Next.js Blog: Security update (example security advisory context) — `https://nextjs.org/blog/security-update` - Network accessline 1125
- OWASP Cheat Sheet Series (CSRF, Session Management, XSS Prevention, SSRF Prevention, File Upload, HTTP Headers) — `https://cheatsheetseries.owasp.org/` - Network accessline 1127
[1]: https://nextjs.org/docs/app/getting-started/route-handlers 'Getting Started: Route Handlers | Next.js' - Network accessline 1128
[2]: https://nextjs.org/docs/app/getting-started/deploying 'Getting Started: Deploying' - Network accessline 1129
[3]: https://nextjs.org/docs/pages/building-your-application/routing/api-routes 'Routing: API Routes | Next.js' - Network accessline 1130
[4]: https://nextjs.org/docs/app/api-reference/functions/headers 'Functions: headers | Next.js' - Network accessline 1131
[5]: https://nextjs.org/docs/app/api-reference/config/next-config-js/serverActions 'next.config.js: serverActions | Next.js' - Network accessline 1132
[6]: https://nextjs.org/blog/security-nextjs-server-components-actions 'How to Think About Security in Next.js | Next.js' - Network accessline 1133
[7]: https://nextjs.org/docs/pages/guides/environment-variables 'Guides: Environment Variables | Next.js' - Network accessline 1134
[8]: https://nextjs.org/docs/pages/guides/self-hosting 'Guides: Self-Hosting' - Network accessline 1135
[9]: https://nextjs.org/docs/app/api-reference/functions/cookies 'Functions: cookies | Next.js' - Network accessline 1136
[10]: https://nextjs.org/blog/next-16 'Next.js 16' - Network accessline 1137
[11]: https://github.com/vercel/next.js/security/advisories/GHSA-9g9p-9gw9-jx7f 'Denial of Service in Image Optimizer · Advisory' - Network accessline 1138
[12]: https://nextjs.org/docs/pages/guides/authentication 'Guides: Authentication | Next.js'
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-react-web-frontend-security.md
- Access to secretsline 152
[Credential-related source omitted] - Network accessline 438
- `<script src="https://cdn.example.com/lib/latest.js"></script>` with no integrity. - Network accessline 552
- `fetch('/api/transfer', { method: 'POST', credentials: 'include' })` with no CSRF token/header, relying only on cookies. - Network accessline 622
- `fetch(userProvidedUrl, { credentials: 'include' })` - Network accessline 628
- Search for `fetch(` / `axios(` where the first argument or `baseURL` is derived from: - Dangerous shell operationline 761
- `window.addEventListener('message', (e) => { eval(e.data) })` - Dangerous shell operationline 869
- `eval(`, `new Function(`, `setTimeout("`, `setInterval("` - Network accessline 907
- React 19 stable announcement — `https://react.dev/blog/2024/12/05/react-19` ([React][23]) - Network accessline 908
- React DOM docs: `dangerouslySetInnerHTML` warning — `https://react.dev/reference/react-dom/components/common#dangerouslysetting-the-inner-html` ([React][12]) - Network accessline 909
- React (legacy) JSX escaping statement — `https://legacy.reactjs.org/docs/introducing-jsx.html` ([React][14]) - Network accessline 913
- Cross Site Scripting Prevention (framework escape hatches; React `dangerouslySetInnerHTML`; URL validation notes) — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Seri - Network accessline 914
- Content Security Policy — `https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2]) - Network accessline 915
- Cross-Site Request Forgery Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6]) - Network accessline 916
- HTML5 Security (Web Storage, postMessage, tabnabbing, sandboxed frames) — `https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4]) - Network accessline 917
- Third Party JavaScript Management — `https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][5]) - Network accessline 918
- File Upload — `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][19]) - Network accessline 919
- NPM Security best practices — `https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][22]) - Network accessline 923
- Trusted Types API — `https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API` ([MDN Web Docs][3]) - Network accessline 924
- W3C Trusted Types spec — `https://www.w3.org/TR/trusted-types/` ([W3C][15]) - Network accessline 925
- Subresource Integrity — `https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity` ([MDN Web Docs][7]) - Network accessline 926
- Clickjacking defenses overview — `https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Clickjacking` ([MDN Web Docs][8]) - Network accessline 927
- Using Service Workers (HTTPS requirement; proxy-like behavior) — `https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API/Using_Service_Workers` ([MDN Web Docs][10]) - Network accessline 928
- Secure contexts (powerful APIs restricted to HTTPS) — `https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Secure_Contexts` ([MDN Web Docs][18]) - Network accessline 929
- Link `rel` values (noopener/noreferrer) — `https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/rel` ([MDN Web Docs][17]) - Network accessline 933
- Create React App env variables warning — `https://create-react-app.dev/docs/adding-custom-environment-variables/` ([create-react-app.dev][1]) - Network accessline 934
- Vite env variables security notes — `https://vite.dev/guide/env-and-mode` ([vitejs][11]) - Network accessline 938
- OAuth 2.0 for Browser-Based Apps (token storage discussion) — `https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps` ([IETF Datatracker][16]) - Network accessline 942
- npm audit docs — `https://docs.npmjs.com/cli/v10/commands/npm-audit/` ([npm Docs][20]) - Network accessline 943
- npm ci docs — `https://docs.npmjs.com/cli/v10/commands/npm-ci/` ([npm Docs][21]) - Network accessline 947
- DOMPurify — `https://github.com/cure53/DOMPurify` ([GitHub][13]) - Network accessline 949
[1]: https://create-react-app.dev/docs/adding-custom-environment-variables/ 'Adding Custom Environment Variables | Create React App' - Network accessline 950
[2]: https://cheatsheetseries.owasp.org/cheatsheets/Content_Security_Policy_Cheat_Sheet.html 'Content Security Policy - OWASP Cheat Sheet Series' - Network accessline 951
[3]: https://developer.mozilla.org/en-US/docs/Web/API/Trusted_Types_API 'Trusted Types API - Web APIs | MDN' - Network accessline 952
[4]: https://cheatsheetseries.owasp.org/cheatsheets/HTML5_Security_Cheat_Sheet.html 'HTML5 Security - OWASP Cheat Sheet Series' - Network accessline 953
[5]: https://cheatsheetseries.owasp.org/cheatsheets/Third_Party_Javascript_Management_Cheat_Sheet.html 'Third Party Javascript Management - OWASP Cheat Sheet Series' - Network accessline 954
[6]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'Cross-Site Request Forgery Prevention - OWASP Cheat Sheet Series' - Network accessline 955
[7]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security | MDN' - Network accessline 956
[8]: https://developer.mozilla.org/en-US/docs/Web/Security/Attacks/Clickjacking 'Clickjacking - Security | MDN' - Network accessline 957
[9]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'Cross Site Scripting Prevention - OWASP Cheat Sheet Series' - Network accessline 958
[10]: https://developer.mozilla.org/en-US/docs/Web/API/Service_Worker_API/Using_Service_Workers 'Using Service Workers - Web APIs | MDN' - Network accessline 959
[11]: https://vite.dev/guide/env-and-mode 'Env Variables and Modes | Vite' - Network accessline 960
[12]: https://react.dev/reference/react-dom/components/common 'Common components (e.g. <div>) – React' - Network accessline 961
[13]: https://github.com/cure53/DOMPurify 'GitHub - cure53/DOMPurify: DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and h - Network accessline 962
[14]: https://legacy.reactjs.org/docs/introducing-jsx.html 'Introducing JSX – React' - Network accessline 963
[15]: https://www.w3.org/TR/trusted-types/ 'Trusted Types' - Network accessline 964
[16]: https://datatracker.ietf.org/doc/html/draft-ietf-oauth-browser-based-apps ' - Network accessline 968
' [17]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel 'HTML attribute: rel - HTML | MDN' - Network accessline 969
[17]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel 'HTML attribute: rel - HTML | MDN' - Network accessline 970
[18]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Secure_Contexts 'Secure contexts - Security | MDN' - Network accessline 971
[19]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'File Upload - OWASP Cheat Sheet Series' - Network accessline 972
[20]: https://docs.npmjs.com/cli/v10/commands/npm-audit 'npm-audit | npm Docs' - Network accessline 973
[21]: https://docs.npmjs.com/cli/v10/commands/npm-ci 'npm-ci | npm Docs' - Network accessline 974
[22]: https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet.html 'NPM Security - OWASP Cheat Sheet Series' - Network accessline 975
[23]: https://react.dev/blog/2024/12/05/react-19 'React v19 – React'
packages/skills-catalog/skills/(security)/security-best-practices/references/javascript-typescript-vue-web-frontend-security.md
- Access to secretsline 186
[Credential-related source omitted] - Access to secretsline 192
[Credential-related source omitted] - Network accessline 502
- `fetch(url, { credentials: 'include', method: 'POST', body: ... })` with no CSRF token/header usage anywhere. - Access to secretsline 532
[Credential-related source omitted] - Network accessline 634
- `<script src="https://cdn.example/...">` with no `integrity`. - Network accessline 639
- Search `index.html` and server templates for `https://` script/style tags. - Access to secretsline 711
[Credential-related source omitted] - Network accessline 751
- Vue Docs: Security — `https://vuejs.org/guide/best-practices/security` ([Vue.js][1]) - Network accessline 752
- Vue Docs: Template Syntax (security warning about in-DOM templates) — `https://vuejs.org/guide/essentials/template-syntax` ([Vue.js][13]) - Network accessline 753
- Vue Docs: Production Deployment — `https://vuejs.org/guide/best-practices/production-deployment` ([Vue.js][3]) - Network accessline 754
- Vue Docs: Feature Flags — `https://link.vuejs.org/feature-flags` ([Vue.js][7]) - Network accessline 758
- Vite Docs: Env Variables and Modes (VITE\_\* exposure + security notes) — `https://vite.dev/guide/env-and-mode` ([vitejs][2]) - Network accessline 759
- Vite Docs: CLI (`vite preview` not designed for production) — `https://vite.dev/guide/cli` ([vitejs][5]) - Network accessline 760
- Vite Docs: Server Options (`server.host` can listen on public addresses) — `https://vite.dev/config/server-options` ([vitejs][14]) - Network accessline 764
- OWASP Cheat Sheet Series: XSS Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([Vue.js][1]) - Network accessline 765
- OWASP Cheat Sheet Series: CSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][9]) - Network accessline 766
- OWASP Cheat Sheet Series: Authorization — `https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][8]) - Network accessline 767
- OWASP Cheat Sheet Series: HTTP Headers — `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][4]) - Network accessline 768
- HTML5 Security Cheat Sheet (referenced by Vue) — `https://html5sec.org/` ([Vue.js][1]) - Network accessline 772
- MDN: `rel="noopener"` — `https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener` ([MDN Web Docs][12]) - Network accessline 773
- MDN: Subresource Integrity — `https://developer.mozilla.org/en-US/docs/Web/Security/Subresource_Integrity` ([MDN Web Docs][11]) - Network accessline 774
- web.dev: Trusted Types — `https://web.dev/trusted-types/` ([web.dev][10]) - Network accessline 776
[1]: https://vuejs.org/guide/best-practices/security 'https://vuejs.org/guide/best-practices/security' - Network accessline 777
[2]: https://vite.dev/guide/env-and-mode 'https://vite.dev/guide/env-and-mode' - Network accessline 778
[3]: https://vuejs.org/guide/best-practices/production-deployment 'https://vuejs.org/guide/best-practices/production-deployment' - Network accessline 779
[4]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html' - Network accessline 780
[5]: https://vite.dev/guide/cli 'https://vite.dev/guide/cli' - Network accessline 781
[6]: https://vite.dev/guide/build 'https://vite.dev/guide/build' - Network accessline 782
[7]: https://vuejs.org/guide/best-practices/production-deployment 'Production Deployment' - Network accessline 783
[8]: https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html' - Network accessline 784
[9]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html' - Network accessline 785
[10]: https://web.dev/articles/trusted-types 'https://web.dev/articles/trusted-types' - Network accessline 786
[11]: https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity 'Subresource Integrity - Security - MDN Web Docs' - Network accessline 787
[12]: https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener 'https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Attributes/rel/noopener' - Network accessline 788
[13]: https://vuejs.org/guide/essentials/template-syntax 'Template Syntax | Vue.js' - Network accessline 789
[14]: https://vite.dev/config/server-options 'https://vite.dev/config/server-options'
packages/skills-catalog/skills/(security)/security-best-practices/references/python-django-web-server-security.md
- Access to secretsline 170
[Credential-related source omitted] - Access to secretsline 199
[Credential-related source omitted] - Network accessline 853
- Django Downloads (current stable & supported branches): https://www.djangoproject.com/download/ - Network accessline 854
- Django 6.0 Release Notes: https://docs.djangoproject.com/en/6.0/releases/6.0/ - Network accessline 855
- Django: Deployment checklist (incl. check --deploy, runserver warning, HTTPS/cookies guidance): https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/ - Network accessline 856
- Django: Settings reference (SecurityMiddleware settings, cookies, SECRET_KEY_FALLBACKS, CSP settings): https://docs.djangoproject.com/en/6.0/ref/settings/ - Network accessline 857
- Django: Security in Django (XSS/CSRF/SQLi/clickjacking/HTTPS/host header validation/uploads/CSP): https://docs.djangoproject.com/en/6.0/topics/security/ - Network accessline 858
- Django: CSRF how-to (middleware, csrf_token usage, AJAX header patterns, csrf_exempt cautions): https://docs.djangoproject.com/en/6.0/howto/csrf/ - Network accessline 859
- Django: Performing raw SQL queries (parameterization guidance): https://docs.djangoproject.com/en/6.0/topics/db/sql/ - Network accessline 860
- Django: QuerySet API reference (extra() cautions; “do not quote placeholders” guidance): https://docs.djangoproject.com/en/6.0/ref/models/querysets/ - Network accessline 861
- Django: Template built-ins (autoescape tag): https://docs.djangoproject.com/en/6.0/ref/templates/builtins/ - Network accessline 862
- Django: Template language reference (turning off autoescape & risks): https://docs.djangoproject.com/en/6.0/ref/templates/language/ - Network accessline 863
- Django: Utilities reference (e.g., format_html): https://docs.djangoproject.com/en/6.0/ref/utils/ - Network accessline 869
- OWASP Cheat Sheet Series: Django Security Cheat Sheet: https://cheatsheetseries.owasp.org/cheatsheets/Django_Security_Cheat_Sheet.html - Network accessline 872
[1]: https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/ 'https://docs.djangoproject.com/en/6.0/howto/deployment/checklist/' - Network accessline 873
[2]: https://docs.djangoproject.com/en/6.0/topics/security/ 'Security in Django | Django documentation | Django' - Network accessline 874
[3]: https://docs.djangoproject.com/en/6.0/ref/settings/ 'Settings | Django documentation | Django' - Network accessline 875
[4]: https://docs.djangoproject.com/en/6.0/howto/csrf/ 'How to use Django’s CSRF protection | Django documentation | Django' - Network accessline 876
[5]: https://docs.djangoproject.com/en/6.0/ref/templates/builtins/ 'https://docs.djangoproject.com/en/6.0/ref/templates/builtins/' - Network accessline 877
[6]: https://docs.djangoproject.com/en/6.0/ref/utils/ 'https://docs.djangoproject.com/en/6.0/ref/utils/' - Network accessline 878
[7]: https://docs.djangoproject.com/en/6.0/topics/db/sql/ 'https://docs.djangoproject.com/en/6.0/topics/db/sql/' [8]: https://docs.djangoproject.com/en/6.0/ref/models/querysets/ 'https://docs.djangoproject.com/en/6.0/ref/models/querysets/' - Network accessline 879
[8]: https://docs.djangoproject.com/en/6.0/ref/models/querysets/ 'https://docs.djangoproject.com/en/6.0/ref/models/querysets/' - Network accessline 880
[9]: https://www.djangoproject.com/download/ 'Download Django | Django'
packages/skills-catalog/skills/(security)/security-best-practices/references/python-fastapi-web-server-security.md
- Access to secretsline 239
[Credential-related source omitted] - Access to secretsline 244
[Credential-related source omitted] - Network accessline 812
- `httpx.get(request.query_params["url"])` - Access to secretsline 915
[Credential-related source omitted] - Network accessline 962
- FastAPI (PyPI metadata, versioning) — `https://pypi.org/project/fastapi/` ([PyPI][1]) - Network accessline 963
- FastAPI docs: Security “First Steps” (Authorization Bearer header conventions) — `https://fastapi.tiangolo.com/tutorial/security/first-steps/` ([FastAPI][11]) - Network accessline 964
- FastAPI reference: Dependencies (`Depends`, `Security`) — `https://fastapi.tiangolo.com/reference/dependencies/` ([FastAPI][7]) - Network accessline 965
- FastAPI reference: APIRouter (router-level dependencies) — `https://fastapi.tiangolo.com/reference/apirouter/` ([FastAPI][28]) - Network accessline 966
- FastAPI docs: WebSockets — `https://fastapi.tiangolo.com/advanced/websockets/` ([FastAPI][27]) - Network accessline 970
- Starlette (PyPI, general capabilities) — `https://pypi.org/project/starlette/` ([PyPI][5]) - Network accessline 971
- Starlette docs: WebSockets — `https://starlette.dev/websockets/` ([Starlette][3]) - Network accessline 972
- Uvicorn (PyPI metadata) — `https://pypi.org/project/uvicorn/` ([PyPI][4]) - Network accessline 973
- Pydantic docs (v2.12.x) — `https://docs.pydantic.dev/latest/` ([Pydantic][29]) - Network accessline 977
- OWASP Cheat Sheet Series: Session Management — `https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][8]) - Network accessline 978
- OWASP Cheat Sheet Series: CSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][2]) - Network accessline 979
- OWASP Cheat Sheet Series: XSS Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][16]) - Network accessline 980
- OWASP Cheat Sheet Series: Mass Assignment — `https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][14]) - Network accessline 981
- OWASP API Security Top 10 (2023) — `https://owasp.org/API-Security/editions/2023/en/0x11-t10/` ([OWASP Foundation][13]) - Network accessline 982
- OWASP Cheat Sheet Series: SQL Injection Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][21]) - Network accessline 983
- OWASP Cheat Sheet Series: OS Command Injection Defense — `https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][22]) - Network accessline 984
- OWASP Cheat Sheet Series: SSRF Prevention — `https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][23]) - Network accessline 985
- OWASP Cheat Sheet Series: File Upload — `https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][20]) - Network accessline 986
- OWASP Cheat Sheet Series: Unvalidated Redirects and Forwards — `https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][24]) - Network accessline 987
- OWASP Cheat Sheet Series: HTTP Security Response Headers — `https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][6]) - Network accessline 988
- OWASP Cheat Sheet Series: WebSocket Security — `https://cheatsheetseries.owasp.org/cheatsheets/WebSocket_Security_Cheat_Sheet.html` ([OWASP Cheat Sheet Series][25]) - Network accessline 989
- OWASP WSTG: Testing for Server-Side Template Injection — `https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection` ([OWASP F - Network accessline 990
- OWASP WSTG: Testing WebSockets — `https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets` ([OWASP Foundation][26]) - Network accessline 994
- Jinja: Sandbox — `https://jinja.palletsprojects.com/en/stable/sandbox/` ([jinja.palletsprojects.com][18]) - Network accessline 998
- CVE-2023-29159 (StaticFiles path traversal; fixed 0.27.0) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2023-29159/` ([advisories.gitlab.com][10]) - Network accessline 999
- CVE-2024-47874 (multipart/form-data DoS; fixed 0.40.0) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2024-47874/` ([advisories.gitlab.com][9]) - Network accessline 1000
- CVE-2025-62727 (FileResponse Range header DoS; fixed 0.49.1) — `https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2025-62727/` ([advisories.gitlab.com][19]) - Network accessline 1002
[1]: https://pypi.org/project/fastapi/ 'https://pypi.org/project/fastapi/' - Network accessline 1003
[2]: https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html' - Network accessline 1004
[3]: https://starlette.dev/websockets/ 'Websockets' - Network accessline 1005
[4]: https://pypi.org/project/uvicorn/ 'https://pypi.org/project/uvicorn/' - Network accessline 1006
[5]: https://pypi.org/project/starlette/ 'https://pypi.org/project/starlette/' - Network accessline 1007
[6]: https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html 'HTTP Security Response Headers Cheat Sheet' - Network accessline 1008
[7]: https://fastapi.tiangolo.com/reference/dependencies/ 'Dependencies - Depends() and Security() - FastAPI' - Network accessline 1009
[8]: https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html' - Network accessline 1010
[9]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2024-47874/ 'Starlette Denial of service (DoS) via multipart/form-data | GitLab Advisory Database' - Network accessline 1011
[10]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2023-29159/ 'Starlette has Path Traversal vulnerability in StaticFiles | GitLab Advisory Database' - Network accessline 1012
[11]: https://fastapi.tiangolo.com/tutorial/security/first-steps/ 'Security - First Steps - FastAPI' - Network accessline 1013
[12]: https://fastapi.tiangolo.com/tutorial/response-model/ 'https://fastapi.tiangolo.com/tutorial/response-model/' - Network accessline 1014
[13]: https://owasp.org/API-Security/editions/2023/en/0x11-t10/ 'https://owasp.org/API-Security/editions/2023/en/0x11-t10/' - Network accessline 1015
[14]: https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Mass_Assignment_Cheat_Sheet.html' - Network accessline 1016
[15]: https://fastapi.tiangolo.com/tutorial/extra-models/ 'https://fastapi.tiangolo.com/tutorial/extra-models/' - Network accessline 1017
[16]: https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html' - Network accessline 1018
[17]: https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection 'Testing for Server Side Template Injection' - Network accessline 1019
[18]: https://jinja.palletsprojects.com/en/stable/sandbox/ 'Sandbox — Jinja Documentation (3.1.x)' - Network accessline 1020
[19]: https://advisories.gitlab.com/pkg/pypi/starlette/CVE-2025-62727/ 'Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse`` | GitLab Advisory Database' - Network accessline 1021
[20]: https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html' - Network accessline 1022
[21]: https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html' - Network accessline 1023
[22]: https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html' - Network accessline 1024
[23]: https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html 'https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html' - Network accessline 1025
[24]: https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html 'Unvalidated Redirects and Forwards Cheat Sheet' - Network accessline 1026
[25]: https://cheatsheetseries.owasp.org/cheatsheets/WebSocket_Security_Cheat_Sheet.html 'WebSocket Security - OWASP Cheat Sheet Series' - Network accessline 1027
[26]: https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/11-Client-side_Testing/10-Testing_WebSockets 'WSTG - Latest | OWASP Foundation' - Network accessline 1028
[27]: https://fastapi.tiangolo.com/advanced/websockets/ 'WebSockets - FastAPI' - Network accessline 1029
[28]: https://fastapi.tiangolo.com/reference/apirouter/ 'APIRouter class - FastAPI' - Network accessline 1030
[29]: https://docs.pydantic.dev/latest/ 'https://docs.pydantic.dev/latest/'
packages/skills-catalog/skills/(security)/security-best-practices/references/python-flask-web-server-security.md
- Network accessline 639
- `requests.get(request.args["url"])` - Network accessline 801
- Flask Docs: Deploying to Production — https://flask.palletsprojects.com/en/stable/deploying/ - Network accessline 802
- Flask Docs: Debugging Application Errors — https://flask.palletsprojects.com/en/stable/debugging/ - Network accessline 803
- Flask Docs: Configuration Handling — https://flask.palletsprojects.com/en/stable/config/ - Network accessline 804
- Flask Docs: Security Considerations — https://flask.palletsprojects.com/en/stable/web-security/ - Network accessline 805
- Flask Docs: Tell Flask it is Behind a Proxy — https://flask.palletsprojects.com/en/stable/deploying/proxy_fix/ - Network accessline 806
- Flask API Docs: Sessions — https://flask.palletsprojects.com/en/stable/api/#sessions - Network accessline 810
- Werkzeug Docs: Utilities (send_file / send_from_directory / safe_join / secure_filename / password hashing) — https://werkzeug.palletsprojects.com/en/stable/utils/ - Network accessline 811
- GitHub Advisory: CVE-2025-66221 (Werkzeug safe_join Windows device names) — https://github.com/advisories/GHSA-hgf8-39gv-g3f2 - Network accessline 815
- Session Management — https://cheatsheetseries.owasp.org/cheatsheets/Session_Management_Cheat_Sheet.html - Network accessline 816
- CSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html - Network accessline 817
- XSS Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.html - Network accessline 818
- Input Validation — https://cheatsheetseries.owasp.org/cheatsheets/Input_Validation_Cheat_Sheet.html - Network accessline 819
- SQL Injection Prevention — https://cheatsheetseries.owasp.org/cheatsheets/SQL_Injection_Prevention_Cheat_Sheet.html - Network accessline 820
- Injection Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Injection_Prevention_Cheat_Sheet.html - Network accessline 821
- OS Command Injection Defense — https://cheatsheetseries.owasp.org/cheatsheets/OS_Command_Injection_Defense_Cheat_Sheet.html - Network accessline 822
- SSRF Prevention — https://cheatsheetseries.owasp.org/cheatsheets/Server_Side_Request_Forgery_Prevention_Cheat_Sheet.html - Network accessline 823
- File Upload — https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html - Network accessline 824
- Unvalidated Redirects — https://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html - Network accessline 825
- HTTP Headers — https://cheatsheetseries.owasp.org/cheatsheets/HTTP_Headers_Cheat_Sheet.html - Network accessline 829
- Jinja: Sandbox (rendering untrusted templates) — https://jinja.palletsprojects.com/en/stable/sandbox/ - Network accessline 830
- OWASP WSTG: Testing for Server-Side Template Injection — https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection - Network accessline 831
- PortSwigger Web Security Academy: Server-side template injection — https://portswigger.net/web-security/server-side-template-injection - Network accessline 835
- RFC 9110: HTTP Semantics (safe methods) — https://www.rfc-editor.org/rfc/rfc9110
packages/skills-catalog/skills/(security)/security-ownership-map/LICENSE.txt
packages/skills-catalog/skills/(security)/security-ownership-map/scripts/build_ownership_map.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(security)/security-ownership-map/scripts/community_maintainers.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(security)/security-ownership-map/scripts/query_ownership.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(security)/security-ownership-map/scripts/run_ownership_map.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(security)/security-threat-model/LICENSE.txt
packages/skills-catalog/skills/(tooling)/excalidraw-studio/SKILL.md
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/business-flow-swimlane-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/class-diagram-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/data-flow-diagram-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/er-diagram-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/flowchart-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/mindmap-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/relationship-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/assets/sequence-diagram-template.json
packages/skills-catalog/skills/(tooling)/excalidraw-studio/references/excalidraw-schema.md
- Network accessline 9
"type": "excalidraw", "version": 2, "source": "https://excalidraw.com", - Network accessline 10
"version": 2, "source": "https://excalidraw.com", "elements": [], - Network accessline 11
"source": "https://excalidraw.com", - Network accessline 368
Excalidraw's native color picker is built around [Open Colors](https://yeun.github.io/open-colors/). Use shade-2 for fills and shade-8 for matching strokes to create depth. - Network accessline 705
"type": "excalidraw", "version": 2, "source": "https://excalidraw.com", - Network accessline 706
"version": 2, "source": "https://excalidraw.com", "elements": [ - Network accessline 707
"source": "https://excalidraw.com",
packages/skills-catalog/skills/(tooling)/excalidraw-studio/references/icon-libraries.md
- Network accessline 107
- Visit: <https://libraries.excalidraw.com/> - Search for the desired icon set (e.g., "AWS Architecture Icons") - Click download to get the `.excalidrawlib` file - Network accessline 154
This workflow works with any valid `.excalidrawlib` file from <https://libraries.excalidraw.com/>. Common categories:
packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/.gitignore
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/README.md
- Network accessline 28
2. **Download and place library file**: - Visit: <https://libraries.excalidraw.com/> - Network accessline 29
- Visit: <https://libraries.excalidraw.com/> - Search for "AWS Architecture Icons" and download the `.excalidrawlib` file - Rename it to match the directory name: `aws-architecture-icons.excalidrawlib` - Network accessline 72
1. Download desired Excalidraw libraries from <https://libraries.excalidraw.com/> - Network accessline 79
- Examples found on <https://libraries.excalidraw.com/> may include cloud/service icon sets.
packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/add-arrow.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/add-icon-to-diagram.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(tooling)/excalidraw-studio/scripts/split-excalidraw-library.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(tooling)/gh-fix-ci/LICENSE.txt
packages/skills-catalog/skills/(tooling)/gh-fix-ci/SKILL.md
- Network accessline 71
- `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "123"` - `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "https://github.com/org/repo/pull/123" --json` - Network accessline 72
- `python "<path-to-skill>/scripts/inspect_pr_checks.py" --repo "." --pr "https://github.com/org/repo/pull/123" --json`
packages/skills-catalog/skills/(tooling)/gh-fix-ci/scripts/inspect_pr_checks.py
- Executable scriptline 1
#!/usr/bin/env python3
packages/skills-catalog/skills/(tooling)/mermaid-studio/references/aws-architecture.md
- Network accessline 162
**Note:** Not all AWS services have icons in the `logos` pack. If a specific icon is not available, use the closest category-appropriate built-in icon as fallback. You can verify icon availability at https://icon-sets.iconify.design/?q=aws. - Network accessline 315
{ name: 'logos', loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()), - Network accessline 316
name: 'logos', loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()), }, - Network accessline 317
loader: () => fetch('https://unpkg.com/@iconify-json/logos/icons.json').then((res) => res.json()),
packages/skills-catalog/skills/(tooling)/mermaid-studio/references/diagram-types.md
- Network accessline 102
click A "https://example.com" "Tooltip text" _blank
packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/batch.mjs
- Executable scriptline 1
#!/usr/bin/env node
packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/render-ascii.mjs
- Executable scriptline 1
#!/usr/bin/env node
packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/render.mjs
- Executable scriptline 1
#!/usr/bin/env node - Network accessline 126
const ICON_PACK_URLS = { logos: "https://unpkg.com/@iconify-json/logos/icons.json", - Network accessline 127
logos: "https://unpkg.com/@iconify-json/logos/icons.json", - Network accessline 128
fa: "https://unpkg.com/@iconify-json/fa6-regular/icons.json", - Network accessline 129
"fa-solid": "https://unpkg.com/@iconify-json/fa6-solid/icons.json", - Network accessline 130
"fa-brands": "https://unpkg.com/@iconify-json/fa6-brands/icons.json", - Network accessline 131
mdi: "https://unpkg.com/@iconify-json/mdi/icons.json", - Network accessline 132
"simple-icons": "https://unpkg.com/@iconify-json/simple-icons/icons.json", - Network accessline 318
.map( (name) => `{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }` - Network accessline 319
(name) => `{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }` ) - Network accessline 320
`{ name: '${name}', loader: () => fetch('${ICON_PACK_URLS[name]}').then(r => r.json()) }` - Network accessline 346
<div id="container"></div> <script type="module"> import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs'; - Network accessline 348
import mermaid from 'https://cdn.jsdelivr.net/npm/mermaid@11/dist/mermaid.esm.min.mjs';
packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/setup.sh
- Executable scriptline 1
#!/usr/bin/env bash - Network accessline 15
if ! command -v node &>/dev/null; then echo "ERROR: Node.js is required but not found." echo "Install Node.js 18+ from https://nodejs.org" - Network accessline 16
echo "ERROR: Node.js is required but not found." echo "Install Node.js 18+ from https://nodejs.org" exit 1 - Network accessline 17
echo "Install Node.js 18+ from https://nodejs.org"
packages/skills-catalog/skills/(tooling)/mermaid-studio/scripts/validate.mjs
- Executable scriptline 1
#!/usr/bin/env node
packages/skills-catalog/skills/(tooling)/nx-ci-monitor/SKILL.md
- Network accessline 48
[ci-monitor] Nx Cloud not connected. Unlock 70% faster CI and auto-fix broken PRs with https://nx.dev/nx-cloud
packages/skills-catalog/skills/(tooling)/nx-workspace/reference/best-practices.md
- Dangerous shell operationline 450
rm migrations.json
packages/skills-catalog/skills/(tooling)/nx-workspace/reference/ci-cd.md
packages/skills-catalog/skills/(tooling)/nx-workspace/reference/commands.md
- Dangerous shell operationline 220
rm -rf .nx/cache
packages/skills-catalog/skills/(web-automation)/demo/SKILL.md
- Network accessline 44
1. For form 1, read the views/routes of the flow to pick stable locators, and work out how to sign in (and with which test account) from the project's code and docs (AGENTS.md, README; `/demo init` sets that up). Then write the demo script - Network accessline 45
2. Record: `$SKILL_DIR/scripts/record <name>`. The first run builds the Docker image (tag hashed from the assets, so edits rebuild automatically). Before launching the browser the recorder checks that `app.url` (unset, `http://localhost:$PO - Network accessline 93
Create it with every default documented in place with `/demo init` (`$SKILL_DIR/scripts/config`), then edit or delete lines. It never overwrites an existing file. The file's comments are the reference for each key; defaults and pace presets
packages/skills-catalog/skills/(web-automation)/demo/assets/config.mjs
- Executable scriptline 1
Executable file - Network accessline 37
export const DEFAULTS = { app: { url: `http://localhost:${process.env.PORT || 3000}` }, - Network accessline 38
app: { url: `http://localhost:${process.env.PORT || 3000}` }, - Network accessline 157
// Where the app under demo is served. Unset, it is http://localhost:$PORT, - Network accessline 159
// is the host's localhost: the recorder shares the host network on Linux // and forwards to host.docker.internal on macOS. // url: 'http://localhost:3000' - Network accessline 161
// url: 'http://localhost:3000'
packages/skills-catalog/skills/(web-automation)/demo/assets/docker/Dockerfile
- Executable scriptline 1
Executable file - Dangerous shell operationline 4
RUN apt-get update && apt-get install -y --no-install-recommends xvfb x11-utils xdotool ffmpeg dbus-x11 procps socat xfwm4 xfce4-panel xfce4-settings feh papirus-icon-theme fonts-dejavu-core && rm -rf /var/lib/apt/lists/* - Dangerous shell operationline 7
&& rm -rf /var/lib/apt/lists/*
packages/skills-catalog/skills/(web-automation)/demo/assets/docker/package.json
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(web-automation)/demo/assets/docker/record.sh
- Executable scriptline 1
#!/usr/bin/env bash - Dangerous shell operationline 13
rm -f "$PARTIAL_VIDEO" "$EVENTS_OUT" "$FAILED_OUT.png" "$FAILED_OUT.json" - Dangerous shell operationline 29
rm -f "$RUN_DIR/demo.config.mjs" - Dangerous shell operationline 39
eval "$CONFIG_ENV" - Network accessline 49
trap 'kill "$SOCAT_PID" 2>/dev/null || true' EXIT for _ in $(seq 1 50); do (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break - Network accessline 50
for _ in $(seq 1 50); do (exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break sleep 0.1 - Dangerous shell operationline 51
(exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break - Network accessline 51
(exec 3<>"/dev/tcp/127.0.0.1/$APP_PORT") 2>/dev/null && break - Network accessline 58
if ! node -e 'fetch(process.env.APP_URL, { redirect: "manual", signal: AbortSignal.timeout(5000) }).catch(() => process.exit(1))'; then - Dangerous shell operationline 80
eval "$(dbus-launch --sh-syntax)" - Dangerous shell operationline 96
rm -f "$RECORD_SIGNAL" "$RECORD_SIGNAL.started" "$RECORD_SIGNAL.stop" "$RECORD_SIGNAL.stopped" - Dangerous shell operationline 180
rm -f "$PARTIAL_VIDEO" "$EVENTS_OUT"
packages/skills-catalog/skills/(web-automation)/demo/assets/lib.mjs
packages/skills-catalog/skills/(web-automation)/demo/references/init.md
- Network accessline 6
2. Read the project's agent docs (AGENTS.md, CLAUDE.md, README) and check that they cover what a demo needs: - **Start**: the command that starts the app locally. - **URL**: where it serves. The recorder uses `http://localhost:$PORT` - Network accessline 7
- **Start**: the command that starts the app locally. - **URL**: where it serves. The recorder uses `http://localhost:$PORT` (environment, then `.env`, else 3000), which reaches the host's localhost on Linux and macOS, so only a differen - Network accessline 8
- **URL**: where it serves. The recorder uses `http://localhost:$PORT` (environment, then `.env`, else 3000), which reaches the host's localhost on Linux and macOS, so only a different host needs `app.url` in `.demos/demo.config.mjs`.
packages/skills-catalog/skills/(web-automation)/demo/scripts/config
- Executable scriptline 1
#!/usr/bin/env bash
packages/skills-catalog/skills/(web-automation)/demo/scripts/record
packages/skills-catalog/skills/(web-automation)/playwright-skill/API_REFERENCE.md
- Network accessline 56
reporter: 'html', use: { baseURL: 'http://localhost:3000', - Network accessline 57
use: { baseURL: 'http://localhost:3000', trace: 'on-first-retry', - Network accessline 58
baseURL: 'http://localhost:3000', - Network accessline 69
webServer: { command: 'npm run start', url: 'http://localhost:3000', - Network accessline 70
command: 'npm run start', url: 'http://localhost:3000', reuseExistingServer: !process.env.CI, - Network accessline 71
url: 'http://localhost:3000', - Network accessline 98
// Navigate await page.goto('https://example.com', { - Network accessline 99
await page.goto('https://example.com', { - Network accessline 308
// Page assertions await expect(page).toHaveTitle('My App'); await expect(page).toHaveURL('https://example.com/dashboard'); - Network accessline 309
await expect(page).toHaveTitle('My App'); await expect(page).toHaveURL('https://example.com/dashboard'); await expect(page).toHaveURL(/.*dashboard/); - Network accessline 310
await expect(page).toHaveURL('https://example.com/dashboard'); - Network accessline 498
// Measure page load time const startTime = Date.now(); await page.goto('https://example.com'); - Network accessline 499
const startTime = Date.now(); await page.goto('https://example.com'); const loadTime = Date.now() - startTime; - Network accessline 500
await page.goto('https://example.com'); - Network accessline 642
# Generate code npx playwright codegen https://example.com - Network accessline 643
npx playwright codegen https://example.com - Network accessline 651
- [Playwright Documentation](https://playwright.dev/docs/intro) - Network accessline 652
- [API Reference](https://playwright.dev/docs/api/class-playwright) - Network accessline 653
- [Best Practices](https://playwright.dev/docs/best-practices)
packages/skills-catalog/skills/(web-automation)/playwright-skill/SKILL.md
- Network accessline 63
// Parameterized URL (detected or user-provided) const TARGET_URL = 'http://localhost:3001' // <-- Auto-detected or from user - Network accessline 64
const TARGET_URL = 'http://localhost:3001' // <-- Auto-detected or from user - Network accessline 94
const TARGET_URL = 'http://localhost:3001' // Auto-detected - Network accessline 120
const TARGET_URL = 'http://localhost:3001' // Auto-detected - Network accessline 156
const TARGET_URL = 'http://localhost:3001' // Auto-detected - Network accessline 186
await page.goto('http://localhost:3000') - Network accessline 221
try { await page.goto('http://localhost:3000', { - Network accessline 222
await page.goto('http://localhost:3000', { - Network accessline 247
const TARGET_URL = 'http://localhost:3001' // Auto-detected - Network accessline 288
const browser = await chromium.launch({ headless: false }); const page = await browser.newPage(); await page.goto('http://localhost:3001'); - Network accessline 289
const page = await browser.newPage(); await page.goto('http://localhost:3001'); await page.screenshot({ path: '/tmp/quick-screenshot.png', fullPage: true }); - Network accessline 290
await page.goto('http://localhost:3001'); - Network accessline 422
[Runs: detectDevServers()] [Output: Found server on port 3001] I found your dev server running on http://localhost:3001 - Network accessline 424
I found your dev server running on http://localhost:3001 - Network accessline 436
[Output: Found servers on ports 3000 and 3001] I found 2 dev servers. Which one should I test? - http://localhost:3000 - Network accessline 437
I found 2 dev servers. Which one should I test? - http://localhost:3000 - http://localhost:3001 - Network accessline 438
- http://localhost:3000 - Network accessline 439
- http://localhost:3001
packages/skills-catalog/skills/(web-automation)/playwright-skill/lib/helpers.js
- Executable scriptline 1
Executable file - Network accessline 397
}, (res) => { if (res.statusCode < 500) { detectedServers.push(`http://localhost:${port}`); - Network accessline 398
if (res.statusCode < 500) { detectedServers.push(`http://localhost:${port}`); console.log(` ✅ Found server on port ${port}`); - Network accessline 399
detectedServers.push(`http://localhost:${port}`);
packages/skills-catalog/skills/(web-automation)/playwright-skill/package.json
- Executable scriptline 1
Executable file
packages/skills-catalog/skills/(web-automation)/playwright-skill/run.js
- Executable scriptline 1
#!/usr/bin/env node
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Declared and executed: 1 fact
- Contacts calculator.aws, which SKILL.md, the README and the plugin manifest do not mentionaws-advisor/scripts/cost_considerations.py:37High confidence
Signal confidence: 499 facts
- Executable script in code of a file that runsevolutionary-modular-architecture/scripts/validate-boundaries.mjs:1High confidence
- Executable script in code of a file that runsevolutionary-modular-architecture/scripts/validate-structure.mjs:1High confidence
- Network access in code of documentationfrontend-blueprint/references/stitch-integration.md:95Low confidence
- Network access in code of documentationfrontend-blueprint/references/stitch-integration.md:111Low confidence
- Network access in code of documentationfrontend-blueprint/references/stitch-integration.md:127Low confidence
- Network access in code of documentationfrontend-blueprint/references/stitch-integration.md:128Low confidence
- Network access in code of documentationfrontend-blueprint/references/stitch-integration.md:138Low confidence
- Access to secrets in code of documentation: a variable, placeholder or call, not a stored valuefrontend-blueprint/references/stitch-integration.md:155Low confidence
- Network access in prose of documentationfrontend-blueprint/references/stitch-integration.md:175Low confidence
- Network access in prose of documentationfrontend-blueprint/references/stitch-integration.md:176Low confidence
- Network access in prose of documentationfrontend-blueprint/references/stitch-integration.md:177Low confidence
- Network access in prose of documentationreact-composition-patterns/AGENTS.md:944Low confidence
- Network access in prose of documentationreact-composition-patterns/AGENTS.md:945Low confidence
- Network access in prose of documentationreact-composition-patterns/AGENTS.md:946Low confidence
- Network access in prose of documentationreact-composition-patterns/rules/_template.md:24Low confidence
- Network access in code of documentationaws-advisor/references/mcp-guide.md:115Low confidence
- Network access in code of documentationaws-advisor/references/mcp-guide.md:116Low confidence
- Executable script in code of a file that runsaws-advisor/scripts/architecture_validator.py:1High confidence
- Executable script in code of a file that runsaws-advisor/scripts/cost_considerations.py:1High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:35High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:36High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:37High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:54High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:55High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:56High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:78High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:79High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:80High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:99High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:100High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:101High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:121High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:122High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:123High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:142High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:143High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:144High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:161High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:162High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:163High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:178High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:179High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:180High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:194High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:195High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:196High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:209High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:210High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:211High confidence
- Network access in code of a file that runsaws-advisor/scripts/cost_considerations.py:250High confidence
and 449 more
Only the first 500 facts are listed.
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md packages/skills-catalog/skills/(architecture)/component-common-domain-detection/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
Explore alternatives and comparisons
Add this badge to your README
It updates every night and links to this page.
[](https://hotskills.dev/skill/tech-leads-club-agent-skills/)