Agent Skills Library

Rigorous code review workflow for Spring Boot services examining transactions, JPA queries, concurrency, and validation.

Inspect Next.js App Router code for RSC boundaries, data fetching waterfalls, caching, and hydration safety.

Audit TypeScript code for type safety, type narrowing, generics, mutation traps, and runtime boundary validation.

Structured PR review workflow categorizing findings into Blocker, Major, Minor, and Nitpick with actionable diffs.

Audit backend and frontend code for injection, authentication flaws, IDOR, SSRF, and sensitive data leakage.

Systematic investigation workflow for diagnosing production exceptions and constructing verified patches.

Diagnose Postgres/MySQL transaction deadlocks, lock contention, and concurrent update race conditions.

Analyze heap snapshots, unclosed event listeners, and runaway closures causing Node.js OOM crashes.

Diagnose slow database queries, serialization bottlenecks, and memory churn in sluggish API endpoints.

Fix nondeterministic test failures, unhandled async promises, and race conditions in Playwright, Jest, or Vitest.

Generate mutation-tested unit tests with Arrange-Act-Assert structure, boundary cases, and proper mock boundaries.

Create robust integration test suites with real databases in Docker containers and contract verification.

Generate adversarial fuzzing test cases, SQL injection payloads, and schema violation matrices for REST endpoints.

Validate database schema migrations for zero data loss, backward compatibility, and forward/backward rollbacks.

Audit test suites by simulating mutant bugs (flipped conditionals, off-by-one errors) to expose weak assertions.

Safely modernize fragile legacy codebases using Martin Fowler refactoring patterns and characterization tests.

Decompose monolithic 1,000+ line classes into Single Responsibility components using SOLID design patterns.

Convert blocking I/O code into non-blocking async/await, reactive streams, or virtual threads.

Generate a step-by-step upgrade strategy for major framework shifts (e.g. Next 12 to 15, Spring 2 to 3).

Refactor tangled MVC controllers and service layers into Clean Architecture (Ports & Adapters).

Design or review RESTful API contracts for idempotency, pagination, error models, and non-breaking versioning.

Design production PostgreSQL schemas with composite indexes, foreign key strategies, and partitioning.

Deconstruct monoliths or complex systems into bounded contexts with clear domain events and data ownership.

Generate thorough, engineering-ready Request for Comments (RFC) and Architecture Decision Records (ADRs).

Review Kafka, RabbitMQ, or SQS/SNS event architectures for exactly-once semantics, out-of-order delivery, and DLQs.

Transform Jira user stories and acceptance criteria into vertically sliced, test-backed code implementations.

Implement production-grade third-party webhook receivers with cryptographic verification and background processing.

Implement multi-tenant permissions, role hierarchies, and tamper-resistant audit logs.

Generate custom, context-rich project rules (.cursorrules / .windsurfrules) that stop agents from making recurring mistakes.

Prompt an agent to analyze an unfamiliar codebase and deliver an architectural breakdown, data flows, and gotchas.

Trace user requests from UI actions or API ingress through middleware, services, queues, and database tables.

Evaluate the downstream risks, broken callers, and database implications before making complex code changes.

Prompt orchestrating agents to delegate subtasks to child agents with strict verification gates and bounded context.

Optimize Dockerfiles for minimal image size, non-root security, layer caching, and CVE vulnerability reduction.

Speed up slow GitHub Actions workflows with dependency caching, matrix parallelization, and security secrets.

Audit Kubernetes manifests for CPU/memory requests, readiness/liveness probes, HPA, and Pod Disruption Budgets.

Audit Terraform HCL code for IAM over-permissioning, unencrypted storage, public security groups, and drift risks.

Plan high-volume, live table restructuring and large column migrations without application outages.