react:components
Google Stitch design pipeline. Requires Stitch MCP auth and network calls to Google services; pin commit after audit.
External Skills
Curated and installed external agent skills
External skills are authored in docs/src/authoring/skills/*.mdx and emitted to docs/public/generated-registries/skills-catalog-index.json. Legacy config/external-skills.md remains dual-read during migration. With --include-installed, local harness inventory may add rows.
Install now (after trust gate) (135)
Section titled “Install now (after trust gate) (135)” ab-testing Marketing residual tier from `coreyhaines31/marketingskills`.
accessibility Curated third-party skill source. Run external-skill-auditor before repo promotion.
ads High-install marketing and growth skills from `coreyhaines31/marketingskills`.
agents-sdk Curated third-party skill source. Run external-skill-auditor before repo promotion.
ai-seo Marketing residual tier from `coreyhaines31/marketingskills`.
analytics High-install marketing and growth skills from `coreyhaines31/marketingskills`.
apollo-client GraphQL client and tooling residual from `apollographql/skills`. Complements the existing server/federation curated row.
apollo-connectors GraphQL client and tooling residual from `apollographql/skills`. Complements the existing server/federation curated row.
apollo-federation Curated third-party skill source. Run external-skill-auditor before repo promotion.
apollo-server Curated third-party skill source. Run external-skill-auditor before repo promotion.
baseline-ui Targeted UI polish, WCAG/a11y fixes, and HTML metadata/OG/JSON-LD audits.
best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
better-auth-best-practices Official Better Auth server/client setup, adapters, sessions, plugins, and environment variables. Prefer this over community Better Auth copies.
biome-developer Curated third-party skill source. Run external-skill-auditor before repo promotion.
brainstorming Agent workflow discipline from `obra/superpowers`.
changelog-automation `wshobson/agents` residual for API specs, `uv` workflows, changelog automation, and debugging strategies.
churn-prevention Marketing tier-2 residual beyond the two curated marketing rows.
cli-just Install only `cli-just` from `PaulRBerg/agent-skills` for Justfile and `just` command-runner workflows.
cloudflare Curated third-party skill source. Run external-skill-auditor before repo promotion.
cold-email High-install marketing and growth skills from `coreyhaines31/marketingskills`.
commit TS workflow residual from the pinned `PaulRBerg/agent-skills` HEAD already used for `cli-just`.
competitor-profiling Marketing tier-2 residual beyond the two curated marketing rows.
content-strategy High-install marketing and growth skills from `coreyhaines31/marketingskills`.
copywriting High-install marketing and growth skills from `coreyhaines31/marketingskills`.
core-web-vitals Curated third-party skill source. Run external-skill-auditor before repo promotion.
cro High-install marketing and growth skills from `coreyhaines31/marketingskills`.
debugging-strategies `wshobson/agents` residual for API specs, `uv` workflows, changelog automation, and debugging strategies.
deno-expert Curated third-party skill source. Run external-skill-auditor before repo promotion.
design-doc-mermaid Architecture diagram guidance for docs and design artifacts; complements local `docs-steward`.
durable-objects Curated third-party skill source. Run external-skill-auditor before repo promotion.
emails High-install marketing and growth skills from `coreyhaines31/marketingskills`.
executing-plans Agent workflow discipline from `obra/superpowers`.
extract-design-system Curated third-party skill source. Run external-skill-auditor before repo promotion.
fastapi-templates `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
fixing-accessibility Targeted UI polish, WCAG/a11y fixes, and HTML metadata/OG/JSON-LD audits.
fixing-metadata Targeted UI polish, WCAG/a11y fixes, and HTML metadata/OG/JSON-LD audits.
flutter-add-integration-test Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-add-widget-test Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-apply-architecture-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-build-responsive-layout Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-fix-layout-issues Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-setup-declarative-routing Curated third-party skill source. Run external-skill-auditor before repo promotion.
flutter-setup-localization Curated third-party skill source. Run external-skill-auditor before repo promotion.
gitops-workflow Curated third-party skill source. Run external-skill-auditor before repo promotion.
graphql-operations Curated third-party skill source. Run external-skill-auditor before repo promotion.
graphql-schema Curated third-party skill source. Run external-skill-auditor before repo promotion.
grill-me Product-engineering workflow skills beyond the curated `obsidian-vault` row.
helm-chart-scaffolding Curated third-party skill source. Run external-skill-auditor before repo promotion.
improve-codebase-architecture Product-engineering workflow skills beyond the curated `obsidian-vault` row.
k8s-manifest-generator Curated third-party skill source. Run external-skill-auditor before repo promotion.
k8s-security-policies Curated third-party skill source. Run external-skill-auditor before repo promotion.
langchain-architecture `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
langfuse Official Langfuse tracing, prompts, datasets, and CLI/API workflows. Scoped `allowed-tools` target `langfuse.
launch Marketing tier-2 residual beyond the two curated marketing rows.
llm-evaluation `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
logging-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
marketing-ideas Marketing tier-2 residual beyond the two curated marketing rows.
marketing-psychology High-install marketing and growth skills from `coreyhaines31/marketingskills`.
multi-stage-dockerfile Curated third-party skill source. Run external-skill-auditor before repo promotion.
next-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
next-cache-components Curated third-party skill source. Run external-skill-auditor before repo promotion.
next-upgrade Curated third-party skill source. Run external-skill-auditor before repo promotion.
nodejs-backend-patterns `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
nx-workspace-patterns `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
obsidian-cli Curated third-party skill source. Run external-skill-auditor before repo promotion.
obsidian-markdown Curated third-party skill source. Run external-skill-auditor before repo promotion.
obsidian-vault Curated third-party skill source. Run external-skill-auditor before repo promotion.
on-call-handoff-patterns `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
onboarding Marketing residual tier from `coreyhaines31/marketingskills`.
openapi-spec-generation `wshobson/agents` residual for API specs, `uv` workflows, changelog automation, and debugging strategies.
paywalls Marketing tier-2 residual beyond the two curated marketing rows.
performance Curated third-party skill source. Run external-skill-auditor before repo promotion.
plannotator-annotate Install Plannotator core slash commands (`/plannotator-review`, `/plannotator-annotate`, `/plannotator-last`). Pair with `curl -fsSL https://plannotator.
plannotator-compound Optional Plannotator extras (compound planning analysis, setup-goal, visual explainer). Requires the core Plannotator skills and CLI above.
plannotator-last Install Plannotator core slash commands (`/plannotator-review`, `/plannotator-annotate`, `/plannotator-last`). Pair with `curl -fsSL https://plannotator.
plannotator-review Install Plannotator core slash commands (`/plannotator-review`, `/plannotator-annotate`, `/plannotator-last`). Pair with `curl -fsSL https://plannotator.
plannotator-setup-goal Optional Plannotator extras (compound planning analysis, setup-goal, visual explainer). Requires the core Plannotator skills and CLI above.
plannotator-visual-explainer Optional Plannotator extras (compound planning analysis, setup-goal, visual explainer). Requires the core Plannotator skills and CLI above.
playwright-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
postmortem-writing `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
prisma-cli Curated third-party skill source. Run external-skill-auditor before repo promotion.
prisma-client-api Curated third-party skill source. Run external-skill-auditor before repo promotion.
prisma-upgrade-v7 Curated third-party skill source. Run external-skill-auditor before repo promotion.
product-marketing Marketing residual tier from `coreyhaines31/marketingskills`.
programmatic-seo High-install marketing and growth skills from `coreyhaines31/marketingskills`.
pulumi-automation-api Official Pulumi IaC subset: program authoring, components, Automation API, and ESC secrets.
pulumi-best-practices Official Pulumi IaC subset: program authoring, components, Automation API, and ESC secrets.
pulumi-component Official Pulumi IaC subset: program authoring, components, Automation API, and ESC secrets.
pulumi-esc Official Pulumi IaC subset: program authoring, components, Automation API, and ESC secrets.
redis-core Install `redis-core` from the official Redis agent-skills bundle. The older `redis-development` slug is no longer exposed by the current source list.
remotion-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
revops Marketing tier-2 residual beyond the two curated marketing rows.
rover GraphQL client and tooling residual from `apollographql/skills`. Complements the existing server/federation curated row.
rust-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
schema Marketing residual tier from `coreyhaines31/marketingskills`.
seo Curated third-party skill source. Run external-skill-auditor before repo promotion.
seo-audit High-install marketing and growth skills from `coreyhaines31/marketingskills`.
shieldcn-badges Install `shieldcn-badges` from `jal-co/shieldcn` for local badge-generation workflows.
signup Marketing residual tier from `coreyhaines31/marketingskills`.
site-architecture Marketing tier-2 residual beyond the two curated marketing rows.
slidev Curated third-party skill source. Run external-skill-auditor before repo promotion.
sql-optimization Curated third-party skill source. Run external-skill-auditor before repo promotion.
sql-optimization-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
supabase Curated third-party skill source. Run external-skill-auditor before repo promotion.
supabase-postgres-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
svelte5-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
swift-concurrency Curated third-party skill source. Run external-skill-auditor before repo promotion.
swiftui-expert-skill SwiftUI expert guidance for iOS/macOS including state, composition, performance, and Liquid Glass patterns.
systematic-debugging Agent workflow discipline from `obra/superpowers`.
tailwind-design-system Curated third-party skill source. Run external-skill-auditor before repo promotion.
tanstack-query-best-practices TanStack Query, Start, and Router best practices. Complements curated React/Next skills without overlapping `vercel-react-best-practices`.
tanstack-router-best-practices TanStack Query, Start, and Router best practices. Complements curated React/Next skills without overlapping `vercel-react-best-practices`.
tanstack-start-best-practices TanStack Query, Start, and Router best practices. Complements curated React/Next skills without overlapping `vercel-react-best-practices`.
tdd Product-engineering workflow skills beyond the curated `obsidian-vault` row.
terraform-style-guide Curated third-party skill source. Run external-skill-auditor before repo promotion.
terraform-test Curated third-party skill source. Run external-skill-auditor before repo promotion.
test-driven-development Agent workflow discipline from `obra/superpowers`.
to-prd Product-engineering workflow skills beyond the curated `obsidian-vault` row.
turborepo-caching `wshobson/agents` backend, monorepo, incident, and eval residual beyond the existing curated subset.
upgrade-stripe Curated third-party skill source. Run external-skill-auditor before repo promotion.
uv-package-manager `wshobson/agents` residual for API specs, `uv` workflows, changelog automation, and debugging strategies.
vercel-composition-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
vercel-react-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
vercel-react-native-skills Curated third-party skill source. Run external-skill-auditor before repo promotion.
vercel-react-view-transitions Curated third-party skill source. Run external-skill-auditor before repo promotion.
verification-before-completion Agent workflow discipline from `obra/superpowers`.
video Marketing tier-2 residual beyond the two curated marketing rows.
vite Curated third-party skill source. Run external-skill-auditor before repo promotion.
vitest TS workflow residual from the pinned `PaulRBerg/agent-skills` HEAD already used for `cli-just`.
vue-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
web-design-guidelines Curated third-party skill source. Run external-skill-auditor before repo promotion.
web-quality-audit Curated third-party skill source. Run external-skill-auditor before repo promotion.
workers-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
wrangler Curated third-party skill source. Run external-skill-auditor before repo promotion.
writing-plans Agent workflow discipline from `obra/superpowers`.
Inspect then install (185)
Section titled “Inspect then install (185)” agent-governance Curated third-party skill source. Run external-skill-auditor before repo promotion.
agent-owasp-compliance Curated third-party skill source. Run external-skill-auditor before repo promotion.
agent-supply-chain Curated third-party skill source. Run external-skill-auditor before repo promotion.
agentic-actions-auditor Curated third-party skill source. Run external-skill-auditor before repo promotion.
agentic-eval Curated third-party skill source. Run external-skill-auditor before repo promotion.
apollo-ios Curated third-party skill source. Run external-skill-auditor before repo promotion.
apollo-mcp-server Curated third-party skill source. Run external-skill-auditor before repo promotion.
apollo-router Curated third-party skill source. Run external-skill-auditor before repo promotion.
arize-evaluator Curated third-party skill source. Run external-skill-auditor before repo promotion.
arize-instrumentation Curated third-party skill source. Run external-skill-auditor before repo promotion.
arize-prompt-optimization Curated third-party skill source. Run external-skill-auditor before repo promotion.
aws-ami-builder Curated third-party skill source. Run external-skill-auditor before repo promotion.
aws-iam Curated third-party skill source. Run external-skill-auditor before repo promotion.
aws-serverless Curated third-party skill source. Run external-skill-auditor before repo promotion.
building-native-ui Curated third-party skill source. Run external-skill-auditor before repo promotion.
building-pydantic-ai-agents Curated third-party skill source. Run external-skill-auditor before repo promotion.
chatgpt-app-builder Curated third-party skill source. Run external-skill-auditor before repo promotion.
chatgpt-apps Curated third-party skill source. Run external-skill-auditor before repo promotion.
claimable-postgres Curated third-party skill source. Run external-skill-auditor before repo promotion.
cli-creator Curated third-party skill source. Run external-skill-auditor before repo promotion.
clickhouse-architecture-advisor Curated third-party skill source. Run external-skill-auditor before repo promotion.
clickhouse-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
code-review Sentry engineering-process skills beyond curated `skill-scanner`. `gha-security-review` analyzes GitHub Actions workflows for pwn-request patterns.
codeql Curated third-party skill source. Run external-skill-auditor before repo promotion.
create-implementation-plan Curated third-party skill source. Run external-skill-auditor before repo promotion.
ctf-ai-ml Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-crypto Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-forensics Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-malware Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-misc Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-osint Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-pwn Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-reverse Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-web Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
ctf-writeup Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
database-migration Curated third-party skill source. Run external-skill-auditor before repo promotion.
deep-agents-core Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
deep-agents-memory Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
deep-agents-orchestration Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
deploy-to-vercel Curated third-party skill source. Run external-skill-auditor before repo promotion.
deployment-pipeline-design Curated third-party skill source. Run external-skill-auditor before repo promotion.
design-agent Curated third-party skill source. Run external-skill-auditor before repo promotion.
design-md Google Stitch design pipeline. Requires Stitch MCP auth and network calls to Google services; pin commit after audit.
design-task Curated third-party skill source. Run external-skill-auditor before repo promotion.
design-taste-frontend Install only `design-taste-frontend` from `Leonxlnx/taste-skill` by default.
differential-review Curated third-party skill source. Run external-skill-auditor before repo promotion.
docker-expert Install only `docker-expert` from `sickn33/antigravity-awesome-skills`. The bundle exposes hundreds of unrelated skills; keep the rest global-only.
drizzle-orm-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
e2e-testing-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
ecosystem-primer Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
emil-design-eng Curated third-party skill source. Run external-skill-auditor before repo promotion.
eval-driven-dev Curated third-party skill source. Run external-skill-auditor before repo promotion.
excalidraw-diagram-generator `excalidraw-diagram-generator` bundles three Python helper scripts with no scanner findings; still review executable surface before install-now promotion.
expo-cicd-workflows Curated third-party skill source. Run external-skill-auditor before repo promotion.
expo-deployment Curated third-party skill source. Run external-skill-auditor before repo promotion.
expo-dev-client Curated third-party skill source. Run external-skill-auditor before repo promotion.
fastmcp-client-cli Authoritative FastMCP maintainer skills. `fastmcp-client-cli` invokes MCP tool calls; review scripts before promotion.
figma-code-connect Official Figma MCP design-to-code skills. Requires Figma MCP token; prefer this source over overlapping `openai/skills` Figma variants.
figma-generate-design Official Figma MCP design-to-code skills. Requires Figma MCP token; prefer this source over overlapping `openai/skills` Figma variants.
figma-implement-design Official Figma MCP design-to-code skills. Requires Figma MCP token; prefer this source over overlapping `openai/skills` Figma variants.
find-bugs Sentry engineering-process skills beyond curated `skill-scanner`. `gha-security-review` analyzes GitHub Actions workflows for pwn-request patterns.
firebase-ai-logic-basics Curated third-party skill source. Run external-skill-auditor before repo promotion.
firebase-app-hosting-basics Curated third-party skill source. Run external-skill-auditor before repo promotion.
firebase-auth-basics Curated third-party skill source. Run external-skill-auditor before repo promotion.
gemini-api Curated third-party skill source. Run external-skill-auditor before repo promotion.
getting-started Curated third-party skill source. Run external-skill-auditor before repo promotion.
gha-security-review Sentry engineering-process skills beyond curated `skill-scanner`. `gha-security-review` analyzes GitHub Actions workflows for pwn-request patterns.
golang-benchmark Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-cli Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-concurrency Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-database Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-error-handling Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-graphql Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-grpc Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-how-to Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-lint Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-modernize Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-observability Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-performance Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-popular-libraries Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-project-layout Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-safety Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-security Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-spf13-cobra Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-spf13-viper Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-stretchr-testify Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-testing Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
golang-troubleshooting Extended `samber/cc-skills-golang` row for Go depth beyond the original six-skill subset.
impeccable Curated third-party skill source. Run external-skill-auditor before repo promotion.
incident-runbook-templates Curated third-party skill source. Run external-skill-auditor before repo promotion.
inngest-durable-functions Inngest durable-workflow core subset only. Route TS serverless step workflows here; keep remaining Inngest skills global-only unless explicitly requested.
inngest-events Inngest durable-workflow core subset only. Route TS serverless step workflows here; keep remaining Inngest skills global-only unless explicitly requested.
inngest-setup Inngest durable-workflow core subset only. Route TS serverless step workflows here; keep remaining Inngest skills global-only unless explicitly requested.
inngest-steps Inngest durable-workflow core subset only. Route TS serverless step workflows here; keep remaining Inngest skills global-only unless explicitly requested.
insecure-defaults Curated third-party skill source. Run external-skill-auditor before repo promotion.
iterate-pr Sentry engineering-process skills beyond curated `skill-scanner`. `gha-security-review` analyzes GitHub Actions workflows for pwn-request patterns.
javascript-testing-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
kubernetes-specialist Curated third-party skill source. Run external-skill-auditor before repo promotion.
langchain-dependencies Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langchain-fundamentals Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langchain-middleware Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langchain-rag Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langgraph-fundamentals Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langgraph-human-in-the-loop Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langgraph-persistence Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
langsmith-dataset LangSmith eval pipeline skills. Requires `LANGCHAIN_API_KEY` and LangSmith cloud access.
langsmith-evaluator LangSmith eval pipeline skills. Requires `LANGCHAIN_API_KEY` and LangSmith cloud access.
langsmith-trace LangSmith eval pipeline skills. Requires `LANGCHAIN_API_KEY` and LangSmith cloud access.
link-workspace-packages Curated third-party skill source. Run external-skill-auditor before repo promotion.
logfire-instrumentation Curated third-party skill source. Run external-skill-auditor before repo promotion.
managed-deep-agents Extended LangChain row with Deep Agents core/memory/orchestration, middleware/HITL, dependency pinning, and Managed Deep Agents ops.
mcp-builder Curated third-party skill source. Run external-skill-auditor before repo promotion.
mcp-security-audit Curated third-party skill source. Run external-skill-auditor before repo promotion.
modern-python Curated third-party skill source. Run external-skill-auditor before repo promotion.
mysql Curated third-party skill source. Run external-skill-auditor before repo promotion.
neon-ai-gateway Curated third-party skill source. Run external-skill-auditor before repo promotion.
neon-functions Curated third-party skill source. Run external-skill-auditor before repo promotion.
neon-postgres Official Neon Postgres skills. Prefer this source over generic community Neon skills; audit hooks and network behavior before promoting to install-now.
neon-postgres-branches Official Neon Postgres skills. Prefer this source over generic community Neon skills; audit hooks and network behavior before promoting to install-now.
neon-postgres-egress-optimizer Official Neon Postgres skills. Prefer this source over generic community Neon skills; audit hooks and network behavior before promoting to install-now.
netlify-deploy Curated third-party skill source. Run external-skill-auditor before repo promotion.
netlify-edge-functions Curated third-party skill source. Run external-skill-auditor before repo promotion.
netlify-functions Curated third-party skill source. Run external-skill-auditor before repo promotion.
notion-cli Official Notion CLI skill from `makenotion/skills`. Wraps the `ntn` CLI and requires API token handling.
nx-generate Curated third-party skill source. Run external-skill-auditor before repo promotion.
otel-collector Vendor-neutral OpenTelemetry instrumentation, semantic conventions, and Collector pipelines.
otel-instrumentation Vendor-neutral OpenTelemetry instrumentation, semantic conventions, and Collector pipelines.
otel-semantic-conventions Vendor-neutral OpenTelemetry instrumentation, semantic conventions, and Collector pipelines.
phoenix-evals Curated third-party skill source. Run external-skill-auditor before repo promotion.
phoenix-tracing Curated third-party skill source. Run external-skill-auditor before repo promotion.
playwright-cli Official Playwright CLI browser automation. Complements curated `playwright-best-practices` (test patterns) with operational CLI control.
postgres Curated third-party skill source. Run external-skill-auditor before repo promotion.
prisma-compute Curated third-party skill source. Run external-skill-auditor before repo promotion.
prisma-database-setup Curated third-party skill source. Run external-skill-auditor before repo promotion.
prisma-postgres Curated third-party skill source. Run external-skill-auditor before repo promotion.
property-based-testing Curated third-party skill source. Run external-skill-auditor before repo promotion.
pydantic-ai-harness Curated third-party skill source. Run external-skill-auditor before repo promotion.
python-observability Curated third-party skill source. Run external-skill-auditor before repo promotion.
python-testing-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
redis-clustering Curated third-party skill source. Run external-skill-auditor before repo promotion.
redis-observability Curated third-party skill source. Run external-skill-auditor before repo promotion.
redis-security Curated third-party skill source. Run external-skill-auditor before repo promotion.
redis-semantic-cache Curated third-party skill source. Run external-skill-auditor before repo promotion.
redis-vector-search Curated third-party skill source. Run external-skill-auditor before repo promotion.
render-blueprints Official Render deploy/Blueprint/debug subset.
render-debug Official Render deploy/Blueprint/debug subset.
render-deploy Official Render deploy/Blueprint/debug subset.
rust-async-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
rust-mcp-server-generator Rust MCP server scaffolding from `github/awesome-copilot`.
sast-configuration Curated third-party skill source. Run external-skill-auditor before repo promotion.
secret-scanning Curated third-party skill source. Run external-skill-auditor before repo promotion.
secrets-management Curated third-party skill source. Run external-skill-auditor before repo promotion.
security-best-practices Curated third-party skill source. Run external-skill-auditor before repo promotion.
security-ownership-map Curated third-party skill source. Run external-skill-auditor before repo promotion.
security-threat-model Curated third-party skill source. Run external-skill-auditor before repo promotion.
semgrep Curated third-party skill source. Run external-skill-auditor before repo promotion.
sentry-fix-issues Curated third-party skill source. Run external-skill-auditor before repo promotion.
sentry-sdk-setup Curated third-party skill source. Run external-skill-auditor before repo promotion.
sentry-setup-ai-monitoring Curated third-party skill source. Run external-skill-auditor before repo promotion.
shopify-dev Curated third-party skill source. Run external-skill-auditor before repo promotion.
shopify-liquid Curated third-party skill source. Run external-skill-auditor before repo promotion.
shopify-storefront-graphql Curated third-party skill source. Run external-skill-auditor before repo promotion.
skill-scanner Curated third-party skill source. Run external-skill-auditor before repo promotion.
sleek-design-mobile-apps Curated third-party skill source. Run external-skill-auditor before repo promotion.
slo-implementation Curated third-party skill source. Run external-skill-auditor before repo promotion.
solve-challenge Use `ljagiello/ctf-skills` only for authorized CTF, lab, and security-research work.
sql-code-review Curated third-party skill source. Run external-skill-auditor before repo promotion.
stitch-loop Google Stitch design pipeline. Requires Stitch MCP auth and network calls to Google services; pin commit after audit.
stitch::generate-design
Google Stitch design pipeline. Requires Stitch MCP auth and network calls to Google services; pin commit after audit.
stride-analysis-patterns Curated third-party skill source. Run external-skill-auditor before repo promotion.
supply-chain-risk-auditor Curated third-party skill source. Run external-skill-auditor before repo promotion.
temporal-developer Official Temporal multi-SDK skill for long-running durable execution. Complements local `event-driven-architect` with implementation depth.
terraform-module-library Curated third-party skill source. Run external-skill-auditor before repo promotion.
terraform-search-import Curated third-party skill source. Run external-skill-auditor before repo promotion.
terraform-skill Curated third-party skill source. Run external-skill-auditor before repo promotion.
terraform-stacks Curated third-party skill source. Run external-skill-auditor before repo promotion.
testing-python Authoritative FastMCP maintainer skills. `fastmcp-client-cli` invokes MCP tool calls; review scripts before promotion.
threat-model-analyst Curated third-party skill source. Run external-skill-auditor before repo promotion.
ui-ux-pro-max Install only `ui-ux-pro-max` from `nextlevelbuilder/ui-ux-pro-max-skill`.
upgrading-expo Curated third-party skill source. Run external-skill-auditor before repo promotion.
use-railway Official Railway deploy/ops skill with broad `allowed-tools` (`railway` CLI, `curl`, `npm`).
variant-analysis Curated third-party skill source. Run external-skill-auditor before repo promotion.
vercel-optimize Curated third-party skill source. Run external-skill-auditor before repo promotion.
vue Curated third-party skill source. Run external-skill-auditor before repo promotion.
Global only or avoid (12)
Section titled “Global only or avoid (12)” anthropics-skills-all inspect case-by-case; many skills duplicate local/system skills.
ckm:*
avoid by default; overlaps existing local skills and has broader API/script surfaces than the approved
ui-ux-pro-max skill. coleam00-excalidraw-diagram-skill-all community Excalidraw skill; prefer `github/awesome-copilot@excalidraw-diagram-generator`.
find-skills duplicate of `harness-master` discover (systematic gap pipeline).
firecrawl-cli-all useful for web research, but requires `FIRECRAWL_API_KEY` and broad network/CLI scope; keep global-only unless explicitly requested.
github-actions-docs high-install CI/docs reference; keep global-only to avoid bloating the curated sync surface.
huggingface-skills-all keep global unless ML workflows become frequent.
microsoft-azure-skills-all massive Azure bundle; cherry-pick only if a concrete need appears — do not bulk-promote.
notion-api third-party Notion REST guide; prefer official `makenotion/skills@notion-cli` for catalog promotion.
shadcn alternate registry checkout for the same `shadcn` slug; keep global-only. Install Now uses `shadcn-ui/ui@shadcn` as the canonical curated source.
stripe-best-practices registry syntax and provenance still need verification before automated sync/install.
vercel-labs-agent-browser-all useful, but broad operational scope and overlaps browser automation.