Skills & Rules Catalog

Comprehensive security audit — authentication bypass vectors, input sanitization, token storage, CORS, rate limiting, timing attacks, and error message info leaks.

Automated scanning for security vulnerabilities, misconfigurations, and injection risks across your codebase.

Django-specific security — authentication, authorization, CSRF protection, SQL injection prevention, XSS prevention, and secure middleware patterns.

Spring Security best practices for authn/authz, validation, CSRF, secrets management, headers, rate limiting, and dependency security.

Test-driven development methodology — red/green/refactor cycle, 80%+ coverage enforcement, test isolation, and refactoring guidance.

Playwright end-to-end testing — Page Object Model, configuration, CI/CD integration, artifact management, and flaky test handling.

Python testing with pytest — fixtures, mocking, parametrization, coverage requirements, and TDD methodology.

Go testing patterns — table-driven tests, subtests, benchmarks, fuzzing, test coverage, and idiomatic TDD practices.

C++ testing with GoogleTest/CTest — test configuration, fixture setup, mock objects, and CI integration.

Django testing with pytest-django — factory_boy, mocking strategies, coverage measurement, and test-driven development methodology.

Spring Boot TDD with JUnit 5, Mockito, MockMvc, Testcontainers, and JaCoCo coverage reporting.

Comprehensive verification system — build checks, linting, test suites, and security scans in a single automated loop.

Django-specific verification — migrations check, linting, tests with coverage, and security scans.

Spring Boot verification — build, static analysis, tests with coverage, and security scans in one loop.

REST API design patterns — resource naming, status codes, pagination, filtering, error responses, versioning, and rate limiting for production APIs.

Backend architecture patterns — API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.

Frontend development patterns — React, Next.js, state management, performance optimization, and UI best practices.

Deployment workflows — CI/CD pipelines, Docker containerization, health checks, rollback strategies, and zero-downtime deployments.

Docker and Docker Compose — multi-stage builds, container security, networking, volume strategies, and local development workflows.

Database migration best practices — schema changes, data migrations, rollbacks, zero-downtime deployments, and version control for schemas.

PostgreSQL patterns — query optimization, schema design, indexing strategies, partitioning, and security hardening.

ClickHouse database patterns — query optimization, analytics pipelines, data engineering, and high-performance analytical workloads.

JPA/Hibernate patterns — entity design, relationships, query optimization, transactions, auditing, and indexing strategies.

Pythonic idioms, PEP 8 standards, type hints, async/await patterns, and best practices for robust Python applications.

Django architecture — REST APIs with DRF, ORM best practices, caching strategies, signals, middleware, and project structure.

Java coding standards for Spring Boot — naming conventions, immutability, Optional usage, streams, exceptions, and generics.

Spring Boot architecture — REST API design, layered services, data access, caching, async processing, and structured logging.

Idiomatic Go — error handling, concurrency patterns, interface design, package structure, and performance optimization.

C++ coding standards based on the C++ Core Guidelines — memory safety, RAII, smart pointers, and modern C++ patterns.

Thread-safe data persistence in Swift using actors — in-memory cache with file-backed storage and concurrency safety.

Protocol-based dependency injection for testable Swift — mock file system, network, and external API patterns.

Cost optimization for LLM API usage — model routing by task complexity, budget tracking, retry logic, and prompt caching.

Pattern for progressively refining context retrieval — solves the subagent context problem with multi-round search.

Formal evaluation framework implementing eval-driven development (EDD) — measure, score, and improve AI coding sessions.

Automatically extract reusable patterns from Claude Code sessions and save them as learned skills for future use.

Decision framework for choosing between regex and LLM when parsing structured text — cost, accuracy, and latency trade-offs.

Universal coding standards and best practices for TypeScript, JavaScript, React, and Node.js development.

Cache expensive file processing with SHA-256 content hashes — path-independent, auto-invalidating, with service layer separation.

Manual context compaction at logical intervals to preserve context quality through long task phases.

Process, convert, OCR, extract, redact, sign, and fill documents using the Nutrient DWS API.