This skill extracts the Supabase anon key from client code to enable secure testing and RLS verification across projects.

Production-grade backend service development across Node.js (Express/Fastify/NestJS/Hono), Bun, Python (FastAPI), Go, and Rust (Axum), with PostgreSQL and common ORMs (Prisma/Drizzle/SQLAlchemy/GORM/SeaORM). Use for REST/GraphQL/tRPC APIs, auth (OIDC/OAuth), caching, background jobs, observability (OpenTelemetry), testing, deployment readiness, and zero-trust defaults.

Performance Engineer Specialist. Use this for latency reduction, profiling, and optimization.

This skill detects Supabase usage in a web app by analyzing domain patterns, client libraries, and API endpoints to determine project presence.

Auto-generates standardized README documentation from SKILL.md files, validates consistency (frontmatter, descriptions, terminology), and creates usage examples. Use when documenting individual skills, generating docs for multiple skills in a directory, or validating skill quality standards.

SEO Specialist. Use this for Search Engine Optimization, Generative Engine Optimization (GEO), and schema markup.

This skill initializes and manages progressive evidence collection for professional security audits, ensuring immediate evidence saving and organized reporting.

Formal Quality Assurance Checklist before every Merge/Deploy. 6-phase validation with Build Verification, Test Suite, No-Touch Zones, Region Check, Security Review, and QA Report generation. Activate on "merge", "deploy", "release", "production", or /qa command.

This skill discovers and tests Supabase Edge Functions for security issues, reporting findings and actionable fixes to strengthen your project.

This skill detects leaked service_role keys in client-side code during security audits, ensuring immediate remediation and safe Supabase usage.

Production-grade API design patterns for REST, GraphQL, gRPC, and tRPC. Covers API architecture, OpenAPI/Swagger specs, versioning/deprecation, authentication/authorization, rate limiting, pagination, error models, contract testing, and developer documentation.

Modern application security patterns aligned with OWASP Top 10:2025 (final), OWASP API Security Top 10 (2023), NIST SSDF, zero trust (incl. NSA ZIGs 2026), supply chain security (SBOM), passkeys/WebAuthn, authentication, authorization, input validation, cryptography, plus security ROI, breach cost modeling, and compliance-driven enterprise sales.

Database Architect Specialist. Use this for schema design, query optimization, and data modeling.

This skill tests signup open/blocked and detects abuse vectors in registration, providing actionable findings for Supabase authentication security.

QA harness for agentic systems: scenario suites, determinism/flake controls, tool sandboxing, scoring rubrics (including LLM-as-judge), and regression protocols covering success, safety, reliability, latency, and cost.

Production MLOps and ML/LLM/agent security skill for deploying and operating ML systems in production (registry + CI/CD, serving, monitoring/drift, evaluation loops, incident response/runbooks, and governance), including GenAI security (prompt injection, jailbreaks, RAG security, privacy, and supply chain).

Skill Author and Prompt Engineer. Creates new agent skills, writes system prompts, and designs agent behaviors using Chain of Thought and Few-Shot patterns.

Configure CLAUDE.md project memory files for persistent context, coding standards, architecture decisions, and team conventions. Reference for the 4-tier memory hierarchy, cross-platform AGENTS.md compatibility, and quick-add commands.

Use when optimizing conversion rates, designing A/B tests, or improving landing pages. Covers A/B testing methodology, landing page optimization, form design, statistical significance, funnel analysis, and CRO prioritization frameworks.

Use when interpreting Tarot cards, designing spreads, performing readings, or building AI tarot features (daily card, card combinations, timing). Covers Major/Minor Arcana meanings, spread layouts (incl. Celtic Cross), reading ethics, and safe AI positioning. Not for medical/legal/crisis support or death/illness predictions. (project)

Routes startup and business requests (idea validation, market/competitors, pricing, GTM, fundraising, marketing, business docs) to the right skills; hands off building and ops to other routers