software-engineering
Use when writing, reviewing, or refactoring any code. Applies software engineering best practices including DRY, SOLID, YAGNI, KISS, and clean code principles.
Use when writing, reviewing, or refactoring any code. Applies software engineering best practices including DRY, SOLID, YAGNI, KISS, and clean code principles.
自分の PR に付いたレビューコメントを確認し、修正対応を実行する(PR作成者向け)。「レビュー対応」「レビューコメント確認」「指摘を修正」「PRコメント確認」などで起動。
Proactively audits developer work to ensure completeness and production-readiness. This skill should be used when reviewing code changes, validating task completion, or verifying that work meets industry standards—catching incomplete implementations, deferred features, hardcoded values, missing tests, and shortcuts before code goes to production.
Use when writing Python code for clean, performant, and idiomatic implementations
Search ACE playbook before implementing, building, fixing, debugging, or refactoring code. Capture patterns after completing substantial coding work.
Biome/Ultracite 린트 경고(예: useSortedClasses)와 포맷 문제를 의미 변경 없이(safe fix) 해결하고, 패키지 단위로 빠르게 재검증합니다.
Clean code principles, error handling patterns, and coding standards for PACT Code phase. Use when: implementing features, refactoring code, reviewing code quality, establishing coding conventions, or handling errors and exceptions. Triggers on: code quality, clean code, refactoring, error handling, logging patterns, naming conventions, code review, code phase.
Comprehensive code review knowledge including security, performance, accessibility, and quality standards across multiple languages and frameworks
Pythonコードのリンタ、フォーマッタ、コードレビュー。Pythonファイル(.py)を編集・作成・修正した後に必ず実行する。ruffによる品質チェックとフォーマット、さらにコードレビューを行い問題があれば修正する。
Reviews code for quality, security, and maintainability. Use after implementing features, completing significant work, or when user asks for code review.
コードベースの品質・セキュリティ・パフォーマンスを包括的に検証し、改善計画を策定するスキル。コードレビュー、セキュリティチェック、バグ検出、パフォーマンス最適化が必要な場合に自動的にトリガーされる。対象:(1) コード変更のレビュー依頼、(2) セキュリティ脆弱性の検出、(3) パフォーマンス改善の提案、(4) 潜在的なバグの発見、(5) SOW形式での改善計画策定。言語・フレームワーク非依存で動作。
This skill should be used when the user requests to audit, check, or improve application security by analyzing security headers, cookie configuration, RLS policies, input sanitization, rate limiting, and other security measures. It generates a comprehensive security audit report with actionable recommendations. Trigger terms include security audit, security check, harden security, security review, vulnerability check, security headers, secure cookies, input validation, rate limiting, security best practices.
Set up OpenAPI client for authenticated API calls in Umbraco backoffice (REQUIRED for custom APIs)
Master OAuth 2.0 authorization patterns with OpenIddict and ABP Framework including permission-based authorization, role-based access control, custom claims, and multi-tenant security. Use when implementing authentication/authorization for ABP applications.
Web application security patterns including STRIDE threat modeling, OWASP Top 10 compliance, ABP authorization, and security audit procedures. Use when: (1) conducting security audits, (2) implementing authentication/authorization, (3) creating threat models, (4) reviewing code for vulnerabilities.
驗證工具組合。觸發詞:驗證, verify, check, 維度, dimension。
Use when working on NRPG Platform tasks to follow repo conventions (NextAuth cookie sessions, tenant safety, and contractor privacy) and to run the correct checks.
Google OAuth クライアント設定の手順を案内する。「OAuth 設定」「Google 認証の準備」「クライアント ID 作成」「認証手順を教えて」「Google ログイン準備」「OAuth セットアップ」「認証設定したい」などで起動。
Google OAuth 認証を実行する。「Google ログイン」「認証して」「ログインして」「Google 認証」「アカウント追加」などで起動。
Keycloak administration including realm management, client configuration, OAuth 2.0 setup, user management with custom attributes, role and group management, theme deployment, and token configuration. Activate for Keycloak Admin API operations, authentication setup, and identity provider configuration.
掃描程式碼和配置檔中的敏感資料洩漏,包括 API Keys、密碼、Token 等
Implement authentication and authorization with Better Auth - a framework-agnostic TypeScript authentication framework. Features include email/password authentication with verification, OAuth providers (Google, GitHub, Discord, etc.), two-factor authentication (TOTP, SMS), passkeys/WebAuthn support, session management, role-based access control (RBAC), rate limiting, and database adapters. Use when adding authentication to applications, implementing OAuth flows, setting up 2FA/MFA, managing user sessions, configuring authorization rules, or building secure authentication systems for web applications.
Apply when implementing authentication: sign up, sign in, OAuth providers, session management, and protected routes.