appverk/av-marketplace
44 skills
$npx skills add appverk/av-marketplaceSkillInstalls
api-security-checklistChecklist for passive API security assessment. Covers endpoint discovery, CORS, rate limiting, authentication, GraphQL, and response security.architecture-analysisAnalyzes codebase for SOLID principles violations, DDD patterns compliance, Clean Architecture layer dependencies, and common anti-patterns.async-python-patternsGuides async/await implementation: asyncio patterns, concurrent I/O, task management, synchronization.be-testingBackend testing patterns — API request construction, response verification, database state checks, error handling testing, and adaptive tool detection.bun-package-managerBun package management, lockfile policy, workspaces, CI integration, and Bun-native toolingcelery-patternsEnforces Celery task patterns: idempotent design, retry strategies, error handling, testing with eager mode.coding-standardsTypeScript + React coding standards, architecture patterns, naming conventions, ESLint configurationcompliance-checklistChecklist for passive compliance and privacy assessment. Covers cookie consent, cookie inventory, privacy policy, data exposure, analytics and tracking, and…composerManages PHP dependencies and environments with Composer: adds packages, syncs lockfiles, configures autoload.ddd-patternsEnforces DDD patterns: Bounded Contexts, 4-layer architecture, Aggregate Roots, Value Objects, Domain Events, repository interfaces.dependency-scanningScans project dependencies for known vulnerabilities (CVEs). Supports Python (uv, pip, poetry), JavaScript, Go, Java, and other languages.developer-plugins-integrationDetects installed developer plugins (python-developer, frontend-developer, php-developer) and project stack, then provides a list of relevant skills to load…django-orm-patternsEnforces Django ORM patterns with Pragmatic DDD: rich domain models, Managers, QuerySets, migrations, signals, performance.django-web-patternsEnforces Django REST Framework patterns with Pragmatic DDD: ViewSets, Serializers, Permissions, exception handling, settings, middleware.docs-fact-registryUse when checking or reporting docs↔code drift — a declarative registry (claim → source of truth → policy) with a three-way classification: mechanical facts…doctrine-orm-patternsEnforces Doctrine ORM patterns: mapping (YAML/XML/Attributes), repositories, migrations, QueryBuilder, filters, performance.fastapi-patternsEnforces FastAPI patterns with DDD and Clean Architecture: endpoint structure, UoW dependency injection, domain exception handling, pure ASGI middleware,…fe-testingFrontend testing patterns using Playwright MCP — navigation, interaction, assertions, screenshots on failure, and common UI testing scenarios.finding-falsificationUse when authoring or reviewing any code-review reporting agent, or when a code-review agent is about to report findings — mandates a self-falsification pass:…form-patternsReact Hook Form with Zod validation, server-side error handling, mutation integration, and reusable form componentsinfrastructure-checklistChecklist for passive infrastructure security assessment. Covers SSL/TLS, DNS, subdomains, server fingerprinting, CDN/WAF detection, port scanning, and exposed…lens-catalogLens roster, panel-selection rules, and severity/needs-decision anchors for the /superutils:spec-review loop.linter-integrationAuto-detects and runs project-specific linters, formatters, and typecheckers.loop-engineeringUse when designing, authoring, or reviewing a closed agent loop (test→fix→retest, audit→fix→re-audit, generate→verify→correct) in this marketplace — the…pipeline-securitySecurity scanning templates and HARD-RULES for CI/CD pipeline configuration.pnpm-package-managerpnpm package management, workspace setup, dependency updates, and CI integrationpydantic-patternsEnforces Pydantic patterns with DDD and Clean Architecture: Value Objects, request/response schemas, from_domain() mapping, TypeAdapter, settings management.reader-context-hygieneUse when authoring or reviewing a fan-out reader/scout agent that ingests an external source (a design board, a live site, a large document) on behalf of a…report-formatTest report format with QA-XXX issue IDs compatible with code-review plugin. Defines report structure, severity levels, issue format, and detailed results.sast-analysisStatic Application Security Testing (SAST) for multi-language codebases.secret-scanningDetects and handles sensitive information in code. Use when reviewing code for secret leaks and hard-coded credentials.spec-report-formatReport structure, sidecar schema, SR-id rules, outcome enum, and terminal statuses for the /superutils:spec-review loop.sqlalchemy-patternsEnforces SQLAlchemy patterns with DDD and Clean Architecture: domain entities, Repository Protocol, Unit of Work, async sessions, Alembic migrations.standards-discoveryDiscovers and parses project coding standards, style guides, and architecture documentation.state-combination-modelingUse when a component or view is driven by two or more independent boolean inputs (flags, permissions, connection states) — enumerate the full 2^N product,…symfony-patternsEnforces Symfony patterns with DDD: thin controllers, Messenger CQRS, autowiring, security, routing attributes.tailwind-patternsTailwind CSS v4, CVA component variants, shadcn/ui patterns, semantic tokens, responsive designtanstack-query-patternsTanStack Query v5 server state management with queryOptions, mutations, caching, and error handlingtanstack-router-patternsTanStack Router type-safe routing with file-based conventions, loaders, search params validation, and protected routestdd-workflowTest-driven development workflow with Vitest, React Testing Library, MSW v2, and Playwrighttest-plan-formatTest plan structure, naming conventions, edge case generation rules, and file saving conventions for QA test plans.uv-package-managerManages Python dependencies and environments with uv: adds packages, syncs lockfiles, pins versions.verdict-protocolUse when writing or reviewing the definition of a reporting agent or command (a review, audit, verification, or test-run agent), before its closing contract is…zustand-patternsZustand store management with slices, middleware, selectors, and TypeScript patterns