S Skillteca
Receber por email
Explorar Categorias Coleções Newsletter
← Voltar para o catálogo

common-pitfalls

Segurança Autor: aiskillstore

Orchestrates pitfall prevention skills for common development issues. Auto-triggered during code review to check for TanStack Query, Drizzle ORM, Express API, React, WebSocket, blockchain RPC, and security pitfalls.

367estrelas
Atualizado há 4 meses
Ver no GitHub ↗

Como adicionar

/plugin marketplace add aiskillstore/marketplace

O comando exato pode variar conforme o repositório. Confira o README no GitHub.

Para o autor da skill

Cole no README do seu repo

Mostra que sua skill está catalogada na Skillteca, gera backlink e tráfego rastreável.

[![Skillteca](https://www.skillteca.com.br/api/badge/common-pitfalls/svg)](https://www.skillteca.com.br/skills/common-pitfalls)
#ai #api #react

Skills relacionadas

Ver todas de Segurança →

security-research

63k

Habilidade de pesquisa de segurança em Modo Equipe que orquestra 3 caçadores de vulnerabilidades e 2 engenheiros de PoC para auditar um código, provar explorabilidade, classificar causas raiz e calibrar a severidade. É utilizada para revisão de segurança, pesquisa de vulnerabilidades, auditoria de explorabilidade e validação de modelo de ameaças.

Segurança por code-yeongyu

security-scanning-security-dependencies

41.2k

You are a security expert specializing in dependency vulnerability analysis, SBOM generation, and supply chain security. Scan project dependencies across multiple ecosystems to identify vulnerabilities, assess risks, and provide automated remediation strategies.

Segurança #ai #git por sickn33

vulnerability-scanner

41.2k

Advanced vulnerability analysis principles. OWASP 2025, Supply Chain Security, attack surface mapping, risk prioritization.

Segurança #ai #git por sickn33

dependency-management-deps-audit

41.2k

You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.

Segurança #ai #git por sickn33

Alerta por categoria

Receba novas skills de Segurança toda segunda

1 email curto, só com as skills novas de Segurança. 4 minutos de leitura, sem spam, cancela com 1 clique.

Você confirma o email no primeiro envio. Sem spam. Cancela com 1 clique.

Ler descrição completa

Common Pitfalls Prevention

Orchestrates specialized pitfall prevention skills learned from production issues. Use during code review to automatically check for common mistakes.

When to Use

  • During code review (auto-triggered by full-review skill)
  • Before committing changes
  • When debugging production issues
  • Reviewing unfamiliar code patterns

Workflow

Step 1: Identify Code Categories

Based on changed files, determine which sub-skills to invoke:

| File Pattern | Sub-Skill | |-------------|-----------| | /hooks/, useQuery, useMutation | pitfalls-tanstack-query | | /db/, schema.ts, drizzle | pitfalls-drizzle-orm | | /routes/, router., app. | pitfalls-express-api | | /components/, /pages/, .tsx | pitfalls-react | | websocket, wss, ws. | pitfalls-websocket | | contract, rpc, multicall, gas | pitfalls-blockchain | | session, key, cache, log | pitfalls-security |

Step 2: Invoke Relevant Sub-Skills

For each category found, invoke the corresponding skill for detailed patterns.

Step 3: Generate Combined Report

Aggregate findings from all invoked sub-skills.

Sub-Skills Reference

| Skill | Focus Area | |-------|------------| | pitfalls-tanstack-query | Query keys, invalidation, v5 patterns | | pitfalls-drizzle-orm | Schema types, migrations, array columns | | pitfalls-express-api | Routes, status codes, storage patterns | | pitfalls-react | Components, forms, a11y, responsive | | pitfalls-websocket | Server setup, heartbeat, reconnection | | pitfalls-blockchain | RPC errors, gas, multicall, nonces | | pitfalls-security | Session keys, caching, logging, secrets |

Quick Reference Checklist

Core

  • [ ] TanStack Query keys use full URL paths
  • [ ] Mutations invalidate relevant queries
  • [ ] Drizzle types exported for all models
  • [ ] API routes return correct status codes
  • [ ] All RPC calls wrapped in try/catch
  • [ ] WebSocket has heartbeat/reconnection
  • [ ] React components handle loading/error states
  • [ ] No secrets in logs or frontend code

Type Safety

  • [ ] No any types - use unknown and narrow
  • [ ] Types inferred from schema ($inferSelect, z.infer)
  • [ ] Type guards for runtime validation

Financial

  • [ ] BigInt for all token amounts
  • [ ] Decimal.js for price calculations
  • [ ] Proper rounding (floor/ceil)

Blockchain

  • [ ] Gas estimation with buffer
  • [ ] EIP-1559 gas pricing
  • [ ] Transaction simulation before send
  • [ ] Multicall uses allowFailure: true

Security

  • [ ] Session keys have expiry and limits
  • [ ] AES-256-GCM for stored credentials
  • [ ] Audit logging for sensitive operations
  • [ ] Rate limiting with exponential backoff
Compartilhar X LinkedIn