Explorar skills

API ontwerpen voor Nederlandse overheid: REST, OpenAPI, ADR (API Design Rules), webhooks, event-driven, OAS, API-gateway, NL GOV API.

Uma biblioteca de configuração Golang que utiliza spf13/viper, oferecendo precedência em camadas, manipulação de variáveis de ambiente, leitura de arquivos, unmarshalling, suporte a sub-árvores, recarregamento a quente, isolamento para testes e integração com KV remoto.

Use this methodology when collaboratively shaping a solution with the user - iterating on problem definition (requirements) and solution options (shapes).

Apollo Client GraphQL patterns - useQuery, useMutation, cache management, optimistic updates, subscriptions

Apply the OWASP API Security Top 10 to REST and GraphQL endpoints. Covers broken object-level authorization (BOLA), mass assignment, excessive data exposure, unrestricted resource consumption, SSRF, broken function-level authorization, and GraphQL depth and complexity limits. Invoke when designing a new API, reviewing one before scaling, or after API abuse (scraping, account takeover).

Bun-native HTTP framework — routing, TypeBox validation, Eden Treaty, plugins, lifecycle hooks

Harden GitHub Actions workflows against the well-known footguns. Covers SHA-pinned third-party actions, scoped GITHUB_TOKEN permissions, OIDC in place of long-lived cloud credentials, the pull_request_target trap, untrusted-input interpolation, and protected deploy environments. Invoke when adding a new workflow, introducing a third-party action, or migrating from long-lived secrets to OIDC.

Estilo, formatação e convenções de código Golang. Utilize ao escrever código Go, revisar estilo, configurar linters, escrever comentários ou estabelecer padrões de projeto.

Esta skill foca em cache em memória em Golang com samber/hot, cobrindo algoritmos de despejo (LRU, LFU, etc.), TTL, carregadores de cache, sharding, stale-while-revalidate, cache de chaves ausentes e métricas Prometheus. É aplicável ao usar samber/hot ou ao carregar repetidamente recursos de cardinalidade média a baixa.

Better Auth patterns, sessions, OAuth

Audit an inherited or unfamiliar codebase systematically rather than ad-hoc. Covers scope discipline, day-0 triage, SAST and SCA tool recipes (semgrep, CodeQL, gitleaks, trivy), OWASP Top 10 mapped to grep patterns, auth-surface walkthrough, and writing reports that drive remediation. Invoke when inheriting a codebase, accepting an audit engagement, or reviewing AI-generated code before shipping.

Official Anthropic SDK patterns for TypeScript/Node.js — client setup, Messages API, streaming, tool use, vision, extended thinking, structured outputs, prompt caching, batch API, and production best practices