القائمة
SvelteKit remote functions guidance. Use for command(), query(), form() patterns in .remote.ts files.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Carbon Design System Svelte components. Use for IBM Carbon UI: buttons, forms, data tables, modals, navigation, layout grid, notifications, theming. Covers props, events, slots, and SvelteKit integration.
Carbon Design System Svelte components. Use for IBM Carbon UI: buttons, forms, data tables, modals, navigation, layout grid, notifications, theming. Covers props, events, slots, and SvelteKit integration.
Implement secure coding practices following OWASP Top 10. Use when preventing security vulnerabilities, implementing authentication, securing APIs, or conducting security reviews. Triggers on OWASP, security, XSS, SQL injection, CSRF, authentication security, secure coding, vulnerability.
Security-by-design principles for developing secure applications following Hack23 ISMS Secure Development Policy
Write secure-by-default Node.js and TypeScript applications following security best practices. Use when: (1) Writing new Node.js/TypeScript code, (2) Creating API endpoints or middleware, (3) Handling user input or form data, (4) Implementing authentication or authorization, (5) Working with secrets or environment variables, (6) Setting up project configurations (tsconfig, eslint), (7) User mentions security concerns, (8) Reviewing code for vulnerabilities, (9) Working with file paths or child processes, (10) Setting up HTTP headers or CORS.
Svelte runes guidance. Use for reactive state, props, effects, or migration. Covers $state, $derived, $effect, $props, $bindable. Prevents reactivity mistakes.
| name | sveltekit-remote-functions |
| description | SvelteKit remote functions guidance. Use for command(), query(), form() patterns in .remote.ts files. |
File naming: *.remote.ts for remote function files
Which function? One-time action → command() | Repeated reads →
query() | Forms → form()
// actions.remote.ts
import { command } from "$app/server";
import * as v from "valibot";
export const delete_user = command(v.object({ id: v.string() }), async ({ id }) => {
await db.users.delete(id);
return { success: true };
});
// Call from client: await delete_user({ id: '123' });
getRequestEvent() available for cookies/headers accessquery() works with {#await}. Parameterized queries with $derived return Query objects — use .ready/.current or $derived(await ...) with experimental async<svelte:boundary> + {@const await} causes infinite navigation loops with shared queries (sveltejs/svelte#17717)query().refresh() - updates without flicker.catch() on query().refresh() in intervals — errors reject the Promise and evict the query from cache