agent-plugins

When encoding or decoding base64 (or hex) in JavaScript/TypeScript, use the native Uint8Array base64 methods — `Uint8Array.fromBase64()`, `Uint8Array.prototype.toBase64()`, and `Uint8Array.prototype.setFromBase64()` — instead of `btoa`/`atob` string juggling, `Buffer.from(...).toString("base64")`, or hand-rolled `String.fromCharCode(...)` loops. Use this skill whenever code converts bytes ↔ base64, handles base64url tokens (JWT, WebAuthn, VAPID, data URLs), or you see `btoa`/`atob`/`Buffer` used for binary base64. These methods are binary-safe and run in both Deno and the browser. Model habit reaches for `btoa`/`atob` or `Buffer`; this skill overrides that.

When deploying a static site to GitHub Pages — especially when you want a per-PR preview URL — call the reusable workflow `kuboon/workflows/.github/workflows/github-page-with-preview.yaml` instead of hand-writing configure-pages/upload-pages-artifact/deploy-pages jobs. Use this skill whenever you set up or edit a workflow that publishes to GitHub Pages, add PR/deploy previews, or the user mentions "GitHub Pages", "preview deployment", "deploy preview", "PR preview", or a static-site deploy. The reusable workflow builds `main` at the site root and each PR branch under a subpath, deploys both, and comments the preview URL on the PR.

When integrating "Add to Home Screen" (a2hs / PWA install), passkeys (WebAuthn), or web push notifications into a web frontend, use the @kuboon/browser-how-to library. Use this skill whenever you add or review code that: prompts a PWA install / "add to home screen", detects passkey/WebAuthn capability, requests or explains notification permission / Web Push, or handles in-app browsers (Facebook/Messenger/Instagram/LINE/etc.) that block these features. The library handles the "can this device do it? → if not, send to a standard browser → if yes, show how" flow so you don't hand-roll device/UA detection. Framework- agnostic (Vanilla JS/TS). Full reference: https://kuboon.github.io/browser-how-to/llms.txt

When initializing or scaffolding a NEW project — a web app, service, or boilerplate — use Deno as the runtime (NOT Node.js/npm/pnpm) and Remix v3 (`@remix-run/fetch-router`) as the web framework. Use this skill whenever you are choosing a runtime or web framework, creating package/runtime config (package.json vs deno.json), setting up a dev server, CI, or a devcontainer for a fresh project, or the user says "new project", "init", "scaffold", "setup", "boilerplate", or "start a web app". Model defaults to Node.js + Express/Next; this skill overrides that. Follow the deno-remix-reference implementation: https://github.com/kuboon/deno-remix-reference/tree/main/reference

Build, validate, run, and smoke-test the agent-plugins Claude Code plugin marketplace. Use when asked to run, launch, test, validate, verify, or screenshot this repo, to check that the marketplace and its plugins load in Claude Code, or after editing any marketplace.json, plugin.json, or SKILL.md.

Pin GitHub Actions to current, non-deprecated major versions when writing or editing GitHub Actions workflows. Use this skill whenever creating or modifying a file under .github/workflows/, writing or reviewing CI/CD YAML, or adding/ changing any `uses:` step — even when the user does not mention versions at all. Model training data lags behind real releases and tends to emit stale versions such as `actions/checkout@v4` or `actions/setup-node@v4`. Always consult the pinned version table in this skill instead of relying on remembered versions.