coding-agents

Canvas SDK reference and documentation. Use whenever a question, claim, or piece of code touches Canvas SDK capabilities, API usage, implementation patterns, or testing — including quick conversational questions ("how do I ingest ADTs?", "what's the import for X?", "does Canvas support Y?"). The bundled docs are the source of truth; do not answer Canvas SDK questions from memory.

FHIR API reference and documentation for Canvas plugins that need to read or write data via FHIR endpoints

This skill should be used when the user asks to "write tests", "create tests", "generate tests", "unit tests", "pytest", "test guidelines", "testing rules", "test standards", "how to test", "test this code", "add tests", "validate tests", "check tests", "improve tests", or when working with Python test files. Provides comprehensive guidelines for creating pytest unit tests with 100% coverage following strict naming conventions, mock patterns, and parametrization standards.

Custom Data anti-patterns and corrections for Canvas plugins - unnecessary compatibility checks, misuse of AttributeHubs vs CustomModels

Database query optimization for Canvas plugins - N+1 detection, prefetch_related, select_related

Security review for plugins acting as FHIR API clients - token management, scope validation, and patient-scoped authorization

Unit test authoring and coverage checking for Canvas plugins

Canvas plugin architecture patterns, best practices, and implementation templates

Design, UI, data-access, and packaging conventions for Canvas provider companion applications (scopes `provider_companion_global`, `provider_companion_patient_specific`, `provider_companion_note_specific`). Use when building or reviewing a plugin whose manifest declares one of those scopes, or whose `Application.on_open` emits a `LaunchModalEffect` for the companion surface.

Generate SVG icons and convert them to 48x48 PNG format for Canvas plugins and applications

Analyze Canvas instance configuration to understand the target environment for plugin development

Security review for plugin API endpoints (SimpleAPI, WebSocket) - authentication and authorization when your plugin is the SERVER