skills

Review a proposed code change using Codex's standard review rubric. Use when asked to review a diff, PR, branch, local change set, staged changes, or any code modification for actionable correctness, security, performance, maintainability, or regression findings.

Orchestrate an iterative code review and fix loop with Codex subagents. Use when asked to repeatedly review a local change set, staged changes, branch, or PR, delegate review to xhigh subagents using the code-review skill, have the same reviewer fix discovered issues, and repeat with fresh reviewers until no actionable findings remain.

Autumn billing and monetization platform documentation and guidance. Use when working with Autumn - an open-source billing control layer for AI and SaaS monetization. Triggers on questions about Autumn pricing, usage-based billing, feature gating, plan management, credit systems, metered billing, subscription lifecycle, Stripe integration via Autumn, check/track API, customer balances, entities, React billing hooks, CLI config, or ANY Autumn-related development tasks.

isolated-vm documentation and guidance for secure JavaScript isolation using v8 Isolates in Node.js. Use when working with isolated-vm - a native Node.js module providing access to v8's Isolate interface for running JavaScript in completely isolated environments with memory limits. Triggers on questions about isolated-vm, ivm.Isolate, v8 isolates, sandboxed JS execution in Node.js, cross-isolate references, ExternalCopy, Reference, Context, evalClosure, compileModule, or ANY isolated-vm-related development tasks.

QuickJS WebAssembly sandbox documentation and guidance for executing JavaScript/TypeScript securely. Use when working with @sebastianwessel/quickjs - a TypeScript package for running untrusted JS/TS code in an isolated QuickJS WebAssembly runtime. Triggers on questions about QuickJS sandbox, @sebastianwessel/quickjs, loadQuickJs, runSandboxed, evalCode, sandbox options, virtual file system, sandboxed fetch, custom modules in QuickJS, AI code execution in WASM, or ANY QuickJS sandbox-related development tasks.

Vercel Sandbox documentation and guidance for running untrusted code in isolated environments. Use when working with Vercel Sandbox - a compute primitive for safely executing AI-generated code, user-submitted scripts, or developer experiments in Firecracker microVMs. Triggers on questions about Vercel Sandbox SDK, sandbox CLI, @vercel/sandbox, Sandbox.create, snapshots, persistent sandboxes, sandbox authentication, sandbox pricing, sandbox system specs, microVMs, code execution isolation, or ANY Vercel Sandbox-related development tasks.

Astro web framework documentation and guidance. Use when working with Astro - an all-in-one web framework for building content-driven websites using island architecture and server-first design. Triggers on questions about Astro setup, .astro components, content collections, Markdown/MDX, islands, SSR, SSG, routing, integrations (React, Vue, Svelte, Preact, Solid), Astro config, deployment, CMS integration, migration, or ANY Astro-related development tasks.

Vercel for Platforms documentation and guidance for building multi-tenant and multi-project applications. Use when working with Vercel Platforms - building SaaS apps serving multiple tenants with custom domains, AI coding platforms, or any platform deploying multiple projects. Triggers on questions about multi-tenant architecture, multi-project platforms, wildcard domains, custom domains on Vercel, tenant middleware, Vercel SDK for platforms, platform elements, deploy actions, vibe coding platforms, or ANY Vercel Platforms-related development tasks.

Generate AI image prompts for SaaS marketing websites with consistent branding. Covers prompt architecture, style consistency, placement strategy, and extensive examples for hero sections, features, pricing, and more. Use when creating AI-generated images, illustrations, or visual assets for a SaaS website, landing page, or marketing campaign.

Fumadocs documentation framework guidance. Use when working with Fumadocs - a flexible docs framework for Next.js, React Router, TanStack Start, and Waku. Triggers on questions about Fumadocs setup, page tree, MDX content source, Fumadocs UI, Fumadocs Core, search integration, OpenAPI docs, internationalization, layouts, components, navigation, deploying, or ANY Fumadocs-related development tasks.

Mintlify documentation platform guidance. Use when working with Mintlify - an AI-native documentation platform for creating, deploying, and optimizing developer docs. Triggers on questions about Mintlify setup, docs.json configuration, MDX components, API playground, OpenAPI integration, navigation, themes, custom domains, deployment, web editor, AI assistant, llms.txt, MCP, analytics, or ANY Mintlify-related documentation tasks.

SaaS email marketing best practices, benchmarks, and strategy reference. Use when working on onboarding email sequences, trial expiration emails, lifecycle emails, re-engagement/win-back campaigns, email broadcast cadence, SaaS discount strategy via email, email deliverability, email segmentation, email frequency, or any email marketing task for a SaaS product. Also triggers on questions about trial conversion optimization, churn recovery emails, sunset policies, promotional email strategy, or email metrics/benchmarks.

Loops email platform for SaaS documentation and guidance. Use when working with Loops - an email platform for sending transactional, marketing, and lifecycle emails. Triggers on questions about Loops API, contacts, transactional email, campaigns, loop builder, events, mailing lists, webhooks, SDKs, SMTP, forms, integrations, deliverability, or ANY Loops-related development tasks.

Integrate and work with PostHog analytics, feature flags, experiments, session replay, surveys, error tracking, and all other PostHog products. Use when the user asks to add PostHog tracking, capture events, set up feature flags, run A/B tests, configure session replay, create surveys, use the PostHog API, work with PostHog SDKs (JavaScript, Node, React, Python, etc.), debug PostHog integration issues, or implement any PostHog functionality. Also use when questions arise about PostHog configuration, data pipelines, webhooks, or the PostHog data model.

Look up and use Sprites (sprites.dev) documentation for persistent, hardware-isolated execution environments by Fly.io. Use when the user mentions sprites, sprites.dev, Sprites CLI, sprite commands, sandboxed code execution with Sprites, or microVM environments.

Hetzner Cloud API documentation and guidance. Use when working with Hetzner Cloud infrastructure - provisioning servers, managing networks, volumes, firewalls, load balancers, DNS zones, and other cloud resources. Triggers on Hetzner API, cloud servers, VPS provisioning, Hetzner CLI (hcloud), server deployment, cloud infrastructure, virtual machines, Hetzner networking.

OpenClaw AI agent platform documentation and guidance. Use when working with OpenClaw - an open-source platform for deploying AI agents across messaging channels (Slack, Discord, Telegram, WhatsApp, iMessage, etc.). Triggers on questions about OpenClaw setup, configuration, hosting, channels, gateways, tools, plugins, multi-agent routing, sandboxing, CLI commands, deployment (Fly.io, Railway, Render, Docker), or ANY OpenClaw-related development tasks.

Create high-converting SaaS marketing websites and landing pages. Use when building marketing sites, landing pages, or homepage copy for software products. Triggers on requests for SaaS websites, startup landing pages, product marketing pages, conversion-focused copy, or B2B software marketing.

Bun JavaScript runtime, bundler, package manager, and test runner documentation and guidance. Use when working with Bun - an all-in-one toolkit for developing JavaScript/TypeScript applications. Triggers on questions about Bun runtime, bun install, bun test, bun build, Bun.serve, Bun.file, Bun.spawn, bunfig.toml, Bun APIs, SQLite, S3, Redis, WebSockets, HTTP server, bundler configuration, hot reloading, macros, plugins, or ANY Bun-related development tasks.

Drizzle ORM TypeScript documentation and guidance. Use when working with Drizzle - a lightweight, type-safe TypeScript ORM for PostgreSQL, MySQL, SQLite, SingleStore, and MSSQL. Triggers on questions about Drizzle schema, migrations, drizzle-kit, queries, relations, joins, transactions, RLS, column types, database connections, or ANY Drizzle-related development tasks.

Autonomously QA and verify the application using browser automation. Use when verifying code changes, testing features, validating bug fixes, or confirming any work done on the application. Triggers on requests to "test this", "verify this works", "QA this change", "make sure it works", or after implementing features that need validation.

Supabase backend-as-a-service platform documentation and guidance. Use when working with Supabase - an open-source Firebase alternative providing Postgres database, authentication, real-time subscriptions, edge functions, storage, and vector embeddings. Triggers on questions about Supabase setup, database, auth, RLS, edge functions, storage, realtime, pgvector, migrations, CLI, self-hosting, or ANY Supabase-related development tasks.

TanStack Query (React Query) documentation and guidance. Use when working with TanStack Query - a powerful async state management library for data fetching, caching, synchronization, and server state management. Triggers on questions about React Query, TanStack Query, useQuery, useMutation, query invalidation, caching strategies, optimistic updates, infinite queries, prefetching, or ANY TanStack Query-related development tasks.

Perform mathematical calculations (add, subtract, multiply, divide). Use when you need to do any numerical calculations — never do mental math. Supports batch operations.

Create bulletproof Terms of Service and Privacy Policy documents for SaaS applications. Infers company information from codebase/marketing site, conducts comprehensive audits, drafts documents, then asks user ONLY for missing details at the end. Minimizes user interaction. Use when the user needs to draft, review, or update legal documents (ToS, Terms of Service, Privacy Policy, legal pages). Triggers on requests for legal documents, terms drafting, privacy policy creation, "cover our bases legally", liability protection, or legal compliance for software products.

Bootstrap a new TypeScript open-source npm package with Bun, tsup, Biome, Husky, GitHub Actions CI/CD, and dual ESM/CJS publishing. Use when the user wants to create, scaffold, initialize, set up, or bootstrap a new TypeScript library, npm package, or open-source project.

Manage Railway cloud deployments via the Railway CLI. Use when the user wants to deploy, manage services, set variables, view logs, link projects, add databases, configure domains, manage volumes, or perform any Railway platform operation from the terminal.