skills

Make a CI/CD pipeline faster. Use when asked to speed up CI, cut build/test wall-clock, fix a slow pipeline, or decide whether bigger runners vs sharding vs caching will help. A measure-the-critical-path mental model plus a stop-when-it-stops-paying ladder (cache deps -> parallel jobs -> shard tests -> isolate per-shard resources -> right-size runners -> build cache -> test selection -> merge queue).

Audit and improve a site's visibility in search and AI answer engines (SEO, GEO, AEO). Use when asked to assess SEO/GEO/AEO, check AI-search / AI-Overview visibility, generate an optimization playbook, or track ranking and citation progress over time. Runs as `/seo-geo-aeo assess|playbook|track|competitors|compare|refresh <target>` and reads data from Google Search Console, GA4, Lighthouse, DataForSEO (pay-per-use SERP/backlinks/AI-mentions), Semrush, Ahrefs and more via API, MCP, or pasted screenshots. Methodology grounded in the GEO paper (KDD 2024), Google's AI-search guidance, and the primary sources in reference.md.

Reliability, safety, and execution discipline standard for autonomous software agents. Defines minimum operational requirements — correctness over cleverness, reversibility over speed, evidence over narrative. Use when establishing operating guardrails for an autonomous coding agent or defining how an agent should behave safely.

Explains WHY agent operating principles exist, citing CS texts (Brooks, Dijkstra, Gall's Law, Ousterhout). Use ONLY when asked about rationale, philosophy, or source references. NOT for task execution—use agent-operating-standard instead. Triggers on "why does the standard say", "explain the principle", "what's the reasoning".

Better Auth integration expertise for TypeScript authentication. Triggers when implementing auth flows, configuring OAuth providers, setting up sessions, email verification, password reset, or any file importing from better-auth. Use for auth configuration, plugin setup, database adapters, session management, hooks, and security best practices.

World-class date, time, and timezone handling based on Jon Skeet's NodaTime principles and the TC39 Temporal API (Stage 4 / ES2026). Triggers when working with Date objects, Temporal types, timestamps, timezone conversions, scheduling, or any temporal logic. Use to avoid the countless bugs caused by datetime mishandling.

UI/UX design patterns for visual hierarchy, typography, color, spacing, and components. Use when designing interfaces, reviewing UI, choosing colors/fonts, or needing spacing patterns. Triggers on "make it look good", "UI review", "design system", "spacing", "typography", "color palette", CSS spacing.

Manages Drizzle ORM migrations with PostgreSQL for multi-environment setups (local/staging/production). Use when working with drizzle-kit, schema syncing, or migration workflows.

Elite JavaScript/TypeScript developer with deep expertise in modern language features, performance optimization, and pragmatic engineering. Use when writing, reviewing, or debugging pure JS/TS or Node.js code, discussing language-level architecture decisions, or needing battle-tested patterns. Triggers on JavaScript, TypeScript, Node.js, Promise/async code, npm packages, and JS performance questions. For React and React Router v7 patterns, use the `react-router-v7` skill. For Zod schema design, use `zod-ninja`.

Kysely ORM patterns for type-safe SQL query building, migrations, and TypeScript integration. Use when working with Kysely, writing type-safe queries, or managing database schemas with Kysely migrations.

AWS Lambda and CDK expertise for serverless functions, infrastructure as code, event-driven architectures, cold start optimization, and production patterns. Use when writing Lambda handlers, CDK stacks, NodejsFunction constructs, configuring triggers, optimizing performance, or any serverless compute patterns. Triggers on Lambda, serverless, handler, cold start, event source, API Gateway integration, CDK, infrastructure as code, CloudFormation.

Data visualization for PDF reports - charts, graphs, and dashboards rendered to print-ready format. Triggers when creating reports with charts, generating data visualizations for PDF output, or building dashboard exports.

Professional PDF document creation with expert typography, branding, and print-production quality. Triggers when generating branded documents, creating reports, building invoices, or any PDF output requiring professional layout and typography.

Smart PDF content extraction with context, page references, and pattern matching. Triggers when finding specific content in PDFs (contract prices, terms), searching for patterns, extracting images, or needing snippets with surrounding context.

PDF processing router - delegates to specialized sub-skills for extraction, creation, and charting. Triggers when working with PDF files, generating reports, or creating data visualizations for print.

PostgreSQL database design with proper types, naming conventions, indexing strategies, and JSONB patterns. Use when designing schemas, writing DDL, or optimizing PostgreSQL databases.

Product management frameworks and counterintuitive truths from Lenny's Podcast. Use when helping with product strategy, prioritization, roadmap decisions, feature scoping, team structure, customer discovery, activation metrics, positioning, or when the user is making product decisions that could benefit from battle-tested PM wisdom. Triggers on questions about what to build, how to prioritize, team organization, go-to-market strategy, or product-market fit.

React + React Router v7 framework mode expertise for Remix-style full-stack applications. Triggers when writing general React components (memoization, state derivation, keys, anti-useEffect patterns) or editing loaders, actions, route modules, react-router.config.ts, middleware, or any file importing from react-router or @react-router/*. Use for React patterns, route data loading, mutations, error handling, form submissions, redirects, revalidation, client/server code splitting, RSC patterns, thin routes/fat models architecture, and CSRF protection configuration.

Safe refactoring of legacy code using test-first techniques, dependency breaking, and proven patterns. Covers characterization tests, Golden Master, seams, Fowler's catalog, and anti-pattern remediation. Use when refactoring, fixing legacy bugs, modernizing code, or dealing with "big ball of mud", "spaghetti code", or "god class".

Universal relational database theory - normalization, keys, constraints, and anti-patterns that apply to ALL relational databases (PostgreSQL, MySQL, SQL Server, SQLite, etc.). Use when designing schemas, reviewing database structures, or discussing relational concepts.

Resend email API expertise for transactional emails, notifications, and batch sends. Triggers when sending emails, implementing email notifications, password resets, order confirmations, or any file importing from resend. Use for email sending, webhooks, templates, deliverability, and error handling.

Score any artifact on a 1-100 rubric with auto-iteration to a target score (e.g. /score 90). Builds a tailored rubric, identifies what would raise the score, and can auto-apply improvements. Built-in guardrails prevent gaming.

Sign-up and sign-in UX as a design + copy discipline. Use when building or reviewing any auth surface — sign-up, sign-in, OTP, magic-link, passkey enrollment, forgot-password, recovery, or lockout. Owns the user-facing experience (copy, error states, recovery affordances, persona tests); defers integration mechanics to the relevant stack skill (`better-auth`, `resend`, `clerk`, etc.). See the "When to invoke" section for filename and import triggers.

SQL Server query performance optimization: SARGability, index strategy (ESR rule), parameter sniffing, execution plans, TVF/view patterns, concurrency, TempDB, compression, and diagnostic DMVs. Use when writing or reviewing T-SQL queries, stored procedures, table-valued functions, or views for performance.

SQL Server safety patterns that prevent production incidents: division guards, error handling, silent failures, injection, transaction safety. Use when editing .sql files with T-SQL syntax or TypeScript files with raw SQL queries ($executeRaw, $queryRaw, EXEC, BEGIN TRAN).

SQL Server and Azure SQL database design with proper types, naming conventions, indexing strategies, temporal tables, dynamic data masking, and T-SQL patterns. Use when designing schemas, writing DDL, or working with SQL Server or Azure SQL databases.

Pragmatic testing guidance for JS/TS, React, and React Router. Focuses on confidence-to-effort ratio, behavioral testing, and avoiding brittle implementation-detail tests. Use when writing Vitest, Playwright, or React Testing Library code.

Writes and edits lint-compliant markdown files following markdownlint rules and best practices. Use when creating, editing, or reviewing .md files, README files, documentation, or any markdown content.

Write persuasive marketing copy for landing pages, emails, ads, and sales materials using proven principles from legendary copywriters like David Ogilvy, Gary Halbert, Eugene Schwartz, and Bill Bernbach. Use when creating landing pages, email campaigns, sales letters, advertisements, headlines, taglines, value propositions, calls to action, product descriptions, or any marketing content. Triggers on requests for persuasive writing, conversion copy, direct response copy, brand messaging, promotional materials, or "write copy for."

Suggests mindful breaks for wellness during long coding sessions. Triggers on fatigue signals, stress expressions, extended work, explicit requests ("need a break", "zen break"), or proactively during long conversations.

Zod schema design for form validation in React Router v7 apps using Conform or TanStack Form. Triggers when editing files that import from zod, working with form validation, creating schemas for Conform or TanStack Form, or defining input validation for route actions.

Security advisory pre-check for npm packages using Socket.dev and OSV.dev. Triggers when installing, updating, evaluating, or adding npm packages. Use BEFORE any install, update, or evaluate operation to detect compromised, malicious, or vulnerable packages and their transitive dependencies.

End-of-day shutdown ritual. Surveys branches and stashes, captures session context, locks in tomorrow's first task, and writes a structured parking receipt the next session can read cold. Grounded in Zeigarnik Effect research.

Evaluate npm packages for maintenance health, community adoption, security posture, and alternatives. Runs security pre-checks via Socket.dev and OSV.dev. Always expands single-package queries into comparisons.