supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
star-story-extraction
Auto-invoke after task completion to extract interview-ready STAR stories from completed work.
Full skill instructions
"Every feature you build is an interview answer waiting to be told."
Transform completed work into compelling interview stories using the STAR method. These stories demonstrate real problem-solving ability.
| Component | Question | Focus |
|---|---|---|
| Situation | "What was the context?" | Set the scene, explain the problem |
| Task | "What were YOU responsible for?" | YOUR specific role and responsibility |
| Action | "What did YOU do?" | Specific technical actions YOU took |
| Result | "What was the outcome?" | Impact, metrics, improvements |
What kind of problem did you solve?
| Story Type | Good For Questions Like |
|---|---|
| Technical challenge | "Tell me about a difficult bug you solved" |
| Feature implementation | "Describe a feature you're proud of" |
| Performance optimization | "How did you improve system performance?" |
| Security fix | "Tell me about a security issue you addressed" |
| Refactoring | "Describe a time you improved code quality" |
| Learning curve | "Tell me about a time you learned something quickly" |
"What was the context? What problem or challenge existed before you started?"
Good elements:
Avoid:
"What were YOU specifically responsible for? What was your role?"
Good elements:
Avoid:
"Walk me through the specific steps YOU took. Be technical."
Good elements:
Avoid:
"What was the outcome? Can you quantify the impact?"
Good elements:
Avoid:
# STAR Story: [Feature/Problem Name]
**Date:** [When completed]
**Type:** [Technical Challenge / Feature / Performance / Security / Refactor]
## Situation
[The context. What problem existed? Why did it matter?]
## Task
[YOUR specific responsibility. What were YOU asked to do?]
## Action
[The specific steps YOU took. Be technical. Show your thought process.]
## Result
[The outcome. Metrics if possible. What impact did it have?]
---
## Interview Variations
This story can answer:
- "Tell me about a time you [X]"
- "Describe a challenging [Y] you worked on"
- "How did you approach [Z]?"
## Key Technical Points to Mention
- [Technology/pattern 1]
- [Technology/pattern 2]
- [Decision/trade-off made]
"I built a login form. It had validation. It worked."
Problems: No context, no challenge, no depth, no impact.
Situation: Our SaaS application was experiencing a 40% drop-off during signup because the existing form had poor UX and no real-time validation, frustrating users.
Task: I was responsible for rebuilding the entire authentication flow, focusing on reducing friction while maintaining security.
Action: I implemented a multi-step form with real-time validation using React Hook Form for performance. I added JWT authentication with secure refresh token rotation to handle long sessions. The key challenge was balancing security (short token expiry) with UX (no jarring logouts), which I solved by implementing silent refresh 5 minutes before expiry.
Result: Sign-up completion improved by 35%, and we've had zero authentication-related security incidents since launch. The pattern I built is now used across our other products.
Guide the junior with these:
| Mistake | Fix |
|---|---|
| "We built..." | Use "I implemented..." |
| Too long (10+ minutes) | Cut to 2-3 minutes |
| No technical depth | Add specific technologies and decisions |
| No result | Always end with impact |
| Only happy path | Include challenges overcome |
Stories are saved to:
mentorspec/career/stories/[date]-[feature-name].md
Example: mentorspec/career/stories/2026-01-15-jwt-auth.md
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content