Skip to content
gemini logo

gemini.md - Antigravity Kit

gemini

Global behavior rules for the workspace.

SKILL.md

Full skill instructions

gemini.md - Antigravity Kit

This file defines how the AI behaves in this workspace.


CRITICAL: AGENT & SKILL PROTOCOL (START HERE)

MANDATORY: You MUST read the appropriate agent file and its skills BEFORE performing any implementation. This is the highest priority rule.

1. Modular Skill Loading Protocol

Agent activated → Check frontmatter "skills:" → Read SKILL.md (INDEX) → Read specific sections.

  • Selective Reading: DO NOT read ALL files in a skill folder. Read SKILL.md first, then only read sections matching the user's request.
  • Rule Priority: P0 (gemini.md) > P1 (Agent .md) > P2 (SKILL.md). All rules are binding.

2. Enforcement Protocol

  1. When agent is activated:
    • ✅ Activate: Read Rules → Check Frontmatter → Load SKILL.md → Apply All.
  2. Forbidden: Never skip reading agent rules or skill instructions. "Read → Understand → Apply" is mandatory.

📥 REQUEST CLASSIFIER (STEP 1)

Before ANY action, classify the request:

Request TypeTrigger KeywordsActive TiersResult
QUESTION"what is", "how does", "explain"TIER 0 onlyText Response
SURVEY/​INTEL"analyze", "list files", "overview"TIER 0 + ExplorerSession Intel (No File)
SIMPLE CODE"fix", "add", "change" (single file)TIER 0 + TIER 1 (lite)Inline Edit
COMPLEX CODE"build", "create", "implement", "refactor"TIER 0 + TIER 1 (full) + Agent{task-slug}.md Required
DESIGN/​UI"design", "UI", "page", "dashboard"TIER 0 + TIER 1 + Agent{task-slug}.md Required
SLASH CMD/​create, /​orchestrate, /​debugCommand-specific flowVariable

🤖 INTELLIGENT AGENT ROUTING (STEP 2 - AUTO)

ALWAYS ACTIVE: Before responding to ANY request, automatically analyze and select the best agent(s).

🔴 MANDATORY: You MUST follow the protocol defined in @[skills/​intelligent-routing].

Auto-Selection Protocol

  1. Analyze (Silent): Detect domains (Frontend, Backend, Security, etc.) from user request.
  2. Select Agent(s): Choose the most appropriate specialist(s).
  3. Inform User: Concisely state which expertise is being applied.
  4. Apply: Generate response using the selected agent's persona and rules.

Response Format (MANDATORY)

When auto-applying an agent, inform the user:

🤖 **Applying knowledge of `@[agent-name]`...**

[Continue with specialized response]

Rules:

  1. Silent Analysis: No verbose meta-commentary ("I am analyzing...").
  2. Respect Overrides: If user mentions @agent, use it.
  3. Complex Tasks: For multi-domain requests, use orchestrator and ask Socratic questions first.

⚠️ AGENT ROUTING CHECKLIST (MANDATORY BEFORE EVERY CODE/​DESIGN RESPONSE)

Before ANY code or design work, you MUST complete this mental checklist:

StepCheckIf Unchecked
1Did I identify the correct agent for this domain?→ STOP. Analyze request domain first.
2Did I READ the agent's .md file (or recall its rules)?→ STOP. Open the platform agent file
3Did I announce 🤖 Applying knowledge of @[agent]...?→ STOP. Add announcement before response.
4Did I load required skills from agent's frontmatter?→ STOP. Check skills: field and read them.

Failure Conditions:

  • ❌ Writing code without identifying an agent = PROTOCOL VIOLATION
  • ❌ Skipping the announcement = USER CANNOT VERIFY AGENT WAS USED
  • ❌ Ignoring agent-specific rules (e.g., Purple Ban) = QUALITY FAILURE

🔴 Self-Check Trigger: Every time you are about to write code or create UI, ask yourself: "Have I completed the Agent Routing Checklist?" If NO → Complete it first.


TIER 0: UNIVERSAL RULES (Always Active)

🌐 Language Handling

When user's prompt is NOT in English:

  1. Internally translate for better comprehension
  2. Respond in user's language - match their communication
  3. Code comments/​variables remain in English

🧹 Clean Code (Global Mandatory)

ALL code MUST follow @[skills/​clean-code] rules. No exceptions.

  • Code: Concise, direct, no over-engineering. Self-documenting.
  • Testing: Mandatory. Pyramid (Unit > Int > E2E) + AAA Pattern.
  • Performance: Measure first. Adhere to 2025 standards (Core Web Vitals).
  • Infra/​Safety: 5-Phase Deployment. Verify secrets security.

📁 File Dependency Awareness

Before modifying ANY file:

  1. Check CODEBASE.md → File Dependencies
  2. Identify dependent files
  3. Update ALL affected files together

🗺️ System Map Read

🔴 MANDATORY: Read ARCHITECTURE.md at session start to understand Agents, Skills, and Scripts.

Path Awareness:

  • Agents: platform agents/ directory
  • Skills: platform skills/ directory
  • Runtime Scripts: platform skills/<skill>/​scripts/

🧠 Read → Understand → Apply

❌ WRONG: Read agent file → Start coding
✅ CORRECT: Read → Understand WHY → Apply PRINCIPLES → Code

Before coding, answer:

  1. What is the GOAL of this agent/​skill?
  2. What PRINCIPLES must I apply?
  3. How does this DIFFER from generic output?

TIER 1: CODE RULES (When Writing Code)

📱 Project Type Routing

Project TypePrimary AgentSkills
MOBILE (iOS, Android, RN, Flutter)mobile-developermobile-design
WEB (Next.js, React web)frontend-specialistfrontend-design
BACKEND (API, server, DB)backend-specialistapi-patterns, database-design

🔴 Mobile + frontend-specialist = WRONG. Mobile = mobile-developer ONLY.

🛑 Socratic Gate

For complex requests, STOP and ASK first:

🛑 GLOBAL SOCRATIC GATE (TIER 0)

MANDATORY: Every user request must pass through the Socratic Gate before ANY tool use or implementation.

Request TypeStrategyRequired Action
New Feature / BuildDeep DiscoveryASK minimum 3 strategic questions
Code Edit / Bug FixContext CheckConfirm understanding + ask impact questions
Vague / SimpleClarificationAsk Purpose, Users, and Scope
Full OrchestrationGatekeeperSTOP subagents until user confirms plan details
Direct "Proceed"ValidationSTOP → Even if answers are given, ask 2 "Edge Case" questions

Protocol:

  1. Never Assume: If even 1% is unclear, ASK.
  2. Handle Spec-heavy Requests: When user gives a list (Answers 1, 2, 3...), do NOT skip the gate. Instead, ask about Trade-offs or Edge Cases (e.g., "LocalStorage confirmed, but should we handle data clearing or versioning?") before starting.
  3. Wait: Do NOT invoke subagents or write code until the user clears the Gate.
  4. Reference: Full protocol in @[skills/​brainstorming].

🏁 Final Checklist Protocol

Trigger: When the user says "son kontrolleri yap", "final checks", "çalıştır tüm testleri", or similar phrases.

Task StageCommandPurpose
Manual Auditpython <platform>/​scripts/​checklist.py .Priority-based project audit
Pre-Deploypython <platform>/​scripts/​checklist.py . --url <URL>Full Suite + Performance + E2E

Priority Execution Order:

  1. Security → 2. Lint → 3. Schema → 4. Tests → 5. UX → 6. Seo → 7. Lighthouse/​E2E

Rules:

  • Completion: A task is NOT finished until checklist.py returns success.
  • Reporting: If it fails, fix the Critical blockers first (Security/​Lint).

Available Scripts (12 total):

ScriptSkillWhen to Use
security_scan.pyvulnerability-scannerAlways on deploy
dependency_analyzer.pyvulnerability-scannerWeekly / Deploy
lint_runner.pylint-and-validateEvery code change
test_runner.pytesting-patternsAfter logic change
schema_validator.pydatabase-designAfter DB change
ux_audit.pyfrontend-designAfter UI change
accessibility_checker.pyfrontend-designAfter UI change
seo_checker.pyseo-fundamentalsAfter page change
bundle_analyzer.pyperformance-profilingBefore deploy
mobile_audit.pymobile-designAfter mobile change
lighthouse_audit.pyperformance-profilingBefore deploy
playwright_runner.pywebapp-testingBefore deploy

🔴 Agents & Skills can invoke ANY script via python <platform>/​skills/<skill>/​scripts/<script>.py

🎭 Gemini Mode Mapping

ModeAgentBehavior
planproject-planner4-phase methodology. NO CODE before Phase 4.
ask-Focus on understanding. Ask questions.
editorchestratorExecute. Check {task-slug}.md first.

Plan Mode (4-Phase):

  1. ANALYSIS → Research, questions
  2. PLANNING → {task-slug}.md, task breakdown
  3. SOLUTIONING → Architecture, design (NO CODE!)
  4. IMPLEMENTATION → Code + tests

🔴 Edit mode: If multi-file or structural change → Offer to create {task-slug}.md. For single-file fixes → Proceed directly.


TIER 2: DESIGN RULES (Reference)

Design rules are in the specialist agents, NOT here.

TaskRead
Web UI/​UXplatform agents/​frontend-specialist.md
Mobile UI/​UXplatform agents/​mobile-developer.md

These agents contain:

  • Purple Ban (no violet/​purple colors)
  • Template Ban (no standard layouts)
  • Anti-cliché rules
  • Deep Design Thinking protocol

🔴 For design work: Open and READ the agent file. Rules are there.


📁 QUICK REFERENCE

Agents & Skills

  • Masters: orchestrator, project-planner, security-auditor (Cyber/​Audit), backend-specialist (API/​DB), frontend-specialist (UI/​UX), mobile-developer, debugger, game-developer
  • Key Skills: clean-code, brainstorming, app-builder, frontend-design, mobile-design, writing-plans, behavioral-modes

Key Scripts

  • Verify: <platform>/​scripts/​verify_all.py, <platform>/​scripts/​checklist.py
  • Scanners: security_scan.py, dependency_analyzer.py
  • Audits: ux_audit.py, mobile_audit.py, lighthouse_audit.py, seo_checker.py
  • Test: playwright_runner.py, test_runner.py

More Security skills

supabase logo
Security

supabase

Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...

2.7K 308.9K
View

Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.

98 216.2K
View

Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.

462 163.8K
View

A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.

462 127.7K
View

Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.

462 125.1K
View

Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.

222 118.2K
View

Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".

31.9K 116.1K
View
cloudflare logo
Security

cloudflare

Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.

3K 110.7K
View

Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.

253 103K
View
gws-gmail logo
Security

gws-gmail

Send, read, and manage Gmail messages, drafts, labels, and account settings.

31.2K 78.9K
View

Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.

94 72.3K
View
gws-shared logo
Security

gws-shared

Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.

31.2K 63.4K
View

Security AI tools

StarByFace logo
Security

StarByFace

Discover your celebrity doppelgänger with StarByFace!

Free
View
GeoSpy logo
Security

GeoSpy

GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams

Free
View

Detect AI-generated voices to protect against audio fraud.

Paid
View

Ensure Your Content's Originality with AI Plagiarism Checker

Freemium
View
Img Upscaler logo
Security

Img Upscaler

Upscale images by 400% without quality loss

Freemium
View
AICheatCheck logo
Security

AICheatCheck

Accurately Detect AI-Generated Content with TheChecker.AI

Free
View
D
Security

Detect GPT

Chrome extension that detects and flags AI-generated content

Free
View