supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
agent-design
Design AI agents with recommended patterns and architectures
Full skill instructions
Skill for designing high-performance AI agents following 2025 patterns.
| Type | Control | When to use |
|---|---|---|
| Workflow | Code orchestrates LLM | Predictable tasks, need for control |
| Agent | LLM directs its actions | Flexibility, adaptive decisions |
Golden rule: Start simple, add complexity if necessary.
Agent:
identity: Who am I?
capabilities: What can I do?
tools: What tools do I have?
constraints: What are my limits?
workflow: How should I proceed?
---
name: my-agent
description: Short description
model: sonnet|opus
tools: [list of tools]
skills: [associated skills]
---
# Identity
[Who the agent is]
# Capabilities
[What it can do]
# Workflow
[Steps to follow]
# Tools
[How to use each tool]
# Constraints
[Limits and rules]
# Examples
[Use cases]
# Forbidden
[What it must NEVER do]
User → Agent → Response
Usage: Simple tasks, rapid prototyping.
User → Agent ↔ Tools → Response
↑
Tool Results
Usage: Tasks requiring external access (API, files, DB).
User → Orchestrator → Subagent 1 (specialized)
→ Subagent 2 (specialized)
→ Subagent 3 (specialized)
↓
Synthesis → Response
Usage: Complex tasks, separation of responsibilities.
User → Agent 1 → Agent 2 → Agent 3 → Response
(Analyze) (Plan) (Execute)
Usage: Linear processes (e.g., Analyst → Architect → Developer).
Key 2025 concept: Each sub-agent must have a "fresh" context.
❌ Bad: Pass entire history to each sub-agent
✅ Good: Give only necessary information
Orchestrator:
- Keeps complete history
- Extracts relevant context for each sub-agent
- Synthesizes results
---
name: [kebab-case-name]
description: [1-2 lines max]
model: sonnet
color: blue
tools: Read, Edit, Write, Bash, Grep, Glob
skills: [associated-skills]
---
# [Agent Name]
[Purpose description]
## Core Principles
1. **[Principle 1]**: [Short explanation]
2. **[Principle 2]**: [Short explanation]
## Workflow (MANDATORY)
### Phase 1: [Name]
[Numbered actions]
### Phase 2: [Name]
[Numbered actions]
## Output Format
[Response structure]
## Forbidden
- [Prohibition 1]
- [Prohibition 2]
You know everything and can do anything.
You are an expert in [specific domain].
For topics outside your domain, redirect to the appropriate agent.
Do what's logical.
Step 1: Analyze the problem
Step 2: Propose 3 solutions
Step 3: Recommend the best with justification
Execute the task.
IF the task fails:
1. Identify the cause
2. Propose an alternative
3. Ask for confirmation before retrying
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content