supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
correct-git-commits-no-exceptions
Enforce mature commit hygiene and documentation standards for long-lived projects. Trigger this skill automatically in ANY project before ANY commit creation, whether prompted by human, agent, or another skill; always do this, to ensure changesets are clean, tests pass, commit messages are terse ...
Full skill instructions
Ensure commits and documentation meet senior/staff engineer standards by treating all committed content as permanent historical record. Prevent accumulation of noise, cruft, and temporal references that lose meaning over time. Every commit should be clean, tested, and documented for engineers who read it months or years later.
Core principle: Anything committed is part of the long-term archive. It's acceptable to note work-in-progress status, but avoid references that only make sense relative to current development ("this is the new feature" becomes meaningless once the feature is established).
Automatically trigger this skill:
Follow this workflow before creating any commit:
Examine all files in the current changeset:
git status
git diff
git diff --staged
Understand the full scope of changes being committed.
Run through the hygiene checklist for all changed files:
references/hygiene-checklist.md)Scope: Apply hygiene only to files in the current changeset. If extensive hygiene issues exist outside the changeset, note them as a separate task for later.
See references/hygiene-checklist.md for detailed patterns and examples.
Check if documentation needs updating:
Remove temporal language from all docs:
Prevent documentation bloat: Don't unnecessarily expand docs. Update only what needs updating.
Required: Run full test suite before committing:
# Run all tests
npm test # or
pytest # or
make test # or appropriate test command
Test failure policy:
If tests don't exist: Note the gap but don't block commit.
Draft commit message following the template in references/commit-template.md.
Key principles:
type(scope): subject)Structure:
type(scope): Subject line under 72 chars
Body explaining behavior changes and why:
- Integration notes: how this interacts with other systems
- Breaking changes: what changed and migration path
- Non-obvious decisions: trade-offs, constraints, insights
Linear: PROJ-123
BREAKING CHANGE: Description if applicable
What to include:
What to exclude:
See references/commit-template.md for detailed examples.
Once hygiene checks pass, tests pass, and commit message is drafted:
git add [files]
git commit -m "$(cat <<'EOF'
<commit message here>
EOF
)"
All commits and documentation target senior/staff engineers and above. This means:
Committed content must be timeless. Forbidden patterns:
Acceptable: Noting WIP status if project is incomplete at commit time.
Don't fix every issue in the codebase. Apply hygiene to the current changeset. Note broader issues for separate cleanup tasks.
Tests must pass before commit. Don't remove tests or skip failures to achieve green builds. Fix failures or ask permission to proceed with justified partial failures.
Keep docs accurate and current, but don't unnecessarily expand documentation volume. Quality over quantity.
Detailed commit message template with examples. User should customize this template to match project conventions. Emphasizes:
Comprehensive checklist of hygiene issues to detect and fix:
User: "Commit these changes"
1. Review changeset:
- git status shows 5 modified files
- git diff reveals debug console.log statements, commented code
2. Apply hygiene:
- Remove console.log statements from auth.ts
- Remove commented-out old implementation in api.ts
- Rewrite comment "This is the new OAuth handler" → "OAuth2 token validation"
- Remove unused import in utils.ts
3. Check documentation:
- README mentions old API endpoint - update to current endpoint
- No other doc changes needed
4. Run tests:
- npm test → all pass ✓
5. Draft commit message:
feat(auth): Implement OAuth2 token validation
Replaces API key authentication with OAuth2 bearer tokens.
Tokens validated against identity provider before request
processing. Reduces attack surface by eliminating static keys.
Integration: /api/auth/validate endpoint added for token checks.
Clients must include Authorization: Bearer <token> header.
BREAKING CHANGE: API key auth removed. Migrate to OAuth2.
Linear: AUTH-245
6. Create commit:
git add auth.ts api.ts utils.ts README.md
git commit -m "..."
Extensive hygiene needed outside changeset: Note for later, don't expand scope.
Tests fail but commit seems necessary: Ask permission to proceed with specific justification.
Commit message getting too long: Ruthlessly cut obvious details. If >50 lines, consider splitting the commit.
User wants to commit without tests: Explain test-first policy; ask if WIP justifies exception.
Reference docs created during work: Remove unless they're intentional ADRs, API docs, or onboarding materials.
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content