supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
iterate-plan
Update existing implementation plans through user feedback with thorough research and validation. Also migrates old checkbox-based plans to the new Task tools system. This skill should be used when iterating on implementation plans, updating plans based on new requirements, refining technical app...
Full skill instructions
This skill enables intelligent iteration on existing implementation plans. Rather than rewriting plans from scratch, it makes surgical, well-researched updates while preserving the plan's existing structure and quality standards.
This skill uses Claude Code's native Task tools for progress tracking.
When iterating on plans, you must keep Tasks synchronized with plan changes:
| Plan Change | Task Action |
|---|---|
| Add new phase | TaskCreate for new phase, update addBlockedBy dependencies |
| Remove phase | TaskUpdate to mark removed (or delete if not started) |
| Reorder phases | Update addBlockedBy relationships |
| Rename phase | TaskUpdate to change subject |
| Modify phase scope | TaskUpdate to change description |
Important: The plan's task_list_id in metadata links to its Tasks. Always verify you're updating the correct task list.
Use this process when a plan lacks
task_list_idin its metadata.
Old plans used checkbox-based progress tracking ([x] / [ ]). The new system uses Task tools. When you encounter an old plan, migrate it.
An old plan has:
task_list_id in YAML frontmatter- [x] Task completed / - [ ] Task pendingStep M1: Generate task_list_id
Create an ID from the plan filename:
docs/plans/2024-03-15-user-auth.md → plan-2024-03-15-user-auth
docs/plans/api-refactor.md → plan-api-refactor
Step M2: Add metadata to plan
Add or update the YAML frontmatter:
---
task_list_id: plan-2024-03-15-user-auth
migrated_from_checkboxes: true
migration_date: 2026-01-25
---
Step M3: Create Tasks for each phase
For each phase in the plan:
TaskCreate:
subject: "Phase N: [Phase Name]"
description: "[Phase objective from plan] - Plan: [plan file path]"
activeForm: "Implementing Phase N: [Name]"
Step M4: Determine phase status from checkboxes
Analyze existing checkboxes to determine status:
| Checkbox Pattern | Task Status |
|---|---|
All tasks [x] checked | completed |
Some tasks [x], some [ ] | in_progress |
All tasks [ ] unchecked | pending |
TaskUpdate:
taskId: [phase task]
status: "completed" | "in_progress" | "pending"
Step M5: Set up dependencies
Create sequential dependencies:
TaskUpdate:
taskId: [phase-2-task]
addBlockedBy: [phase-1-task]
TaskUpdate:
taskId: [phase-3-task]
addBlockedBy: [phase-2-task]
Step M6: Preserve checkboxes as reference
Do NOT remove checkboxes from the plan. They serve as historical record. Add a note:
> **Note**: This plan has been migrated to Task tools for progress tracking.
> Checkboxes below are preserved for reference but progress is now tracked via `TaskList`.
> Task List ID: `plan-2024-03-15-user-auth`
Before (old plan):
# Implementation Plan: User Authentication
## Phase 1: Database Schema
- [x] Create users table
- [x] Add password hash column
- [x] Create sessions table
## Phase 2: Auth Service
- [x] Implement password hashing
- [ ] Implement login endpoint
- [ ] Implement logout endpoint
## Phase 3: Testing
- [ ] Unit tests for auth service
- [ ] Integration tests
After (migrated plan):
---
task_list_id: plan-user-authentication
migrated_from_checkboxes: true
migration_date: 2026-01-25
---
# Implementation Plan: User Authentication
> **Note**: This plan has been migrated to Task tools for progress tracking.
> Checkboxes below are preserved for reference but progress is now tracked via `TaskList`.
> Task List ID: `plan-user-authentication`
## Phase 1: Database Schema
- [x] Create users table
- [x] Add password hash column
- [x] Create sessions table
## Phase 2: Auth Service
- [x] Implement password hashing
- [ ] Implement login endpoint
- [ ] Implement logout endpoint
## Phase 3: Testing
- [ ] Unit tests for auth service
- [ ] Integration tests
Tasks created:
Tasks (1 done, 2 open):
✓ #1 Phase 1: Database Schema
● #2 Phase 2: Auth Service (in_progress) › blocked by #1
◻ #3 Phase 3: Testing › blocked by #2
Migrate automatically when:
/iterate-plan on an old plan/implement-plan on an old planPresent migration summary to user:
📋 Plan Migration Required
This plan uses the old checkbox-based progress tracking.
I'll migrate it to the new Task tools system.
Phases detected: 3
- Phase 1: Database Schema (completed - all checkboxes checked)
- Phase 2: Auth Service (in progress - partial checkboxes)
- Phase 3: Testing (pending - no checkboxes checked)
Proceed with migration? (Tasks will be created, checkboxes preserved)
Parse the user's request to identify two required elements:
Handle these scenarios:
| Scenario | Action |
|---|---|
| No plan provided | Ask: "Which plan file should I update?" |
| Plan but no feedback | Ask: "What changes would you like to make to this plan?" |
| Both provided | Proceed to Step 1 |
Read the complete plan file and thoroughly understand:
task_list_id in plan metadata (links to Task tools progress)Check for old plan format:
IF plan has no task_list_id in frontmatter:
→ Plan needs migration (see "Migrating Old Plans to Task Tools")
→ Present migration summary to user
→ Perform migration before proceeding with iteration
Check existing Tasks (for migrated/new plans):
TaskList: View current tasks for this plan
Note which phases:
Document the sections that will likely need modification based on the feedback.
Critical: Only spawn research tasks if the changes require new technical understanding.
When research is necessary, use specialized sub-agents with highly specific instructions:
Research Task Template:
- Agent type: codebase-locator | codebase-analyzer | Explore
- Specific directories to examine
- Exact patterns or code to find
- Required output format (file:line references)
Research scenarios that warrant sub-agent spawning:
Do NOT research when:
Before making any modifications, present:
Interpretation of Feedback
Research Findings (if research was performed)
Planned Modifications
Wait for user confirmation before proceeding to Step 4.
Update the plan using Edit tool with these principles:
Structural Integrity
Content Quality
Success Criteria Standards
Edit Scope
Critical: Keep Tasks aligned with plan changes.
For added phases:
TaskCreate:
subject: "Phase N: [New Phase Name]"
description: "[Phase objective] - Plan: [plan file path]"
activeForm: "Implementing Phase N: [Name]"
TaskUpdate:
taskId: [new task]
addBlockedBy: [previous phase task ID]
For removed phases:
# If phase was never started:
TaskUpdate:
taskId: [removed task]
status: "completed"
description: "[Original description] - REMOVED: [reason]"
# Update dependencies of subsequent phases
TaskUpdate:
taskId: [next phase]
addBlockedBy: [new predecessor]
For reordered phases:
# Clear old dependencies and set new ones
TaskUpdate:
taskId: [moved phase]
addBlockedBy: [new predecessor IDs]
For renamed/modified phases:
TaskUpdate:
taskId: [phase task]
subject: "Phase N: [New Name]"
description: "[Updated description]"
After editing, present:
Summary of Changes Made
Current Task Status
Invitation for Further Iteration
Do NOT update the plan with unresolved questions.
If research reveals ambiguity or multiple valid approaches:
Before considering iteration complete, verify:
For migrated plans, also verify:
task_list_id added to YAML frontmattermigrated_from_checkboxes: true in frontmatter| Scenario | Plan Action | Task Action |
|---|---|---|
| Migrate old plan | Add frontmatter + migration note | TaskCreate for all phases with correct status |
| Add phase between 2 and 3 | Insert new Phase 2.5 (renumber to 3) | TaskCreate + update dependencies |
| Remove phase 3 | Delete phase content | Mark task completed with "REMOVED" note |
| Split phase into two | Create two phases from one | TaskCreate for new, update original |
| Merge two phases | Combine into single phase | Mark one completed with "MERGED" note |
| Change phase order | Reorder in plan | Update all blockedBy relationships |
Never leave Tasks out of sync with the plan. The Task list is the source of truth for progress, and the plan is the source of truth for specifications.
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content