supabase
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
mcp-pal-usage
Ensures proper use of PAL MCP tools (thinkdeep, debug, codereview, consensus, planner) for complex tasks requiring deep analysis, multi-model collaboration, or systematic investigation. Auto-activates when: - User requests debugging, code review, or planning assistance - Complex problems require...
Full skill instructions
This skill provides guidance on using PAL MCP tools effectively for complex software engineering tasks.
mcp__pal__chat - General CollaborationUse for:
Example:
mcp__pal__chat({
model: "haiku", // Fast for simple tasks
prompt: "Review this approach for implementing dark mode",
absolute_file_paths: ["/path/to/ThemeManager.swift"],
working_directory_absolute_path: "/path/to/project"
})
When NOT to use:
debug insteadcodereview insteadplanner insteadmcp__pal__debug - Systematic DebuggingUse for:
Example:
mcp__pal__debug({
model: "gemini-2.5-pro", // Deep analysis capability
step: "Investigate SwiftData relationship crash in LibraryView",
step_number: 1,
total_steps: 3,
next_step_required: true,
findings: "App crashes when accessing book.author.name. Suspect SwiftData fault issue.",
hypothesis: "Accessing unfaulted relationship on background thread",
relevant_files: ["/path/to/LibraryView.swift", "/path/to/Work.swift"],
files_checked: ["/path/to/LibraryView.swift"],
confidence: "medium"
})
Confidence levels:
exploring - Just starting investigationlow - Early hypothesismedium - Some evidence gatheredhigh - Strong evidencevery_high - Very confidentalmost_certain - Nearly provencertain - 100% confirmed locally (skips external validation)Critical: Always reuse continuation_id for multi-step debugging!
mcp__pal__codereview - Systematic Code ReviewUse for:
Review types:
full - Complete review (quality, security, performance, architecture)security - Security-focused auditperformance - Performance bottleneck analysisquick - Fast high-level reviewExample:
mcp__pal__codereview({
model: "grok-code-fast-1", // Expert review capability
step: "Review EnrichmentService for security and performance",
step_number: 1,
total_steps: 2,
next_step_required: true,
findings: "Starting comprehensive review...",
relevant_files: ["/path/to/EnrichmentService.swift"],
review_type: "full",
confidence: "medium"
})
Validation types:
external (default) - Expert model validation after your reviewinternal - Local-only review (faster, less thorough)mcp__pal__secaudit - Security AuditUse for:
Audit focus:
owasp - OWASP Top 10 vulnerabilitiescompliance - Regulatory compliance (GDPR, SOC2, etc.)infrastructure - Infrastructure security (API keys, secrets)dependencies - Third-party dependency vulnerabilitiescomprehensive - All of the aboveExample:
mcp__pal__secaudit({
model: "grok-code-fast-1", // Security expertise
step: "Audit AuthenticationService for OWASP vulnerabilities",
step_number: 1,
total_steps: 2,
next_step_required: true,
findings: "Analyzing API key handling and session management...",
relevant_files: ["/path/to/AuthenticationService.swift"],
audit_focus: "owasp",
threat_level: "high",
confidence: "medium"
})
Threat levels:
low - Internal tools, non-productionmedium - Production app with limited exposurehigh - Public-facing production servicecritical - Handles sensitive PII or financial datamcp__pal__planner - Interactive PlanningUse for:
Features:
Example:
mcp__pal__planner({
model: "gemini-2.5-pro", // Strategic thinking
step: "Plan migration from KV storage to D1 database",
step_number: 1,
total_steps: 5,
next_step_required: true
})
// Later: Branch to explore alternative approach
mcp__pal__planner({
continuation_id: "abc123", // REUSE ID!
model: "gemini-2.5-pro",
step: "Explore zero-downtime migration using dual-write pattern",
step_number: 3,
total_steps: 5,
next_step_required: true,
is_branch_point: true,
branch_id: "zero-downtime-approach",
branch_from_step: 2
})
mcp__pal__consensus - Multi-Model ConsensusUse for:
Example:
mcp__pal__consensus({
step: "Evaluate: Should we use SwiftData or Core Data for BooksTrack v4?",
step_number: 1,
total_steps: 4, // 3 models + synthesis
next_step_required: true,
findings: "Initial analysis: SwiftData offers modern API, Core Data more mature",
models: [
{model: "gemini-2.5-pro", stance: "for"}, // Pro-SwiftData
{model: "grok-code-fast-1", stance: "against"}, // Pro-Core Data
{model: "claude-opus-4", stance: "neutral"} // Unbiased analysis
],
relevant_files: ["/path/to/Work.swift", "/path/to/Author.swift"]
})
Stances:
for - Argue in favor of proposalagainst - Argue against proposalneutral - Unbiased analysismcp__pal__precommit - Pre-Commit ValidationUse for:
Example:
mcp__pal__precommit({
model: "grok-code-fast-1",
step: "Validate staged changes for completeness and security",
path: "/path/to/repo",
step_number: 1,
total_steps: 3,
next_step_required: true,
findings: "Analyzing git diff and impact...",
include_staged: true,
include_unstaged: true,
confidence: "medium"
})
Validation options:
compare_to: "main"focus_on: "security"severity_filter: "high"mcp__pal__thinkdeep - Deep ThinkingUse for:
Similar to debug but more general-purpose.
Example:
mcp__pal__thinkdeep({
model: "gemini-2.5-pro",
step: "Analyze the architectural implications of real-time sync",
step_number: 1,
total_steps: 3,
next_step_required: true,
findings: "Exploring WebSocket vs SSE vs polling trade-offs...",
hypothesis: "SSE provides best balance of simplicity and reliability",
focus_areas: ["architecture", "performance", "reliability"],
confidence: "medium"
})
Use listmodels to see all available models:
mcp__pal__listmodels()
Top Models (as of v2.0.60):
grok-code-fast-1 (256K context, code specialist, 70.8% SWE-Bench)
gemini-2.5-pro (1M context, thinking mode, code generation)
gemini-3-pro-preview (1M context, thinking mode, latest)
grok-4-1-fast-non-reasoning (2M context)
haiku (fast, efficient)
ALWAYS reuse continuation_id for multi-turn conversations:
// First call
const step1 = await mcp__pal__debug({
model: "gemini-2.5-pro",
step: "Investigate crash",
// ...
});
// Returns: continuation_id: "xyz789"
// Follow-up (CRITICAL: REUSE ID!)
const step2 = await mcp__pal__debug({
continuation_id: "xyz789", // ← MUST REUSE!
model: "gemini-2.5-pro",
step: "Continue investigation with new findings",
// ...
});
Why this matters:
User request
├─ "Debug this crash/bug/issue"
│ → Use mcp__pal__debug
│
├─ "Review this code"
│ → Use mcp__pal__codereview
│
├─ "Audit for security issues"
│ → Use mcp__pal__secaudit
│
├─ "Plan this migration/feature"
│ → Use mcp__pal__planner
│
├─ "Should we use X or Y?"
│ → Use mcp__pal__consensus
│
├─ "Validate my changes before commit"
│ → Use mcp__pal__precommit
│
├─ "Analyze this complex problem"
│ → Use mcp__pal__thinkdeep
│
└─ "Quick question about approach"
→ Use mcp__pal__chat
This skill works alongside:
mcp__pal__codereview with project contextmcp__pal__secaudit with project contextmcp__pal__thinkdeep for performanceSkill activates proactively to ensure:
// First call - gets continuation_id
mcp__pal__debug({ step: "Step 1", ... });
// Second call - WRONG! No continuation_id
mcp__pal__debug({ step: "Step 2", ... });
// First call
const result1 = mcp__pal__debug({ step: "Step 1", ... });
const contId = result1.continuation_id;
// Second call - CORRECT!
mcp__pal__debug({ continuation_id: contId, step: "Step 2", ... });
// Debugging a crash with chat tool (too shallow)
mcp__pal__chat({ prompt: "Why does this crash?" });
// Proper systematic investigation
mcp__pal__debug({
step: "Investigate crash in LibraryView",
hypothesis: "SwiftData concurrency issue",
// ...
});
// No model specified - uses default
mcp__pal__codereview({ step: "Review code", ... });
// Explicit model selection for security expertise
mcp__pal__codereview({
model: "grok-code-fast-1", // Security specialist
step: "Review for OWASP vulnerabilities",
// ...
});
| Task | Tool | Model | Why |
|---|---|---|---|
| Debug crash | debug | gemini-2.5-pro | Deep analysis, 1M context |
| Review code | codereview | grok-code-fast-1 | Code specialist, security focus |
| Security audit | secaudit | grok-code-fast-1 | OWASP expertise |
| Plan migration | planner | gemini-2.5-pro | Strategic thinking |
| Tech decision | consensus | 3+ models | Multiple perspectives |
| Validate commit | precommit | grok-code-fast-1 | Quality assurance |
| Analyze problem | thinkdeep | gemini-2.5-pro | Deep reasoning |
| Quick question | chat | haiku | Fast, efficient |
Long-running PAL analyses can run in background:
// Launch comprehensive debug session in background
Task({
subagent_type: "pal",
prompt: "Deep investigation of memory leak in LibraryView",
run_in_background: true
})
// Continue with other work...
// Retrieve results when ready
TaskOutput({
task_id: "agent_xyz123",
block: true,
timeout: 180000 // 3 minutes for deep analysis
})
Background-friendly operations:
mcp__pal__debug - Complex multi-step debuggingmcp__pal__codereview with review_type: "full"mcp__pal__secaudit with audit_focus: "comprehensive"mcp__pal__consensus - Multi-model deliberationKeep synchronous:
mcp__pal__chat - Quick consultationsmcp__pal__codereview with review_type: "quick"mcp__pal__challenge - Immediate critical thinkingFor long debugging/review sessions, name your session:
/rename debug-memory-leak
Resume later from terminal:
claude --resume debug-memory-leak
When presenting choices, add "(Recommended)" to preferred option:
AskUserQuestion({
questions: [{
question: "Which analysis depth?",
header: "Analysis",
options: [
{label: "Quick review (Recommended)", description: "Fast, single-file"},
{label: "Full analysis", description: "Comprehensive, multi-file"},
{label: "Deep investigation", description: "Maximum depth, longest time"}
]
}]
})
Last Updated: December 11, 2025 (v2.0.65) Maintained by: BooksTrack Project Related Skills: cloudflare-api-orchestration Related Agents: code-review-grok, security-auditor, performance-analyzer
Handles the full Supabase workflow from schema changes to deployment, with built-in security guardrails that catch common traps like RLS...
Comprehensive guides and best practices for Neon Serverless Postgres, covering setup, connection methods, authentication, and platform APIs.
Guide for setting up and using Firebase Authentication. Use this skill when the user's app requires user sign-in, user management, or secure data access using auth rules.
A skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.
Official skill for integrating Firebase AI Logic (Gemini API) into web applications. Covers setup, multimodal inference, structured output, and security.
Complete Better Auth server and client setup with database adapters, session management, plugins, and security configuration.
Deploy and manage projects on Vercel using token-based authentication. Use when working with Vercel CLI using access tokens rather than interactive login — e.g. "deploy to vercel", "set up vercel", "add environment variables to vercel".
Complete Cloudflare platform integration with decision trees for compute, storage, AI, networking, security, and infrastructure-as-code.
Run Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: compliance scan, security audit, BEFORE running azqr (compliance cli tool), Azure best practices, Key Vault expiration check, expired certificates, expiring secrets, orphaned resources, compliance assessment.
Send, read, and manage Gmail messages, drafts, labels, and account settings.
Comprehensive website auditing across 230+ rules in 21 categories including SEO, performance, security, and accessibility.
Shared authentication, CLI syntax, and output formatting patterns for gws Google Workspace commands.
Discover your celebrity doppelgänger with StarByFace!
GeoSpy: Pricing, Features, FAQs, and Alternatives for AI Teams
Detect AI-generated voices to protect against audio fraud.
Ensure Your Content's Originality with AI Plagiarism Checker
Upscale images by 400% without quality loss
Protect your social media from copyright disputes
Accurately Detect AI-Generated Content with TheChecker.AI
Chrome extension that detects and flags AI-generated content