practices▌

React patterns for hooks, effects, refs, and component design with escape hatch guidance. \n \n Effects synchronize with external systems only (WebSocket, third-party libraries, browser APIs); most component logic should avoid Effects entirely \n Common anti-patterns: derived state, expensive calculations, prop-change resets, and event handling all belong outside Effects—use render calculations, useMemo, key props, and event handlers instead \n Effect dependencies must never be suppressed; use u

Best practices for full-stack React development with TanStack Start, covering server functions, middleware, SSR, and authentication. \n \n Organizes 31 rules across 10 categories (server functions, security, middleware, authentication, SSR, error handling, and more) with priority levels to guide implementation order \n Covers critical patterns for server-side logic, input validation, secure session management, and client-server boundary handling \n Includes middleware composition, selective SSR

Grounded in the Official NestJS Documentation, this skill enforces modular architecture, dependency injection scoping, exception filters, DTO validation with class-validator, and Drizzle ORM integration patterns.

Principles and decision-making for Node.js development in 2025. Learn to THINK, not memorize code patterns.

You are an expert in SEO (Search Engine Optimization) for modern web applications. Apply these guidelines when building web applications to ensure optimal search engine visibility and ranking.

NgRx SignalStore rules for signal-based local and feature state management. Use with the core angular-best-practices skill for comprehensive Angular coverage.

Postgres performance optimization rules across 8 priority categories, from query tuning to advanced features. \n \n Organized into 8 rule categories prioritized by impact: query performance and connection management (critical), security and RLS, schema design, concurrency, data access patterns, monitoring, and advanced features \n Each rule includes detailed explanations, incorrect vs. correct SQL examples, EXPLAIN output analysis, and performance metrics to guide optimization decisions \n Cover

Vue Pinia state management patterns, common reactivity pitfalls, and store setup best practices. \n \n Covers three core areas: store initialization, reactivity patterns, and state management conventions \n Addresses frequent gotchas including destructuring breaking reactivity, method binding issues, and missing state in DevTools or SSR \n Provides guidance on filter persistence, URL-based ephemeral state, and scaling Pinia for production applications \n Includes troubleshooting references for \

Comprehensive security hardening for web applications covering HTTPS, input validation, authentication, and OWASP Top 10 vulnerabilities. \n \n Enforces HTTPS, security headers (CSP, HSTS), and rate limiting via Helmet and Express middleware to prevent DDoS and common attacks \n Prevents SQL Injection and XSS through parameterized queries, input validation with Joi, and output encoding with DOMPurify \n Implements CSRF token protection, JWT-based authentication with refresh token rotation, and s

Follows type-first, functional, and error handling patterns from CLAUDE.md. This skill covers Zig-specific idioms only.