Search Skills

Applies formal standards for React component engineering, ensuring accessibility, composability, and proper styling in component creation and review.

Audits Django applications for security vulnerabilities by checking settings, middleware, and authentication patterns including SECRET_KEY, CSRF, and auth decorators.

Assists in building Convex backend schemas, queries, mutations, and client usage with strict validation and index optimization.

Audits Vite security patterns for environment variables, build secrets, and dev server configurations in SPAs and development environments.

Audits Bun runtime security patterns, identifying vulnerabilities like injection flaws and insecure configurations in Bun applications.

Audits FastAPI applications for security vulnerabilities in dependencies, middleware, CORS, and authentication configurations.

Creates custom slash commands to automate repetitive development and operational tasks through parameterized prompts and workflow encoding.

Enforces accessibility, composition, and styling standards for React components, enabling creation and review of professional, composable UI artifacts.

Creates custom plugins for OpenCode using the @opencode-ai/plugin SDK, enabling tools, event hooks, auth providers, and execution interception.

Adds and configures custom AI models (self-hosted, non-standard providers) by researching API specs and updating configuration files.

Guides implementation of Convex authentication and authorization using OIDC providers or Convex Auth, covering setup, user identity handling, and auth-aware schema patterns.

Automates discovery, installation, and configuration of OpenCode plugins from catalog or community, extending functionality with minimal user effort.

Guides creation and updating of technical skills documentation, including structure, examples, and validation for agent capabilities.

Audits Docker container security by checking for secrets in layers, exposed ports, non-root users, and privileged configurations in Dockerfiles and docker-compose.yml.

Scans code repositories and history for high-signal secrets including AWS keys and tokens to prevent exposure during security audits.

Provides backend implementation for Convex runtime features including HTTP actions, file storage, search, scheduling, and RAG patterns.

Enables building, installing, and calling isolated backend components in Convex with support for auth, pagination, and component-specific constraints.

Audits Express.js applications for security vulnerabilities in middleware, routes, and configuration settings like Helmet.js, CORS, and authentication.

Sets up shadcn/ui and Tailwind CSS v4 in Vite projects, including configuration and component installation for seamless frontend development.

Installs and configures MCP (Model Context Protocol) servers, managing discovery, OAuth setup, environment variables, and transport protocols for seamless integration.

Guides users through creating and optimizing AI agents for software development via interactive configuration and performance tuning.

Configures development environment settings including providers, agent permissions, model preferences, and formatter rules via editing opencode.json and related files.

Automates repository integrity checks, configuration validation, and documentation synchronization through script execution.

Scans code and configurations for exposed AI API keys (e.g., OpenAI, Anthropic) and verifies proper redaction in logs and integrations.