https://fieldbook.tech/A reviewed directory of agent skills for real engineering work: planning, testing, debugging, review, security and shipping. Every listing is licence-checked, scanned and labelled, then ranked by real installs.enhttps://fieldbook.tech/skills/dotnet/maui-data-binding/https://fieldbook.tech/skills/dotnet/maui-data-binding/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksImplement type-safe .NET MAUI bindings, change notification, converters, and MVVM data flow. Edits XAML, view models, converters, and project warning settings for compiled, AOT-safe bindings. Collection views, Shell navigation, and dependency injection are routed to dedicated companion skills.https://fieldbook.tech/skills/openai/gh-address-comments/https://fieldbook.tech/skills/openai/gh-address-comments/Sun, 27 Sep 2026 12:00:00 GMTReviewFinds review threads on the current branch's pull request and applies the selected fixes. Verifies authenticated gh access, runs the bundled comment fetcher, numbers the requested changes, and edits only the threads the user selects. GitHub commands require network access and may pause for gh re-authentication if scopes or rate limits fail.https://fieldbook.tech/skills/mblode/agent-ready/https://fieldbook.tech/skills/mblode/agent-ready/Sun, 27 Sep 2026 12:00:00 GMTBuildImplements machine-readable discovery and documentation fixes from agent-readiness evidence. Turns scorecards or server-side 404 traces into repository changes, tests, and verified HTTP responses across every public knowledge surface. Verification needs Bash and curl, scanners need Node and registry access, and DNS, deployment, or product-surface expansion stays outside the local repair loop.https://fieldbook.tech/skills/trailofbits/agentic-actions-auditor/https://fieldbook.tech/skills/trailofbits/agentic-actions-auditor/Sun, 27 Sep 2026 12:00:00 GMTSecurityAudits action-taking agents for unsafe execution, authority, and data-flow risks. It is an audit workflow from Trail of Bits and examines agent configuration and action boundaries.https://fieldbook.tech/skills/affaan-m/ai-regression-testing/https://fieldbook.tech/skills/affaan-m/ai-regression-testing/Sun, 27 Sep 2026 12:00:00 GMTTest & debugAdds targeted regression tests for recurring blind spots in AI-assisted code changes. Uses fast sandbox-mode API tests to lock response contracts and parity between mock and production paths after a bug is found. The worked setup targets Next.js App Router with Vitest and specifically catches omitted fields, stale error state, and failed optimistic rollbacks.https://fieldbook.tech/skills/antfu/antfu/https://fieldbook.tech/skills/antfu/antfu/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksApply Anthony Fu's TypeScript conventions, pnpm tooling, linting, monorepos, and publishing setup. Edits project structure, TypeScript and ESLint configuration, workspace catalogs, hooks, and related tooling, then runs lint fixes. Its `ni` command family and `fast-npm-meta` lookup can install, remove, upgrade, or query packages through external registries.https://fieldbook.tech/skills/addyosmani/api-and-interface-design/https://fieldbook.tech/skills/addyosmani/api-and-interface-design/Sun, 27 Sep 2026 12:00:00 GMTPlan & designContract-first guidance for APIs and module boundaries: errors, validation and versioning. Reference guidance rather than a procedure. Covers Hyrum's Law, idempotency keys and additive change.https://fieldbook.tech/skills/alirezarezvani/api-test-suite-builder/https://fieldbook.tech/skills/alirezarezvani/api-test-suite-builder/Sun, 27 Sep 2026 12:00:00 GMTBuildScans API routes and generates contract-focused tests for auth, validation, and failure paths. Maps handlers, reads their schemas and business rules, and writes one focused suite per route group with fixtures and response-shape assertions. Route discovery covers Next.js, Express, FastAPI, and Django REST, while generated tests target Vitest/Supertest or Pytest/httpx.https://fieldbook.tech/skills/dotnet/dotnet-webapi/https://fieldbook.tech/skills/dotnet/dotnet-webapi/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksBuilds ASP.NET Core API endpoints with typed DTOs, OpenAPI, and Problem Details. Edits controller or minimal-API projects, adds service layers and .http examples, and verifies builds plus running endpoint behavior. It requires the .NET CLI and a runnable ASP.NET Core app; local verification starts the server and exercises its OpenAPI and HTTP routes.https://fieldbook.tech/skills/trailofbits/audit-context-building/https://fieldbook.tech/skills/trailofbits/audit-context-building/Sun, 27 Sep 2026 12:00:00 GMTSecurityMaps what each function assumes, guarantees and depends on before a security review. From a security firm's own audit practice. Use it before hunting for bugs in code you do not know yet.https://fieldbook.tech/skills/microsoft/azure-cloud-migrate/https://fieldbook.tech/skills/microsoft/azure-cloud-migrate/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureAssesses and converts supported AWS, Google Cloud, Heroku, Kubernetes, and Spring workloads for Azure. Generates a scenario-specific assessment before converting code and configuration into a separate Azure output directory. It depends on Azure documentation and best-practice MCP tools plus bundled migration references; deployment is handed to azure-prepare, and destructive actions require user approval.https://fieldbook.tech/skills/microsoft/azure-diagnostics/https://fieldbook.tech/skills/microsoft/azure-diagnostics/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureTriages Azure production failures with health, logs, metrics, AppLens, and KQL. Routes service incidents to focused guides and gathers evidence through Azure CLI, AppLens, Azure Monitor, and Resource Health MCP tools before documenting findings and remediation. It requires authenticated Azure telemetry access; service-specific remediation can change live resources, credentials, networking, or workloads.https://fieldbook.tech/skills/microsoft/azure-kubernetes/https://fieldbook.tech/skills/microsoft/azure-kubernetes/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructurePlans, provisions, and configures production-ready Azure Kubernetes Service clusters. Uses the Azure AKS MCP surface first and Azure CLI or kubectl as fallback to choose and configure networking, identity, observability, upgrades, scaling, and cost controls. It requires authenticated Azure access; cluster creation and Day-0 choices incur cloud cost, while some networking corrections require cluster recreation.https://fieldbook.tech/skills/microsoft/azure-quotas/https://fieldbook.tech/skills/microsoft/azure-quotas/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureChecks Azure quota usage, compares regional capacity, and requests limit increases. Discovers quota names with az quota, compares limits with current usage across regions, and can submit increase requests. It requires the Azure CLI quota extension and Azure permissions; quota updates change subscription limits, while the source states the allocation itself is free.https://fieldbook.tech/skills/microsoft/azure-reliability/https://fieldbook.tech/skills/microsoft/azure-reliability/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureAssesses and remediates reliability gaps in Azure Functions and App Service. Uses Azure Resource Graph, Azure MCP, and Azure CLI to assess zone redundancy, storage, probes, and failover, then patches IaC or live resources in staged deployments. Storage migration, app restarts, secondary-region compute, and Front Door can affect availability and cost, and each gated deployment changes Azure resources.https://fieldbook.tech/skills/microsoft/azure-storage/https://fieldbook.tech/skills/microsoft/azure-storage/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureWorks with Azure blobs, files, queues, tables, Data Lake, tiers, and redundancy. Prefers Azure Storage MCP and falls back to Azure CLI for listing accounts, containers, and blobs or uploading and downloading content. Azure authentication and a storage account are required; uploads change remote content, while downloaded blobs write to local paths.https://fieldbook.tech/skills/hashicorp/azure-verified-modules/https://fieldbook.tech/skills/hashicorp/azure-verified-modules/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureDevelops and reviews Azure Terraform modules against AVM certification rules. Applies AVM structure, provider, testing, documentation, compatibility, and contribution requirements to module code. It depends on Terraform, terrafmt, Checkov, tflint, terraform-docs, and repository branch protection; changing module resources or defaults can create breaking infrastructure behavior.https://fieldbook.tech/skills/dotnet/author-component/https://fieldbook.tech/skills/dotnet/author-component/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksShapes Blazor parameters, callbacks, rendering and async cleanup without JavaScript interop. Focuses on component architecture and asynchronous lifetimes in Razor files. JavaScript interop, forms, data fetching and new projects are routed to separate companion skills.https://fieldbook.tech/skills/evanca/bloc/https://fieldbook.tech/skills/evanca/bloc/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksImplement and test Flutter state management with Cubit, Bloc, repositories, and bloc widgets. Creates or refactors Dart state, events, UI wiring, repository boundaries, and `bloc_test` coverage. It expects the `bloc`, `flutter_bloc`, `bloc_test`, and `mocktail` packages where their respective patterns are used.https://fieldbook.tech/skills/obra/brainstorming/https://fieldbook.tech/skills/obra/brainstorming/Sun, 27 Sep 2026 12:00:00 GMTPlan & designAgrees intent, requirements and a design with you before any code is written. Deliberately strict: it treats even small features as needing an approved design. Its optional visual companion needs extra setup.https://fieldbook.tech/skills/addyosmani/browser-testing-with-devtools/https://fieldbook.tech/skills/addyosmani/browser-testing-with-devtools/Sun, 27 Sep 2026 12:00:00 GMTTest & debugDebugs in a real browser: DOM, console, network requests and performance traces. Needs the Chrome DevTools MCP server. Treats page content as untrusted data, which is the right default.https://fieldbook.tech/skills/dotnet/csharp-refactoring/https://fieldbook.tech/skills/dotnet/csharp-refactoring/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksPerforms binding-aware C# refactors while preserving behavior and public contracts. Classifies requests before editing, uses semantic tooling where available, and verifies the narrowest relevant builds, tests, analyzers, and target frameworks. It works only in the current Git repository and may retain compatibility shims rather than remove shipped APIs.https://fieldbook.tech/skills/jeffallan/chaos-engineer/https://fieldbook.tech/skills/jeffallan/chaos-engineer/Sun, 27 Sep 2026 12:00:00 GMTPerformanceDesigns controlled resilience experiments and recovery checks for distributed systems. It can exercise infrastructure and service behavior, so experiments require a defined environment and blast-radius controls.https://fieldbook.tech/skills/mblode/ci-speedup/https://fieldbook.tech/skills/mblode/ci-speedup/Sun, 27 Sep 2026 12:00:00 GMTPerformanceMeasures CI critical paths and shortens them with evidence-backed pipeline changes. Requires GitHub CLI or MCP timing data and records before-and-after results in a repository ledger.https://fieldbook.tech/skills/addyosmani/ci-cd-and-automation/https://fieldbook.tech/skills/addyosmani/ci-cd-and-automation/Sun, 27 Sep 2026 12:00:00 GMTShip & operateSets up CI quality gates and deployment strategies in GitHub Actions. Includes feeding CI failures back to the agent, and preview deployments.https://fieldbook.tech/skills/anthropics/claude-api/https://fieldbook.tech/skills/anthropics/claude-api/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowBuilds Claude API and Managed Agent integrations with current SDK and tool-use patterns. Routes work by language and chooses a single Messages API call, a tool loop, or Anthropic-hosted Managed Agents. It depends on official Anthropic SDKs and API credentials and can invoke paid model calls, hosted web or code tools, MCP, files, and managed sessions; migrations confirm scope before edits.https://fieldbook.tech/skills/trailofbits/code-improver/https://fieldbook.tech/skills/trailofbits/code-improver/Sun, 27 Sep 2026 12:00:00 GMTBuildRuns a scoped reviewer-and-fixer loop until blocking findings clear or convergence fails. Requires an existing target directory, a user-named installed reviewer, explicit writable globs, and the plugin's dynamic workflow. The workflow keeps a findings ledger, guards scope, uses reviewer and fixer agents, never commits, and stops on caps, repeated findings, unavailable reviewers, or finalization regressions.https://fieldbook.tech/skills/mattpocock/code-review/https://fieldbook.tech/skills/mattpocock/code-review/Sun, 27 Sep 2026 12:00:00 GMTReviewReviews a diff twice in parallel: against your repo's standards and against the spec. Separating standards from intent catches changes that are tidy but wrong. Runs two subagents.https://fieldbook.tech/skills/getsentry/code-review/https://fieldbook.tech/skills/getsentry/code-review/Sun, 27 Sep 2026 12:00:00 GMTReviewSentry's engineering review checklist, with concrete patterns to flag. Its examples lean towards Python and Django, but the checklist on design, tests and long-term impact is general.https://fieldbook.tech/skills/addyosmani/code-review-and-quality/https://fieldbook.tech/skills/addyosmani/code-review-and-quality/Sun, 27 Sep 2026 12:00:00 GMTReviewA five-axis review: correctness, readability, architecture, security and performance. Also covers change sizing and change descriptions. Works on pasted diffs too.https://fieldbook.tech/skills/jeffallan/code-reviewer/https://fieldbook.tech/skills/jeffallan/code-reviewer/Sun, 27 Sep 2026 12:00:00 GMTReviewProduces a prioritized review of correctness, security, performance, architecture, and tests. First establishes the change's intent, then inspects structure, implementation details, and tests before returning a verdict with actionable examples. It is read-only and routes detailed checks through references for the review context.https://fieldbook.tech/skills/addyosmani/code-simplification/https://fieldbook.tech/skills/addyosmani/code-simplification/Sun, 27 Sep 2026 12:00:00 GMTBuildSimplifies working code for clarity without changing what it does. Starts from Chesterton's fence: understand why code exists before removing it. Scoped to what changed.https://fieldbook.tech/skills/trailofbits/codeql/https://fieldbook.tech/skills/trailofbits/codeql/Sun, 27 Sep 2026 12:00:00 GMTSecurityRuns and interprets CodeQL static analysis for security-focused code review. Checks extraction quality and query-suite coverage before interpreting zero findings. Requires CodeQL, Bash/Python helpers and a suitable build toolchain for compiled languages.https://fieldbook.tech/skills/getsentry/commit/https://fieldbook.tech/skills/getsentry/commit/Sun, 27 Sep 2026 12:00:00 GMTShip & operatePrepares focused commits with staged-diff checks and meaningful messages. It runs Git commands and creates commits, so the selected changes must be reviewed before committing.https://fieldbook.tech/skills/addyosmani/context-engineering/https://fieldbook.tech/skills/addyosmani/context-engineering/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowSets up rules files and project context so agent quality holds across sessions. A practical template for rules files, plus when to reach for specs and architecture docs.https://fieldbook.tech/skills/get-convex/convex/https://fieldbook.tech/skills/get-convex/convex/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataRoutes Convex backend work to current capability-specific skills and served procedures. Directs code, setup, review, migration, monitoring, and operations requests to the matching bundled Convex skill, preferring its live capability catalog when available. Convex service access and companion convex-* skills are required for execution, and tiered procedures that spend money require explicit confirmation.https://fieldbook.tech/skills/getsentry/create-branch/https://fieldbook.tech/skills/getsentry/create-branch/Sun, 27 Sep 2026 12:00:00 GMTShip & operateCreates a conventionally named Git branch for a scoped change. It changes local Git state and checks existing branches before choosing the branch name.https://fieldbook.tech/skills/jezweb/d1-drizzle-schema/https://fieldbook.tech/skills/jezweb/d1-drizzle-schema/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataGenerates D1-safe Drizzle schemas, migrations, types, and schema documentation. This Claude Code-only skill writes schema and config files, package scripts, and DATABASE_SCHEMA.md around D1's enforced foreign keys, SQLite types, and 100-parameter limit. Wrangler and a Cloudflare D1 database are required, and it mandates applying migrations to both local and remote databases before testing, which changes hosted data structures.https://fieldbook.tech/skills/addyosmani/debugging-and-error-recovery/https://fieldbook.tech/skills/addyosmani/debugging-and-error-recovery/Sun, 27 Sep 2026 12:00:00 GMTTest & debugA triage checklist: reproduce, localise, fix, then guard against the regression. Includes a stop-the-line rule and git bisect for finding the commit that broke things.https://fieldbook.tech/skills/jeffallan/debugging-wizard/https://fieldbook.tech/skills/jeffallan/debugging-wizard/Sun, 27 Sep 2026 12:00:00 GMTTest & debugReproduces, isolates, and proves a bug's root cause before fixing and preventing recurrence. Works one hypothesis at a time from complete errors and traces, verifies the fix, adds a regression test, and records the evidence. Tool guidance spans Python, Node, Go, and Git bisect, with deeper references loaded for the language or failure pattern.https://fieldbook.tech/skills/addyosmani/deprecation-and-migration/https://fieldbook.tech/skills/addyosmani/deprecation-and-migration/Sun, 27 Sep 2026 12:00:00 GMTShip & operatePlans staged deprecation and zero-downtime migrations from replacement through safe removal. Uses advisory or compulsory deprecation, then incremental consumer migration and expand/backfill/contract for schemas. It requires production usage evidence, migration tooling, and reversible database migrations, and guards destructive drops until no code references the old shape.https://fieldbook.tech/skills/jeffallan/devops-engineer/https://fieldbook.tech/skills/jeffallan/devops-engineer/Sun, 27 Sep 2026 12:00:00 GMTShip & operateBuilds and maintains CI, deployment, infrastructure, and operational automation. It can modify pipeline and infrastructure files and may invoke provider or command-line tooling.https://fieldbook.tech/skills/warpdotdev/diagnose-ci-failures/https://fieldbook.tech/skills/warpdotdev/diagnose-ci-failures/Sun, 27 Sep 2026 12:00:00 GMTShip & operatePulls a pull request's CI logs with the GitHub CLI and plans the fixes. Needs the GitHub CLI signed in. It diagnoses and plans; applying the fix is up to you.https://fieldbook.tech/skills/mattpocock/diagnosing-bugs/https://fieldbook.tech/skills/mattpocock/diagnosing-bugs/Sun, 27 Sep 2026 12:00:00 GMTTest & debugBuilds a fast failing feedback loop first, then narrows to the cause. Treats a reproducible loop as the finish line of phase one. Includes advice for flaky and non-deterministic bugs.https://fieldbook.tech/skills/obra/dispatching-parallel-agents/https://fieldbook.tech/skills/obra/dispatching-parallel-agents/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowSplits independent problems across parallel subagents and merges the results. Clear about when not to parallelise: shared state and sequential work stay with one agent.https://fieldbook.tech/skills/getsentry/django-perf-review/https://fieldbook.tech/skills/getsentry/django-perf-review/Sun, 27 Sep 2026 12:00:00 GMTPerformanceFinds only validated Django ORM and request-path performance problems. It requires tracing real data flow, volume, and hot paths before reporting an issue; zero findings are acceptable.https://fieldbook.tech/skills/addyosmani/documentation-and-adrs/https://fieldbook.tech/skills/addyosmani/documentation-and-adrs/Sun, 27 Sep 2026 12:00:00 GMTPlan & designRecords architecture decisions and the reasoning future engineers and agents will need. Matches your repo's existing ADR convention before introducing its own template.https://fieldbook.tech/skills/mattpocock/domain-modeling/https://fieldbook.tech/skills/mattpocock/domain-modeling/Sun, 27 Sep 2026 12:00:00 GMTPlan & designBuilds a shared glossary for your codebase and records decisions as they come up. Keeps a CONTEXT.md in step with the conversation and offers ADRs sparingly. Useful before a large feature, when names in the code have drifted.https://fieldbook.tech/skills/cloudflare/durable-objects/https://fieldbook.tech/skills/cloudflare/durable-objects/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureBuild and review Cloudflare Durable Objects for persistent state, coordination, and WebSockets. Edits Worker code, bindings, migrations, storage schemas, alarms, and tests after fetching current Cloudflare documentation. Durable Object storage and alarms persist remotely when deployed, and access inherits the implementing Worker's Cloudflare permissions.https://fieldbook.tech/skills/aws-samples/ecs-build/https://fieldbook.tech/skills/aws-samples/ecs-build/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureBuilds apply-ready Terraform for ECS clusters, services, networking, and scaling. Generates and validates production ECS Terraform across Fargate, EC2, and Managed Instances, with deployment, IAM, networking, and autoscaling rules. It requires the companion terraform-skill, Terraform and AWS access, and live version research; applying the output can create, change, or remove AWS resources.https://fieldbook.tech/skills/aws-samples/ecs-modernize/https://fieldbook.tech/skills/aws-samples/ecs-modernize/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureAssess legacy apps and carry an approved replatform or rearchitecture onto Amazon ECS. Scores source-only container fit, writes one external modernization report, and gates every migration action behind explicit approval. Execution can create branches, transform code, build and push images to ECR, generate or apply Terraform, and change AWS resources; rearchitecture IaC requires the companion `ecs-build` skill.https://fieldbook.tech/skills/aws-samples/ecs-observability/https://fieldbook.tech/skills/aws-samples/ecs-observability/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureDesign ECS logging, metrics, tracing, alerting, and live-debug access by launch type. Selects among CloudWatch, Container Insights, ADOT, Prometheus/Grafana, FireLens, and third-party stacks while surfacing log-loss and cost tradeoffs. It is a reference-driven advisory skill and does not run deployment or audit workflows.https://fieldbook.tech/skills/aws-samples/eks-best-practices/https://fieldbook.tech/skills/aws-samples/eks-best-practices/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureChoose EKS compute, networking, security, scaling, resilience, and hybrid deployment patterns. Provides architecture guidance and Terraform-module examples across Standard, Auto Mode, Fargate, Hybrid Nodes, Anywhere, and Outposts. It is advisory; design documents and production Terraform are delegated to companion EKS skills.https://fieldbook.tech/skills/aws-samples/eks-build/https://fieldbook.tech/skills/aws-samples/eks-build/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureGenerate deployable EKS Terraform projects with optional ArgoCD and Kubernetes-native AWS control. Scaffolds cluster modules, configuration, GitOps artifacts, validation checklists, and apply commands, with mandatory web research for current versions. It requires the companion `terraform-skill`; applying the output provisions AWS and Kubernetes resources and may include destructive cleanup commands.https://fieldbook.tech/skills/affaan-m/e2e-testing/https://fieldbook.tech/skills/affaan-m/e2e-testing/Sun, 27 Sep 2026 12:00:00 GMTTest & debugStructures Playwright end-to-end suites with page objects, CI artifacts, and flake controls. Builds Playwright page objects, specs, configuration, and CI reporting, then diagnoses flakiness with repeated runs and condition-based waits. It expects a Node project and can cover Chromium, Firefox, WebKit, mobile profiles, wallet mocks, and guarded financial flows.https://fieldbook.tech/skills/expo/expo-module/https://fieldbook.tech/skills/expo/expo-module/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksScaffolds and implements Expo native modules and views for Apple, Android, and web. Uses create-expo-module, then replaces examples with Swift, Kotlin, TypeScript, config-plugin, lifecycle, and autolinking code. Native build tooling and Expo packages are required; migrations to Expo Modules API 2.0 macros must use the companion expo-migrate-module skill instead.https://fieldbook.tech/skills/expo/expo-router/https://fieldbook.tech/skills/expo/expo-router/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksBuild file-based Expo navigation with routes, native stacks, tabs, sheets, headers, and search. Creates and restructures route files, removing obsolete routes when navigation moves, and can submit specific upstream feedback with an npx command. Visual UI and motion are delegated to the `expo-native-ui` and `expo-animation` companion skills.https://fieldbook.tech/skills/expo/expo-ui/https://fieldbook.tech/skills/expo/expo-ui/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksBuild native Expo interfaces with universal or platform-specific SwiftUI and Compose components. Edits React Native component trees, installs `@expo/ui`, and may run the bundled component inventory or submit actionable feedback. Universal components require Expo SDK 56+, while platform-specific trees must be split or guarded to avoid cross-platform runtime crashes.https://fieldbook.tech/skills/fastapi/fastapi/https://fieldbook.tech/skills/fastapi/fastapi/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksWrites current FastAPI routes, models, dependencies, streaming, and frontend serving code. Applies official patterns for Annotated parameters, Pydantic validation, router organization, response filtering, async boundaries, SSE, and static frontends. It uses the FastAPI CLI for local development or production serving and may add supporting Python packages described by the relevant reference.https://fieldbook.tech/skills/obra/finishing-a-development-branch/https://fieldbook.tech/skills/obra/finishing-a-development-branch/Sun, 27 Sep 2026 12:00:00 GMTShip & operateFinishes a Git branch through verified tests, integration choice, and guarded cleanup. Runs the full test suite, detects worktree state, confirms the base, then offers local merge, pull request, or preservation. It requires Git and project tests; pushing or merging touches shared state, while discard and force branch deletion require exact confirmation.https://fieldbook.tech/skills/firebase/firebase-firestore/https://fieldbook.tech/skills/firebase/firebase-firestore/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataProvision and integrate Cloud Firestore databases, models, indexes, queries, and SDKs. Uses Firebase CLI to inspect or create remote databases and edits application, index, and configuration files after selecting Standard or Enterprise guidance. Firestore rules must be authored by the named `firestore-rules-author` subagent when available, otherwise by the `firestore-rules-creation` companion skill.https://fieldbook.tech/skills/firebase/firebase-remote-config-basics/https://fieldbook.tech/skills/firebase/firebase-remote-config-basics/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataManage Firebase Remote Config templates, flags, SDK loading, versions, and deployments. Uses Firebase CLI commands to download, edit, deploy, and verify remote templates, plus Android or iOS SDK guidance. The `firebase-basics` companion supplies project setup, and every live deployment must wait for user review of the local JSON template.https://fieldbook.tech/skills/firebase/firestore-rules-creation/https://fieldbook.tech/skills/firebase/firestore-rules-creation/Sun, 27 Sep 2026 12:00:00 GMTSecurityAuthors and hardens Firestore rules from the app's data model and query patterns. Scans the codebase, writes firestore.rules, documents its assumed schema, attacks the rules mentally, and validates them with the Firebase CLI. When delegation and the named firestore-rules-author subagent are available, that subagent must author the file; Firebase dry-run validation contacts the project service.https://fieldbook.tech/skills/google/gcloud/https://fieldbook.tech/skills/google/gcloud/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureValidates and executes tightly scoped gcloud commands with destructive-action guardrails. Uses leaf-command help as the sole syntax authority, reduces list output, and runs one project- and location-scoped command at a time through gcloud or the Cloud CLI MCP server. Live GCP access is required; IAM, billing, KMS, API enablement, delete, and infrastructure-apply operations need explicit authorization because they can change access, cost, or data.https://fieldbook.tech/skills/mattpocock/git-guardrails-claude-code/https://fieldbook.tech/skills/mattpocock/git-guardrails-claude-code/Sun, 27 Sep 2026 12:00:00 GMTShip & operateInstalls Claude Code hooks that block destructive git commands before they run. Blocks push, hard reset, clean and forced branch deletes. Claude Code only; asks for scope first.https://fieldbook.tech/skills/addyosmani/git-workflow-and-versioning/https://fieldbook.tech/skills/addyosmani/git-workflow-and-versioning/Sun, 27 Sep 2026 12:00:00 GMTShip & operateAtomic commits, clear messages and a clean branch strategy. Can split a messy working tree into clean commits. Recommends trunk-based development.https://fieldbook.tech/skills/getsentry/gha-security-review/https://fieldbook.tech/skills/getsentry/gha-security-review/Sun, 27 Sep 2026 12:00:00 GMTSecurityTraces exploitable GitHub Actions workflow paths instead of flagging generic CI patterns. Limits findings to externally exploitable paths and requires a concrete attack scenario. It loads focused references for the workflow triggers it finds.https://fieldbook.tech/skills/openai/gh-fix-ci/https://fieldbook.tech/skills/openai/gh-fix-ci/Sun, 27 Sep 2026 12:00:00 GMTShip & operateInvestigates failed GitHub Actions checks and prepares a focused fix. Requires GitHub CLI authentication and repository CI access to inspect failure evidence and apply changes.https://fieldbook.tech/skills/google/gke-basics/https://fieldbook.tech/skills/google/gke-basics/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureChoose, provision, authenticate, and deploy workloads to GKE Autopilot or Standard clusters. Uses GKE MCP, gcloud, kubectl, client libraries, or infrastructure-as-code to create clusters, fetch credentials, configure identity, and deploy workloads. These actions create or modify Google Cloud and Kubernetes resources; advanced networking, security, upgrades, and cluster architecture use separate companions.https://fieldbook.tech/skills/wshobson/go-concurrency-patterns/https://fieldbook.tech/skills/wshobson/go-concurrency-patterns/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksDesign safe Go concurrency with goroutines, channels, synchronization, context, and shutdown. Provides reference patterns for worker pools, pipelines, cancellation, channel ownership, and race avoidance. It does not prescribe an external tool or service requirement.https://fieldbook.tech/skills/mattpocock/grilling/https://fieldbook.tech/skills/mattpocock/grilling/Sun, 27 Sep 2026 12:00:00 GMTPlan & designInterviews you round by round until a plan or decision has no loose ends. Asks each round of questions with its own recommended answers, so you can agree fast or push back. Pure conversation: it changes nothing in your repo.https://fieldbook.tech/skills/mattpocock/improve-codebase-architecture/https://fieldbook.tech/skills/mattpocock/improve-codebase-architecture/Sun, 27 Sep 2026 12:00:00 GMTPlan & designFinds modules worth deepening, shows them as an HTML report, then grills one with you. An exploration pass followed by a focused design conversation. It proposes; you choose what to change.https://fieldbook.tech/skills/addyosmani/incremental-implementation/https://fieldbook.tech/skills/addyosmani/incremental-implementation/Sun, 27 Sep 2026 12:00:00 GMTBuildLands a change in thin, verifiable slices instead of one large diff. Covers vertical, contract-first and risk-first slicing, plus scope discipline for agents that wander.https://fieldbook.tech/skills/getsentry/iterate-pr/https://fieldbook.tech/skills/getsentry/iterate-pr/Sun, 27 Sep 2026 12:00:00 GMTReviewRepairs an open pull request until actionable CI and high- or medium-priority feedback clear. Uses bundled uv scripts and authenticated gh to classify feedback and checks, fix root causes, verify locally, commit, push, and monitor again. It stops for repeated failures, rebase needs, infrastructure problems, absent checks, drafts without checks, and human review gates.https://fieldbook.tech/skills/kotlin/kotlin-tooling-java-to-kotlin/https://fieldbook.tech/skills/kotlin/kotlin-tooling-java-to-kotlin/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksConverts Java files to idiomatic Kotlin with framework-aware compatibility checks. Detects frameworks, writes matching .kt files, updates references, compiles, tests, and handles batches in dependency order. In Git repositories it mandates a two-commit git mv workflow to preserve blame history; otherwise it deletes the original .java file after conversion.https://fieldbook.tech/skills/kotlin/kotlin-backend-jpa-entity-mapping/https://fieldbook.tech/skills/kotlin/kotlin-backend-jpa-entity-mapping/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksModels Kotlin JPA entities with safe identity, relationships, indexes, and fetch plans. Creates or reviews Spring Data JPA and Hibernate mappings while avoiding data-class identity failures, lazy-loading traps, and race-prone uniqueness checks. Schema constraints and bulk persistence changes affect database behavior, so fetch and lifecycle choices are tied to observed query patterns.https://fieldbook.tech/skills/kotlin/kotlin-tooling-kotlin-toolchain/https://fieldbook.tech/skills/kotlin/kotlin-tooling-kotlin-toolchain/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksBuild and configure Kotlin or Java projects with JetBrains' YAML-based Kotlin Toolchain. Scaffolds projects, edits Toolchain YAML and plugins, and runs the project wrapper for builds, tests, packaging, and lint checks; wrappers may download the CLI, JDK, and dependencies. This is a Claude Code-targeted skill for Toolchain projects, with companion migration skills required for Gradle-to-Toolchain conversions and plugin rewrites.https://fieldbook.tech/skills/kotlin/kotlin-tooling-native-build-performance/https://fieldbook.tech/skills/kotlin/kotlin-tooling-native-build-performance/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksMeasure and reduce slow Kotlin/Native iOS compilation, linking, generation, and CI setup. Runs a bundled audit plus Gradle builds or profiling, edits cache, target, export, or KSP configuration one change at a time, and compares equivalent warm builds. Full dynamic verification requires macOS and Xcode; otherwise it analyzes logs or scans statically.https://fieldbook.tech/skills/anthropics/mcp-builder/https://fieldbook.tech/skills/anthropics/mcp-builder/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowA phased guide to building good MCP servers in Python or TypeScript, with evaluations. Research, build, review, then evaluate. Loads protocol docs from the web as it goes.https://fieldbook.tech/skills/jeffallan/mcp-developer/https://fieldbook.tech/skills/jeffallan/mcp-developer/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowBuilds Model Context Protocol servers with tool, resource, and transport design guidance. It writes server code and can run local development tooling; external service integration needs its own credentials.https://fieldbook.tech/skills/affaan-m/mcp-server-patterns/https://fieldbook.tech/skills/affaan-m/mcp-server-patterns/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowApplies reusable design patterns for robust, secure MCP server implementations. It covers source changes and local validation; deployment and secrets remain environment-specific.https://fieldbook.tech/skills/mongodb/mongodb-query-optimizer/https://fieldbook.tech/skills/mongodb/mongodb-query-optimizer/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataDiagnoses slow MongoDB queries and recommends high-impact index and query changes. Uses MongoDB MCP explain, index, sample-document, and Atlas Performance Advisor data when configured, then ranks evidence-backed improvements. Atlas analysis needs API credentials and cluster access; index creation is withheld until the user approves because it changes database state and write overhead.https://fieldbook.tech/skills/mongodb/mongodb-schema-design/https://fieldbook.tech/skills/mongodb/mongodb-schema-design/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataDesign and diagnose MongoDB schemas around real access patterns, growth, and index costs. Uses code, workload descriptions, Atlas telemetry, or the MongoDB MCP server to inspect schemas and performance before recommending changes. MCP writes and destructive database operations require an exact preview and explicit approval; read-only mode is recommended.https://fieldbook.tech/skills/trailofbits/mutation-testing/https://fieldbook.tech/skills/trailofbits/mutation-testing/Sun, 27 Sep 2026 12:00:00 GMTTest & debugConfigures mewt or muton campaigns and interprets surviving mutations as test gaps or equivalents. Routes setup, optimization, bug hunting, and formal analysis to dedicated references, using the installed CLI's help as the authority. Examples target the mewt 4.x interface, muton is interchangeable by name, and severity ranks mutations rather than business risk.https://fieldbook.tech/skills/planetscale/mysql/https://fieldbook.tech/skills/planetscale/mysql/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataDesigns and tunes MySQL schemas, indexes, queries, transactions, and operations. Uses EXPLAIN, lock and connection metrics, rollout plans, and relevant references to make measurable InnoDB changes with rollback guidance. A MySQL environment is needed for validation; production DDL, index removal, drops, deletes, and truncates can lock tables or destroy data and require explicit approval.https://fieldbook.tech/skills/neondatabase/neon-object-storage/https://fieldbook.tech/skills/neondatabase/neon-object-storage/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataProvisions branch-aware S3-compatible storage and wires upload and download flows. Uses neon.ts, the Neon CLI, Files SDK, or AWS S3 clients to create buckets, pull credentials, and manage objects on Neon branches. The parent neon skill is required first, and Neon service access plus supported-region availability are required; bucket and object commands can expose public data or delete stored files.https://fieldbook.tech/skills/neondatabase/neon-postgres/https://fieldbook.tech/skills/neondatabase/neon-postgres/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataOperate Neon Postgres connections, branches, migrations, diagnostics, scaling, and search. Uses the Neon CLI or MCP server to inspect projects and databases, manage branches, fetch connection strings, and run guarded SQL; it may update `.env` and schema code. The parent `neon` skill is required first, with branch and generic Postgres companions used for deeper workflows.https://fieldbook.tech/skills/neondatabase/neon-postgres-branches/https://fieldbook.tech/skills/neondatabase/neon-postgres-branches/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataCreates normal or schema-only Neon branches for safe development and migration tests. Defaults to Neon CLI, falls back to Neon MCP or REST, and can update local DATABASE_URL after creating a branch. The parent neon skill and Neon service authentication are required; reset-from-parent replaces child data, interrupts connections, and branch deletion or expiry removes environments.https://fieldbook.tech/skills/neondatabase/neon-postgres-egress-optimizer/https://fieldbook.tech/skills/neondatabase/neon-postgres-egress-optimizer/Sun, 27 Sep 2026 12:00:00 GMTPerformanceFind and fix query patterns that drive excessive Postgres network transfer and Neon cost. Runs Postgres diagnostics, traces expensive queries into application code, edits queries or caching and pagination behavior, then remeasures under representative traffic. It requires the parent `neon` skill first; optional `neon.ts` changes and `neon config apply` modify remote branch compute policy.https://fieldbook.tech/skills/vercel/next-dev-loop/https://fieldbook.tech/skills/vercel/next-dev-loop/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksVerifies Next.js edits through framework diagnostics and a real browser session. Cross-checks the running app through /_next/mcp and agent-browser for compilation, runtime, UI, and React behavior after edits. It requires a running Turbopack dev server, Next.js 16.3+, and agent-browser 0.31.1+; the browser session persists cookies and local storage for the checkout.https://fieldbook.tech/skills/antfu/nuxt/https://fieldbook.tech/skills/antfu/nuxt/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksReference guide for Nuxt 4 structure, routing, rendering, data, modules, and deployment. Routes Nuxt questions to focused references for the app directory, configuration, CLI, SSR, server routes, composables, layers, hooks, and module authoring. It is guidance based on Nuxt 4.x and does not itself require a companion tool or external service.https://fieldbook.tech/skills/addyosmani/performance-optimization/https://fieldbook.tech/skills/addyosmani/performance-optimization/Sun, 27 Sep 2026 12:00:00 GMTPerformanceMeasure, find the bottleneck, fix it, and guard against regressions. Spans Core Web Vitals, backend response times and N+1 queries, always starting from a measurement.https://fieldbook.tech/skills/addyosmani/planning-and-task-breakdown/https://fieldbook.tech/skills/addyosmani/planning-and-task-breakdown/Sun, 27 Sep 2026 12:00:00 GMTPlan & designBreaks a spec into small, ordered tasks with checkpoints between them. Vertical slices and explicit dependencies. A good companion to incremental implementation from the same author.https://fieldbook.tech/skills/openai/playwright/https://fieldbook.tech/skills/openai/playwright/Sun, 27 Sep 2026 12:00:00 GMTTest & debugDrives real browser flows from the terminal with snapshot-based Playwright CLI commands. Checks for npx, opens a page through the bundled wrapper, snapshots stable element references, interacts, and captures screenshots or traces. It is CLI-first rather than a test-authoring workflow, and browser references must be refreshed after navigation or major DOM changes.https://fieldbook.tech/skills/trailofbits/post-patch-validation/https://fieldbook.tech/skills/trailofbits/post-patch-validation/Sun, 27 Sep 2026 12:00:00 GMTTest & debugValidates a security patch with pinned baseline, exploit, variant, behavior, and regression evidence. Uses a uv-driven Python runner and isolated Git worktrees to validate a structured plan, preserve logs, and distinguish findings from evidence gaps. It runs local code with the caller's privileges, rejects remote or production targets, requires execution authorization, and still leaves acceptance to human review.https://fieldbook.tech/skills/supabase/supabase-postgres-best-practices/https://fieldbook.tech/skills/supabase/supabase-postgres-best-practices/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataSchema, index, migration and row-level security guidance for any Postgres, from Supabase. Useful even without Supabase. Load it before changing tables, policies or migrations.https://fieldbook.tech/skills/mblode/pr-creator/https://fieldbook.tech/skills/mblode/pr-creator/Sun, 27 Sep 2026 12:00:00 GMTReviewPrepares GitHub pull requests using repository templates and reviewer-focused descriptions. Needs authenticated GitHub CLI and Git, and can push commits or update PR metadata. Code fixes and later CI monitoring are delegated to separate companion skills.https://fieldbook.tech/skills/alirezarezvani/pr-review-expert/https://fieldbook.tech/skills/alirezarezvani/pr-review-expert/Sun, 27 Sep 2026 12:00:00 GMTReviewReviews pull requests for blast radius, security, breaking changes, coverage, and performance. Fetches PR or MR metadata and diffs, traces dependents, scans risky patterns, compares test coverage, and emits prioritized findings. It expects authenticated gh or glab plus shell tools such as grep and jq; ticket verification may also require Jira or Linear credentials.https://fieldbook.tech/skills/prisma/prisma-cli/https://fieldbook.tech/skills/prisma/prisma-cli/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataGuides Prisma ORM setup, generation, migrations, database operations, and MCP use. Runs the Prisma ORM CLI for schemas, clients, local databases, Studio, raw SQL, migration deployment, and its MCP server, distinct from the Prisma Platform CLI. Database access may be local or hosted; reset and forced data-loss commands erase data and require the user's exact fresh consent.https://fieldbook.tech/skills/prisma/prisma-database-setup/https://fieldbook.tech/skills/prisma/prisma-database-setup/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataConfigure Prisma schemas, datasource URLs, driver adapters, and generated clients by database. Edits Prisma and TypeScript configuration, installs provider packages, and regenerates Prisma Client after schema changes. It requires Node.js 20.19+ and TypeScript 5.4+; MongoDB stays on Prisma 6.x and uses the dedicated MongoDB upgrade companion for version decisions.https://fieldbook.tech/skills/jezweb/react-patterns/https://fieldbook.tech/skills/jezweb/react-patterns/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksReview React 19, Vite, and Cloudflare code for performance and composition problems. Provides a prioritized read-only checklist for waterfalls, bundle size, component APIs, rerenders, and React 19 behavior. It is explicitly Claude Code-only and permits only file reading, globbing, and text search.https://fieldbook.tech/skills/obra/receiving-code-review/https://fieldbook.tech/skills/obra/receiving-code-review/Sun, 27 Sep 2026 12:00:00 GMTReviewHandles review feedback with verification instead of automatic agreement. Tells the agent when to push back, and to check a suggestion is actually right before applying it.https://fieldbook.tech/skills/redis/redis-core/https://fieldbook.tech/skills/redis/redis-core/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataGuides Redis data-structure selection and consistent colon-separated key design. Matches Strings, Hashes, Lists, Sets, Sorted Sets, JSON, Streams, or Vector Sets to actual access patterns and reviews key naming. It is modeling guidance and does not itself connect to Redis or mutate a datastore.https://fieldbook.tech/skills/redis/redis-search/https://fieldbook.tech/skills/redis/redis-search/Sun, 27 Sep 2026 12:00:00 GMTDatabases & dataDesign Redis Search indexes and lexical, vector, hybrid, aggregate, and RAG queries. Provides command and client patterns for schemas, query tuning, HNSW or FLAT selection, profiling, and alias-based index rollout. It is reference guidance and does not itself connect to Redis or execute the shown commands.https://fieldbook.tech/skills/obra/requesting-code-review/https://fieldbook.tech/skills/obra/requesting-code-review/Sun, 27 Sep 2026 12:00:00 GMTReviewSends finished work to a reviewer subagent before merging. Pairs with receiving code review from the same set. Review happens before merge, not after.https://fieldbook.tech/skills/mattpocock/resolving-merge-conflicts/https://fieldbook.tech/skills/mattpocock/resolving-merge-conflicts/Sun, 27 Sep 2026 12:00:00 GMTShip & operateResolves an in-progress merge or rebase by recovering each side's intent. Short and direct. It always finishes the merge and commits, and never aborts, so review the result before you push.https://fieldbook.tech/skills/st0012/ruby-test-frameworks/https://fieldbook.tech/skills/st0012/ruby-test-frameworks/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksDistinguishes Minitest and test-unit assertions, hooks, filters, skips, and Rails behavior. Provides framework-specific assertion, CLI, lifecycle, pending, and Rails compatibility rules. It depends on the project's Ruby test framework and runner and does not call an external service or prescribe destructive actions.https://fieldbook.tech/skills/wshobson/rust-async-patterns/https://fieldbook.tech/skills/wshobson/rust-async-patterns/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksReference patterns for reliable async Rust with Tokio, tasks, channels, and cancellation. Explains futures, runtimes, bounded concurrency, tracing, error propagation, lock safety, and task management, with deeper examples in its companion reference. It is implementation guidance and does not itself run Cargo or contact a service.https://fieldbook.tech/skills/mblode/scaffold-cli/https://fieldbook.tech/skills/mblode/scaffold-cli/Sun, 27 Sep 2026 12:00:00 GMTBuildScaffolds a publishable TypeScript CLI with pinned build, test, lint, CI, and release contracts. Generates the package, source, docs, skill, changesets, and workflows from bundled templates, then installs and validates the full toolchain. It assumes Node 24, TypeScript 7, Git, npm access, and specific tsdown, Vitest, Ultracite, and Changesets conventions; remote bootstrap needs account authorization.https://fieldbook.tech/skills/wshobson/secrets-management/https://fieldbook.tech/skills/wshobson/secrets-management/Sun, 27 Sep 2026 12:00:00 GMTSecurityGuides secure credential storage, rotation and use in CI/CD environments. Covers Vault, cloud secret managers and CI variables, with examples for GitHub Actions and GitLab. It assumes access to the chosen secret-management platform.https://fieldbook.tech/skills/jeffallan/secure-code-guardian/https://fieldbook.tech/skills/jeffallan/secure-code-guardian/Sun, 27 Sep 2026 12:00:00 GMTSecurityReviews and strengthens application code against common security weaknesses. It can change source and run validation commands; remediation still needs the repository's actual threat model.https://fieldbook.tech/skills/aaravkashyap12/secure-launch/https://fieldbook.tech/skills/aaravkashyap12/secure-launch/Sun, 27 Sep 2026 12:00:00 GMTSecurityA security checklist shaped to your project before it goes live, with approved fixes checked one by one. A launch-readiness pass, not a penetration test or a compliance certificate. It never deploys, changes DNS or scans live hosts. In September 2026 Codex trials, the multi-tenant API case passed. The Next.js and npm package cases were partial because the Windows sandbox blocked builds and tests, and the Express case has discovery-only evidence. Mobile coverage is a starter set.https://fieldbook.tech/skills/addyosmani/security-and-hardening/https://fieldbook.tech/skills/addyosmani/security-and-hardening/Sun, 27 Sep 2026 12:00:00 GMTSecurityThreat model first, then hardening across input, auth, sessions and headers. Its three-tier boundary (always, ask first, never) is a sensible way to keep an agent's security changes reviewable.https://fieldbook.tech/skills/openai/security-best-practices/https://fieldbook.tech/skills/openai/security-best-practices/Sun, 27 Sep 2026 12:00:00 GMTSecurityApplies language and framework security guidance when a security review is explicitly requested. Supports Python, JavaScript or TypeScript, and Go. It asks for a report review before beginning individual remediation work.https://fieldbook.tech/skills/openai/security-ownership-map/https://fieldbook.tech/skills/openai/security-ownership-map/Sun, 27 Sep 2026 12:00:00 GMTSecurityMaps repository security ownership, sensitive-code concentration, and maintenance risk. It analyzes Git history and can emit CSV or JSON artifacts from the repository's commit data.https://fieldbook.tech/skills/affaan-m/security-review/https://fieldbook.tech/skills/affaan-m/security-review/Sun, 27 Sep 2026 12:00:00 GMTSecurityChecks application code against a practical security checklist before production work. Covers secrets, input validation, auth, injection and deployment checks. It includes ecosystem-specific examples, so findings need project context.https://fieldbook.tech/skills/getsentry/security-review/https://fieldbook.tech/skills/getsentry/security-review/Sun, 27 Sep 2026 12:00:00 GMTSecurityReviews code for confirmed security weaknesses with data-flow and framework context. Reports high-confidence vulnerabilities only after checking input control and framework safeguards. It selectively loads language and infrastructure reference guides.https://fieldbook.tech/skills/openai/security-threat-model/https://fieldbook.tech/skills/openai/security-threat-model/Sun, 27 Sep 2026 12:00:00 GMTSecurityWrites a threat model grounded in your repo: trust boundaries, assets and abuse paths. Only runs when you ask for a threat model by name, so it will not fire on ordinary work.https://fieldbook.tech/skills/mattpocock/setup-pre-commit/https://fieldbook.tech/skills/mattpocock/setup-pre-commit/Sun, 27 Sep 2026 12:00:00 GMTShip & operateAdds Husky, lint-staged, type checks and tests as a pre-commit hook. Installs dev dependencies and makes a commit at the end. JavaScript and TypeScript projects only.https://fieldbook.tech/skills/addyosmani/shipping-and-launch/https://fieldbook.tech/skills/addyosmani/shipping-and-launch/Sun, 27 Sep 2026 12:00:00 GMTShip & operateA pre-launch checklist with feature flags, staged rollout and a rollback plan. Broad rather than deep. Pair it with a dedicated security pass for anything holding user data.https://fieldbook.tech/skills/anthropics/skill-creator/https://fieldbook.tech/skills/anthropics/skill-creator/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowCreates, tests and tunes skills, including evals and trigger checks. The most complete skill-authoring workflow available, with an eval viewer. Heavy for a quick skill.https://fieldbook.tech/skills/alirezarezvani/skill-tester/https://fieldbook.tech/skills/alirezarezvani/skill-tester/Sun, 27 Sep 2026 12:00:00 GMTBuildValidates skill structure, exercises Python helpers, and scores quality against a target gate. Runs four stdlib-only Python tools from the repository root, then applies the highest-priority scoring feedback and repeats all gates. Its tier line-count rubric is for legacy skills; new skills follow the separate write-a-skill standard.https://fieldbook.tech/skills/alirezarezvani/spec-to-repo/https://fieldbook.tech/skills/alirezarezvani/spec-to-repo/Sun, 27 Sep 2026 12:00:00 GMTPlan & designConverts a natural-language app brief into a validated, runnable starter repository. Interprets the brief, infers or confirms the stack, designs the tree and contracts, generates real code plus tests and CI, then runs a project validator. It spans web, API, mobile, CLI, data, Go, Rust, and Python starters, but stack-specific SaaS scaffolding is routed elsewhere.https://fieldbook.tech/skills/alirezarezvani/spec-driven-workflow/https://fieldbook.tech/skills/alirezarezvani/spec-driven-workflow/Sun, 27 Sep 2026 12:00:00 GMTPlan & designTurns requirements into an approved, traceable spec, tests, and scope-controlled implementation. Moves from requirements through a nine-section spec, validator, generated failing tests, incremental implementation, and a traceability review. It relies on bundled Python scripts and referenced templates, and treats breaking, security, performance, or cross-team ambiguity as an escalation point.https://fieldbook.tech/skills/wshobson/sql-optimization-patterns/https://fieldbook.tech/skills/wshobson/sql-optimization-patterns/Sun, 27 Sep 2026 12:00:00 GMTPerformanceImproves SQL query shapes, indexes, execution plans, and database access patterns. It uses database inspection and query commands; confirm the target environment before gathering evidence or changing indexes.https://fieldbook.tech/skills/alirezarezvani/senior-security/https://fieldbook.tech/skills/alirezarezvani/senior-security/Sun, 27 Sep 2026 12:00:00 GMTSecurityBuilds STRIDE threat models, scores risk with DREAD, scans secrets, and routes specialist work. Scopes data-flow elements, generates scored threats, scans for secrets, and routes other security lanes to sibling skills. It depends on bundled Python scripts and sibling references; high findings call for credential rotation, while red-team or cloud actions stay in their specialist workflows.https://fieldbook.tech/skills/obra/subagent-driven-development/https://fieldbook.tech/skills/obra/subagent-driven-development/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowExecutes implementation plans with fresh agents, per-task reviews, and a durable progress ledger. Uses one implementer at a time, task-level review and fix loops, a plan-specific ledger, then a whole-branch review. It depends on Git worktrees, shell scripts, commits, and subagent tooling; merge, push, and workspace deletion are deferred to a guarded finishing workflow.https://fieldbook.tech/skills/trailofbits/supply-chain-risk-auditor/https://fieldbook.tech/skills/trailofbits/supply-chain-risk-auditor/Sun, 27 Sep 2026 12:00:00 GMTSecurityMeasures dependency and lockfile supply-chain risk for npm, PyPI and Go projects. Writes its report outside the audited repository and distinguishes unassessable data from a clean result. Yarn, pnpm and Poetry lockfiles are not parsed.https://fieldbook.tech/skills/sveltejs/svelte-code-writer/https://fieldbook.tech/skills/sveltejs/svelte-code-writer/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksLooks up current Svelte docs and analyzes components with the official MCP CLI. Runs @sveltejs/mcp through npx to list documentation, fetch relevant sections, and autofix-check every Svelte component before finalizing it. The source recommends using the companion svelte-file-editor agent when available, and the CLI/package must be accessible.https://fieldbook.tech/skills/avdlee/swiftui-expert-skill/https://fieldbook.tech/skills/avdlee/swiftui-expert-skill/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksWrite, review, refactor, and profile SwiftUI across data flow, layout, performance, and APIs. Can edit SwiftUI source and run bundled scripts plus Apple Instruments tooling to record or analyze `.trace` files. Trace capture requires Xcode tooling and a suitable Mac, simulator, or connected Apple device; code is changed only when requested.https://fieldbook.tech/skills/obra/systematic-debugging/https://fieldbook.tech/skills/obra/systematic-debugging/Sun, 27 Sep 2026 12:00:00 GMTTest & debugRoot cause before fixes, in four phases with clear stop signs. Lists the rationalisations agents use to skip investigation, and tells it to stop when it catches itself.https://fieldbook.tech/skills/wshobson/task-coordination-strategies/https://fieldbook.tech/skills/wshobson/task-coordination-strategies/Sun, 27 Sep 2026 12:00:00 GMTAgent workflowCoordinates multiple agents through task decomposition, ownership, and communication patterns. It directs subagent work and is intended for tasks whose dependencies benefit from explicit coordination.https://fieldbook.tech/skills/mattpocock/tdd/https://fieldbook.tech/skills/mattpocock/tdd/Sun, 27 Sep 2026 12:00:00 GMTBuildA red-green loop with firm rules on what makes a test worth keeping. Agrees the seams under test with you before writing any test, which keeps effort on the paths that matter.https://fieldbook.tech/skills/affaan-m/tdd-workflow/https://fieldbook.tech/skills/affaan-m/tdd-workflow/Sun, 27 Sep 2026 12:00:00 GMTBuildRuns a test-first development loop across unit, integration, and browser coverage. Detects the package manager and actual test runner before writing user journeys and failing tests, then implements, refactors, and checks coverage. Examples center on JS/TS tooling, with separate Jest/Vitest, Bun, and Playwright patterns.https://fieldbook.tech/skills/hashicorp/terraform-policy/https://fieldbook.tech/skills/hashicorp/terraform-policy/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureRoutes Terraform Policy authoring, Sentinel conversion, and policy-test debugging. Checks the installed tfpolicy version, then delegates policy work to the companion tfpolicy-author or tfpolicy-test instructions with version-specific schema behavior. The tfpolicy CLI is required, and missing companion skills may be installed with npx before files are written or tested.https://fieldbook.tech/skills/aws-samples/terraform-skill/https://fieldbook.tech/skills/aws-samples/terraform-skill/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureDiagnose and improve Terraform or OpenTofu modules, tests, CI, state, and migrations. Generates HCL and CI changes, validates them with Terraform/OpenTofu and scanners, and may use Terraform MCP for schemas. State-changing or destructive work requires reviewed plans and approval; `terraform-ls` is optional, with a separate code-intelligence companion recommended.https://fieldbook.tech/skills/hashicorp/terraform-stacks/https://fieldbook.tech/skills/hashicorp/terraform-stacks/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureCreates and operates Terraform Stacks across environments, regions, and accounts. Authors Stack component and deployment HCL, validates it with the Terraform Stacks CLI, commits provider locks, and uploads configurations to HCP Terraform. Terraform 1.13+ and HCP Terraform are required; uploads trigger runs, Premium-only features can cost extra, and destroy-marked deployments remove infrastructure after approval.https://fieldbook.tech/skills/obra/test-driven-development/https://fieldbook.tech/skills/obra/test-driven-development/Sun, 27 Sep 2026 12:00:00 GMTBuildStrict test-first discipline: watch it fail, make it pass, then refactor. The most uncompromising TDD skill here. It will push back on writing code before a failing test exists.https://fieldbook.tech/skills/mblode/tidy/https://fieldbook.tech/skills/mblode/tidy/Sun, 27 Sep 2026 12:00:00 GMTBuildReviews a diff with evidence-ranked findings and can apply bounded fixes and simplifications. Report mode leaves the tree untouched; apply mode fixes confirmed issues, simplifies only where repository evidence supports it, and runs affected checks. It scopes work through Git diffs or an authenticated PR, and deliberately avoids commits, pushes, dependency changes, migrations, and broad rewrites.https://fieldbook.tech/skills/mattpocock/to-spec/https://fieldbook.tech/skills/mattpocock/to-spec/Sun, 27 Sep 2026 12:00:00 GMTPlan & designTurns the conversation so far into a written spec and files it in your issue tracker. No new interview: it synthesises what you already discussed. It publishes to your tracker, so check which one it will use before running it.https://fieldbook.tech/skills/wshobson/turborepo-caching/https://fieldbook.tech/skills/wshobson/turborepo-caching/Sun, 27 Sep 2026 12:00:00 GMTPerformanceConfigures Turborepo task caching and explains cache misses in monorepos. It changes build configuration and uses local task commands to validate cache behavior.https://fieldbook.tech/skills/obra/using-git-worktrees/https://fieldbook.tech/skills/obra/using-git-worktrees/Sun, 27 Sep 2026 12:00:00 GMTShip & operateCreates an isolated worktree for feature work and sets the project up inside it. Prefers your agent's native worktree tools and falls back to git, with setup steps per language.https://fieldbook.tech/skills/obra/verification-before-completion/https://fieldbook.tech/skills/obra/verification-before-completion/Sun, 27 Sep 2026 12:00:00 GMTTest & debugNo claim of done until the checks have run and the output has been read. Small and broadly useful. It targets the most common agent failure: reporting success without evidence.https://fieldbook.tech/skills/affaan-m/verification-loop/https://fieldbook.tech/skills/affaan-m/verification-loop/Sun, 27 Sep 2026 12:00:00 GMTBuildRuns build, type, lint, test, security, and diff gates before a change is called complete. Checks build, types, lint, coverage, simple secret/debug patterns, and the Git diff in sequence, stopping on build failure. Its command examples assume common JavaScript or Python toolchains and an existing project test setup.https://fieldbook.tech/skills/antfu/vite/https://fieldbook.tech/skills/antfu/vite/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksConfigure Vite builds, plugins, SSR, multi-environment APIs, and Vite 8 Rolldown migration. Reference guidance covers TypeScript ESM configuration, the plugin API, library and SSR builds, and CLI usage. Its versioned guidance is based on the Vite 8 beta and should be matched to the project's installed Vite release.https://fieldbook.tech/skills/antfu/vue/https://fieldbook.tech/skills/antfu/vue/Sun, 27 Sep 2026 12:00:00 GMTLanguages & frameworksWrite Vue 3.5 components with typed script setup, reactivity, lifecycle, and built-ins. Reference guidance favors the Composition API, TypeScript, shallow reactivity where suitable, and Vue's current macros and built-in components. It has no required companion tool or external service.https://fieldbook.tech/skills/anthropics/webapp-testing/https://fieldbook.tech/skills/anthropics/webapp-testing/Sun, 27 Sep 2026 12:00:00 GMTTest & debugTests local web apps with Playwright scripts: screenshots, logs and UI checks. Ships helper scripts for starting your server during a test run. Needs Python and Playwright installed.https://fieldbook.tech/skills/cloudflare/web-perf/https://fieldbook.tech/skills/cloudflare/web-perf/Sun, 27 Sep 2026 12:00:00 GMTPerformanceAudits Core Web Vitals from a real performance trace, then maps fixes to your code. Checks that the browser MCP tools are available before it starts, which saves a confusing failure.https://fieldbook.tech/skills/cloudflare/workers-best-practices/https://fieldbook.tech/skills/cloudflare/workers-best-practices/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureWrite and review production Cloudflare Workers against current runtime and configuration behavior. Retrieves current Cloudflare docs, edits Worker code or configuration, and runs existing type checks or runtime tests for affected behavior. Durable Objects and Wrangler command work require their dedicated companion skills.https://fieldbook.tech/skills/cloudflare/wrangler/https://fieldbook.tech/skills/cloudflare/wrangler/Sun, 27 Sep 2026 12:00:00 GMTCloud & infrastructureConfigure and run Wrangler for local Workers development, previews, deployment, and resources. Reads the project-local Wrangler version, edits source configuration, consults Cloudflare docs through MCP or the web, and runs build, type, preview, deploy, secret, or resource commands. Remote operations can deploy code, provision or alter Cloudflare resources, expose public previews, and delete named previews.https://fieldbook.tech/skills/obra/writing-plans/https://fieldbook.tech/skills/obra/writing-plans/Sun, 27 Sep 2026 12:00:00 GMTPlan & designTurns a spec into a step-by-step plan with exact files, tests and checks. Plans are written for an engineer with no context, which makes them good handoffs to another agent or a teammate.https://fieldbook.tech/skills/openai/yeet/https://fieldbook.tech/skills/openai/yeet/Sun, 27 Sep 2026 12:00:00 GMTShip & operateGuides a controlled GitHub pull-request publishing workflow from a finished branch. It uses GitHub and Git commands to publish branch work, so it has external repository effects.https://fieldbook.tech/skills/aaravkashyap12/advise-project-approach/https://fieldbook.tech/skills/aaravkashyap12/advise-project-approach/Fri, 25 Sep 2026 12:00:00 GMTPlan & designMake project decisions with evidence, clear tradeoffs, and a plan you can act on. This skill supports project judgment. Its published evaluations include limitations and mixed results; it does not promise universally better recommendations.https://fieldbook.tech/skills/aaravkashyap12/efficiency-skill/https://fieldbook.tech/skills/aaravkashyap12/efficiency-skill/Fri, 25 Sep 2026 12:00:00 GMTAgent workflowKeep the main model in charge. Delegate bounded work when the handoff is worth it. Routing guidance is sourced from official documentation. In September 2026, twenty Codex trials passed their acceptance checks; six could not confirm the runtime worker model, and per-run costs were not captured, so cost savings remain unmeasured.https://fieldbook.tech/skills/aaravkashyap12/lean-engineering/https://fieldbook.tech/skills/aaravkashyap12/lean-engineering/Fri, 25 Sep 2026 12:00:00 GMTBuildSmall changes, bounded workers, and real evidence. Give every edit a clear owner. Pairs with Efficiency Skill: Lean governs ownership, verification and completion; Efficiency governs whether and where to dispatch. Eight Codex trials passed their acceptance checks in September 2026. No comparative benchmark against other workflows is claimed.