Blockchain

Audit and exploit smart contracts and Web3 applications including reentrancy, integer overflow, access control flaws, and DeFi-specific vulnerabilities. Use when testing blockchain applications or performing smart contract audits.

Use when creating design systems or styling components with Tailwind CSS v4 and Class Variance Authority (CVA) - provides type-safe component variants with CSS variables for design tokens

Consulta e opera dados logisticos da Nacom Goya. Consulta pedidos, estoque, disponibilidade, lead time. Cria separacoes. Resolve entidades (pedido, produto, cliente, grupo). Use para perguntas como 'tem pedido do Atacadao?', 'quanto tem de palmito?', 'quando fica disponivel?', 'crie separacao do VCD123'.

Drizzle ORM for TypeScript - type-safe SQL queries, schema definitions, migrations, and relations. Use when building database layers in Next.js or Node.js applications.

Use this skill when architecting new features within the RBAC modular permissions system. Guides architects through workspace design, feature definition, permission mapping, and role hierarchy. Critical for understanding Owner/Super Admin special roles, feature independence, and multi-tenant context isolation. Invoke when creating PRDs that involve permissions, workspaces, features, or role-based access control.

Validate wavecapsdr.yaml configuration files for syntax errors, schema violations, and logical inconsistencies. Use when editing config, troubleshooting startup failures, or verifying recipe/preset definitions before deployment.

Implement comprehensive validation using Zod schemas for type-safe validation on both client and server, with server-side validation as the security boundary (never trust client input). Use this skill when validating user inputs, creating API endpoints that accept data, implementing forms, defining data schemas, validating file uploads, creating validation middleware, implementing Firestore security rules or Supabase RLS, or writing validation rules for any user-provided data. Apply when working on API route handlers, form components with React Hook Form, validation middleware, Zod schema definitions (schemas/*.ts, validation/*.ts), Firestore security rules (firestore.rules), Supabase RLS policies, or any code that accepts external input. This skill ensures server-side validation always (client-side is for UX only), Zod for schema validation with TypeScript type inference (z.infer<typeof schema>), validation middleware factory for Express/Bun APIs, React Hook Form + zodResolver for forms, user-friendly error

EARS記法を用いた要件定義書（requirements.md）を作成・編集します。ユーザーストーリーの作成、受入基準の定義、非機能要件の整理が必要な場合に使用してください。

A comprehensive framework for high-performance engineering management and task execution. It guides users through reducing ambiguity, defining "Done," choosing the optimal leadership positioning, and managing risks via implication-based communication.

Expert software product manager who works directly with stakeholders to understand their needs and create comprehensive product specifications. Use when users need help designing software, defining requirements, creating PRDs, writing user stories, or developing functional specifications. Guides product management aspects of software development, asks clarifying questions, uncovers unstated preferences and assumptions, determines happy paths and error handling, and creates documentation understandable to both stakeholders and engineers.

Container query setup required for this project's cqi-based fluid scales. The type and space tokens use cqi units which need container-type declarations to function.

Use this skill for the requests related to the geometry definitions of rivers in USA; it provides a way to get the geometries of rivers as a GeoDataframe.

Alpaca broker limitations: crypto shorts blocked (broker doesn't support), stock shorts allowed. Trigger when: (1) shorting gate blocks wrong assets, (2) SELL signals blocked, (3) order type confusion.

Build consistent, scalable design systems with proper token architecture

Systematically improve documentation quality from 7/10 → 9/10 using assessment checklists and transformation patterns. Use when documentation exists but lacks Quick Start, clear prerequisites, or working examples. Optimized for crypto/trading data projects.

expo-secure-store patterns for sensitive data. Use when storing tokens and credentials.

Generate short-lived installation tokens from GitHub App credentials with actions/create-github-app-token. Organization-scoped and repository-scoped patterns for automated cross-repo workflows.

Produces a structured, experience-first feature specification following a docs-first approach. Use when defining or refining a single product feature's lifecycle and outcomes.

Conducts structured interviews to produce Change Contracts - definitions of done expressed in terms of behavior, constraints, operability, and acceptance criteria. Use when externalizing intent for work to be delegated to AI agents, when defining requirements without implementation details, or when asked to create a change contract.

Define and structure database models with proper data types, relationships, constraints, and validation following ORM best practices. Use this skill when creating or modifying database model classes, ORM entities, schema definitions, or data model files. Use this skill when working with SQLAlchemy models, Django models, ActiveRecord models, Prisma schemas, TypeORM entities, or Sequelize models. Use this skill when defining table schemas, establishing relationships (one-to-many, many-to-many), implementing model validation, adding timestamps and soft deletes, or configuring cascade behaviors. Use this skill when working with files in models/, entities/, schemas/, or orm/ directories that define database table structures and business logic.