nikolanovoselec
UserThe agentic engineering engine. Governed engineering agents that build, test, review, deploy, and operate inside your own estate. Spec-driven, attributed, and encrypted.
Categories
Indexed Skills (63)
impeccable
Use when the user wants to design, redesign, shape, critique, audit, polish, clarify, distill, harden, optimize, adapt, animate, colorize, extract, or otherwise improve a frontend interface. Covers websites, landing pages, dashboards, product UI, app shells, components, forms, settings, onboarding, and empty states. Handles UX review, visual hierarchy, information architecture, cognitive load, accessibility, performance, responsive behavior, theming, anti-patterns, typography, fonts, spacing, layout, alignment, color, motion, micro-interactions, UX copy, error states, edge cases, i18n, and reusable design systems or tokens. Also use for bland designs that need to become bolder or more delightful, loud designs that should become quieter, live browser iteration on UI elements, or ambitious visual effects that should feel technically extraordinary. Not for backend-only or non-UI tasks.
turnstile-spin
Set up Cloudflare Turnstile end-to-end in a project. Scan the codebase, create the widget via the Cloudflare API, embed it where user requests need bot verification (form submissions, SPA actions, API endpoints, download links, comment or vote submissions, etc.), wire canonical server-side siteverify in the customer's existing backend, validate, and persist the skill. Load this when a user asks to add Turnstile, set up CAPTCHA, protect a form or endpoint from bots, or fix a Turnstile integration. Mirrors developers.cloudflare.com/turnstile/spin.
vault-operations
Operational knowledge for working with /home/user/Vault/ - the persistent user-curated note store. Layout, who-writes-where, wikilink convention, hard rules. Invoked when the agent touches vault files or the user references vault contents.
graphify
Build and query knowledge graphs from any folder (code + docs + PDFs + images). MCP-backed. Activates on /graphify and on natural-language requests to graph a project.
sdd-clean
Workflow for /sdd clean — rescuing a rotted spec. Mode-aware behaviors (interactive/auto/unleashed), safety nets, what gets cleaned (incl. per-AC @impl AND @test anchor backfill at parity, gated by enforce_tdd), JUDGMENT auto-resolution rules. Invoked when /sdd clean runs. Requires the spec-driven-development skill for REQ format and Status semantics, and the spec-enforce skill family for the detection mechanics.
frontend-components
Build repeated UI as composable components with centralized content and styles, explicit variants, and behavioral tests.
canvas-design
Own art direction and production for static or fixed artifacts. Use the communication lane for posters, campaign graphics, information graphics, covers, signage, and print/screen collateral; use the expressive lane for artwork, experimental posters, generative pieces, and concept-led compositions. Use delegated mode for assets inside an owner-defined interface thesis.
api-design
REST API design patterns including resource naming, status codes, pagination, filtering, error responses, versioning, and rate limiting for production APIs.
backend-patterns
Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.
browser-run
Read or drive public web pages with a real headless browser (Cloudflare Browser Run). Two surfaces — a cheap one-shot Markdown/HTML/scrape read (browser_markdown / browser_content / browser_scrape) and the interactive chrome-devtools browser (navigate / click / screenshot). Use when WebFetch is blocked by bot protection, login walls, redirects, or JavaScript-only rendering, or when you need to interact with a page.
cloudflare-stack
The default new-project playbook — use whenever the user wants to build something from scratch and has NOT committed to a specific tech stack: "build something", "create a website", "make an app", "start a new project", "I have an idea", "build me a...", "I want to create...", "make me a...", "let's build...", "new project", or any idea described from scratch. When there is no stated technology preference, this skill picks the default stack and targets Cloudflare Workers for deployment; if the user has already pinned a non-Cloudflare stack, respect that. Use it proactively before writing any code. For Cloudflare platform/API details while implementing use the `cloudflare` reference skill; to ship/deploy use the `ship` skill.
consult-llm
Use only when the user explicitly asks to consult external LLMs or names GPT, ChatGPT, Gemini, OpenAI, or consult_llm. Never use at session start, for routine planning/review/debugging, or for a generic "second opinion" unless the user names external LLMs.
content-hash-cache-pattern
Cache expensive file processing results using SHA-256 content hashes — path-independent, auto-invalidating, with service layer separation.
database-migrations
Database migration best practices for schema changes, data migrations, rollbacks, and zero-downtime deployments across PostgreSQL, MySQL, and common ORMs (Prisma, Drizzle, Django, TypeORM, golang-migrate).
deploy-credentials
GitHub and Cloudflare credential reference. Env-var table (GH_TOKEN, CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID), what each token enables (gh/git/wrangler operations), check-then-fallback behavior, secret-handling rules. Invoked when a turn needs gh/wrangler access and isn't sure if creds are present or wants the full operations reference.
deployment-patterns
Deployment workflows, CI/CD pipeline patterns, Docker containerization, health checks, rollback strategies, and production readiness checklists for web applications.
doc-enforce-lanes
SDD documentation lane-discipline enforcement — the canonical cross-agent contract. Runs Pass 3 (implementation-prose detection), Pass 4 (lane-violation signature catalogue), dual-narrative ADR detection, and Big-O jargon detection. Invoked conditionally by doc-enforce per file in diff.
doc-enforce-truth
SDD documentation truth-check / source-of-truth enforcement — the canonical cross-agent contract. Runs Pass 8 (verification truth-check), Pass 9 (Implements-vs-AC cross-walk), Pass 10 (stale code-block detection), Pass 11 (content-preservation on trim), Pass 12 (stranger cold-read), Pass 15 (doc source-anchor truth-check, ALWAYS runs). Invoked conditionally by doc-enforce when Implemented REQ docs are touched OR scope=all.
iterative-retrieval
Pattern for progressively refining context retrieval to solve the subagent context problem
review-scope
Canonical scope resolver and lane evidence packet for review workflows.
search-first
Research-before-coding workflow. Search for existing tools, libraries, and patterns before writing custom code. Invokes the researcher agent.
ship
This skill should be used when the user wants to "ship this", "deploy this", "publish my code", "push to GitHub", "create a repo", "set up GitHub", "share my code", "put this online", "make this live", "get a URL for this", "host this", "I want people to see this", "deploy to Cloudflare", "how do I get this on the internet", "I want to share what I built", "make this accessible", "launch this", "push my changes", "create a repository", "set up version control", or mentions anything about getting their code online, shared, deployed, or published. This skill detects the current state of GitHub and Cloudflare configuration and only guides through what is missing. Use this skill proactively — if the user has finished building something and expresses any desire to share it, back it up, deploy it, or make it accessible, this is the right skill.
spec-enforce-ac
SDD spec AC quality and splitting enforcement — the canonical cross-agent contract. Runs AC granularity triggers 1-10, run-on safety net, per-AC verbosity cap, Constraints conciseness, actor coherence, sub-bullets ban, splitting by actor/sub-feature/concern, accretion guard, chain enforcement, mechanism leakage. Invoked conditionally by spec-enforce when diff touches any AC bullet OR any Constraints bullet OR scope=all.
spec-enforce-truth
SDD spec content-quality / source-of-truth checks �� the canonical cross-agent contract. Runs CQ-1 (REQ-test truth-check), CQ-2 (vendor / external-interface drift), CQ-3 (content-preservation on shrink), CQ-TEST (test-anchor coverage — REQ-level coverage AND per-AC @test anchor verification at parity with @impl, gated by enforce_tdd), and CQ-SOURCE (source-anchor @impl truth-check, ALWAYS runs). Per-AC manual verification uses inline <!-- @manual --> markers. Invoked conditionally by spec-enforce when Implemented or Partial REQs are touched OR scope=all.
tdd-enforce
Test discipline enforcement. Holds the 8 antipattern catalogue (text-matching theater, tautology, mock-only, call-count, empty body, silent skip, trivial assertion, name-lies), the patterns that produce useful tests, the severity application table, and the migration policy. Invoked by code-reviewer when test files are touched in a diff and by tdd-guide when authoring new tests.
doc-enforce-shape
SDD documentation structural enforcement for canonical lane records, navigation, and traceability. Invoked by doc-enforce for changed lanes or scope=all.
doc-enforce
SDD documentation enforcement orchestrator — the canonical cross-agent contract. Runs the 16-row execution manifest against documentation/. Detects forbidden content, per-element budget violations (per-file caps deprecated in v2.0), within-section semantic issues, authoring-quality prose (weasel, unverifiable, missing-why), REQ-backlink gaps, doc source-anchor truth (Pass 15 — always runs). Conditionally invokes doc-enforce-lanes (per file in diff), doc-enforce-shape (api-reference / canonical lane files), and doc-enforce-truth (Implemented REQ docs or scope=all). Invoked by doc-updater on every PR-boundary trigger and inline by the root-owned /sdd clean workflow.
frontend-patterns
Optimize React and Next.js data flow, bundles, rendering, and rerenders without speculative memoization.
git-review-pipeline
Execute an automatic-delivery or user-selected SDD exact-head review round with headless parallel reviewers, exact-head CI when planned, canonical triage, and separate FIX.
sdd-init
Workflow for /sdd init bootstrap. Covers greenfield (lean two-confirm flow), Import Mode (two-output: REQs + triage), Resume Mode (drain triage queue), Phase 4 behavioral enumeration (deterministic source-surface walk that drives Phase 5d), Phase 5 enrichment pass (graphify-backed cross-link / ADR-seed / glossary-seed), Phase 7a source-anchor verification, Phase 7b enumeration-coverage verification, and dependency version resolution. Invoked when /sdd init runs. Requires the spec-driven-development skill for REQ format, Status semantics, and templates.
spec-driven-development
Specification-driven development index. Defines spec structure, REQ format, Status semantics, the @impl source-anchor and @test test-anchor conventions (per-AC, at parity), three autonomy modes, and routes to sub-command skills (sdd-init for bootstrap, sdd-clean for rescue). Holds the small sub-commands (edit, add, mode), Plan Mode integration, test discipline, templates. Invoked via /sdd.
spec-enforce
SDD spec enforcement orchestrator — the canonical cross-agent contract. Runs the 24-row execution manifest against the current diff (or full spec on scope=all). Detects forbidden content, REQ-shape violations, status drift, meta-leakage, changelog drift, backlog state, source-anchor truth-check (CQ-SOURCE — always runs), and per-AC test-anchor coverage at parity with source anchors (CQ-TEST — gated by enforce_tdd). Conditionally invokes spec-enforce-ac (when ACs touched) and spec-enforce-truth (when Implemented or Partial REQs touched or scope=all — Partial included so CQ-SOURCE can validate anchors). Invoked by spec-reviewer on every PR-boundary trigger and inline by the root-owned /sdd clean workflow.
skill-authoring
Create or revise managed agent skills with lean payloads, trigger evaluation, behavioral evidence, and pinned provenance.
systematic-debugging
Investigate bugs, failures, regressions, and unexpected behavior from evidence before proposing fixes.
browser-e2e
Verify a deployed UI in a browser for interaction, mobile layout, and visuals.
pr-workflow
Pull request creation template. Steps for analyzing the full commit history, drafting summary/body, REQ backlinks (when sdd/ exists), and using -u for new branches. Invoked when the user asks the agent to open a PR.
design
Route visual work by work mode, purpose, platform, and available direction to exactly one art-direction owner. Use for web, native mobile, desktop-native, static, operational, and ambiguous visual requests. Exclude backend, API, data, prose-only, and non-visual engineering work.
frontend-design
Own web frontend art direction for responsive content and web products across marketing, operational, reading, and immersive interfaces. Use for greenfield work, redesign, and thesis-changing polish or critique. Exclude native mobile, desktop-native, static art, prose, bounded finishing, and non-visual engineering.
native-mobile-design
Own product-specific art direction and platform behavior for native iOS, native Android, and cross-platform native mobile applications. Use for mobile flows, screens, navigation, gestures, lifecycle, accessibility, and thesis-changing native redesign. Exclude responsive web, static art, bounded finishing, and non-visual engineering.
safe-local-checks
Run bounded local lint, parse, focused Node test, and package-consistency checks without replacing CI.
codeflare-capabilities
Explain the complete Codeflare workspace for broad capability discovery or onboarding, then route numbered follow-ups to grounded subsystem guidance.
desktop-native-design
Own product-specific art direction and native behavior for macOS, Windows, Linux, and cross-platform desktop applications. Use for windows, menus, commands, keyboard and pointer workflows, documents, system integration, accessibility, and thesis-changing desktop redesign. Exclude responsive web, native mobile, static art, bounded finishing, and non-visual engineering.
humanize
Draft and rewrite prose in a human voice without machine-generated patterns.
motion-design
Engineer purposeful interface motion, transitions, continuity, gestures, and direct manipulation after a web, mobile, desktop, or incumbent art-direction owner defines the visual thesis. Use when motion complexity exceeds simple incumbent transitions. Exclude art direction, static art, routine styling, and non-visual performance work.
agents-sdk
Build AI agents on Cloudflare Workers with the Agents SDK — stateful agents, Workflows, WebSockets, scheduled tasks, MCP servers, chat/voice. Retrieval-first from Cloudflare docs.
cloudflare-email-service
Send/receive transactional email on Cloudflare (Email Sending + Routing, SPF/DKIM/DMARC, wrangler email). Use for any add-email task on Workers. Retrieval-first.
cloudflare-one-migrations
Plan migrations from Zscaler/Palo Alto/legacy VPN/SWG/SASE to Cloudflare One — assessments, policy mapping, rollout, parity/gap analysis.
cloudflare-one
Cloudflare One Zero Trust / SASE — Access, Gateway, WARP, Tunnel, DLP, CASB, device posture, identity. Design, configure, troubleshoot, or review. Retrieval-first.
cloudflare
Cloudflare platform reference — Workers, Pages, KV/D1/R2, AI/Vectorize/Agents SDK, networking, WAF/DDoS, Terraform/Pulumi. Implementation reference (retrieval-first), NOT the new-project entry point: for a preference-less "build me X" request start with the `cloudflare-stack` playbook, and to ship/deploy use the `ship` skill. Use this for Cloudflare platform/API details while building or reviewing.
code-review-checklist
The canonical code-review category checklist, impact analysis and reviewer traps, shared by every runtime's code reviewer so both look for the same defects.
durable-objects
Build/review Cloudflare Durable Objects — stateful coordination, RPC, SQLite, alarms, WebSockets, wrangler config, Vitest. Retrieval-first.
sandbox-sdk
Build secure sandboxed code execution with the Cloudflare Sandbox SDK — code interpreters, CI, dev environments, untrusted code, preview URLs. Retrieval-first.
vault-note-capture
When user says "take a note", "note this down", "write it down", "save this", "remember this", "make a note of this" (or paraphrase), write a markdown note to ~/Vault/Notes/<Category>/. Invoke this skill on those phrases.
web-perf
Audit web performance via Chrome DevTools MCP — Core Web Vitals (LCP/INP/CLS), render-blocking, layout shifts, caching, a11y, Lighthouse. Retrieval-first.
workers-best-practices
Review/author Cloudflare Workers against production best practices — streaming, floating promises, global state, secrets, bindings, observability, wrangler.jsonc. Retrieval-first.
wrangler
Cloudflare Wrangler CLI — deploy/dev/manage Workers, KV, R2, D1, Vectorize, Queues, Workflows, Containers, Secrets. Load before running wrangler commands. Retrieval-first.
ci-monitoring
Launches one attached background CI monitor for an exact pull request head.
emil-design-eng
Refine interaction details, component feel, and purposeful animation after a frontend visual direction exists. Use for explicit motion questions or a focused interaction-polish pass. Do not use as the primary art-direction workflow or for unrelated frontend engineering.
sandbox-migrate-to-next
Use when porting a Cloudflare Sandbox app from stable @cloudflare/sandbox to @cloudflare/sandbox@next (Sandbox SDK 1.0 preview), or when the user asks to migrate or upgrade to Sandbox 1.0 / @next. Not for day-to-day stable work (sandbox-stable) or new @next apps (sandbox-next).
sandbox-next
Use when building or changing Cloudflare Sandbox apps on @cloudflare/sandbox@next (Sandbox SDK 1.0 preview)—code execution, AI runners, interpreters, CI-like jobs, terminals, files, mounts, tunnels, preview URLs, lifecycle, or errors. Not for the default stable package (use sandbox-stable) or for porting stable to @next (use sandbox-migrate-to-next).
sandbox-stable
Use when building or changing Cloudflare Sandbox apps on the current stable @cloudflare/sandbox package (default npm tag)—commands, sessions, files, ports, tunnels, terminals, bridge, production, or deprecated-API cleanup while staying on stable. Not for @cloudflare/sandbox@next (use sandbox-next) or for porting to 1.0 (use sandbox-migrate-to-next).
advisor
User-invoked only; use advisor solely when the user explicitly requests advisor.
design-taste-frontend
Compatibility entry for existing workflows that explicitly invoke design-taste-frontend for landing pages, portfolios, or frontend redesigns. Redirects to frontend-design, the canonical frontend art-direction skill. Do not select this alongside frontend-design or use it as a second visual authority.
Bio shown is the top-scored skill's repo description as a fallback — real GitHub bios land in a future update.