leahycc-skills

OWASP API Security Top 10 (2023) and Web Top 10 (2025) with production Next.js App Router code: access control, authentication with MFA and password reset, input validation, rate limiting, security headers and CSRF, data exposure, supply chain, SSRF, file uploads, and AI tools on those APIs

1 skill

Everything drawn with text characters, for work or fun: diagrams, tables, bar charts, sparklines, banners, boxes, pictures, pixel sprites, kaomoji, game boards and mazes. Draws on a grid, hands the counting to 5 Node scripts, and checks alignment before showing.

1 skill

Code a cold reader can follow: no floating (magic) numbers or strings without a name or a unit-and-why note nearby, names that carry units and do not lie, small single-purpose functions, shallow nesting, honest comments, no dead code, and balanced ESLint tuning.

1 skill

Silent bugs that pass typecheck and happy-path tests: 200 HTML fallbacks, pre-await state commits, swallowed catches, module singletons, Web API footguns, fresh-clone gaps, and false-green tests.

1 skill

OWASP LLM Top 10 (2026) and Agentic Top 10 (2026) when a model can see untrusted content or act with real credentials. Trust boundaries, tools, memory, MCP, supply chain, output handling, and human approval.

1 skill

Version-aware Next.js App Router guidance: component boundaries, data, caching, routing, proxy, errors, metadata, assets and migration. Scoped source review in skills/nextjs-app-router/SOURCES.md.

1 skill

Docs cut to what the reader needs: a fixed 5 layer page shape (why, picture, substance, edges, detail on demand), a cut ladder for sections, and the AI sound tells to fix. Write new docs or trim existing ones.

1 skill

Product management and marketing strategy — positioning, discovery, go-to-market, prioritization, metrics, copywriting, and production templates. Verified against 19 named sources including Cagan, Dunford, Torres, and Reforge.

1 skill

Rewrites a thin coding prompt into a deep one: raw material, expert tools, an exemplar file, and a proof a third party can check.

1 skill

Measurement-first React performance optimization — profiling, Core Web Vitals, rendering, bundle size, React Compiler, Server Components, virtualization

1 skill

React component tests with Vitest 5, Testing Library 16, user-event 14, jest-dom 7, and MSW 3: role queries, absence checks, awaited user events, findBy and waitFor rules, the Vitest fake-timer hang, cleanup without globals, jsdom gaps, MSW error paths, and Server Components.

1 skill

Production-ready SEO and GEO for Next.js — metadata, sitemaps, structured data, OG images, llms.txt, AI crawler management, and Google's actual guidance (not myths)

1 skill

Main thread, frame time, and memory for SPAs. Measure, draw less, workers, OffscreenCanvas, hosted editors, typing, grids, streams, and audio.

1 skill

Build and run design systems on Tailwind CSS v4 at scale: token tiers, closed scales, OKLCH palettes with measured contrast, themes and brands, component APIs, monorepo packages that own their @source, registries, lint and CI enforcement, versioning, deprecation, docs and migration. Ships a contrast-checked starter theme and 3 Node scripts.

1 skill

TypeScript 6 and 7: tsconfig past strict, narrowing, generics, types from types, branded types, data at the edges, escape hatches, typed linting, Node type stripping, and the upgrade to TS 7.

1 skill

UX copy patterns for UI text — buttons, errors, empty states, notifications, onboarding, confirmations, voice and tone calibration, and copy auditing

1 skill

WCAG 2.2 Level AA. All 55 success criteria across 11 resource files, with production code examples

1 skill

WebGPU and WGSL: setup and fallback, buffers and alignment, shaders, pipelines, drawing, the canvas loop, compute, device loss, GPU timing, and testing. Includes a struct layout script.

1 skill

Every skill in this repository, in one install.