OWASP API Security Top 10 (2023) and Web Top 10 (2025) with production Next.js App Router code: access control, authentication with MFA and password reset, input validation, rate limiting, security headers and CSRF, data exposure, supply chain, SSRF, file uploads, and AI tools on those APIs
1 skill
Everything drawn with text characters, for work or fun: diagrams, tables, bar charts, sparklines, banners, boxes, pictures, pixel sprites, kaomoji, game boards and mazes. Draws on a grid, hands the counting to 5 Node scripts, and checks alignment before showing.
1 skill
Silent bugs that pass typecheck and happy-path tests: 200 HTML fallbacks, pre-await state commits, swallowed catches, module singletons, Web API footguns, fresh-clone gaps, and false-green tests.
1 skill
OWASP LLM Top 10 (2026) and Agentic Top 10 (2026) when a model can see untrusted content or act with real credentials. Trust boundaries, tools, memory, MCP, supply chain, output handling, and human approval.
1 skill
Version-aware Next.js App Router guidance: component boundaries, data, caching, routing, proxy, errors, metadata, assets and migration. Scoped source review in skills/nextjs-app-router/SOURCES.md.
1 skill
Docs cut to what the reader needs: a fixed 5 layer page shape (why, picture, substance, edges, detail on demand), a cut ladder for sections, and the AI sound tells to fix. Write new docs or trim existing ones.
1 skill