test collection
npx skills add https://qala.lol/anishfn/c/test-collectionAudits a backend or API for security vulnerabilities, stability bugs, and design flaws, explains each one in plain language, then fixes them on request. Covers authentication, authorization and IDOR, injection, input validation, exposed secrets, database and transaction correctness, race conditions, error handling, rate limiting, and deployment config across any language or framework including Node/Express/Nest/Fastify/Next, Python/Django/FastAPI/Flask, PHP/Laravel, Ruby/Rails, Go, Java/Spring, .NET, and Supabase/Firebase. Use whenever the user asks to review, audit, secure, harden, or production-proof a backend or API; asks whether their backend is safe, secure, or ready to launch; mentions vulnerabilities, auth bugs, SQL injection, exposed API keys, or leaked secrets; is about to deploy a backend; or has AI-generated backend code they do not fully understand. Also use proactively when writing or editing server-side route handlers, database queries, or auth logic.
numan/backend-hardeningAudits a backend or API for security vulnerabilities, stability bugs, and design flaws, explains each one in plain language, then fixes them on request. Covers authentication, authorization and IDOR, injection, input validation, exposed secrets, database and transaction correctness, race conditions, error handling, rate limiting, and deployment config across any language or framework including Node/Express/Nest/Fastify/Next, Python/Django/FastAPI/Flask, PHP/Laravel, Ruby/Rails, Go, Java/Spring, .NET, and Supabase/Firebase. Use whenever the user asks to review, audit, secure, harden, or production-proof a backend or API; asks whether their backend is safe, secure, or ready to launch; mentions vulnerabilities, auth bugs, SQL injection, exposed API keys, or leaked secrets; is about to deploy a backend; or has AI-generated backend code they do not fully understand. Also use proactively when writing or editing server-side route handlers, database queries, or auth logic.Reviews a database for schema, indexing, query performance, and migration-safety problems, explains each one in plain language, then fixes them on request — and designs a new schema from scratch when there is nothing to review yet. Covers PostgreSQL, MySQL/MariaDB, SQLite, MongoDB, and Supabase, plus Prisma, Drizzle, TypeORM, Mongoose, Django ORM, SQLAlchemy, ActiveRecord, Hibernate, and EF Core. Use whenever the user asks to review, audit, or improve a database or schema; asks why a query, page, or endpoint is slow; mentions missing indexes, N+1 queries, table scans, or a migration that locked a table; asks how to model or structure data for a new feature; asks whether their schema is right before they have real users; or has an AI-generated schema they do not fully understand. Also use proactively when writing or editing migrations, schema files, or ORM model definitions.
numan/database-designReviews a database for schema, indexing, query performance, and migration-safety problems, explains each one in plain language, then fixes them on request — and designs a new schema from scratch when there is nothing to review yet. Covers PostgreSQL, MySQL/MariaDB, SQLite, MongoDB, and Supabase, plus Prisma, Drizzle, TypeORM, Mongoose, Django ORM, SQLAlchemy, ActiveRecord, Hibernate, and EF Core. Use whenever the user asks to review, audit, or improve a database or schema; asks why a query, page, or endpoint is slow; mentions missing indexes, N+1 queries, table scans, or a migration that locked a table; asks how to model or structure data for a new feature; asks whether their schema is right before they have real users; or has an AI-generated schema they do not fully understand. Also use proactively when writing or editing migrations, schema files, or ORM model definitions.