duck4nh

Webpack build optimization expert with deep knowledge of configuration patterns, bundle analysis, code splitting, module federation, performance optimization, and plugin/loader ecosystem. Use PROACTIVELY for any Webpack bundling issues including complex optimizations, build performance, custom plugins/loaders, and modern architecture patterns. If a specialized expert is a better fit, I will recommend switching and stop.

Web application security expert. OWASP Top 10, XSS, SQLi, CSRF, SSRF, authentication bypass, IDOR. Use for web app security testing.

Vitest testing framework expert for Vite integration, Jest migration, browser mode testing, and performance optimization

Vite build optimization expert with deep knowledge of ESM-first development, HMR optimization, plugin ecosystem, production builds, library mode, and SSR configuration. Use PROACTIVELY for any Vite bundling issues including dev server performance, build optimization, plugin development, and modern ESM patterns. If a specialized expert is a better fit, I will recommend switching and stop.

SaaS application template using the Partnership model. AI proposes complete vision based on proven SaaS patterns (auth, dashboard, core features, settings), then you provide context. Perfect for web applications requiring user accounts and core functionality.

Portfolio template using the Partnership model. AI proposes style based on your profession (Minimal, Bold, or Editorial), then you provide projects and personal brand context. Perfect for developers, designers, photographers, freelancers.

Landing page template using the Partnership model. AI proposes vision first based on proven patterns, then you provide context. 80% patterns + 20% your context = perfect landing page. Best for lead generation, product launches, marketing campaigns.

Dashboard template using the Partnership model. AI proposes complete data visualization architecture based on best practices (stat cards, charts, data tables), then you provide context about your data and metrics. Perfect for admin panels, analytics dashboards, monitoring systems.

Blog and Documentation template using the Partnership model. AI proposes typography and content structure based on readability best practices, then you provide content and audience context. Perfect for tech blogs, documentation sites, knowledge bases.

UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 9 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind, shadcn/ui). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient.

Advanced TypeScript type system specialist for complex generics, conditional types, template literals, type inference, performance optimization, and type-level programming. Use for intricate type system challenges, recursive types, brand types, utility type authoring, and type performance issues. Includes comprehensive coverage of 18 advanced type system error patterns.

TypeScript and JavaScript expert with deep knowledge of type-level programming, performance optimization, monorepo management, migration strategies, and modern tooling. Use PROACTIVELY for any TypeScript/JavaScript issues including complex type gymnastics, build performance, debugging, and architectural decisions. If a specialized expert is a better fit, I will recommend switching and stop.

Specializes in context gathering, initial problem diagnosis, and routing issues to appropriate domain experts. Use this skill when encountering errors, performance issues, or unexpected behavior before engaging specialized experts.

Testing expert with comprehensive knowledge of test structure, mocking strategies, async testing, coverage analysis, and cross-framework debugging. Use PROACTIVELY for test reliability, flaky test debugging, framework migration, and testing architecture decisions. Covers Jest, Vitest, Playwright, and Testing Library.

SaaS application baseline with auth, dashboard shell, feature modules, and scope boundaries.

Portfolio template for personal or studio presence with project storytelling focus.

Default conversion-oriented landing page structure, copy zones, and stack choices.

Dashboard template with KPI cards, charts, tables, filters, and responsive data layouts.

Content-first template for blog and docs with readable typography and navigable structure.

System design and architecture expert. Microservices, scalability, database design, API design, load balancing. Use for architecture decisions.

Expert in React state management including Redux Toolkit, Zustand, Jotai, React Query/TanStack Query, and Context API. Use for state architecture decisions, performance issues, or complex state logic.

REST API design and development expert specializing in endpoint design, HTTP semantics, versioning, error handling, pagination, and OpenAPI documentation. Use PROACTIVELY for API architecture decisions, endpoint design issues, HTTP status code selection, or API documentation needs.

Specialized research expert for parallel information gathering. Use for focused research tasks with clear objectives and structured output requirements.

Full-Stack Engineer request handler workflow. Use when receiving any user request to properly classify tasks (CONSULT/BUILD/DEBUG/OPTIMIZE) and execute the appropriate workflow with pre-delivery checklist.

Expert in systematic code refactoring, code smell detection, and structural optimization. Use PROACTIVELY when encountering duplicated code, long methods, complex conditionals, or any code quality issues. Detects code smells and applies proven refactoring techniques without changing external behavior.

Redis expert. Caching strategies, session storage, rate limiting, pub/sub. Use for caching implementation and Redis configuration.

React performance optimization specialist. Expert in DevTools Profiler, memoization, Core Web Vitals, bundle optimization, and virtualization. Use this skill for performance bottlenecks, slow renders, large bundles, or memory issues in React applications.

Provides React 18/19 expertise including hooks, component patterns, performance optimization, state management, and Server Components. Use this skill for React component issues, hook errors, re-rendering problems, or state management challenges.

Unified quality gate skill for pre-delivery checklist, security checks, testing strategy, and handover readiness.

Python for security tools. Libraries: requests, pwntools, scapy, socket. Use for exploit dev, automation, network tools, web security scripts.

Prisma ORM expert for schema design, migrations, query optimization, relations modeling, and database operations. Use PROACTIVELY for Prisma schema issues, migration problems, query performance, relation design, or database connection issues.

PostgreSQL query optimization, JSONB operations, advanced indexing strategies, partitioning, connection management, and database administration. Use this skill for PostgreSQL-specific optimizations, performance tuning, replication setup, and PgBouncer configuration.

Playwright E2E testing expert for browser automation, cross-browser testing, visual regression, network interception, and CI integration. Use for E2E test setup, flaky tests, or browser automation challenges.

Penetration testing methodology expert. OWASP, PTES, reconnaissance, scanning, exploitation, reporting. Use for security assessments.

Use this agent for audits, debugging nasty bugs, deep research, getting second opinions on approaches, reviewing commits for correctness, or analyzing complex problems. Invoke when you need advanced reasoning about difficult issues. Use PROACTIVELY when encountering complex bugs, architectural decisions, or when a thorough review would prevent future issues.

Node.js runtime and ecosystem expert with deep knowledge of async patterns, module systems, performance optimization, filesystem operations, process management, and networking. Use this skill for event loop debugging, memory leaks, promise handling, module resolution, and HTTP server issues.

Next.js framework expert specializing in App Router, Server Components, performance optimization, data fetching patterns, and full-stack development. Use this skill for Next.js routing issues, hydration errors, build problems, or deployment challenges.

Nest.js framework expert specializing in module architecture, dependency injection, middleware, guards, interceptors, testing with Jest/Supertest, TypeORM/Mongoose integration, and Passport.js authentication. Use PROACTIVELY for any Nest.js application issues including architecture decisions, testing strategies, performance optimization, or debugging complex dependency injection problems. If a specialized expert is a better fit, I will recommend switching and stop.

Monitoring and observability expert. Logging, metrics, error tracking, health checks. Use for production monitoring setup.

MongoDB document modeling, aggregation pipeline optimization, sharding strategies, replica set configuration, connection pool management, and indexing patterns. Use this skill for MongoDB-specific issues, NoSQL performance optimization, and schema design.

Codebase xray mode for handover, onboarding, and technical debt visibility.

Vision-first mode that proposes default architecture before collecting detailed context.

Security tool development workflow. Use when: write script, automate task, CLI tool, scanner, fuzzer, utility, automation.

Review mode for code review, security audit, and best practices check. Use when user asks for code review or quality assessment. Evaluates code quality, identifies issues by severity, and suggests improvements with positive feedback.

Post-build refinement mode for small copy/style/content adjustments without architecture changes.

Tiered quality assurance mode for contract-based acceptance and release readiness.

Pentest workflow and methodology. Use when: pentest, security assessment, find vulnerabilities, test security, bug bounty, security audit, scan.

Optimize mode for refactoring, performance improvement, and code cleanup. Use when user requests optimization or identifies slow code. Measures baseline, identifies bottlenecks, improves without changing behavior, compares before/after.

Migrate mode for upgrading dependencies, migrating to new versions or stacks. Use when user requests version upgrades or stack migrations. Creates detailed migration plan with breaking changes, step-by-step execution, and rollback plan.

Learn mode for explaining code, concepts, and architecture. Use when user asks to explain how things work, understand concepts, or learn about code patterns. Provides explanations from simple to complex with examples and analogies.

Investigation-first mode for uncertain issues, evidence collection, and hypothesis ranking.

Exploit development workflow. Use when: write exploit, PoC, payload, shellcode, bypass, buffer overflow, RCE, reverse shell.

Structured debug mode focused on root-cause confirmation and controlled fixes.

Scope lock mode that formalizes in-scope, out-of-scope, stack lock, and done criteria.

Consulting mode for comparing options and making recommendations. Use when user asks for opinions, compares approaches, or requests solutions before coding. Provides 2-3 options with trade-offs and waits for confirmation.

Build execution mode for implementing approved blueprint/contract without architectural improvisation.

Converts approved vision+context into detailed technical blueprint and approval checkpoint.

Linux server administration expert. Ubuntu/Debian, Nginx, Apache, SSL, firewall, systemd, server hardening. Use for server setup and config.

Expert in Jest testing framework, advanced mocking strategies, snapshot testing, async patterns, TypeScript integration, and performance optimization

GitHub Actions CI/CD pipeline optimization, workflow automation, custom actions development, and security best practices for scalable software delivery

Git expert with deep knowledge of merge conflicts, branching strategies, repository recovery, performance optimization, and security patterns. Use PROACTIVELY for any Git workflow issues including complex merge conflicts, history rewriting, collaboration patterns, and repository management. If a specialized expert is a better fit, I will recommend switching and stop.

Exploit development expert. Buffer overflow, shellcode, ROP, format strings, binary exploitation. Use for exploit writing and PoC development.

Expert in documentation structure, cohesion, flow, audience targeting, and information architecture. Use PROACTIVELY for documentation quality issues, content organization, duplication, navigation problems, or readability concerns. Detects documentation anti-patterns and optimizes for user experience.

Docker containerization expert with deep knowledge of multi-stage builds, image optimization, container security, Docker Compose orchestration, and production deployment patterns. Use PROACTIVELY for Dockerfile optimization, container issues, image size problems, security hardening, networking, and orchestration challenges.

DevOps and Infrastructure expert with comprehensive knowledge of CI/CD pipelines, containerization, orchestration, infrastructure as code, monitoring, security, and performance optimization. Use PROACTIVELY for any DevOps, deployment, infrastructure, or operational issues. If a specialized expert is a better fit, I will recommend switching and stop.

Database performance optimization, schema design, query analysis, and connection management across PostgreSQL, MySQL, MongoDB, and SQLite with ORM integration. Use this skill for queries, indexes, connection pooling, transactions, and database architecture decisions.

CSS architecture and styling expert with deep knowledge of modern CSS features, responsive design, CSS-in-JS optimization, performance, accessibility, and design systems. Use PROACTIVELY for CSS layout issues, styling architecture, responsive design problems, CSS-in-JS performance, theme implementation, cross-browser compatibility, and design system development. If a specialized expert is better fit, I will recommend switching and stop.

Enforces the six-step lifecycle with mandatory checkpoints and transition criteria.

Governance model, gatekeeping policy, and definition-of-done for Vibecode + .opencode.

Provides comprehensive code review covering 6 focused aspects - architecture & design, code quality, security & dependencies, performance & scalability, testing coverage, and documentation & API design. Use this skill for deep analysis with actionable feedback after significant code changes.

Cloud deployment expert. VPS, AWS, Docker deployment, domain, DNS, SSL. Use for production deployment and cloud infrastructure.

Expert in building npm package CLIs with Unix philosophy, automatic project root detection, argument parsing, interactive/non-interactive modes, and CLI library ecosystems. Use PROACTIVELY for CLI tool development, npm package creation, command-line interface design, and Unix-style tool implementation.

Bash scripting for security automation. One-liners, enumeration, post-exploitation. Use for quick scripts and automation tasks.

Authentication and authorization expert specializing in JWT, OAuth 2.0, session management, RBAC, password security. Use for auth implementation, token management, or security issues.

Expert in Vercel AI SDK v5 handling streaming, model integration, tool calling, hooks, state management, edge runtime, prompt engineering, and production patterns. Use PROACTIVELY for any AI SDK implementation, streaming issues, provider integration, or AI application architecture. Detects project setup and adapts approach.

WCAG 2.1/2.2 compliance, WAI-ARIA implementation, screen reader optimization, keyboard navigation, and accessibility testing expert. Use PROACTIVELY for accessibility violations, ARIA errors, keyboard navigation issues, screen reader compatibility problems, or accessibility testing automation needs.