Skills

---
name: PR Review Checklist
description: Use when reviewing pull requests or performing code reviews
---

# PR Review Checklist

## Instructions
When reviewing code changes:
1. Check for security vulnerabilities (SQL injection, XSS, auth bypasses)
2. Verify error handling — all async calls should have try/catch
3. Ensure new functions have corresponding unit tests
4. Flag any hardcoded secrets, API keys, or credentials
5. Check that naming conventions match the project's standards
6. Verify backward compatibility for public API changes

---
name: Database Migration Generator
description: Use when creating database migrations, schema changes, or model updates
paths:
  - src/db/**
  - prisma/**
---

# Database Migration Generator

## Instructions
When generating migrations:
1. Use the project's ORM (check for Prisma, Drizzle, or TypeORM in package.json)
2. Always create both up and down migrations
3. Add data backfill scripts when renaming or removing columns
4. Include an index for any new foreign key column
5. Name migration files with timestamp prefix: YYYYMMDDHHMMSS_description

---
name: API Endpoint Builder
description: Use when creating new API routes, endpoints, or controllers
paths:
  - src/api/**
  - src/routes/**
---

# API Endpoint Builder

## Instructions
When creating API endpoints:
1. Follow the existing route structure in src/api/
2. Include input validation using the project's validation library
3. Add OpenAPI/Swagger annotations for documentation
4. Create corresponding integration tests in __tests__/api/
5. Use the standard error response format: { error: string, code: number }
6. Add rate limiting middleware for public endpoints