pracht

In the author's own words, from each skill's SKILL.md — showing the first 30 of 33 files.

• add-auth

  Wire session-based auth into a pracht app with `@pracht/session`: encrypted cookie sessions, gate middleware, login/logout/signup API routes, `<Form>` pages, and public vs. protected route groups. Use for "add auth", "set up login", "wire authentication", "add session middleware", "I need users".

  skills/add-auth/SKILL.md on GitHub (opens in a new tab)

• add-capabilities

  Expose an app operation as a typed pracht capability — one contract projected into direct server calls, an HTTP endpoint, a route-scoped WebMCP page tool, and a remote MCP tool — plus `defineApp({ agents })` trust config, typed clients, `<Form capability>`, and `pracht eval` scenarios. Use for "add a capability", "expose this to agents", "add an MCP tool", "add WebMCP", "serve remote MCP", "make…

  skills/add-capabilities/SKILL.md on GitHub (opens in a new tab)

• add-content

  Wire `@pracht/content` and `@pracht/markdown`: a collection registry owning source discovery, routes, locales, compilation, and static artifacts (`llms.txt`, raw source), plus Markdown/MDX route modules and snapshot loaders. Use for "add a blog", "set up docs", "render markdown pages", "add MDX", "content collections", "why is my markdown route 404ing".

  skills/add-content/SKILL.md on GitHub (opens in a new tab)

• add-db

  Wire Drizzle ORM into a pracht app: pick the target (D1, PlanetScale, Neon, Supabase, Turso, Postgres, MySQL, SQLite), then generate driver setup, schema, migration workflow, and a typed client for loaders, middleware, and API routes. Use for "add database", "set up Drizzle", "wire D1", "add Postgres", "set up an ORM", "I need a DB".

  skills/add-db/SKILL.md on GitHub (opens in a new tab)

• add-i18n

  Wire `@pracht/i18n`: locale-detection middleware (URL prefix, cookie, `Accept-Language`), lazy typed dictionaries, and either strategy — locale-prefixed route groups with hreflang, or one URL per page with a cookie-backed switcher. Use for "add i18n", "set up translations", "make my app multilingual", "add locale routing", "switch language without changing URLs", "extract strings".

  skills/add-i18n/SKILL.md on GitHub (opens in a new tab)

• add-images

  Wire `@pracht/image`: the CLS-safe zero-runtime `<Image>`, the loader for your target (sharp endpoint, Cloudflare, Vercel, Netlify, passthrough), `?pracht` build-time imports with blur placeholders, prebuilt WebP variants, and the optimization endpoint's security settings. Use for "add images", "optimize images", "responsive images", "next/image equivalent", "blur placeholders", "my images cause…

  skills/add-images/SKILL.md on GitHub (opens in a new tab)

• add-observability

  Wire Sentry or OpenTelemetry into pracht server boundaries (loaders, middleware, API routes), client-side Web Vitals reporting, and a capability audit sink that records every capability dispatch with transport, outcome, latency, and verified identity. Use for "add observability", "wire Sentry", "set up tracing", "add OpenTelemetry", "monitor Web Vitals", "track errors", "log capability calls", or…

  skills/add-observability/SKILL.md on GitHub (opens in a new tab)

• add-openapi

  Wire `@pracht/openapi`: generate an OpenAPI 3.1 document from `defineApi()` routes, attach response contracts with `defineOpenApi()`, serve an optional Scalar or Swagger UI, handle deploy-base and CSP, and gate completeness in CI. Use for "add OpenAPI", "generate an API spec", "add Swagger", "publish API docs", "document my API routes".

  skills/add-openapi/SKILL.md on GitHub (opens in a new tab)

• audit-a11y

  Per-route axe-core audit of a pracht app in a headless browser: alt text, contrast, landmarks, focus order, and form labels, grouped by severity and route. Use for "audit a11y", "check accessibility", "axe my app", "WCAG compliance", "screen reader test".

  skills/audit-a11y/SKILL.md on GitHub (opens in a new tab)

• audit-agent-surface

  Inventory what agents can reach in a pracht app — capability exposure (HTTP, WebMCP, remote MCP), `agents` trust config, the destructive-confirmation gate, `llms.txt`, Markdown negotiation, OpenAPI — and report where the surface is wider than intended, or confirm an opt-out app ships none. Use for "audit the agent surface", "what can agents do on my site", "is my MCP endpoint safe", "did this PR…

  skills/audit-agent-surface/SKILL.md on GitHub (opens in a new tab)

• audit-auth

  Find pracht routes that look protected but aren't: missing auth middleware, middleware that augments context but never gates, client-only checks, and unguarded API mutations. Use for "audit auth", "check route protection", "find unauthenticated routes", "review middleware coverage".

  skills/audit-auth/SKILL.md on GitHub (opens in a new tab)

• audit-bundles

  Analyze a pracht production build: client bytes per route, fat vendor chunks, routes shipping large dependencies, and dynamic `import()` / prefetch recommendations. Use for "audit bundles", "why is my JS so big", "bundle size per route", "what's in my vendor chunk", "tune prefetching".

  skills/audit-bundles/SKILL.md on GitHub (opens in a new tab)

• audit-csrf

  Check CSRF posture across every form and mutation API. Pracht enforces same-origin on mutation API requests by default (`api.requireSameOrigin`); this verifies the default is intact and that cookies, middleware, or tokens cover what it does not. Use for "audit CSRF", "check CSRF protection", "are forms safe", "review session security".

  skills/audit-csrf/SKILL.md on GitHub (opens in a new tab)

• audit-deps

  Run a dependency vulnerability audit and map each advisory to the pracht routes, loaders, middleware, and API handlers that import it — so you know what to retest after upgrading. Use for "audit deps", "scan for CVEs", "npm audit", "which routes use this vulnerable package".

  skills/audit-deps/SKILL.md on GitHub (opens in a new tab)

• audit-headers

  Audit security headers in a pracht app. The framework sets four defaults on every response path; this covers the exceptions — static output served outside first-party adapters, `headers()` exports that weaken defaults, and the choices only you can make (HSTS, CSP). Use for "audit security headers", "check CSP", "harden headers", "set up HSTS", "review header policy".

  skills/audit-headers/SKILL.md on GitHub (opens in a new tab)

• audit-islands

  Audit pracht hydration: over-hydrated routes that should be `hydration: "islands"` or `"none"`, dead interactivity outside the islands directory, non-serializable island props, mis-tuned `client` strategies, and invalid render/hydration pairs. Use for "audit islands", "reduce hydration", "why is this island not interactive", "check partial hydration".

  skills/audit-islands/SKILL.md on GitHub (opens in a new tab)

• audit-loaders

  Audit pracht route loaders for serializability, leaked secrets, unsafe `loaderCache`, browser-only API use, and missing `AbortSignal` plumbing. Use for "audit loaders", "check loader data", "find serialization bugs", "loader security review".

  skills/audit-loaders/SKILL.md on GitHub (opens in a new tab)

• audit-redirects

  Find open redirects in pracht loaders, middleware, and navigation. The framework rejects unsafe schemes and CRLF at both ends, but a hand-rolled 3xx Response bypasses every guard, and even a guarded redirect to an attacker-chosen origin can phish. Use for "audit redirects", "check for open redirects", "is my ?redirect= param safe", "review login redirect handling".

  skills/audit-redirects/SKILL.md on GitHub (opens in a new tab)

• audit-secrets

  Detect environment variables and secrets reaching the client bundle via loader return values, hydration state, or server-only modules imported from client code paths. Use for "audit secrets", "find leaked env vars", "is my API key exposed", "scan for credential leaks".

  skills/audit-secrets/SKILL.md on GitHub (opens in a new tab)

• audit-seo

  Per-route SEO audit: `head()` coverage, title and description presence, Open Graph and Twitter cards, canonicals, robots rules, plus a `sitemap.xml` generated from the route manifest. Use for "audit SEO", "check meta tags", "generate a sitemap", "are my OG cards set", "review robots.txt".

  skills/audit-seo/SKILL.md on GitHub (opens in a new tab)

• audit-shells

  Audit pracht shells: missing `Loading()` on SPA routes, `<html>`/`<head>`/ `<body>` rendered inside a shell, shells that never render `children`, unused shells, and `ErrorBoundary` exports shadowed by every route under them. Use for "audit shells", "check shell composition", "find unused shells", "is my layout structured correctly".

  skills/audit-shells/SKILL.md on GitHub (opens in a new tab)

• configure-isg

  Wire ISG revalidation for the project's adapter: route-level `timeRevalidate`/`webhookRevalidate`, the authenticated `/__pracht/revalidate` webhook, Cloudflare Workers Cache, Vercel ISR, and cache-key pitfalls — then verify locally. Use for "set up ISG", "configure revalidation", "add a revalidation webhook", "my ISG page never updates", "cache this page at the edge".

  skills/configure-isg/SKILL.md on GitHub (opens in a new tab)

• migrate-nextjs

  Migrate a Next.js app to pracht: App or Pages Router pages, layouts, middleware, API routes, data fetching, and metadata — plus React→Preact, `className`→`class`, server components→loaders, and manifest wiring. Use for "migrate from next", "convert next.js app", "port from next to pracht", "nextjs migration", "switch from next".

  skills/migrate-nextjs/SKILL.md on GitHub (opens in a new tab)

• pracht-debug

  Framework-aware debugging for pracht: route matching, loader and API errors, rendering and hydration, middleware, HMR, and build failures — root cause first. Use for "debug this", "fix this bug", "why is this broken", "blank page", "hydration mismatch", "404 on my route"; suggest it when the user reports unexpected pracht behavior.

  skills/pracht-debug/SKILL.md on GitHub (opens in a new tab)

• pracht-deploy

  Configure a pracht adapter and deploy to Node, Cloudflare Workers, Netlify, Vercel, or a pure static host: platform config, build, Docker, production checklist. Use for "deploy", "set up deployment", "configure adapter", "deploy to cloudflare/netlify/vercel", "static export", "production build".

  skills/pracht-deploy/SKILL.md on GitHub (opens in a new tab)

• pracht-scaffold

  Scaffold pracht code with the native generators (`pracht generate route|shell|middleware|api`), falling back to manual edits only when the CLI flags cannot express the requested shape. Use for "scaffold", "generate a route", "create a new page", "add middleware", "add an API route", "create a shell".

  skills/pracht-scaffold/SKILL.md on GitHub (opens in a new tab)

• pracht-test-api

  Generate Vitest request/response tests for every handler in `src/api/`: build a `Request`, call the exported method handler directly, assert on the returned `Response` — no server boot. Use for "test my API routes", "scaffold API tests", "generate tests for src/api", "add tests for this endpoint".

  skills/pracht-test-api/SKILL.md on GitHub (opens in a new tab)

• pre-deploy

  Adapter-aware pre-deployment checklist (Node, Cloudflare Workers, Vercel, static) for the failures that only surface in production: missing env vars, Node-only APIs in edge bundles, absent ISG manifest, oversized bundles, missing wrangler/vercel config, and static hosts without clean URLs, 404, or security headers. Use for "pre-deploy check", "ready to ship?", "deployment checklist", "is my build…

  skills/pre-deploy/SKILL.md on GitHub (opens in a new tab)

• scaffold-e2e

  Set up Playwright for a pracht app: install it, generate a `playwright.config.ts` that boots `pracht dev` (or the build via `pracht preview`), and emit a smoke test per manifest route asserting 200, head/title, no console errors, and navigation. Use for "scaffold E2E", "set up Playwright", "add browser tests", "create smoke tests for my routes".

  skills/scaffold-e2e/SKILL.md on GitHub (opens in a new tab)

• scaffold-tests

  Set up Vitest for pracht routes, loaders, and middleware — browser mode with `vitest-browser-preact` or JSDOM with `@testing-library/preact` — wiring `vitest.config.ts`, `LoaderArgs` via `@pracht/test`, and runnable test files. Use for "scaffold tests", "set up Vitest", "add unit tests", "test this loader", "test this route".

  skills/scaffold-tests/SKILL.md on GitHub (opens in a new tab)

No skill matches that filter.

Similar skills

• reaby morluto Reverse engineer anything with agents, from app behavior down to native binaries. 270k stars · 1 skill
• ponytailby DietrichGebert Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote. 164k stars · 6 skills
• paperclipby paperclipai The open-source app everyone uses to manage agents at work 103k stars · 30 skills
• taste-skillby Leonxlnx Agent skills that give coding agents taste: art direction, reference images and a browser check instead of generic AI pages 97.3k stars · 13 skills
• archifyby tt-a1i Turn any idea, plan, or codebase into a beautiful interactive diagram. An agent skill for Claude Code, Codex, and more. 84.1k stars · 2 skills
• marketingskillsby coreyhaines31 Marketing skills for Claude Code and AI agents. CRO, copywriting, SEO, analytics, and growth engineering. 54.9k stars · 30 skills