Development skills

Go 开发规范，适用于 Go 源码、包结构、错误处理、并发和测试相关任务；不负责 review、debug 或运维流程。

The English summary is being prepared. Showing the original description.

Use this skill when adding or changing APIs or investigating frontend integration issues. It guides you to check real request and response data, align success and pagination formats across endpoints, and document the cause, any temporary compatibility handling, and when to remove it.

• Checking response formats while adding an API
• Investigating list or pagination mismatches
• Aligning list, detail, and filter endpoints

Python 开发规范，适用于类型注解、验证模型、pytest 和 uv 工具链；不负责 review、debug 或运维流程。

The English summary is being prepared. Showing the original description.

Scan a project or selected area for user experience, performance, or code quality improvements. Receive evidence-backed findings ordered by impact, with the expected benefit, tradeoffs, and prerequisites for each suggestion; implementation begins only when specifically requested.

• Assess performance across a selected project area
• Review user experience issues in the frontend
• Scan code quality in a chosen directory

Java 开发规范，包含命名约定、异常处理、Spring Boot 最佳实践等

The English summary is being prepared. Showing the original description.

结构化 git commit message 生成工作流，适用于显式 commit message、提交说明或 commit-msg 场景；不负责实际执行 git commit。

The English summary is being prepared. Showing the original description.

当代码涉及多租户隔离（TenantContext、tenantId、租户拦截器/过滤器、X-Tenant-Code）时触发。防止租户越权访问、数据串租户等安全问题。

The English summary is being prepared. Showing the original description.

涉及浏览器、编辑器、CDN/WAF、IM 平台、操作系统剪贴板、第三方 SaaS 等"外部黑盒系统"的代码编写或 bug 调试时触发。强制先抓真实环境数据再推理,避免连续 2 轮"凭代码推理"的修复 no-op。关键词:粘贴/复制异常、跨平台显示不一致、第三方 API 怪结果、CDN/WAF 拦截、本地复现失败、HTML→MD 转换丢属性。

The English summary is being prepared. Showing the original description.

网关/代理/WAF/CDN 中间件的安全关键词匹配实现规范，防止纯子串匹配误判正常响应内容中的技术术语（如 Cloudflare、502、error）

The English summary is being prepared. Showing the original description.

Choose suitable public, CDN, or time-limited signed URLs for object storage such as MinIO, OSS, and S3. The guidance covers access duration, bucket permissions, CDN setup, and checks for direct uploads.

• Choosing URLs for avatars and other long-lived images
• Setting expiration times for private document links
• Reviewing direct-upload validation and storage access

Use this skill to write and review Go code with consistent naming, explicit error handling, and safer concurrency. It also covers table-driven tests, race detection, project structure, and common performance practices such as limiting concurrency and profiling.

• Reviewing Go naming and package structure
• Wrapping and checking errors consistently
• Managing goroutines with context

Use this skill when designing REST API responses or generating files and other downstream outputs. It checks field meanings, empty values, status codes, and required data so missing information is reported before an apparently successful export or handoff.

• Reviewing a REST API response structure
• Checking API return values for ambiguity
• Validating required fields before an Excel or CSV export

Use this skill to guide Vue 3 or React frontend work with consistent component, TypeScript, API, and styling practices. It helps structure interfaces, handle loading and error states, and keep request data aligned with form fields.

• Structuring Vue 3 components and stores
• Applying TypeScript types to API calls
• Handling loading, empty, and error states

Apply consistent Java practices for naming, exceptions, testing, concurrency, and Spring Boot. The guidance also covers safer database access, input validation, and common performance pitfalls, helping developers review or write code with clearer conventions and fewer avoidable mistakes.

• Review Java naming and class organization
• Improve exception handling and null safety
• Check Spring Boot controller and service patterns

Use this skill to design safer response checks in proxies, gateways, WAFs, or CDNs. It prioritizes HTTP status, headers, and structured payloads over body keywords, reducing false alarms when normal articles or streaming output mention terms such as Cloudflare or 502.

• Reviewing gateway error detection logic
• Preventing false alarms from long response bodies
• Checking structured JSON before keyword matching

Review time handling in application and database code to prevent timezone differences from shifting dates, report boundaries, or comparisons. It checks current-time calls, period starts, database fields, and cross-timezone conversions, with examples for several programming languages.

• Reviewing code that calls now() or creates dates
• Checking weekly, monthly, or daily report boundaries
• Aligning application and database timezone settings

Use this checklist when designing modules, refactoring code, or reviewing a pull request. It helps assess module size, call depth, dependencies, interface boundaries, cohesion, and predictability so teams can spot design risks consistently.

• Reviewing a pull request for design risks
• Planning a new module or service
• Finding excessive dependencies during refactoring

Use this skill to review database and remote service query patterns involving loops, large ID batches, recursive traversal, or nested service calls. It helps spot N+1 queries, oversized IN clauses, unbounded memory growth, missing indexes, and repeated work, with practical batching and limit strategies.

• Reviewing queries inside loops
• Batching large ID lookups safely
• Setting limits for tree traversal

Use this skill to guide frontend implementation with Vue 3 and TypeScript, including component structure, state handling, API typing, performance, and visual conventions. It also covers selected React and Ant Design pitfalls, helping keep screens consistent and behavior reliable.

• Starting a Vue 3 and TypeScript feature
• Reviewing API types and error handling
• Checking loading, empty, and error states

Use this skill to debug issues involving browsers, editors, third-party APIs, CDNs, messaging platforms, or system clipboards. It guides you to collect real inputs and outputs first, form evidence-based hypotheses, test one change at a time, and record resolved cases for future reference.

• Debugging browser-specific rendering differences
• Investigating clipboard or paste behavior
• Capturing requests and responses from third-party APIs

通用防御性编码规范，适用于跨语言代码修改中的最小改动、真实边界处理、定向验证，以及约束假想风险驱动的过度兜底或抽象；不负责语言细节、正式 review 或结构化 debug。

The English summary is being prepared. Showing the original description.

Use this guide while writing or reviewing Python code. It covers PEP 8 naming and style, type hints, exception and logging practices, pytest examples, asynchronous I/O, project structure, dependency management, and practical performance choices.

• Applying consistent style to a Python project
• Adding type hints and handling errors
• Writing pytest tests for services

Review changed code for reuse, quality, and efficiency, then fix any issues found. Also scans project files for size limit violations.

The English summary is being prepared. Showing the original description.

Use this skill when refactoring table fields, enum mappings, or data conversions. It prompts you to verify names against actual code and API data, check mapping completeness at runtime, and consider whether synchronization could clear missing values or overwrite user edits.

• Refactoring table columns or dataIndex values
• Checking enum mapping completeness
• Reviewing date and type conversions