Use this skill when creating or reviewing Next.js Route Handlers (app/api), adding rate limiting, input validation, or auth to API endpoints. Trigger words: API ルート, Route Handler, app/api, エンドポイント, レート制限, 入力検証, CORS, ヘッダー, 認証付き API, hardening.
The English summary is being prepared. Showing the original description.
See how to installReview the instructions the agent will receive before you install.
app/api/**/route.ts(Route Handler)を作る/レビューするとき。requireUser/requireAdmin)。revalidate と no-store を混在させない)。req.json() の結果を検証せず DB へ渡さない。// app/api/users/route.ts
import { NextResponse } from 'next/server';
import { z } from 'zod';
import { requireUser } from '@/lib/auth';
import { logger } from '@/lib/logger';
const Body = z.object({ name: z.string().min(1).max(80) });
export async function POST(req: Request) {
try {
const session = await requireUser();
const parsed = Body.safeParse(await req.json());
if (!parsed.success) return NextResponse.json({ error: '入力が不正です' }, { status: 400 });
// ... 処理
return NextResponse.json({ ok: true }, { status: 201 });
} catch (e) {
logger.error('users.POST failed', { message: (e as Error).message });
return NextResponse.json({ error: '処理に失敗しました' }, { status: 500 });
}
}
req.json() を直接 DB に流す。e.stack を入れて内部構造を漏らす。No reviews yet. Tell others what you thought.
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
Use this skill when implementing full-text search, autocomplete, or vector/semantic search and RAG with MongoDB Atlas. Trigger words: 全文検索, あいまい検索, オートコンプリート, ベクトル検索, セマンティック検索, 類似検索, Atlas Search, $search, $vectorSearch, RAG, embedding.
The English summary is being prepared. Showing the original description.
Use this skill when implementing sign-in, sessions, authorization checks, or protecting routes and Server Actions. Trigger words: 認証, ログイン, サインイン, セッション, 認可, 権限チェック, Better Auth, Auth.js, 保護, ミドルウェア, getSession.
The English summary is being prepared. Showing the original description.
Use this skill when starting a new session, opening this project for the first time, or when you need to recall the project's tech stack, hard rules, and which other skills exist. Trigger words: セッション開始, このプロジェクト, 全体像, どのスキル, 何から, getting started, overview.
The English summary is being prepared. Showing the original description.
Use this skill when setting up or modifying CI pipelines, GitHub Actions workflows, or automated checks (lint, typecheck, test, build) for this project. Trigger words: CI, GitHub Actions, ワークフロー, パイプライン, 自動テスト, lint チェック, typecheck, ビルド検証, .github/workflows.
The English summary is being prepared. Showing the original description.
Use this skill when writing end-to-end tests, browser automation, or verifying user flows in a real browser. Trigger words: E2E, Playwright, ブラウザテスト, ユーザーフロー, 結合テスト, シナリオテスト, ログインテスト, getByRole, expect.
The English summary is being prepared. Showing the original description.
Use this skill when handling runtime errors, adding error.tsx or not-found.tsx, designing fallback UI, or deciding what to surface to users vs logs. Trigger words: エラー処理, error.tsx, not-found, 例外, フォールバック, エラーバウンダリ, try catch, ユーザー向けエラー, ログ.
The English summary is being prepared. Showing the original description.