Skip to content
cccskills
FreePublished on GitHub

audit-hooks

Review specified files for outdated hook and API patterns, then replace them with the prescribed SWR hooks, API clients, or server API calls. The guidance covers data fetching, mutations, cache updates, and response handling, followed by a typecheck command.

OriginalShow the original description

Audit & fix hooks and API usage patterns — eliminate server actions, raw fetch, and stale patterns

trycompai/comp2,058 stars(GitHub 2,058 + cccskills 0)

Run score Not tested

See how to install

Good for

  • Auditing files for disallowed API and hook patterns
  • Replacing raw fetch calls with the API client
  • Migrating server actions and database mutations to API hooks
  • Checking data fetching and cache update conventions

Files included (1)

  • SKILL.md1.8 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Audit the specified files for hook and API usage compliance. Fix every issue found immediately.

Forbidden Patterns (fix immediately)

  1. useAction from next-safe-action → replace with SWR hook or custom mutation hook
  2. Server actions mutating via @db → delete and use API hook instead
  3. Direct @db in client components → replace with apiClient via hook
  4. Direct @db in Next.js pages for mutations → replace with serverApi
  5. Raw fetch() without credentials: 'include' → use apiClient
  6. window.location.reload() after mutations → use SWR mutate()
  7. router.refresh() after mutations → use SWR mutate()
  8. useEffect + apiClient.get for data fetching → replace with useSWR
  9. Callback props for data refresh (onXxxAdded, onSuccess) → remove, rely on SWR cache sharing

Required Patterns

  • Client data fetching: useSWR with apiClient or custom hook
  • Client mutations: custom hooks wrapping apiClient with mutate() for cache invalidation
  • Server components: serverApi from apps/app/src/lib/api-server.ts
  • SWR: fallbackData for SSR data, revalidateOnMount: !initialData
  • API response: lists = response.data.data, single = response.data
  • mutate() safety: guard against undefined in optimistic update functions
  • Array.isArray() checks: when consuming SWR data that could be stale

Process

  1. Read files specified in $ARGUMENTS
  2. Find forbidden patterns and fix them
  3. Ensure all data fetching uses SWR hooks
  4. Run typecheck to verify: bunx turbo run typecheck --filter=@trycompai/app

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Guide API endpoint changes so request DTOs, runtime validation, OpenAPI documentation, and MCP tool metadata stay aligned. It covers discoverability, authentication, uploads, long-running tasks, and response types that MCP tools cannot handle.

  • Adding an API endpoint with a request body
  • Updating DTO validation and OpenAPI metadata
  • Making an endpoint available as an MCP tool
trycompai/comp2.1KUpdated Oct 24, 2026

Review specified files for design system usage, replace legacy @trycompai/ui components and lucide-react icons with available @trycompai/design-system equivalents, and run the app type check to verify the migration.

  • Migrating legacy UI components
  • Replacing lucide-react icons with Carbon icons
  • Checking specified files for design system compliance
trycompai/comp2.1KUpdated Oct 24, 2026

audit-rbac

FreeSummary

Review NestJS API endpoints and frontend components for role-based access control and audit log compliance. The skill lists permission, guard, route, and UI gating rules, then directs the agent to fix violations and run type checks.

  • Auditing API routes for permission decorators
  • Checking UI actions against user permissions
  • Fixing access control inconsistencies
trycompai/comp2.1KUpdated Oct 24, 2026

audit-tests

FreeSummary

Audit unit tests for components that use permissions. Add missing tests and fix failures, checking that administrators can use mutation controls, auditors cannot, and read-only content remains visible to both.

  • Adding permission tests for a component
  • Checking admin and auditor behavior
  • Fixing failing permission-related tests
trycompai/comp2.1KUpdated Oct 24, 2026

Set up Better Auth for TypeScript applications, including server and client configuration, database adapters, sessions, email and social sign-in, and plugins. The guide also highlights environment variables, schema generation, and security settings to review.

  • Configuring Better Auth in a TypeScript app
  • Connecting an ORM or database adapter
  • Setting up sessions and cookie storage
trycompai/comp2.1KUpdated Oct 24, 2026

billing

FreeSummary

Use this skill when changing subscription billing with Stripe. It guides catalog and SKU updates, checkout, local entitlements and usage records, audit events, and webhook handling that tolerates retries and out-of-order delivery.

  • Adding or updating a billing SKU
  • Implementing subscription checkout
  • Handling billing webhooks safely
trycompai/comp2.1KUpdated Oct 24, 2026

See all skills by trycompai

Report a problem with this skill