代码审查 / GitHub MCP 推荐

Vue.js 3 Composition API patterns, component architecture, reactivity best practices, Pinia state management, Vue Router navigation, and Nuxt SSR patterns. Activates for Vue, Nuxt, Vite, or Pinia projects. Use when building or reviewing Vue 3, Nuxt, or Pinia code — Composition API, reactivity, or router navigation.

Production-ready animation patterns for React / Next.js — button, modal, toast, stagger, page transitions, exit animations, scroll, and layout — built on motion-foundations tokens and springs. Use when animating a specific UI element in React or Next.js — button, modal, toast, stagger, page transition, or scroll.

Advanced motion patterns for React / Next.js — drag & drop, gestures, text animations, SVG path drawing, custom hooks, imperative sequences (useAnimate), loaders, and the full API decision tree. Requires motion-foundations. Use when building drag and drop, gestures, text or SVG animation, or imperative animation sequences in React or Next.js.

Accessibility patterns for React and Next.js — semantic HTML, ARIA attributes, form labeling, keyboard navigation, focus management, and screen reader support. Use when building or reviewing forms, modals, dropdowns, tooltips, or tabs, fixing a11y lint or code-review findings, or wiring up keyboard navigation and focus management.

Frontend development patterns for React, Next.js, state management, performance optimization, and UI best practices. Use when building or reviewing React or Next.js components, state, or render performance.

React 18/19 patterns including hooks discipline, server/client component boundaries, Suspense + error boundaries, form actions, data fetching, state management decision trees, and accessibility-first composition. Use when writing or reviewing React components.

React Native and Expo app patterns — Expo Router navigation, state separation (server/client/route/form), TanStack Query data fetching with Zod, performant lists, NativeWind/StyleSheet styling, native APIs, and secure storage. Use when building or editing React Native / Expo screens, components, navigation, or data layers.

React component testing with React Testing Library, Vitest/Jest, MSW for network mocking, accessibility assertions with axe, and the decision boundary between component tests and Playwright/Cypress end-to-end runs. Use when writing or fixing tests for React components, hooks, or pages.

React and Next.js performance optimization patterns adapted from Vercel Engineering's React Best Practices (https://github.com/vercel-labs/agent-skills). Organizes 70+ rules across 8 priority categories — waterfalls, bundle size, server-side, client fetching, re-render, rendering, JS micro-perf, advanced. Use when writing, reviewing, or refactoring React/Next.js code for performance.

Use when deploying a Meteor 3 application. Triggers on meteor build, meteor deploy, Galaxy Push to Deploy, Galaxy Mode, Repository Mode, DEPLOY_HOSTNAME, Docker, Kubernetes, settings.json, METEOR_SETTINGS, MONGO_URL, MONGO_OPLOG_URL, ROOT_URL, PORT, HTTP_FORWARDED_COUNT, NODE_OPTIONS, health checks, pre-deploy commands, hot code push, --architecture os.linux.x86_64, --server-only, or a deployed Node.js version mismatch. Use this skill when the user asks about shipping the app, asks about production config, or asks about containerizing. For Cordova Android/iOS artifacts, signing, and native HCP compatibility use meteor-native; this skill owns the backend deployment.

Use when authoring or debugging Meteor publications and subscriptions (Meteor.publish, Meteor.subscribe). Triggers on publication strategies (SERVER_MERGE, NO_MERGE, NO_MERGE_NO_HISTORY), the low-level publish API (added/changed/removed), cursor authorization, reactive joins, leaked documents. Use this skill when the user asks about pub/sub or asks about reactive data fetching.

在开发 VS Code 内置浏览器（browserView）时使用，帮助理解其架构与心智模型。覆盖编辑器标签页中内嵌的 Chromium 浏览器、导航、遮罩/布局、会话，以及 src/vs/platform/browserView 和 src/vs/workbench/contrib/browserView 下的代理浏览器工具。

Check deployment evidence and recovery conditions.

设计散弹：批量生成多个 AI 设计变体，打开对比看板，收集结构化反馈并迭代。（gstack）

Use when the user wants to run cognee with Docker or docker compose — trying it out from the prebuilt image, starting the API server in a container, or bringing up the full stack (UI, MCP, Postgres, Neo4j) with compose profiles.

基于 tinystruct Java 框架开发的专业指导。适用于处理 tinystruct 代码库或任何基于 tinystruct 构建的项目——Application 类、@Action 映射路由、单元测试、ActionRegistry、HTTP/CLI 双模式处理、内置 HTTP 服务器、事件系统、使用 Builder/Builders 构建 JSON、基于 AbstractData 的数据库持久化、POJO 生成、Server-Sent Events（SSE）、文件上传以及外部 HTTP 网络请求。

Configures and diagnoses Workload Identity Federation for GKE authentication failures for Pods (403 "iam.serviceAccounts.getAccessToken" / permission denied, "could not find default credentials", or GKE metadata server unreachable) by verifying cluster and node-pool Workload Identity configuration, the Kubernetes ServiceAccount (KSA) to IAM binding (direct principal binding and legacy Google ServiceAccount impersonation), target-resource IAM roles, and gke-metadata-server health. Use when setting up KSA/GSA bindings (`roles/iam.workloadIdentityUser`, `iam.gke.io/gcp-service-account`) or when a Pod cannot authenticate to Google Cloud APIs. Don't use for in-cluster Kubernetes RBAC errors (API-server authorization), general workload crashes (use gke-workload-troubleshooting), or Pod Security Standards and NetworkPolicies (use gke-workload-security).

为 Google Kubernetes Engine（GKE）应用与命名空间审计、配置并加固工作负载级安全控制。涵盖运行集群安全审计（audit_cluster.sh）、配置 Workload Identity Federation（扮演、KSA/GSA 绑定与 Pod 设置）、强制网络策略（默认拒绝与 Dataplane V2 日志）、在 GKE Sandbox（gVisor）内隔离高风险 Pod、强制 Pod Security Standard（restricted 标签），以及经由 CSI 挂载 Secret Manager 密钥（SecretProviderClass）。用于审计集群安全态势、隔离命名空间、应用 Pod 安全标准、设置 Workload Identity，或配置网络策略与密钥卷挂载时。不用于集群级控制平面安全、RBAC 加固、Binary Authorization、Shielded Nodes 或平台级 GKE 附加组件启用（改用 gke-platform-security）。

规划、配置并加固平台级的 Google Kubernetes Engine（GKE）集群安全。涵盖集群附加组件（启用 Secret Manager）、RBAC 加固（禁用不安全绑定、审计工具）、Binary Authorization、启用 Shielded Nodes、GKE Sandbox 集群启用、GKE IAM 角色，以及跨服务认证 IAM 模式。用于保障集群控制平面安全、加固 GKE RBAC、启用 Shielded Nodes、启用 GKE Sandbox 运行时、启用集群级安全附加组件，或管理 GKE IAM 角色时。不用于工作负载级安全（Workload Identity、SecretProviderClass、PSS、NetPol、gVisor pod runtimeClassName；改用 gke-workload-security）。

以恰当的拆解方式引导重构、清理或重组。当用户要求重构、简化、抽取或现代化代码时使用。

Store and retrieve approved tenant-local team context with RuVector-backed isolation and provenance.

Remotion 最佳实践——在 React 中创作视频。包含 29 条领域专属规则，覆盖 3D、动画、音频、字幕、图表、转场等。当用 Remotion 在 React 中制作视频时使用，如涉及动画、音频、字幕、图表或转场。

掌握 ES6+ 特性，包括 async/await、解构、展开运算符、箭头函数、Promise、模块、迭代器、生成器与函数式编程模式，编写简洁高效的 JavaScript 代码。在重构遗留代码、实现现代模式或优化 JavaScript 应用时使用。

使用 Tailwind CSS v4、设计令牌、组件库与响应式模式构建可扩展的设计系统。在创建组件库、实现设计系统或标准化 UI 模式时使用。

使用 Express/Fastify 构建生产就绪的 Node.js 后端服务，落实中间件模式、错误处理、认证、数据库集成与 API 设计最佳实践。在创建 Node.js 服务器、REST API、GraphQL 后端或微服务架构时使用。

Design Video.js TypeScript APIs. Use for public shape, inference, state, extension points, middleware, composition, or ergonomics.

使用、配置、换肤、扩展与编排 Hermes Agent。

Maintain Supabase API types. Use when changing generated API type declarations, OpenAPI schemas, or investigating API type deployment drift.

Check secret handling, staged changes and push targets, destructive Git operations, Docker image hygiene, and new dependencies before consequential coding actions. Use for commits, pushes, container builds or publishes, dependency additions, and explicit safety reviews.

用于独立微应用：React Router SSR/SSG、Cloud overlay、Workers、CDN/R2、SEO/OG、网关路由、预览、Docker 集成与 SSR bundle 隔离。

Translate and synchronize application JSON locale files using source-key usage, project terminology, and focused validation. Use when adding keys or languages, updating source copy, or reviewing missing and stale translations.

Use when writing or changing a model-facing tool definition (name, description, parameter schema, or its system-prompt section), and when designing skills, context loading, or multi-step workflows, to make information discoverable and use context efficiently.

在 Kubernetes 环境中从 ingress-nginx 迁移到 Higress。适用于（1）分析现有 ingress-nginx 配置（2）读取 nginx Ingress 资源与 ConfigMap（3）通过 helm 安装 Higress 并正确设置 ingressClass（4）识别不受支持的 nginx annotation（5）为 nginx snippets/高级特性生成 WASM 插件（6）构建自定义插件并推送到镜像仓库。支持完整迁移工作流，含兼容性分析。

Guidelines on designing and building UI. Use when working in editor-ui or design-system packages. Triggers for tasks that include refactoring components, styling changes, or feature work.

Design or review Agent Builder interfaces. Use for Agent configuration patterns, modal flows, responsive behavior, status treatments, and other Agent-only UI work.

Authors and calibrates Instance AI evaluations that build standalone n8n Agents through Agent Builder. Use when a change under packages/cli/src/modules/agents affects build-agent routing, Agent setup, model or credential selection, tools, MCP servers, integrations, skills, tasks, testing, or user-facing build responses. Requires LangTracer access before authoring so each finished case can be published.

处理一次性操作：请求是一次具体且仅发生一次的效应——把数据导出或复制到某处、迁移、回填、清理——不含触发器、调度或复用意图。工作流只是载体而非交付物。用户很少会说一次性，需从任务形态推断。在为这类请求开始构建前加载；当构建工作流的结果中 postBuildFlow.reason 为 direct-one-off-build-succeeded 时也加载。用户会重复运行的自动化不要加载本技能——那走常规构建加 post-build-flow 路径。

通过两个判断对自动化请求分类：anchor（哪个原语掌握顶层控制流——工作流为锚、代理为锚、需澄清，或超出范围）与 embeds_other（另一原语是否内嵌出现——工作流中嵌入一个 agent 步骤，或代理把某个工作流当作工具调用）。每当当前轮次需要选定或重新判定某个自动化请求的意图时都必须使用，包括复合请求、构建过程中新引入的独立自动化、需要查询无法直接访问的外部系统的一次性提问或报告，以及在确定 anchor 前需要澄清的请求。当对话已明确面向某个工作流或 Agent 时，不要为常规编辑或扩展加载本技能。

使用 @PublicApiController 为 n8n Public API v1 新增、迁移或更新端点，涵盖公开 DTO、API key 与 RBAC scope、游标分页、OpenAPI 与覆盖率接线及测试。在 packages/cli/src/public-api/v1/ 下工作，或需要把已有服务通过 /api/v1 暴露时使用。

通过内部 Nathan 机器人从仓库（而非 Slack）部署临时的 n8n 测试实例，或生成一条本地 docker 运行命令。在开 PR 后向用户提供可实时测试的实例，或用户要求为某分支搭建/部署测试实例时使用。

在为新建或已有的 n8n Agent 调用 build-agent 前加载。负责前置资源创建、忠实承接用户请求、跨轮次的目标 agent 定位、向用户提问、测试与发布。当对话已明确面向某个 Agent 时，可直接用于常规跟进事项；只有当所需产物不再清晰时才重新执行意图识别。

指导在 packages/frontend/editor-ui 中开展实验的工作。在创建、扩展、接线、测试、评审或下线 editor-ui 实验，以及 PostHog 特性开关、实验 key 索引、变体、store/composable、实验持久化状态或实验埋点时使用。

Add or change Rust diagnostic tracing in litellm-rust, including route spans, subscriber layers, and Python logger delivery

使用 Plankton 在编写时强制执行代码质量——通过钩子在每次文件编辑时自动格式化、代码检查并由 Claude 驱动修复。适用于为文件编辑设置写入时格式化、检查或自动修复钩子。

Harbor intake for external work — the captain only handles unresolved decisions. Sweeps incoming issues and PRs, verifies every claim before disposition, reuses every decision already made, and hands the maintainer a docket whose pending items each carry one question with options, recommendation, impact and evidence. Agent-autonomous for facts and for actions covered by standing authorization; signed for every new judgment. Never merges.

在进行 ArchiveBox 应用、CLI、服务端、Docker 镜像、Admin UI、REST API、数据目录、爬取、快照以及发布与部署脚本相关工作时使用。

Answer questions about Everything Claude Code by reading the live repo surface — agents, skills, commands, hooks, rules, install profiles, and docs — instead of memory. Use when the user asks what ECC includes, how to install or reset it, which skill or command fits a task, or how project onboarding works.

Assemble scored competitor profile cards (from benchmark-methodology) into a decision-grade competitive report with landscape map, competitor tiers, benchmarking matrix, white-space analysis, strategic recommendations, and team alignment trigger questions. Use when presenting competitive findings to leadership or a board, writing a competitive landscape report, or as the final step of the competitive analysis pipeline.