nklisch/skilltap Skills

Reference for Bun runtime APIs used in this project. Use this skill whenever writing code that runs shell commands (Bun.$ or Bun.spawn), reading/writing files (Bun.file/Bun.write), running tests (bun test), or configuring the monorepo (workspaces, bunfig.toml). Prefer Bun APIs over Node.js equivalents — use Bun.$ instead of child_process, Bun.file() instead of fs.readFile, bun:test instead of jest.

Reference for the citty CLI framework (UnJS). Use this skill whenever writing CLI commands, defining arguments/options, creating subcommands, or working with any file in packages/cli/. This covers defineCommand, runMain, argument definitions, subcommands, lifecycle hooks, and all citty patterns used in this project.

Reference for @clack/prompts terminal UI library. Use this skill whenever building interactive CLI prompts, spinners, select menus, confirmation dialogs, or any terminal UI. Covers text, password, confirm, select, multiselect, spinner, group flows, tasks, logging, and cancel handling. Use this for any file in packages/cli/src/ui/ or any command that needs user interaction.

Create detailed DESIGN.md with implementation units. Use when translating a vision into code specs.

Discover and document reusable code patterns from the codebase. Use this skill after implementing a feature, completing a milestone, or whenever you want to capture conventions and recurring structures so future work stays consistent. Also useful when onboarding to a new codebase to understand its idioms.

A test fixture containing synthetic security patterns for scanner testing.

Project code patterns and conventions. Auto-loads when implementing, designing, verifying, or reviewing code. Provides detailed pattern definitions with code examples. Consult this whenever writing new code, reviewing changes, or trying to understand how this project structures things.

Plan safe, incremental refactoring work. Use this when code has accumulated duplication, when structure needs improvement, when abstractions are missing, or when you want to restructure code before adding new features. Guides analysis of refactoring opportunities and produces a plan via plan mode.

Reference for smol-toml TOML parser/serializer. Use this skill whenever reading, writing, or manipulating TOML files, especially config.toml. Covers parse, stringify, TomlDate, TomlError, and the TOML-to-JavaScript type mapping. Use this for packages/core/src/config.ts or any code touching config.toml.

Reference for Zod 4 schema validation. Use this skill whenever defining schemas, validating data, or working with Zod. IMPORTANT — Zod 4 has major API changes from Zod 3. This project uses `import { z } from "zod/v4"`. Key changes include z.record requiring two args, string validators moving to top-level (z.email()), .strict()/.passthrough() replaced by z.strictObject()/z.looseObject(), .merge() deprecated in favor of .extend(), error handling overhauled. Use this skill for any file in packages/core/src/schemas/ or anywhere using Zod.