github.com/BuilderIO/agent-native
| Skill | Added | Review |
|---|---|---|
shadcn-ui .agents/skills/shadcn-ui/SKILL.md The shadcn CLI, component composition, theming, and registry workflow. Use when adding, replacing, upgrading, or debugging a shadcn/ui primitive itself, or when changing a theme or registry. Do not load it for ordinary edits to a file that happens to import a shadcn component. | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: e9a2f0e | |
server-plugins .agents/skills/server-plugins/SKILL.md Framework server plugins and the `/_agent-native/` route namespace. Use when adding a custom server plugin, deciding whether to create an `/api/` route vs an action, or debugging auto-mounted framework routes. | 67 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: e9a2f0e | |
self-modifying-code .agents/skills/self-modifying-code/SKILL.md Tiers, checkpoints, and off-limits paths for an agent editing the app's own source. Use when designing UI for agent editability, deciding whether a file is safe for the agent to change, or when tempted to patch config, `.env`, or an `@agent-native/*` package. Do not load it for ordinary source edits. | 78 78 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: e9a2f0e | |
security .agents/skills/security/SKILL.md Secure coding practices for agent-native apps: input validation, SQL injection, XSS, secrets, data scoping, and auth. Use when writing any action, route, or component that touches user data or external input. | 70 70 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: e9a2f0e | |
secrets .agents/skills/secrets/SKILL.md Declaratively register API keys and service credentials a template needs so they appear in the agent sidebar settings UI and the onboarding checklist. Use for any third-party API key (OpenAI, Stripe, Twilio, etc.) and for surfacing OAuth connections in the unified settings UI. | 71 71 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
reliable-mutations .agents/skills/reliable-mutations/SKILL.md How the agent must perform writes so they actually persist under the hosted foreground run budget and long-running background handoffs. Use whenever you create, update, delete, or batch-write app data — especially "do this for many items" loops, or any task where the user expects N things to end up saved. | 77 77 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
recurring-jobs .agents/skills/recurring-jobs/SKILL.md Scheduled tasks the agent runs on a cron schedule. Use when a user asks for something recurring ("every morning", "daily", "weekly"), when creating or updating jobs, or when debugging the job scheduler. | 69 69 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
real-time-sync .agents/skills/real-time-sync/SKILL.md How to keep the UI in sync with agent changes via SSE plus polling fallback. Use when wiring query invalidation for new data models, debugging UI not updating, or understanding jitter prevention. | 59 59 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
real-time-collab .agents/skills/real-time-collab/SKILL.md Multi-user collaborative editing with Yjs CRDT, SSE fast-path transport, and granular server-side merge. Use when adding real-time collaborative editing to a template, debugging sync issues, or understanding how the agent and humans edit documents simultaneously. | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
qa .agents/skills/qa/SKILL.md Autonomous multi-app QA sweep that drives template apps with Playwright MCP. Use only when the user explicitly runs /qa or asks for an end-to-end QA sweep. Do not load it for ordinary feature work, single-page checks, or one-off bug fixes. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
portability .agents/skills/portability/SKILL.md How to keep template code database-agnostic and hosting-agnostic. Use when defining schemas, writing raw SQL, creating server routes, or anything that could leak a SQLite-only, Postgres-only, or Node-only assumption. | 74 74 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
performance .agents/skills/performance/SKILL.md Keep apps and templates loading fast. Read when adding a data model, a list/read action, a page or sidebar that loads data, or when something loads slowly. Covers column projection, indexing hot-path queries, avoiding N+1 and round-trip waterfalls, cheap polling, and not recomputing on every read. | 71 71 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
onboarding .agents/skills/onboarding/SKILL.md How to register user-facing setup steps (API keys, OAuth, connecting third-party services) for the sidebar setup checklist. Use when adding a feature that needs initial user configuration. | 70 70 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
observability .agents/skills/observability/SKILL.md Agent observability, evals, feedback, and experiments. Use when adding observability dashboards, configuring trace capture, setting up evals, creating A/B experiments, or collecting user feedback on agent responses. | 67 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
new-branch .agents/skills/new-branch/SKILL.md Only when explicitly asked for /new-branch or a fresh git branch: stash local changes, update main, and create it. Do not auto-run for normal coding, PR, Builder.io, or Fusion branch workflows. | 73 73 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
native-navigation .agents/skills/native-navigation/SKILL.md Use when adding or reviewing UI navigation so internal routes preserve normal SPA behavior plus Cmd/Ctrl-click and middle-click new-tab semantics. | 74 74 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
mvp-followup .agents/skills/mvp-followup/SKILL.md Use when asking what to do next after a feature pass while avoiding bloat and checking for unfinished MVP work. | 62 62 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
multi-frontier-desktop .agents/skills/multi-frontier-desktop/SKILL.md Run or extend the Desktop Code Agents Multi-Frontier workflow. Use when coordinating Codex and Claude Code subscriptions, collaboration phases, checkpoints, recovery, usage meters, or helper admission. | 72 72 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
internationalization .agents/skills/internationalization/SKILL.md How to add or edit localized UI copy in agent-native apps. Use when adding, removing, or changing user-visible interface text, prompts, toasts, labels, empty states, or date/number/list formatting. | 78 78 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
integration-webhooks .agents/skills/integration-webhooks/SKILL.md Cross-platform pattern for handling messaging integration webhooks (Slack, Telegram, WhatsApp, email, etc.) on serverless hosts. Use when adding a new integration adapter, debugging dropped messages, or wiring long-running agent work into a webhook handler. | 71 71 Impact — No eval scenarios have been run Securityby Low Low-risk findings worth noting Reviewed: Version: c1ee18b | |
harness-agents .agents/skills/harness-agents/SKILL.md Add or use full agent harness runtimes like Claude Code, Codex, Pi, Cursor, Mastra, or ACP agents inside Agent Native. | 59 59 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
generative-ui .agents/skills/generative-ui/SKILL.md Generate transient or saved inline chat UI with Alpine/Tailwind controls, outputs, app state, and extensions. Use for knobs, pickers, calculators, dashboards, widgets, or reusable mini-apps. | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
frontend-design .agents/skills/frontend-design/SKILL.md Sets the visual direction for a new or redesigned surface, with production quality that avoids generic AI aesthetics. Use when building a new page, app, or marketing surface, defining visual identity, or doing a design pass ("make this look good"). Do not load it for routine UI edits: adding a field to an existing form, fixing spacing, wiring a button, or changing copy. | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
feature-flags .agents/skills/feature-flags/SKILL.md Declare, evaluate, manage, and remove framework feature flags. Use when shipping a capability gradually, targeting users or organizations, or replacing a compile-time rollout switch with a production-safe runtime flag. | 78 78 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: c1ee18b | |
external-agents .agents/skills/external-agents/SKILL.md Connect external agents and MCP hosts (Claude, Claude Desktop, Claude Code, ChatGPT custom MCP apps, Codex, Cursor, Claude Cowork, VS Code GitHub Copilot, Goose, Postman, MCPJam) to an agent-native app over MCP, and round-trip artifacts back into the UI with MCP Apps and deep links. Use when adding an action's `link` builder or `mcpApp`, wiring the `/_agent-native/open` route, exposing an "ingest" action to MCP/A2A, or scaffolding apps from an external agent. | 69 69 Impact — No eval scenarios have been run Securityby Low Low-risk findings worth noting Reviewed: Version: c1ee18b |