github.com/webiny/webiny-js
Skill | Added | Review |
|---|---|---|
webiny-configure-okta skills/user-skills/configure-okta/SKILL.md Configuring Okta as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Okta authentication, Okta SSO, replacing Cognito with Okta, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Okta login flow. Also relevant when asking about OKTA_ISSUER, OKTA_CLIENT_ID environment variables, OktaIdpConfig, or the MyOktaExtension pattern. | 75 75 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-configure-auth0 skills/user-skills/configure-auth0/SKILL.md Configuring Auth0 as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Auth0 authentication, Auth0 SSO, replacing Cognito with Auth0, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Auth0 login flow. Also relevant when asking about AUTH0_ISSUER, AUTH0_CLIENT_ID environment variables, Auth0IdpConfig, or the MyAuth0Extension pattern. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-cli-extensions skills/user-skills/cli-extensions/SKILL.md Adding custom commands to the Webiny CLI using CliCommandFactory. Use this skill when the developer wants to create a custom CLI command, add a data migration script, build a code generator, create deployment scripts, export CMS content, or add health check commands. Covers CliCommandFactory.Interface, command definition, typed parameters, the Ui service for terminal output, and registration via <Cli.Command>. | 79 79 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-v5-to-v6-migration skills/user-skills/api/v5-to-v6-migration/SKILL.md Migration patterns for converting v5 Webiny code to v6 architecture. Use this skill when migrating existing v5 plugins to v6 features, converting context plugins to DI services, adapting v5 event subscriptions to v6 EventHandlers, or understanding how v5 patterns translate to v6. Targeted at AI agents performing migrations. | 67 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-use-case-pattern skills/user-skills/api/use-case-pattern/SKILL.md UseCase implementation pattern — DI, Result handling, error types, decorators, CMS repositories, entry mappers, and schema-based permissions. Use this skill to implement, inject, override, or decorate any Webiny UseCase, or to build repositories that persist data via CMS. | 74 74 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-api-permissions skills/user-skills/api/permissions/SKILL.md Schema-based permission system for API features. Use this skill when implementing authorization in use cases, defining permission schemas with createPermissionSchema, creating injectable permissions via createPermissionsAbstraction/createPermissionsFeature, checking read/write/delete/publish permissions, handling own-record scoping, or testing permission scenarios. Covers the full pattern from schema definition to use case integration to test matrices. | 63 63 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-http-route skills/user-skills/api/http-route/SKILL.md Adding custom HTTP routes to the API using Api.Route and Route.Interface. Use this skill when the developer wants to expose a custom HTTP endpoint (GET, POST, PUT, etc.) on the API Gateway alongside the GraphQL handler, implement Route.Interface with full DI support, or register a custom HTTP handler in webiny.config.tsx. | 79 79 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-custom-graphql-api skills/user-skills/api/graphql-api/SKILL.md Adding custom GraphQL queries and mutations using GraphQLSchemaFactory. Use this skill when the developer wants to add custom GraphQL endpoints, create custom queries or mutations, add business logic to the API layer, build custom resolvers, inject backend services (identity, tenancy, CMS use-cases) into their GraphQL schema, or build dynamic GraphQL inputs from CMS models. Covers the full pattern from simple queries to complex resolvers with dependency injection and permission transformers. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-event-handler-pattern skills/user-skills/api/event-handler-pattern/SKILL.md EventHandler implementation pattern — handle method, event payloads, filtering, DI, domain event definition, publishing events from UseCases, and reacting to external events. Use this skill to implement any Webiny EventHandler (before/after hooks) or to define and publish your own domain events. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-api-cms-custom-field-type skills/user-skills/api/custom-field-type/SKILL.md How to implement a custom CMS field type that integrates with the model builder's fluent API. Covers extending DataFieldBuilder, composing validator interfaces, creating a FieldTypeFactory, registering via DI, and module augmentation for TypeScript autocomplete on the fields() registry. | 62 62 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-api-architect skills/user-skills/api/api-architect/SKILL.md The hub skill for all API/backend architecture in Webiny. Covers architecture overview, Services vs UseCases, feature naming and organization, feature structure templates, DI decision tree, anti-patterns, createFeature, createAbstraction, container registration, domain errors, entity patterns, naming conventions, scoping rules, and code conventions. Use this skill for ANY backend API work — it references sub-skills for deep implementation details. | 66 66 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
api-bundle-size-limit skills/user-skills/api-bundle-size-limit/SKILL.md Covers how to configure the maximum allowed size of the Webiny API Lambda bundle using the Infra.Api.MaxBundleSize extension in webiny.config.tsx. Use when a project's API bundle exceeds the default 4.5 MB limit or when you want to enforce a stricter limit. Handles the extension syntax, byte calculations, and interpreting the build error message. | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
wb-preview-url-modifier skills/user-skills/admin/website-builder/wb-preview-url-modifier/SKILL.md Covers the PreviewUrlModifier extension point in Website Builder. Use when a user wants to inject custom query parameters into live preview URLs — e.g. signed tokens, tenant identifiers, feature flags — from their Webiny project. Handles the full registration pattern: implementing the interface, wiring via createFeature + RegisterFeature, and registering via webiny.config.tsx. Supports async modifier methods (e.g. remote token fetch). | 74 74 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-page-settings-extensions skills/user-skills/admin/website-builder/page-settings/SKILL.md Extending the Website Builder page settings with custom settings groups and modifiers. Use this skill when the developer wants to add a new tab/group to the page settings drawer (e.g., Publishing, Analytics, Access Control), or modify an existing settings group (e.g., add fields to General or SEO). Covers PageSettingsGroup, PageSettingsGroupModifier, and the doc.extensions data model. For field types, renderers, and layout details, see the webiny-form-model skill. | 75 75 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-admin-ui-extensions skills/user-skills/admin/ui-extensions/SKILL.md Customizing the Webiny Admin UI -- white-labeling, custom data list columns, page-type forms, and Lexical editor plugins. Use this skill when the developer wants to change branding (logo, title, theme colors), add custom columns to content entry list views, create custom forms for Website Builder page types, or extend the Lexical rich text editor. Covers AdminConfig, ContentEntryListConfig, Browser.Table.Column, Bind, useForm, and form validation. | 75 75 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-new-entry-wizard skills/user-skills/admin/new-entry-wizard/SKILL.md Building a New Entry Wizard for the Headless CMS. Use this skill when the developer wants to show a custom wizard UI before the entry form when creating new CMS entries -- collecting fields like title, slug, or category upfront, then pre-filling the entry form. Covers ContentEntryEditorConfig.NewEntryWizard, createFeature, FormModelFactory, createReactiveComponent, useContentEntryFormPresenter, and the dirty-flag on setData. | 65 65 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-form-model skills/user-skills/admin/form-model/SKILL.md Building forms with the FormModel system — field types, renderers, layout, validation, conditional rules, computed fields, and dynamic zones. Use this skill when the developer needs to define form fields with the builder API, choose renderers, build layouts with tabs/rows/separators, add validation (Zod or imperative), use conditional visibility/disable rules, create computed fields, or work with object fields and templates (dynamic zones). | 67 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-admin-permissions skills/user-skills/admin/admin-permissions/SKILL.md Admin-side permission UI registration and DI-backed permission checking. Use this skill when adding permission controls to the admin UI — schema-based auto-generated forms, injectable permissions via createPermissionsAbstraction/ createPermissionsFeature, typed hooks (createUsePermissions), the HasPermission component (createHasPermission), and the Security.Permissions component props. Covers both simple apps and complex multi-entity permission schemas. | 72 72 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-admin-architect skills/user-skills/admin/admin-architect/SKILL.md Admin-side architecture patterns for Webiny extensions. Use this skill when building frontend features with headless features (UseCase/Repository/Gateway), presentation features (Presenter/ViewModel/hooks/components), MobX-based presenters, RegisterFeature, and Admin BuildParams. Covers the admin/ directory structure for both features/ and presentation/ layers. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
write-a-prd .claude/skills/write-a-prd/SKILL.md Create a PRD through user interview, codebase exploration, and module design, then submit as a GitHub issue. Use when user wants to write a PRD, create a product requirements document, or plan a new feature. | 69 69 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
webiny-skill-creator .claude/skills/webiny-skill-creator/SKILL.md Generate, refresh, and maintain Webiny MCP server skills from source documentation and codebase. Use this skill when you need to create new Webiny skills, update existing skills after framework changes, regenerate the entire skill library, or create a skill for a specific Webiny feature. Trigger this whenever someone says "create a skill", "update skills", "refresh skills", "add a new skill for X", or "regenerate the skill library". This is the meta-skill that produces all other Webiny MCP skills. | 72 72 Impact — No eval scenarios have been run Securityby Low Low-risk findings worth noting Reviewed: Version: 484553b | |
tester .claude/skills/tester/SKILL.md Use when running tests. Shows how to run tests for a single package, including OpenSearch (ddb-os) tests when applicable. | 68 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
preflight .claude/skills/preflight/SKILL.md Webiny-only. Run all checks required before packages are ready for publish: deps, build, lint, format, tests. | 66 66 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
prd-to-plan .claude/skills/prd-to-plan/SKILL.md Turn a PRD into a multi-phase implementation plan using tracer-bullet vertical slices, saved as a local Markdown file in ./plans/. Use when user wants to break down a PRD, create an implementation plan, plan phases from a PRD, or mentions "tracer bullets". | 80 80 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b | |
grill-me .claude/skills/grill-me/SKILL.md Interview the user relentlessly about a plan or design until reaching shared understanding, resolving each branch of the decision tree. Use when user wants to stress-test a plan, get grilled on their design, or mentions "grill me". | 76 76 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Reviewed: Version: 484553b |