github.com/webiny/webiny-js
| Skill | Added | Review |
|---|---|---|
webiny-cognito-federation skills/user-skills/cognito-federation/SKILL.md Configuring Cognito Federation for Webiny projects — federated sign-in via external identity providers (Google, Facebook, Apple, Amazon, OIDC/Entra ID) while keeping Cognito as the user pool. Use this skill when the developer asks about Cognito federation, SSO with Cognito, adding Google/Microsoft/OIDC login to Cognito, federated identity providers, CognitoSignInConfig, CognitoIdpConfig, external users, signInWithRedirect, OAuth redirect URLs, hiding the password form, allowCredentialsLogin, or customizing the federated login screen. | 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-configure-auth0 skills/user-skills/configure-auth0/SKILL.md Configuring Auth0 as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Auth0 authentication, Auth0 SSO, replacing Cognito with Auth0, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Auth0 login flow. Also relevant when asking about AUTH0_ISSUER, AUTH0_CLIENT_ID environment variables, Auth0IdpConfig, or the MyAuth0Extension pattern. | 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-configure-entraid skills/user-skills/configure-entraid/SKILL.md Configuring Microsoft Entra ID (formerly Azure AD) as a federated identity provider for Webiny projects using Cognito Federation. Use this skill when the developer asks about Entra ID, Azure AD, Microsoft SSO, OIDC with Microsoft, Microsoft login for Webiny, or configuring login.microsoftonline.com as an identity provider. Also relevant for tenant IDs, Entra application registration, or connecting Microsoft 365 accounts to Webiny. | 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-configure-okta skills/user-skills/configure-okta/SKILL.md Configuring Okta as an identity provider (IDP) for Webiny projects. Use this skill when the developer asks about Okta authentication, Okta SSO, replacing Cognito with Okta, setting up external identity providers, configuring OIDC authentication, mapping JWT claims to Webiny identities, or customizing the Okta login flow. Also relevant when asking about OKTA_ISSUER, OKTA_CLIENT_ID environment variables, OktaIdpConfig, or the MyOktaExtension pattern. | 69 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-custom-graphql-api skills/user-skills/api/graphql-api/SKILL.md Adding custom GraphQL queries and mutations using GraphQLSchemaFactory. Use this skill when the developer wants to add custom GraphQL endpoints, create custom queries or mutations, add business logic to the API layer, build custom resolvers, inject backend services (identity, tenancy, CMS use-cases) into their GraphQL schema, or build dynamic GraphQL inputs from CMS models. Covers the full pattern from simple queries to complex resolvers with dependency injection and permission transformers. | 69 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-dependency-injection skills/user-skills/dependency-injection/SKILL.md The universal createImplementation DI pattern and all injectable services. Use this skill when the developer is writing any Webiny extension and needs to understand dependency injection, constructor injection, how to access Logger/BuildParams/IdentityContext, how to inject CMS use-cases (list/get/create/update/delete entries), or how the dependencies array works. This is the connective tissue across all extension types -- API, Admin, CLI, and Infrastructure. | 69 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-event-handler-pattern skills/user-skills/api/event-handler-pattern/SKILL.md EventHandler implementation pattern — handle method, event payloads, filtering, DI, domain event definition, publishing events from UseCases, and reacting to external events. Use this skill to implement any Webiny EventHandler (before/after hooks) or to define and publish your own domain events. | 67 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-extensions-catalog skills/user-skills/generated/extensions/SKILL.md extensions — 5 abstractions. | 47 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-form-model skills/user-skills/admin/form-model/SKILL.md Building forms with the FormModel system — field types, renderers, layout, validation, conditional rules, computed fields, and dynamic zones. Use this skill when the developer needs to define form fields with the builder API, choose renderers, build layouts with tabs/rows/separators, add validation (Zod or imperative), use conditional visibility/disable rules, create computed fields, or work with object fields and templates (dynamic zones). | 64 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-full-stack-architect skills/user-skills/full-stack-architect/SKILL.md Full-stack extension skeleton and registration pattern. Use this skill when creating an extension that spans both API and Admin — the top-level component with Api.Extension and Admin.Extension entry points, shared domain layer, BuildParam declarations, and package structure. References webiny-api-architect and webiny-admin-architect for layer-specific details. | 68 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-http-route skills/user-skills/api/http-route/SKILL.md Adding custom HTTP routes to the API with <Api.Route> and HttpRouteHandler. Use this skill when the developer wants to expose a custom HTTP endpoint (GET, POST, PUT, etc.) on the API alongside the GraphQL handler, implement a route handler with full DI support, or register a custom HTTP route in webiny.config.tsx. | 72 Impact — No eval scenarios have been run Securityby Low Low-risk findings worth noting Version: 3892f01 | |
webiny-infra-catalog skills/user-skills/generated/infra/SKILL.md Infrastructure — 35 abstractions. Infrastructure extensions. | 46 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-infrastructure-extensions skills/user-skills/infrastructure-extensions/SKILL.md Modifying AWS infrastructure using Pulumi handlers and declarative Infra components. Use this skill when the developer wants to customize AWS infrastructure, add Pulumi handlers, configure OpenSearch, VPC, resource tags, regions, custom domains, blue-green deployments, environment-conditional config, or manage production vs development infrastructure modes. Covers CorePulumi.Interface, all <Infra.*> declarative components, and <Infra.Env.Is>. | 66 Impact — No eval scenarios have been run Securityby High Do not use without reviewing Version: 3892f01 | |
webiny-local-development skills/user-skills/local-development/SKILL.md Deploying, developing locally, managing environments, and debugging Webiny projects. Use this skill when the developer asks about deployment commands (deploy, destroy, info), local development with watch mode (API or Admin), the Local Lambda Development system, environment management (long-lived vs short-lived, production vs dev modes), build parameters, state files, debugging API/Admin/Infrastructure errors, or the redeploy-after-watch requirement. | 64 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-mailer-smtp skills/user-skills/mailer-smtp/SKILL.md Use when configuring SMTP email/mailer settings in a Webiny project. Triggers on: "configure email", "set up SMTP", "mailer config", "sending emails", "email not working", "configure mailer", "SMTP password", "Api.Mailer.Smtp". | 63 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-new-entry-wizard skills/user-skills/admin/new-entry-wizard/SKILL.md Building a New Entry Wizard for the Headless CMS. Use this skill when the developer wants to show a custom wizard UI before the entry form when creating new CMS entries -- collecting fields like title, slug, or category upfront, then pre-filling the entry form. Covers ContentEntryEditorConfig.NewEntryWizard, createFeature, FormModelFactory, createReactiveComponent, useContentEntryFormPresenter, and the dirty-flag on setData. | 70 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-page-settings-extensions skills/user-skills/admin/website-builder/page-settings/SKILL.md Extending the Website Builder page settings with custom settings groups and modifiers. Use this skill when the developer wants to add a new tab/group to the page settings drawer (e.g., Publishing, Analytics, Access Control), or modify an existing settings group (e.g., add fields to General or SEO). Covers PageSettingsGroup, PageSettingsGroupModifier, and the doc.extensions data model. For field types, renderers, and layout details, see the webiny-form-model skill. | 72 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-project-structure skills/user-skills/project-structure/SKILL.md Webiny project layout, webiny.config.tsx anatomy, and extension registration. Use this skill when the developer asks about folder structure, where custom code goes, how to register extensions, what webiny.config.tsx does, or how the project is organized. Also use when they need to understand the relationship between extensions/, webiny.config.tsx, and the different extension types (Api, Admin, Infra, CLI). | 70 Impact — No eval scenarios have been run Securityby Passed No findings from the security scan Version: 3892f01 | |
webiny-sdk skills/user-skills/webiny-sdk/SKILL.md Using @webiny/sdk to read and write CMS data from external applications. Use this skill when the developer is building a Next.js, Vue, Node.js, or any external app that needs to fetch or write content to Webiny, set up the SDK, use the Result pattern, list/get/create/update/publish entries, filter and sort queries, use TypeScript generics for type safety, work with the File Manager, list languages, trigger or monitor background tasks, or create API keys programmatically. Covers read vs preview mode, the `values` wrapper requirement, correct method names, and the `fields` required parameter, and background task management via `sdk.tasks`. Also covers common SDK errors and troubleshooting — especially "Content model '<modelName>' not found" (which usually means the API key lacks permission, not that the model is missing) and the Website Builder starter pitfall of reusing NEXT_PUBLIC_WEBSITE_BUILDER_API_KEY for Headless CMS reads (that key has no CMS permissions by default and needs either extension or replacement with a CMS-scoped key). | — | |
webiny-skill-creator .claude/skills/webiny-skill-creator/SKILL.md Generate, refresh, and maintain Webiny MCP server skills from source documentation and codebase. Use this skill when you need to create new Webiny skills, update existing skills after framework changes, regenerate the entire skill library, or create a skill for a specific Webiny feature. Trigger this whenever someone says "create a skill", "update skills", "refresh skills", "add a new skill for X", or "regenerate the skill library". This is the meta-skill that produces all other Webiny MCP skills. | 62 Impact — No eval scenarios have been run Securityby Low Low-risk findings worth noting Version: 3892f01 |