Architectural guidance for coding agents adding private customer access, connections, background work and subscriptions to existing apps. Specs only; reuse the host and chosen providers.
56
71%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
Passed
No findings from the security scan
Follow the user's request and the host's own instructions. This skill supplies integration guidance; AppLift's contributor AGENTS.md does not replace the host's rules. Use normal provider documentation/SDKs for mechanics. No AppLift runtime is needed.
Use one relevant contract if that is enough; skip solved decisions. AppLift describes relationships, authority and workflow guarantees. Choose the implementation from the actual host; the kit does not prescribe a stack, physical schema or general architecture repair process.
Target MVP-to-startup needs. Comprehensive observability, disaster-recovery and enterprise governance programs are outside default scope. Keep the selected workflow's authorization, isolation, data preservation and recovery intact; raise additional operational needs only where the host requires them. The kit does not certify whole-product readiness.
Inspect existing entities, IDs, auth, global credentials, queries and background operations. Mark mappings observed, proposed or unresolved. Ask the user business questions in ordinary language; derive engineering details from the host and selected contracts rather than asking the founder to design ownership or retry logic.
Read only the relevant contracts:
Reuse IDs, native guards and provider-managed state. Resolve ownership through existing parents when possible; no owner column at every step, team model, role engine or mirrored billing ledger by default. A repeated import must preserve user-managed business progress. Re-evaluate current authority before committing delayed results.
Preserve native/provider defaults unless a concrete requirement justifies an override. State the reason for each custom setting; omit unnecessary configuration.
Keep any needed mapping in the short bridge plan or the host's existing working notes: connect each consequential requirement to a host operation and observable check. This is not an extra approval step. For a planning request, identify changes and unknowns. When implementation is requested, continue through the bounded changes and checks within authorization. Preserve existing data/behavior and record business clarifications separately from engineering rescue.
Consult relationship diagrams or the global personal-app example only if the mapping remains unclear. Report implemented versus unrun behavior and simulated versus live provider evidence. One passing case does not establish broad compatibility, organic discovery or reduced effort.