Hikkywannafly/approval-plan
skills/approval-plan/SKILL.md
Render a 3-5 bullet plan to the user in Vietnamese and wait for confirmation before proceeding. Accepts "OK", "co", "duoc", "chay di" as approval signals. Used by vibe, vibe-add, and vibe-fix before any code changes are made.
development
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add Hikkywannafly/vibe-kit approval-planInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 5:07 PM160.9s1 file scanned
SKILL.md
- name:
- approval-plan
- description:
- >
- argument-hint:
- [plan bullets hoac context]
approval-plan — Plan Confirmation Gate
Purpose
Present a clear, plain-Vietnamese plan to the user before writing any code. Prevents surprises and builds trust with non-dev users who cannot read code diffs.
When to Activate
- Before
/vibebegins orchestrating a full build - Before
/vibe-addmodifies existing files - Before
/vibe-fixapplies a multi-file fix - Any time the scope of changes is more than 1 file
Plan Format
Present as a numbered list in Vietnamese, 3-5 items, each ≤ 20 words:
Day la ke hoach toi se thuc hien:
1. Tao trang danh sach san pham tai /shop voi 12 san pham mau
2. Them gio hang luu trong localStorage (khong can dang nhap)
3. Tao trang thanh toan ket noi Polar Checkout
4. Cai dat giao dien Tailwind mau cam/trang
Ban co muon toi bat dau khong? (OK / co / duoc)
Approval Detection
Accept as approval (case-insensitive):
ok,okay,OKco,có,co roi,có rồiduoc,được,duoc roi,được rồichay di,chạy đi,lam di,làm điyes,y,sure,go
Reject / ask for changes:
khong,không,no,doi,đổi,sua,sửa- Any message describing a change → revise plan and re-present
Rejection Handling
If user requests changes, update the plan bullets and re-present once. If user rejects the revised plan, ask: "Ban muon thay doi gi? Mo ta cu the de toi chinh lai."
Implementation Pattern
[Present plan as numbered list above]
[Wait for user response]
[If approved] → Proceed with implementation
[If rejected] → Ask what to change → revise → re-present
[If ambiguous] → Ask: "Ban co muon toi bat dau khong?"
Tone Rules
- Use "toi" (I) and "ban" (you) — not formal pronouns
- Keep bullets action-oriented: verb first ("Tao...", "Them...", "Ket noi...")
- No technical jargon: "database" → "co so du lieu", "deploy" → "dua len mang"
- Maximum 5 bullets — if more steps needed, group related steps into one bullet
Related Skills
Hikkywannafly/vietnamese-copy
data-ai
VerifiedTrustedCommunity
Generate Vietnamese marketing copy, UI strings, CTAs, error messages, and email templates for vibe-kit projects. Tone: friendly, conversational, Southern Vietnamese style. Activated for any user-visible text generation.
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe
development
VerifiedTrustedCommunity
One-shot orchestrator. Turns the prose after /vibe into a shipped product by clarifying intent, rendering a plan, gating on approval, then spawning planner+researcher+fullstack-dev+tester+reviewer agents in sequence. User-visible strings match the user's input language (Vietnamese by default for VN users). Two modes: SAFE (default — clarify + show plan + wait for approval, max 1 round-trip) and YOLO (skip clarify+approval, run full auto with smart defaults — for demos and power users). YOLO triggers: prose contains `yolo`, `nhanh nha`, `lam luon`, `khoi hoi`, `auto`, or args start with `yolo`. Trigger phrases (EN + VN): "build me a site", "make me a landing page", "create a shop", "I need an app", "vibe lam website", "tao cho toi mot", "xay dung shop online", "lam landing page", "can mot app".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-security
tools
VerifiedTrustedCommunity
On-demand security audit for vibe-kit projects. Stack-aware checks for Next.js App Router + Supabase + Polar: secrets leak, RLS gaps, service-role key in client bundle, missing webhook signature verification, unprotected API routes, weak headers, dependency vulns. Outputs a Vietnamese P0/P1/P2 report with file:line + fix hints. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "check security", "audit it", "security scan", "is this safe to launch", "kiem tra bao mat", "quet bao mat", "audit du an", "co an toan khong", "scan bao mat truoc khi deploy".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-rn-supabase
tools
VerifiedTrustedCommunity
Wire Supabase JS client into a React Native (Expo) vibe-kit project: session persistence via AsyncStorage, magic-link OAuth callback via expo-linking deep links, Realtime subscriptions on RN, and shared TypeScript types with the Next.js webapp twin (vibe-kit's typical web<->mobile pair pattern). This is the mobile counterpart of `auth-magic-link` (web). User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "supabase react native", "supabase mobile", "auth mobile expo", "magic link mobile", "tich hop supabase vao app", "supabase deep link".
SKILL.mdUpdated Apr 25, 2026