Hikkywannafly/docs-seeker
skills/docs-seeker/SKILL.md
Fetch up-to-date documentation for a framework, library, or API that vibe-kit uses. Invoke when the orchestrator hits an unfamiliar feature (new Next.js version, Supabase RLS syntax, Polar webhook shape). Vietnamese trigger phrases: "tra tài liệu", "xem docs mới nhất", "tìm hướng dẫn <tên lib>".
development
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add Hikkywannafly/vibe-kit docs-seekerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 5:08 PM150.9s1 file scanned
SKILL.md
- name:
- docs-seeker
- description:
- >
docs-seeker
Returns the freshest official documentation snippet for a targeted topic so the orchestrator does not reason from stale training data.
When to invoke
- New release of a framework listed in the vibe-kit default stack (Next.js, Tailwind, shadcn/ui, Supabase, Polar)
- Error message points to an API shape that may have changed
- Orchestrator needs a concrete code example, not a paraphrase
- User asks in VN: "có version mới chưa?" / "còn syntax cũ không?"
Output contract
Return 3 blocks, in this order:
- Summary (2 lines, Vietnamese) — what the topic is + why it changed
- Primary snippet (code block, English) — canonical code from current docs
- Source — URL + retrieved date
How to run
- Pick the narrowest query term possible. "Supabase auth magic link" beats "Supabase auth".
- Prefer official docs (
supabase.com/docs,nextjs.org/docs,polar.sh/docs,tailwindcss.com/docs,ui.shadcn.com). - If official docs are ambiguous, check the library's GitHub
README.mdfor the pinned version inpackage.json. - If the topic is framework version-specific, always include the version number in the summary.
- Never quote a blog post or Medium article as primary source — only as tiebreaker when official docs are silent.
Limits
- One topic per invocation. If caller passes two topics, split into two calls.
- Return ≤ 400 words total. Skip marketing copy, keep code.
- If no authoritative source is found within 2 tries, return
{"status":"not-found","suggestion":"<VN message>"}and stop.
Example
Input: "Supabase magic link gửi email từ server action Next.js 14"
Output:
Supabase cung cấp `supabase.auth.signInWithOtp({ email })` trả về token gửi
qua email. Trong Next.js 14 App Router, gọi hàm này bên trong Server Action.
import { createClient } from '@/lib/supabase/server';
export async function sendMagicLink(email: string) {
const supabase = createClient();
await supabase.auth.signInWithOtp({ email });
}
Source: https://supabase.com/docs/guides/auth/auth-email-passwordless
Retrieved: 2026-04-21
Related Skills
Hikkywannafly/vietnamese-copy
data-ai
VerifiedTrustedCommunity
Generate Vietnamese marketing copy, UI strings, CTAs, error messages, and email templates for vibe-kit projects. Tone: friendly, conversational, Southern Vietnamese style. Activated for any user-visible text generation.
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe
development
VerifiedTrustedCommunity
One-shot orchestrator. Turns the prose after /vibe into a shipped product by clarifying intent, rendering a plan, gating on approval, then spawning planner+researcher+fullstack-dev+tester+reviewer agents in sequence. User-visible strings match the user's input language (Vietnamese by default for VN users). Two modes: SAFE (default — clarify + show plan + wait for approval, max 1 round-trip) and YOLO (skip clarify+approval, run full auto with smart defaults — for demos and power users). YOLO triggers: prose contains `yolo`, `nhanh nha`, `lam luon`, `khoi hoi`, `auto`, or args start with `yolo`. Trigger phrases (EN + VN): "build me a site", "make me a landing page", "create a shop", "I need an app", "vibe lam website", "tao cho toi mot", "xay dung shop online", "lam landing page", "can mot app".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-security
tools
VerifiedTrustedCommunity
On-demand security audit for vibe-kit projects. Stack-aware checks for Next.js App Router + Supabase + Polar: secrets leak, RLS gaps, service-role key in client bundle, missing webhook signature verification, unprotected API routes, weak headers, dependency vulns. Outputs a Vietnamese P0/P1/P2 report with file:line + fix hints. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "check security", "audit it", "security scan", "is this safe to launch", "kiem tra bao mat", "quet bao mat", "audit du an", "co an toan khong", "scan bao mat truoc khi deploy".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-rn-supabase
tools
VerifiedTrustedCommunity
Wire Supabase JS client into a React Native (Expo) vibe-kit project: session persistence via AsyncStorage, magic-link OAuth callback via expo-linking deep links, Realtime subscriptions on RN, and shared TypeScript types with the Next.js webapp twin (vibe-kit's typical web<->mobile pair pattern). This is the mobile counterpart of `auth-magic-link` (web). User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "supabase react native", "supabase mobile", "auth mobile expo", "magic link mobile", "tich hop supabase vao app", "supabase deep link".
SKILL.mdUpdated Apr 25, 2026