Hikkywannafly/sequential-thinking
skills/sequential-thinking/SKILL.md
Break a multi-step task into numbered reasoning steps before acting. Used by vibe-kit planner agent to decompose ambiguous Vietnamese prompts into executable phases. Vietnamese trigger phrases: "suy nghĩ từng bước", "phân tích kĩ", "chia nhỏ ra".
data-ai
Updated Apr 25, 2026
$ install --global
skillsauthnpx skillsauth add Hikkywannafly/vibe-kit sequential-thinkingInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 5:13 PM159.2s1 file scanned
SKILL.md
- name:
- sequential-thinking
- description:
- >
- executable phases. Vietnamese trigger phrases:
- suy nghĩ từng bước",
sequential-thinking
Forces deliberate, numbered reasoning when a problem is too fuzzy to one-shot. Prevents plan holes.
When to invoke
- Intent classification confidence is low (user text is ambiguous)
- Requirements conflict (user asks for auth + no login in the same sentence)
- Estimating effort for a feature the orchestrator has not built before
- Whenever the output would otherwise be "let me just try and see"
Method
Produce a numbered list where each step satisfies:
- One action verb per step. "Check", "Decide", "Write", "Invoke".
- Observable output. What file/state changes after the step?
- Cheap before expensive. Verify assumptions before spawning agents or running npm install.
- Stop condition. Each step has a pass/fail check before the next step is considered.
Rendering contract
Internal reasoning. The user does NOT see these steps unless they hit an error — then surface the last 3 steps as context for /vibe-fix.
Example
User prompt: "xây blog cá nhân, kiểu như medium, có login, dùng chung tài khoản Google"
Reasoning:
- Check intent:
blogwith social login — multi-user or single-user? - Spot conflict: "cá nhân" (solo) vs "chung tài khoản Google" (multi). Decide: ask user.
- If solo → skip Google OAuth, use Supabase magic-link for author only.
- If multi → add Google provider, but this raises scope ≥ CRM level.
- Default assumption: solo author + Google OAuth for SSO convenience only.
- Load
vibeclarify template Q16 (blog storage) + custom Q (Google login for you or for readers?).
Only step 6 is visible — prior steps stay in the reasoning scratchpad.
Anti-patterns
- Don't produce "plan of plan" loops. If the reasoning itself needs sequential-thinking, stop and ask the user.
- Don't fabricate deadlines ("Step 7 takes 5 minutes"). Time estimates belong in the plan bullets, not the reasoning trace.
- Never expose intermediate reasoning to the user unless debugging.
Related Skills
Hikkywannafly/vietnamese-copy
data-ai
VerifiedTrustedCommunity
Generate Vietnamese marketing copy, UI strings, CTAs, error messages, and email templates for vibe-kit projects. Tone: friendly, conversational, Southern Vietnamese style. Activated for any user-visible text generation.
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe
development
VerifiedTrustedCommunity
One-shot orchestrator. Turns the prose after /vibe into a shipped product by clarifying intent, rendering a plan, gating on approval, then spawning planner+researcher+fullstack-dev+tester+reviewer agents in sequence. User-visible strings match the user's input language (Vietnamese by default for VN users). Two modes: SAFE (default — clarify + show plan + wait for approval, max 1 round-trip) and YOLO (skip clarify+approval, run full auto with smart defaults — for demos and power users). YOLO triggers: prose contains `yolo`, `nhanh nha`, `lam luon`, `khoi hoi`, `auto`, or args start with `yolo`. Trigger phrases (EN + VN): "build me a site", "make me a landing page", "create a shop", "I need an app", "vibe lam website", "tao cho toi mot", "xay dung shop online", "lam landing page", "can mot app".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-security
tools
VerifiedTrustedCommunity
On-demand security audit for vibe-kit projects. Stack-aware checks for Next.js App Router + Supabase + Polar: secrets leak, RLS gaps, service-role key in client bundle, missing webhook signature verification, unprotected API routes, weak headers, dependency vulns. Outputs a Vietnamese P0/P1/P2 report with file:line + fix hints. User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "check security", "audit it", "security scan", "is this safe to launch", "kiem tra bao mat", "quet bao mat", "audit du an", "co an toan khong", "scan bao mat truoc khi deploy".
SKILL.mdUpdated Apr 25, 2026
Hikkywannafly/vibe-rn-supabase
tools
VerifiedTrustedCommunity
Wire Supabase JS client into a React Native (Expo) vibe-kit project: session persistence via AsyncStorage, magic-link OAuth callback via expo-linking deep links, Realtime subscriptions on RN, and shared TypeScript types with the Next.js webapp twin (vibe-kit's typical web<->mobile pair pattern). This is the mobile counterpart of `auth-magic-link` (web). User-visible strings match the user's input language (Vietnamese by default for VN users). Trigger phrases (EN + VN): "supabase react native", "supabase mobile", "auth mobile expo", "magic link mobile", "tich hop supabase vao app", "supabase deep link".
SKILL.mdUpdated Apr 25, 2026