LEE-SANG-BOK/vkc-repo-guardrails
cursor-plugin/viet-k-connect/skills/vkc-repo-guardrails/SKILL.md
Enforce Viet K-Connect non-negotiables (no Server Actions, API Routes only, Drizzle/Supabase patterns, TanStack Query repo layer, i18n ko/en/vi key parity). Use before/after code changes and for PR review checklists. (키워드= 서버 액션 금지, API 라우트만, Drizzle, Supabase, TanStack Query, i18n 키 동기화)
development
Updated May 25, 2026
$ install --global
skillsauthnpx skillsauth add LEE-SANG-BOK/VKC-2- vkc-repo-guardrailsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 25, 2026, 2:00 AM18.6s1 file scanned
SKILL.md
- name:
- vkc-repo-guardrails
- description:
- Enforce Viet K-Connect non-negotiables (no Server Actions, API Routes only, Drizzle/Supabase patterns, TanStack Query repo layer, i18n ko/en/vi key parity). Use before/after code changes and for PR review checklists. (키워드= 서버 액션 금지, API 라우트만, Drizzle, Supabase, TanStack Query, i18n 키 동기화)
- short-description:
- Repo guardrails + checks
Viet K-Connect Repo Guardrails
When to use
- You’re about to implement or review changes in this repo.
- You need a repeatable “PR checklist” to prevent architecture drift.
Quick start
- Run local checks:
bash .codex/skills/vkc-repo-guardrails/scripts/guardrails.sh
- If it fails, fix violations first (especially Server Actions / i18n key drift).
- For new work, follow the VKC prompt protocol:
docs/CODEX_PROMPT_PROTOCOL.md
Non‑negotiables (must keep)
- No Server Actions: never add
"use server". - Server code lives in API Routes: only
src/app/api/**. - DB access: Drizzle via
@/lib/db+@/lib/db/schema. - Client data layer:
src/repo/<domain>/{fetch,query,mutation,types}.ts+ query keys insrc/repo/keys.ts. - i18n:
messages/{ko,vi}.jsonkeys stay in sync;enis allowed to be partial (ko fallback). - Imports: prefer
@/*alias; avoid deep../chains for shared modules/components. - Components: ATOMIC folders +
export defaultcomponent pattern.
Where to look (canonical examples)
- API (user):
src/app/api/reports/route.ts - API (admin):
src/app/api/admin/news/route.ts - Responses:
src/lib/api/response.ts - Rate limit helper:
src/lib/api/rateLimit.ts - Repo structure rules:
docs/REPO_STRUCTURE_GUIDE.md
Expected PR output (what to report)
- Guardrails result:
PASS/FAIL+ concrete violations - i18n parity:
PASS/FAIL - Any intentional deviations: explicit rationale + follow-up task
References
- Repo architecture pointers:
.codex/skills/vkc-repo-guardrails/references/architecture.md - Conventions checklist:
.codex/skills/vkc-repo-guardrails/references/conventions.md
Related Skills
LEE-SANG-BOK/vkc-wizardkit
development
VerifiedTrustedCommunity
Build step-based wizard UIs (step UI, fixed bottom CTA with safe-area, localStorage draft save, runtime validation, submit event logging). Use for visa assessment, doc generation, admin queue inputs. (키워드= 위저드, 단계형 폼, 멀티스텝, 하단 고정 CTA, draft 저장, 제출 로그)
SKILL.mdUpdated May 25, 2026
LEE-SANG-BOK/vkc-visa-assessment-engine
development
VerifiedTrustedCommunity
Design and implement the Viet K-Connect visa assessment engine (DB-driven ruleset JSON schema + versioning + effective dates). No hardcoded rules in code. Use for building /api/visa/assess and admin ruleset management. (키워드= 비자 평가, 룰셋, 규칙 엔진, DB-driven, 버전/적용일, /api/visa/assess)
SKILL.mdUpdated May 25, 2026
LEE-SANG-BOK/vkc-ux-audit
testing
VerifiedTrustedCommunity
Run a VKC UX expert audit (Nielsen-style heuristic review + mobile-first flow check) and produce a prioritized issue list with severity and fixes. (키워드= UX 감사, 휴리스틱, 모바일 QA, 접근성, 사용성)
SKILL.mdUpdated May 25, 2026
LEE-SANG-BOK/vkc-skill-router
data-ai
VerifiedTrustedCommunity
Route VKC tasks to the correct domain skill from manifest.json. Always start with guardrails, shared-memory-router, loop-supervisor; then pick one domain skill by path/task keywords. (키워드=skill router, manifest, domain skill, which skill)
SKILL.mdUpdated May 25, 2026