danimerida2000/edu-platform
.claude/skills/edu-platform/SKILL.md
Default domain skill for Merida Consulting Courses. Use this for repository-specific work to align with AGENTS governance, Bun workspace structure, the Next.js BFF to Rust API runtime path, and the repo's current testing and operations model for the educational platform.
development
Updated Apr 16, 2026
$ install --global
skillsauthnpx skillsauth add danimerida2000/merida-edu edu-platformInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 16, 2026, 11:08 AM15.9s5 files scanned
SKILL.md
- name:
- edu-platform
- description:
- >
Edu-Platform Domain Skill
Mandatory Bootstrap
- Read
AGENTS.md. - Read this skill file.
- Read
docs/agent-context/core/00-loading-protocol.mdthrough03-quality-and-commit-policy.md. - Load scoped context files relevant to the task.
- For any coding task, ensure an active
docs/{type}/YYYY/MM/YYYY-MM-DD-{name}.mdexists. - For estimate work, ensure an active
docs/quotes/YYYY/MM/YYYY-MM-DD-{name}.mdexists.
Non-Negotiable Repo Facts
- Tenant isolation:
organization_idon all data-sensitive entities. Each school/organization sees only its own data. - Soft-delete lifecycle:
statusfield governs deletion paths. - Schema source of truth:
packages/db/src/schema/*.ts. - Runtime data path:
BFF /api/v1/* -> gateway/service layer -> backend API. - No direct DB imports from frontend components/hooks.
- All
db:*commands require explicit user approval. - Conventional Commits; no
Co-authored-by:trailers. - Professional Business American English for code. Spanish for user-facing content via
next-intl. - 500-line file limit. Split using Rust
mod.rsor TypeScript barrelindex.tspatterns.
Current Stack Summary
| Layer | Technologies | |-------|-------------| | Frontend | Next.js (App Router), Ant Design, TailwindCSS, next-intl, Zustand, SWR, Zod, Motion | | BFF | Next.js API routes proxying to backend | | Backend | Rust (Axum), tokio-postgres | | Database | PostgreSQL, Drizzle ORM (schema in TypeScript) | | Messaging | NATS | | Auth | Keycloak | | Storage | MinIO | | Package Manager | Bun (monorepo workspaces) | | Infrastructure | Docker, Nginx |
Domain Model
Core educational entities:
- Organization (tenant): school, academy, or consulting client
- Course: a full course offering (e.g., Robotics for Kids)
- Module: a phase within a course (8 sessions each)
- Session: a single scheduled class meeting (120 min)
- Instructor: teaches sessions, manages course content
- Student: enrolled in courses, progress tracked
- Enrollment: student-course relationship with status lifecycle
- Progress: student advancement through sessions and modules
- Assessment: graded work (quizzes, projects, presentations)
- Grade: assessment results per student
- Certificate: completion awards per module or course
- Material: equipment and supplies with cost tracking (per-module budgets)
- Schedule: session calendar with recurrence patterns
Frontend Design-System Baseline
Primary branding and theme sources:
packages/client/src/store/branding.store.tspackages/client/src/lib/antd-theme.tspackages/client/src/index.csspackages/client/src/types/branding/**packages/client/src/app/providers.tsx
Required Role Chain
For requirements, bugs, and audit:
product-manager -> software-architect -> (senior-frontend-engineer and/or senior-backend-rust-engineer) -> qa-engineer -> release-manager
Conditional: security-engineer for auth/tenant/student-data scope. devops-sre for deploy/infra scope.
References
- Architecture
- Security
- Guardrails
- Governance
Related Skills
danimerida2000/software-architect
testing
VerifiedTrustedCommunity
Architecture role for Merida Consulting Courses. Use when the approved scope needs a concrete technical design, boundary definition, migration strategy, and gate plan before implementation or release decisions.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/senior-frontend-engineer
tools
VerifiedTrustedCommunity
Frontend role for Merida Consulting Courses. Use when work affects Next.js App Router, React UI, BFF proxy routes, next-intl content, Ant Design flows, shared branding/theme sources, or client validation and test coverage for the educational platform.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/senior-backend-rust-engineer
development
VerifiedTrustedCommunity
Rust role for Merida Consulting Courses. Use when work affects Axum routes, services, queries, session or policy flows, OpenAPI behavior, or runtime-sensitive backend logic for the educational platform.
SKILL.mdUpdated Apr 16, 2026
danimerida2000/security-engineer
testing
VerifiedTrustedCommunity
Security role for Merida Consulting Courses. Use when scope is authn, authz, session, tenant-sensitive, student-data-sensitive, storage-sensitive, or otherwise security-relevant for the educational platform.
SKILL.mdUpdated Apr 16, 2026