Skills senior-fullstack

📦

senior-fullstack

Name: senior-fullstack
Author: alirezarezvani

Content revision r1 Safe 📁 Filesystem access⚙️ External commands

Build Fullstack Apps With Senior Guidance

Fullstack projects often need consistent setup, architecture choices, and quality checks. This skill provides scripts and references for React, Next.js, Node.js, GraphQL, and PostgreSQL work.

Supports: Claude Codex Code(CC)

🥈 82 Silver

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "senior-fullstack" from https://skillstore.io/skills/alirezarezvani-senior-fullstack.md and its manifest at https://skillstore.io/api/skills/alirezarezvani-senior-fullstack/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/alirezarezvani-senior-fullstack.md Signed manifest GET /api/skills/alirezarezvani-senior-fullstack/manifest Signed lockfile GET /api/skills/alirezarezvani-senior-fullstack/lockfile

Test it

Using "senior-fullstack". Review a new Next.js and Node.js repository for setup readiness.

Expected outcome:

Setup status with missing configuration and dependency steps.
Architecture notes for frontend, backend, database, and deployment concerns.
Recommended quality checks before implementation continues.

Using "senior-fullstack". Create a workflow for a team adopting GraphQL and PostgreSQL.

Expected outcome:

Suggested development workflow from local setup through review.
Testing, linting, and troubleshooting checkpoints for the team.
Risks that need confirmation before package or deployment commands run.

Using "senior-fullstack". Summarize what the code quality analyzer produced for a target path.

Expected outcome:

A concise report showing the target path, success status, finding count, and next review actions.

Security Audit

Safe

v8 • 7/9/2026 Open versioned report

Most static findings are markdown backtick false positives or benign “Anti-Patterns” headings. The real risks are unrestricted report output writes in the helper scripts and command examples that can install packages or modify Docker and Kubernetes environments.

Files scanned

867

Lines analyzed

Review items

False positives ignored

Capability review items (5)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Medium

scripts/code_quality_analyzer.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON output to args.output without path restrictions or overwrite checks. This is a real filesystem write capability, although it appears to be a user-requested report export.

Medium

scripts/fullstack_scaffolder.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON output to args.output without path restrictions or overwrite checks. This is a real filesystem write capability, although it appears to be a user-requested report export.

Medium

scripts/project_scaffolder.py:107

Python file write/append

with open(args.output, 'w') as f:

The script writes JSON output to args.output without path restrictions or overwrite checks. This is a real filesystem write capability, although it appears to be a user-requested report export.

Medium

SKILL.md:119-127

Ruby/shell backtick execution

```bash

The setup block recommends npm install and pip install from the target project, which can install untrusted packages or run package scripts. This is legitimate development guidance, but it is still operationally risky if followed automatically.

Medium

SKILL.md:174-189

Ruby/shell backtick execution

```bash

The common commands block includes npm scripts, Docker commands, docker-compose, and kubectl apply. These commands can modify local services or a Kubernetes cluster if an agent runs them without confirmation.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/alirezarezvani-senior-fullstack/audits/8?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/alirezarezvani-senior-fullstack/security.svg)](https://skillstore.io/skills/alirezarezvani-senior-fullstack?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/alirezarezvani-senior-fullstack?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/alirezarezvani-senior-fullstack/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/alirezarezvani-senior-fullstack.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

alirezarezvani. (2026). senior-fullstack security audit report (audit version 8) [Author version unspecified]. Skillstore. https://skillstore.io/skills/alirezarezvani-senior-fullstack/audits/8

BibTeX citation

@techreport{alirezarezvani-alirezarezvani-senior-fullstack-2026,
  author = {alirezarezvani},
  title = {senior-fullstack security audit report (audit version 8)},
  institution = {Skillstore},
  year = {2026},
  number = {8},
  url = {https://skillstore.io/skills/alirezarezvani-senior-fullstack/audits/8},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "senior-fullstack security audit report (audit version 8)"
version: "unspecified"
type: report
authors:
  - name: "alirezarezvani"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/alirezarezvani-senior-fullstack/audits/8"
identifiers:
  - type: other
    value: "skillstore:alirezarezvani-senior-fullstack:audit:8"
    description: "Skillstore immutable audit report identifier"

Compare variants

3 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Higher Skillstore usage

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

alirezarezvani Recommended Current

alirezarezvani-senior-fullstack

Skillstore Score 82

Evidence Confidence High

Skillstore usage 28

Updated

2026-08-21

sickn33

sickn33-senior-fullstack

Skillstore Score 82

Evidence Confidence High

Skillstore usage 21

Updated

2026-08-21

davila7

davila7-senior-fullstack

Skillstore Score 81

Evidence Confidence High

Skillstore usage 23

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

Maintainability

Content

Community

Spec Compliance

What You Can Build

Plan a New Web App

Create a practical starting plan for a React, Next.js, Node.js, and PostgreSQL project.

Review Repository Quality

Run local checks and summarize architecture, setup, and maintainability gaps in an existing codebase.

Standardize Team Workflows

Use the references to align setup, testing, deployment, and troubleshooting practices across a team.

Try These Prompts

Start a Project Plan

Use the senior-fullstack skill to outline a setup plan for my new web application. Include stack choices, first commands, and quality checks.

Review My Repository

Use the senior-fullstack skill to inspect this repository. Summarize setup issues, architecture risks, and the safest checks to run first.

Improve Development Workflow

Use the senior-fullstack references to propose a development workflow for builds, tests, linting, environment setup, and troubleshooting.

Prepare Architecture Review

Use the senior-fullstack skill to prepare an architecture review. Cover frontend, backend, data, DevOps, security, performance, and migration risks.

Best Practices

Confirm before running package installation, Docker, or Kubernetes commands from the skill documentation.
Review generated reports manually because the current scripts use placeholder analysis logic.
Run helper scripts from a trusted project directory with explicit target and output paths.

Avoid

Do not treat the helper scripts as a complete production scaffolding system.
Do not run deployment commands without checking the active Docker or Kubernetes context.
Do not write report output over source files or configuration files.