Claude Code: Development & Security Skills

Architecture patterns from the Claude Code CLI for building AI-powered developer tools. Covers tool registry systems, permission models, agent orchestration (sub-agents, swarms, teams), skill/plugin architectures, CLI-as-React-app (Ink), deferred tool loading, bridge patterns for IDE integration, and conversation state management. Triggers on: build CLI agent, tool system design, agent orchestration pattern, skill system architecture, permission system, IDE bridge, CLI React, Ink framework, AI developer tool, agent tool registry, or any question about building AI-powered CLI tools or agent systems.

Recommend the right LLM agent framework for a given use case. Covers framework comparison (LangChain, LangGraph, CrewAI, AutoGen, Agno, Dify, n8n, Semantic Kernel, Haystack, LlamaIndex), decision criteria (complexity, team size, vendor lock-in, self-hosting), and migration paths. Triggers on: which AI framework, agent framework comparison, LangChain vs, CrewAI vs, AutoGen vs, LangGraph vs, which LLM framework, agent orchestration, multi-agent framework, AI framework selection, or any question about choosing an AI/LLM agent framework.

Use when the user asks to review pull requests, analyze code changes, check for security issues in PRs, or assess code quality of diffs.

Design and architect RAG (Retrieval-Augmented Generation) pipelines. Covers vector DB selection, chunking strategies, hybrid retrieval (vector + knowledge graph), semantic caching, ingestion pipeline design, embedding model selection, and production deployment patterns. Triggers on: RAG, retrieval augmented generation, vector database, embeddings, chunking, FAISS, Qdrant, Milvus, pgvector, Weaviate, Pinecone, knowledge graph, Neo4j, semantic search, document Q&A, ingestion pipeline, reranking, hybrid search, or any question about building a RAG system.

Security checklist specifically for SaaS applications built with Next.js, Supabase, and Stripe. Covers authentication hardening, Row Level Security, Stripe webhook verification, secrets management, CSRF/CSP/CORS headers, input validation, rate limiting, DSGVO/GDPR compliance, and common anti-patterns found in real SaaS templates. Triggers on: SaaS security, Supabase security, Stripe security, SaaS checklist, secure SaaS, harden SaaS, SaaS audit, Next.js security, Supabase RLS audit, payment security, or any security review of a SaaS application.

트리거: "fastapi 만들어줘", "fastapi codegen", "fastapi 코드 생성", "fastapi 라우터 생성", "fastapi api 만들어줘" 수행: Python FastAPI 프로젝트의 Router·Pydantic Schema·Service·Dependency 계층을 자동 생성한다. async/await 패턴, 전역 에러 핸들러, 표준 응답 모델(JSONResponse), 타입 힌트를 완전히 적용한다. 출력: 디렉토리 구조 안내 + 각 파일 코드 블록 + 실행 방법 안내.