Software Development Skills

Send a notification, push notification, alert the user, remind the user. iOS push and local notification implementation — APNs setup, scheduling, rich content, actions, permission handling. Trigger on: 'notify the user', 'send a push', 'schedule a reminder', 'show a badge', 'background update', 'silent push', 'notification categories', 'ask for notification permission', or any work involving alerting users of events. Even indirect phrases like 'tell the user when it's done' or 'ping them' should trigger this skill.

VoiceOver, screen reader, accessible, disability, WCAG. iOS accessibility implementation and WCAG 2.1 AA compliance — VoiceOver labels, Dynamic Type, color contrast, touch targets, accessibility auditing. Trigger on: 'make this accessible', 'support assistive technologies', 'screen reader support', 'Dynamic Type', 'color contrast check', 'touch target too small', 'inclusive design', 'ADA compliance', 'can a blind user use this', or when any UI work should be checked for accessibility. For localizing accessibility labels, also see babel-localization.

Add a table, change the schema, database migration, Supabase schema. PostgreSQL/Supabase migration operations — creating, repairing, and pushing migrations, designing schemas, writing RLS policies, trigger functions. Trigger on: 'add a column', 'new database table', 'write a migration', 'fix migration history', 'RLS policy', 'enable row level security', 'trigger not working', or any hands-on schema change. For query optimization, indexing, and connection pooling, use supabase-postgres-best-practices instead.

Translate, Spanish, German, multiple languages, format currency for different countries. iOS string localization, currency formatting, date formatting, and pluralization rules. Trigger on: 'add French support', 'localize this screen', 'format money for Europe', 'date looks wrong in Japan', 'RTL layout', 'Arabic support', i18n, l10n, String Catalog, Localizable.strings, stringsdict, or any work making the app usable in multiple languages or regions. For localizing accessibility labels specifically, also see athena-accessibility.

Is our data safe, check for vulnerabilities, security posture, before we ship. Security scanning, vulnerability assessment, and compliance auditing for iOS apps — secrets management, OWASP Mobile Top 10, KYC/AML/PCI DSS, encryption audits. Trigger on: 'are we secure', 'audit security', 'scan for secrets', 'hardcoded API keys', 'check authentication', 'compliance review', 'data protection', or pre-launch security review. For security review of a specific PR or diff, use trailofbits-differential-review instead. For production crash investigation, use sentry-find-bugs.

Submit to App Store, App Store rejection, Apple guidelines, ready to ship. App Store submission compliance and Human Interface Guidelines. Trigger on: 'prepare for App Store review', 'will Apple reject this', 'privacy labels', 'App Store Connect', 'privacy policy', 'review guidelines', 'in-app purchase rules', 'got rejected', 'submission checklist', 'ready to launch', or any question about Apple's requirements for publishing. For Fastlane upload mechanics, use velocity-fastlane instead.

Use ANY TIME Swift code is written, modified, or created — even for 'small' changes. TDD-first Swift/SwiftUI development with hexagonal architecture, MVVM, and protocol-based DI. Triggers: implementing features, writing Swift code, creating views or viewmodels, refactoring, fixing bugs, adding a new screen, building a service, wiring dependencies, setting up DI. Covers Swift 6 strict concurrency, Sendable compliance, and error handling. If unsure whether to use this skill, use it — it is the default for all Swift implementation work. For code review without changes, use ios-review instead.

Done for now, wrap up, end of session, save progress, save my work, upload, publish, commit, push, sync. Git operations with conventional commits, safe push, and branch management. Trigger on: committing, pushing, branching, merge conflicts, tagging releases, 'upload changes', 'ship it', 'let me save this', or any signal the user is finished working and wants to preserve their changes. Also handles branch creation, conflict resolution, and trunk-based workflow. Enforces branch verification before every operation.

Test payments, Stripe CLI, webhook testing, test cards. Stripe CLI operations and payment flow testing — webhook forwarding, test event triggering, PaymentIntent creation, Connected Account management, test card reference. Trigger on: 'test a payment', 'forward webhooks locally', 'which test card for decline', 'stripe listen', 'stripe trigger', 'verify webhook delivery', 'test 3D Secure', 'simulate a refund', or any hands-on Stripe testing work. For Stripe integration architecture and API selection, use stripe-best-practices instead.

Check my code, is this correct, what do you think of this, review my changes, pre-merge check, PR feedback, look over my implementation. Comprehensive iOS code review covering architecture, SwiftUI patterns, concurrency, security, and accessibility. Use for code quality checks, architecture violation audits, pre-merge review, or any request for feedback on Swift/SwiftUI code. Trigger on 'does this look right', 'anything wrong here', 'review before I merge'. For implementing fixes, use forge-development. For security-focused PR review, use trailofbits-differential-review.

Check the logs, what happened, debug this, app crashed, nothing happens when I tap. iOS device and simulator log streaming, searching, filtering, and pattern analysis. Trigger on: 'check the console', 'what's in the logs', 'why isn't this working', 'app did something weird', 'trace the execution', 'diagnose this', 'read the crash log', or when debugging runtime behavior on device or simulator. Also use when correlating log output across components. For Sentry production crashes, use sentry-find-bugs instead.

Do these in parallel, split this into tasks, coordinate multiple things, too big for one agent. Multi-agent workflow coordination for complex development tasks — parallel execution, SDLC templates, dependency management, and escalation protocols. Trigger when: orchestrating multi-step workflows, running parallel reviews, managing emergency P0 response, structured bug fix pipelines, or the task involves 3+ files across different concerns. Also for 'handle all of this', 'do everything at once'. For single-skill work, invoke that skill directly instead.

Set up CI, GitHub Actions, automate builds, continuous integration. GitHub Actions CI/CD pipeline configuration for iOS apps — build/test/deploy workflows, caching strategies, quality gates, release automation. Trigger on: 'add CI to this project', 'configure GitHub Actions', 'CI is failing', 'optimize build pipeline', 'automate TestFlight deploys', 'add a workflow', 'manage CI secrets', or any CI/CD infrastructure work. For what Fastlane lanes do (build/sign/upload), use velocity-fastlane instead.

App is slow, takes too long to load, freezing, laggy, battery drain, memory leak. iOS performance profiling and optimization — launch time, memory analysis, retain cycles, CPU profiling, frame rate. Trigger on: 'why is this screen slow', 'app uses too much memory', 'scrolling is janky', 'UI is unresponsive', 'profile with Instruments', 'energy usage is high', 'app got killed in background', or any complaint about speed, responsiveness, or resource usage. For performance crashes (OOM, watchdog) appearing in Sentry, start with sentry-find-bugs.

App is crashing, production error, users are reporting issues, investigate this error. Production issue analysis using Sentry — stack traces, breadcrumbs, root cause hypothesis, and fix verification. Trigger on: 'why is this crashing', 'Sentry issue', 'debug production bug', crash reports, issue IDs (like 'PROJECT-123'), 'users can't log in', 'something broke in production', 'exception in the logs', or triaging Sentry backlog. Requires Sentry MCP server. For Sentry bot PR comments, use sentry-code-review instead.

Is this change safe, security implications of this PR, did we break any security. Security-focused differential code review for PRs, commits, and diffs — blast radius calculation, adversarial analysis, test coverage verification, vulnerability pattern detection. Trigger on: 'review this PR for security', 'could this introduce a vulnerability', 'check if the refactor broke security', 'what's the risk of merging this', or any security-focused review of specific changes. For broad security audits not tied to a diff, use cipher-security instead.

Build and upload, send to testers, TestFlight, sign the app, release to App Store. Fastlane lane execution for iOS build, test, and distribution automation — test suites, code signing with Match, TestFlight uploads, App Store submissions. Trigger on: 'deploy a build', 'upload to TestFlight', 'fix code signing', 'provisioning profile', 'run the test suite via Fastlane', 'archive the app', 'distribute to beta testers', or any build/sign/ship workflow. For CI/CD pipeline YAML configuration, use pipeline-cicd instead.