Skip to content

Add elite-frontend-design-2026 and bugbuster skills#10

Open
AcerThyRacer wants to merge 1 commit intoLeonxlnx:mainfrom
AcerThyRacer:main
Open

Add elite-frontend-design-2026 and bugbuster skills#10
AcerThyRacer wants to merge 1 commit intoLeonxlnx:mainfrom
AcerThyRacer:main

Conversation

@AcerThyRacer
Copy link
Copy Markdown

@AcerThyRacer AcerThyRacer commented Apr 18, 2026

This PR introduces two new skills to the collection:

🎨 elite-frontend-design-2026

A complete rework and modernization of the taste skill, rebuilt for April 2026 platform capabilities. Key highlights:

  • Expanded framework coverage: React 19 + Next.js 15+, Svelte 5 + SvelteKit 2, Vue 3.5+, Astro 5, SolidJS, Qwik 2, SwiftUI, Jetpack Compose, React Native New Architecture, Flutter, Tauri v2, Leptos/Dioxus
  • Deterministic design dials: DESIGN_VARIANCE, MOTION_INTENSITY, and VISUAL_DENSITY calibrate every output
  • Modern CSS baseline: Container queries, anchor positioning, view transitions, scroll-driven animations, OKLCH color, Tailwind v4 CSS-first config
  • GPU-only animation paths, WCAG 2.2 AA gates, and dependency verification protocol
  • Comprehensive pre-flight check matrix to catch slop before shipping

🐛 bugbuster

A brand-new skill focused on forensic bug detection across codebases. Key highlights:

  • Layered analysis: Concurrency, security, resource lifecycle, state machines, supply chain, and modern AI/agentic-system failure modes
  • Confidence & severity labeling: Every finding is labeled (CONFIRMED/HIGH/MEDIUM/LOW/SMELL) and severity-ranked (CRITICAL/HIGH/MEDIUM/LOW/INFO)
  • AI/agent-specific defects: Prompt injection via tool output, context window truncation, MCP handshake TOCTOU, streaming reader drops, unbounded tool-call loops, hierarchical memory staleness, and more
  • Differential diagnosis & root-cause forensics: Branching 5-Why analysis, Bayesian update, and minimal-diff fix proposals with regression-risk notes and test vectors

Summary by Sourcery

Add two new specialized skills for frontend design and forensic bug detection to the skills collection.

New Features:

  • Introduce the elite-frontend-design-2026 skill describing an opinionated, multi-framework frontend design and implementation playbook aligned with April 2026 capabilities.
  • Introduce the bugbuster skill defining a structured methodology for deep, high-signal bug hunting across traditional and AI/agent systems.

Documentation:

  • Document comprehensive guidelines, constraints, and checklists for using the elite-frontend-design-2026 design skill.
  • Document detailed analysis dials, bug-finding directives, advanced failure-mode patterns, and reporting structure for the bugbuster skill.

Summary by cubic

Add two new skills to raise output quality: elite-frontend-design-2026 for modern, multi-stack UI work and bugbuster for forensic, high-signal bug reviews. They codify 2026 platform rules, strict checklists, and clear severity/confidence labeling.

  • New Features
    • elite-frontend-design-2026
      • Expanded coverage: React 19/Next 15+, Svelte 5/Kit 2, Vue 3.5+, Astro 5, SwiftUI/Compose, React Native, Flutter, Tauri v2, Rust WASM.
      • Deterministic dials (DESIGN_VARIANCE, MOTION_INTENSITY, VISUAL_DENSITY) with a modern CSS baseline (container queries, anchor positioning, view transitions, scroll-driven animations, OKLCH, tailwindcss v4).
      • Strict framework rules, WCAG 2.2 AA and perf guardrails, dependency verification, and a pre-flight check matrix.
    • bugbuster
      • Layered analysis across concurrency, security, resource lifecycle, state machines, supply chain, and agent/LLM failure modes.
      • Mandatory severity and confidence labels with reproducible traces; strict no-fabrication and dependency checks.
      • Targets 2026 defects (prompt injection via tool output, context truncation, MCP TOCTOU, streaming leaks, unbounded loops) with a disciplined finding template for triage.

Written for commit 14a4a48. Summary will update on new commits.

Summary by CodeRabbit

Release Notes

  • Documentation
    • Added comprehensive BugBuster skill documentation with detailed review guidelines, verification requirements, severity labeling standards, and investigation methodologies.
    • Added Elite Polyglot Frontend Design Skill specification covering design frameworks, component standards, accessibility requirements, and performance guardrails across multiple frontend ecosystems.

- elite-frontend-design-2026: A complete rework of the taste skill with
  modern April 2026 platform capabilities, expanded framework coverage
  (React 19, Svelte 5, Vue 3.5+, Astro 5, SwiftUI, Jetpack Compose, etc.),
  deterministic design dials, dependency verification protocol, and
  comprehensive pre-flight check matrix.

- bugbuster: A new forensic bug-detection skill for finding bugs across
  codebases. Covers concurrency, security, resource lifecycle, state machines,
  supply chain, and modern AI/agentic-system failure modes.
Copilot AI review requested due to automatic review settings April 18, 2026 14:34
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 18, 2026

📝 Walkthrough

Walkthrough

Two new skill specification documents are introduced: BugBuster defines standardized bug-finding review directives with compliance rules, heuristics, and a forensic investigation architecture; Elite Polyglot Frontend Design 2026 establishes frontend design standards across multiple ecosystems with configurable design dials, platform-specific guidelines, and pre-flight checklists.

Changes

Cohort / File(s) Summary
BugBuster Review Skill
skills/bugbuster/SKILL.md
New specification document (445 lines) defining bug-finding review directives, configurable baseline parameters (suspicion level, analysis depth, blast radius), mandatory labeling schemas (SEVERITY, CONFIDENCE), repository/dependency verification requirements, prohibited patterns (fabricated CVEs, vague smells), cross-cutting heuristics (concurrency, resource lifecycle, idempotency, AI/agent-specific failure modes), and forensic investigation architecture with pre-flight checklist.
Elite Polyglot Frontend Design Skill
skills/elite-frontend-design-2026/SKILL.md
New specification document (686 lines) establishing frontend design standards with global design dials (variance, motion intensity, density), stack-selection heuristics across React, Vue, Svelte, SolidStart, Qwik, SwiftUI, Jetpack Compose, Flutter, Tauri, Leptos, Dioxus and other platforms, component model and data-flow standards, styling expectations (Tailwind v4 CSS-first), WCAG 2.2 AA accessibility gates, performance guardrails, forbidden patterns, motion/animation system constraints, and output contract requirements.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~28 minutes

Poem

🐰 Two skills take flight on springtime wind,
BugBuster hunts where bugs are pinned,
While Frontend's dials spin with grace—
Design and code find rightful place!
From Warren to Workshop, standards bloom,
Hopping forward, clearing the room! 🌱

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately summarizes the main change: adding two new skill files (elite-frontend-design-2026 and bugbuster) to the repository.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@sourcery-ai
Copy link
Copy Markdown

sourcery-ai Bot commented Apr 18, 2026

Reviewer's Guide

Adds two new skills to the codebase: an elite-frontend-design-2026 skill defining a highly opinionated April 2026-era frontend/UI design & implementation playbook, and a bugbuster skill defining a structured methodology for deep, forensic bug-finding and analysis across modern stacks and AI/agent systems.

Sequence diagram for bugbuster skill analyzing a pull request

sequenceDiagram
    actor User
    participant Assistant
    participant BugBusterSkill
    participant Repo as Repository

    User->>Assistant: Submit PR for bug review
    Assistant->>BugBusterSkill: Initialize with baseline dials
    BugBusterSkill->>BugBusterSkill: Apply user overrides to dials
    BugBusterSkill->>Repo: Fetch diff and referenced files
    Repo-->>BugBusterSkill: Return diff and file contents
    BugBusterSkill->>BugBusterSkill: Verify files and line numbers exist
    BugBusterSkill->>BugBusterSkill: Run language and framework heuristics
    BugBusterSkill->>BugBusterSkill: Apply bug hunting directives
    BugBusterSkill->>BugBusterSkill: Run AI agent specific checks
    BugBusterSkill->>BugBusterSkill: Construct findings with severity and confidence
    BugBusterSkill->>BugBusterSkill: Run pre-flight review checks
    BugBusterSkill-->>Assistant: Structured bug report for PR
    Assistant-->>User: Present ranked findings and minimal fix suggestions
Loading

Class diagram for elite-frontend-design-2026 skill structure

classDiagram
    class EliteFrontendDesign2026Skill {
      +string name
      +string description
      +int DESIGN_VARIANCE
      +int MOTION_INTENSITY
      +int VISUAL_DENSITY
      +selectStack(userContext)
      +applyDialOverrides(userPrompt)
      +generateUIArtifacts(requirements)
      +runPreFlightChecks(artifact)
    }

    class DialConfiguration {
      +int DESIGN_VARIANCE
      +int MOTION_INTENSITY
      +int VISUAL_DENSITY
      +setBaselineValues()
      +adjustForPromptKeywords(keywords)
      +mapAmbiguousBriefToDials(briefType)
    }

    class FrameworkMatrix {
      +selectWebStack(projectSignals)
      +selectMobileStack(projectSignals)
      +selectDesktopStack(projectSignals)
      +selectWasmStack(projectSignals)
    }

    class StackHeuristics {
      +detectFromFiles(files)
      +detectFromConfig(configFiles)
      +inferDefaultForWeb()
    }

    class StylingStandards {
      +applyTailwindV4Rules(projectTailwindVersion)
      +applyVanillaCSSCapabilities()
      +applyTypedStylingAlternatives(choice)
    }

    class DesignDirectives {
      +enforceTypographyRules()
      +enforceColorCalibration()
      +enforceLayoutPatterns()
      +enforceInteractiveStates()
    }

    class MotionSystem {
      +selectMotionLibrary(stack)
      +configureMotionFromDials(DESIGN_VARIANCE, MOTION_INTENSITY, VISUAL_DENSITY)
      +enforceGPUOnlyAnimations()
    }

    class AccessibilityGuardrails {
      +enforceWCAG22AA()
      +applyPlatformSpecificA11y(stack)
    }

    class PerformanceGuardrails {
      +enforceWebPerfTargets()
      +enforceMobilePerfTargets()
    }

    class DependencyVerificationProtocol {
      +verifyManifestForImport(manifest, dependency)
      +emitInstallCommandIfMissing(dependency, packageManager)
      +verifyTailwindVersionSyntax(manifest)
      +verifyRuntimeEnvironmentVersions()
    }

    class PreFlightCheckMatrix {
      +runArchitectureChecks(artifact)
      +runStylingChecks(artifact)
      +runLayoutChecks(artifact)
      +runInteractivityChecks(artifact)
      +runMotionChecks(artifact)
      +runAccessibilityChecks(artifact)
      +runPerformanceChecks(artifact)
      +runContentChecks(artifact)
      +runDependencyChecks(artifact)
      +runPlatformSpecificChecks(artifact)
    }

    EliteFrontendDesign2026Skill --> DialConfiguration : uses
    EliteFrontendDesign2026Skill --> FrameworkMatrix : uses
    FrameworkMatrix --> StackHeuristics : uses
    EliteFrontendDesign2026Skill --> StylingStandards : enforces
    EliteFrontendDesign2026Skill --> DesignDirectives : enforces
    EliteFrontendDesign2026Skill --> MotionSystem : configures
    EliteFrontendDesign2026Skill --> AccessibilityGuardrails : enforces
    EliteFrontendDesign2026Skill --> PerformanceGuardrails : enforces
    EliteFrontendDesign2026Skill --> DependencyVerificationProtocol : enforces
    EliteFrontendDesign2026Skill --> PreFlightCheckMatrix : validatesWith
    MotionSystem --> DialConfiguration : reads
    DesignDirectives --> DialConfiguration : reads
Loading

Class diagram for bugbuster skill structure

classDiagram
    class BugBusterSkill {
      +string name
      +string description
      +int SUSPICION_LEVEL
      +int ANALYSIS_DEPTH
      +int BLAST_RADIUS
      +analyzeDiff(diff)
      +analyzeRepository(repoScope)
      +generateFindings()
      +rankAndLabelFindings()
    }

    class BugBusterDials {
      +int SUSPICION_LEVEL
      +int ANALYSIS_DEPTH
      +int BLAST_RADIUS
      +setBaselineValues()
      +applyUserOverrides(request)
      +validateDialInteraction()
    }

    class Methodology {
      +verifyRepoFilesBeforeClaims()
      +enforceReproductionOrTrace()
      +labelConfidenceForFinding()
      +calibrateSeverity()
      +verifyDependenciesBeforeAPIClaims()
      +enforceNoFabrication()
    }

    class LanguageHeuristics {
      +analyzeTypeScriptJavaScript(file)
      +analyzePython(file)
      +analyzeRust(file)
      +analyzeGo(file)
      +analyzeKotlinJava(file)
      +analyzeSwift(file)
    }

    class FrameworkHeuristics {
      +analyzeReactNext(component)
      +analyzeDjangoFastAPI(handler)
      +analyzeVueSvelte(component)
      +analyzeAndroidCompose(component)
    }

    class BugHuntingDirectives {
      +applyDeterministicTraceAnalysis()
      +analyzeConcurrencyPatterns()
      +analyzeTrustBoundaries()
      +analyzeResourceLifecycles()
      +analyzeFailureStates()
      +analyzeDataAndSchemaPatterns()
      +analyzeIdempotency()
      +analyzeObservability()
      +analyzeMigrationsAndRollouts()
    }

    class CreativeProactivity {
      +detectPromptInjectionViaToolOutput()
      +detectContextWindowTruncation()
      +detectMCPHandshakeTOCTOU()
      +detectStreamingReaderLeaks()
      +detectToolCallLoops()
      +detectHierarchicalMemoryStaleness()
      +detectSupplyChainShifts()
    }

    class AnalysisGuardrails {
      +preventSpeculativeCVEs()
      +enforceProofBeforeAlarm()
      +enforceOneBugPerFinding()
      +separateDiffVsPreExistingFindings()
      +requireExplicitAssumptions()
      +orderFindingsBySeverity()
    }

    class ReportStructureEngine {
      +buildFindingTitle()
      +attachSeverityAndConfidence()
      +attachLocationAndTrigger()
      +describeImpactAndMechanism()
      +attachProposedFix()
      +attachRegressionRisk()
      +attachTestVector()
      +groupFindingsBySeverity()
      +summarizeCrossCuttingThemes()
      +recordOutOfScopeAreas()
      +recordUnknownsLedger()
    }

    class RootCauseForensicsEngine {
      +collectEvidence()
      +generateDifferentialDiagnosis()
      +applyBranchingFiveWhy()
      +classifyDefectArchetype()
      +proposeMinimalFixes()
      +analyzeRegressionRisk()
      +designTestVectors()
      +planBisection()
      +triangulateWithLogsAndTelemetry()
      +designReproductionStrategy()
    }

    class PreFlightReviewCheck {
      +verifyLineNumbers()
      +verifyLabelsForFindings()
      +verifyCriticalFindingsHaveRepro()
      +verifyDiffFocus()
      +verifyNoHallucinatedArtifacts()
      +verifyAgentSpecificDefectsReviewed()
      +verifyUnknownsLedger()
    }

    BugBusterSkill --> BugBusterDials : configuresWith
    BugBusterSkill --> Methodology : enforces
    BugBusterSkill --> LanguageHeuristics : uses
    BugBusterSkill --> FrameworkHeuristics : uses
    BugBusterSkill --> BugHuntingDirectives : applies
    BugBusterSkill --> CreativeProactivity : applies
    BugBusterSkill --> AnalysisGuardrails : enforces
    BugBusterSkill --> ReportStructureEngine : formatsWith
    BugBusterSkill --> RootCauseForensicsEngine : uses
    BugBusterSkill --> PreFlightReviewCheck : validatesWith
    BugHuntingDirectives --> BugBusterDials : reads
    CreativeProactivity --> BugBusterDials : reads
    AnalysisGuardrails --> BugBusterDials : reads
Loading

Flow diagram for bugbuster forensic review process

graph TD
    A["Start review request"] --> B["Load BugBusterSkill with baseline dials"]
    B --> C["Apply user overrides to SUSPICION_LEVEL, ANALYSIS_DEPTH, BLAST_RADIUS"]
    C --> D["Verify repository files and manifests are available"]
    D --> E["Scope analysis to diff or requested files"]
    E --> F["Run language and framework heuristics on scoped code"]
    F --> G["Apply bug hunting directives
(trace, concurrency, boundaries, lifecycle)"]
    G --> H["Apply creative proactivity checks
(agent and AI-specific defects)"]
    H --> I["Aggregate raw issues"]
    I --> J["For each issue: reproduce or construct invariant-violating trace"]
    J --> K["Label each finding with severity and confidence"]
    K --> L["Build structured findings using report template"]
    L --> M["Run pre-flight review check
(no fabrication, proper ordering, diff focus)"]
    M --> N["Output triage-ready bug report"]
Loading

File-Level Changes

Change Details Files
Introduce the elite-frontend-design-2026 skill with a comprehensive 2026-era frontend/UI design and implementation specification.
  • Create a new SKILL.md that defines high-level behavior for a polyglot frontend design engineer across modern web, mobile, desktop, and WASM stacks.
  • Specify framework- and platform-specific rules for React 19/Next 15, Svelte 5/SvelteKit 2, Vue 3.5/Nuxt 4, Astro 5, Solid, Qwik, SwiftUI, Jetpack Compose, React Native New Architecture, Flutter, Tauri v2, and Rust frontends.
  • Define deterministic design dials (DESIGN_VARIANCE, MOTION_INTENSITY, VISUAL_DENSITY) that gate downstream rules and influence layout, motion, and density decisions.
  • Encode detailed modern CSS/Tailwind v4 standards, motion and animation systems, accessibility (WCAG 2.2 AA) mandates, and performance guardrails.
  • Add anti-slop and anti-AI-tell constraints covering typography, color, layout patterns, component states, and dependency verification, plus a pre-flight checklist and output contract for all generated UI artifacts.
skills/elite-frontend-design-2026/SKILL.md
Introduce the bugbuster skill with a rigorous, layered methodology for forensic bug detection and structured reporting.
  • Create a new SKILL.md that defines the BugBuster persona, including baseline dials (SUSPICION_LEVEL, ANALYSIS_DEPTH, BLAST_RADIUS) driving review behavior.
  • Specify mandatory repo-verification, dependency-verification, and no-fabrication rules, along with language- and framework-aware bug-hunting heuristics.
  • Define detailed directives for concurrency, trust boundaries, resource lifecycles, data/schema handling, idempotency, observability, migrations, and rollout safety.
  • Add an extensive catalog of modern bug patterns, with special emphasis on LLM/agentic-system defects (prompt injection, context truncation, tool-call loops, MCP issues, RAG staleness, supply-chain risks).
  • Establish a strict report structure, confidence/severity labeling scheme, root-cause forensics paradigm, and pre-flight checklist to standardize BugBuster findings and outputs.
skills/bugbuster/SKILL.md

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link
Copy Markdown

@sourcery-ai sourcery-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've found 1 issue, and left some high level feedback:

  • Both skills define their own dependency verification rules; consider extracting a shared, referenced section for manifest/version checks so that future updates to the protocol don’t diverge between elite-frontend-design-2026 and bugbuster.
  • The elite-frontend-design-2026 skill hardcodes many specific version floors and feature assumptions (e.g., Tailwind v4, React 19, container queries baseline availability); it may be worth briefly stating how the assistant should behave when the detected project stack predates those capabilities to avoid conflicting guidance.
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- Both skills define their own dependency verification rules; consider extracting a shared, referenced section for manifest/version checks so that future updates to the protocol don’t diverge between `elite-frontend-design-2026` and `bugbuster`.
- The `elite-frontend-design-2026` skill hardcodes many specific version floors and feature assumptions (e.g., Tailwind v4, React 19, container queries baseline availability); it may be worth briefly stating how the assistant should behave when the detected project stack predates those capabilities to avoid conflicting guidance.

## Individual Comments

### Comment 1
<location path="skills/elite-frontend-design-2026/SKILL.md" line_range="451" />
<code_context>
+- Oversaturated accents (`#ff00ff`, `#00ffff`).
+- Text-fill gradients on large headers ("text-transparent bg-clip-text bg-gradient-to-r from-purple-500 to-pink-500").
+- Custom mouse cursors.
+- Skeumorphic "glow behind card" effects.
+- Default Tailwind colors used verbatim (`bg-blue-500`, `text-gray-700`) in premium contexts — customize via the `@theme` block.
+
</code_context>
<issue_to_address>
**suggestion (typo):** Minor spelling correction: "Skeuomorphic" instead of "Skeumorphic".

Please update this bullet to use the correct spelling: `Skeuomorphic "glow behind card" effects.`

```suggestion
- Skeuomorphic "glow behind card" effects.
```
</issue_to_address>

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

- Oversaturated accents (`#ff00ff`, `#00ffff`).
- Text-fill gradients on large headers ("text-transparent bg-clip-text bg-gradient-to-r from-purple-500 to-pink-500").
- Custom mouse cursors.
- Skeumorphic "glow behind card" effects.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

suggestion (typo): Minor spelling correction: "Skeuomorphic" instead of "Skeumorphic".

Please update this bullet to use the correct spelling: Skeuomorphic "glow behind card" effects.

Suggested change
- Skeumorphic "glow behind card" effects.
- Skeuomorphic "glow behind card" effects.

Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds two new instruction “skills” under skills/ to expand the repo’s guidance library: one for premium cross-framework frontend design in April 2026, and one for high-rigor forensic bug detection.

Changes:

  • Added elite-frontend-design-2026 skill with framework matrix, modern CSS/motion/a11y rules, and a pre-flight checklist.
  • Added bugbuster skill with dial-driven methodology, confidence/severity labeling requirements, and advanced failure-mode hunting patterns.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
skills/elite-frontend-design-2026/SKILL.md Introduces a new “elite” frontend design skill with multi-stack standards and comprehensive guardrails.
skills/bugbuster/SKILL.md Introduces a new bug-hunting skill emphasizing evidence, labeling, and layered analysis patterns.

Comment on lines +1 to +4
---
name: elite-frontend-design-2026
description: Senior polyglot UI/UX engineer that architects premium interfaces across all modern frontend stacks — React 19, Next.js 15+, Svelte 5, Vue 3.5+, SolidJS, Astro 5, Qwik 2, SwiftUI, Jetpack Compose, React Native New Architecture, Flutter, Tauri v2, and Rust WASM (Leptos/Dioxus). Enforces April 2026 platform capabilities (container queries, anchor positioning, view transitions, scroll-driven animations, OKLCH color, Tailwind v4 CSS-first config, React 19 Actions, Svelte 5 runes, Vue Vapor Mode). Overrides LLM cliché biases with metric-driven dials, strict component architecture, GPU-only animation paths, WCAG 2.2 AA accessibility gates, and a dependency-verification protocol. Trigger for any UI, component, page, dashboard, mobile screen, or design-engineering task in any language.
license: MIT
Copy link

Copilot AI Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This new skill directory isn't referenced in the repo’s skill indexes (e.g., skill.sh, README.md skills table, and skills/llms.txt). If those are the canonical discovery/registry points, add an entry for elite-frontend-design-2026 so users can find/use it via the documented flows.

Copilot uses AI. Check for mistakes.
Comment thread skills/bugbuster/SKILL.md
Comment on lines +1 to +4
---
name: bugbuster
description: Senior Principal Engineer specializing in forensic bug detection across codebases. Overrides default LLM biases toward shallow syntactic review. Enforces layered analysis covering concurrency, security, resource lifecycle, state machines, supply chain, and modern AI/agentic-system failure modes calibrated to April 2026 standards.
---
Copy link

Copilot AI Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

bugbuster is added under skills/, but it’s not listed in the repo’s skill indexes (skill.sh, README.md skills table, skills/llms.txt). If those lists are used for discovery/registry, add bugbuster there so it’s reachable via the standard install/usage paths.

Copilot uses AI. Check for mistakes.
---
name: elite-frontend-design-2026
description: Senior polyglot UI/UX engineer that architects premium interfaces across all modern frontend stacks — React 19, Next.js 15+, Svelte 5, Vue 3.5+, SolidJS, Astro 5, Qwik 2, SwiftUI, Jetpack Compose, React Native New Architecture, Flutter, Tauri v2, and Rust WASM (Leptos/Dioxus). Enforces April 2026 platform capabilities (container queries, anchor positioning, view transitions, scroll-driven animations, OKLCH color, Tailwind v4 CSS-first config, React 19 Actions, Svelte 5 runes, Vue Vapor Mode). Overrides LLM cliché biases with metric-driven dials, strict component architecture, GPU-only animation paths, WCAG 2.2 AA accessibility gates, and a dependency-verification protocol. Trigger for any UI, component, page, dashboard, mobile screen, or design-engineering task in any language.
license: MIT
Copy link

Copilot AI Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

license: MIT is the only extra YAML front-matter key used across skills; other SKILL.md files only include name and description. If the skills loader expects a fixed schema, this extra key may be ignored or could break parsing—consider removing it or adding license metadata consistently across all skills after confirming tool compatibility.

Suggested change
license: MIT

Copilot uses AI. Check for mistakes.
Copy link
Copy Markdown

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 14a4a485f7

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread skills/bugbuster/SKILL.md
@@ -0,0 +1,445 @@
---
name: bugbuster
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Register new skills in repository discovery manifests

Adding this skill file (and the paired elite-frontend-design-2026 file) without updating skill.sh and skills/llms.txt leaves both new skills undiscoverable through the repo’s own registry workflow: bash skill.sh bugbuster / bash skill.sh elite-frontend-design-2026 currently return empty output because neither name is in the SKILLS map, and the skills index file is stale as well. Please add both entries wherever the repository enumerates available skills.

Useful? React with 👍 / 👎.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 4

🧹 Nitpick comments (6)
skills/bugbuster/SKILL.md (2)

213-213: Verify JavaScript for...in prototype pollution interaction.

Line 213 states "for...in Over Array: Iterates enumerable keys, including prototype pollution additions." While for...in does iterate enumerable properties including those on the prototype chain, calling this a direct "prototype pollution" issue may be slightly imprecise. The issue is that for...in iterates inherited enumerable properties, which becomes a problem if prototype pollution has occurred elsewhere. Consider clarifying that this is a consequence of prototype pollution rather than the pollution itself.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/bugbuster/SKILL.md` at line 213, Update the phrasing for the
"`for...in` Over Array" entry so it clarifies that `for...in` itself iterates
enumerable properties (including inherited ones) and that iterating inherited
properties becomes a problem only if prototype pollution has occurred elsewhere;
replace the current assertion that it "includes prototype pollution additions"
with a note like "iterates inherited enumerable properties — which can expose
prototype-polluted properties if prototype pollution has occurred."

223-223: Clarify Python datetime comparison behavior.

Line 223 states "Comparisons with aware datetimes raise." This is imprecise—comparing naive and aware datetimes raises a TypeError, but this isn't about "raising" in general. Consider rephrasing to: "Comparisons with aware datetimes raise TypeError" for technical precision.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/bugbuster/SKILL.md` at line 223, Update the phrasing that follows the
bullet "* **`datetime.utcnow()` Naive:** Comparisons with aware datetimes
raise." to explicitly state the exception type: change it to something like
"Comparisons between naive and aware datetimes raise a TypeError; use
datetime.now(timezone.utc) for aware datetimes." Target the bullet that contains
"`datetime.utcnow()` Naive" and replace the imprecise wording with the clarified
sentence mentioning `TypeError`.
skills/elite-frontend-design-2026/SKILL.md (4)

567-572: Add language identifier to grid composition code block.

The grid composition example would benefit from a language identifier. Consider using plaintext or text for this layout diagram.

📝 Proposed fix
-```
+```plaintext
 Row 1: grid-cols-3  →  card-wide (col-span-2) | card-square
 Row 2: grid-cols-3  →  card-square | card-wide (col-span-2)
 Row 3: grid-cols-2  →  card-tall | card-tall
</details>

As per coding guidelines from static analysis, fenced code blocks should have a language specified.

<details>
<summary>🤖 Prompt for AI Agents</summary>

Verify each finding against the current code and only fix it if needed.

In @skills/elite-frontend-design-2026/SKILL.md around lines 567 - 572, Locate
the fenced code block that contains the grid composition diagram (the lines
starting "Row 1: grid-cols-3 → card-wide (col-span-2) | card-square", "Row 2:
grid-cols-3 → card-square | card-wide (col-span-2)", and "Row 3: grid-cols-2
→ card-tall | card-tall") and add a language identifier to the opening fence
(for example change toplaintext or ```text) so the fenced block includes
the language specifier.


</details>

---

`25-29`: **Add language identifier to fenced code block.**

The code block defining the dials would benefit from a language identifier for better syntax highlighting and tooling support. Consider adding `plaintext` or `yaml` as the language identifier.


<details>
<summary>📝 Proposed fix</summary>

```diff
-```
+```plaintext
 DESIGN_VARIANCE:  8    (1 = perfect symmetry  →  10 = artsy chaos)
 MOTION_INTENSITY: 6    (1 = fully static      →  10 = cinematic physics)
 VISUAL_DENSITY:   4    (1 = art gallery       →  10 = Bloomberg terminal)
 ```
```
</details>

As per coding guidelines from static analysis, fenced code blocks should have a language specified.

<details>
<summary>🤖 Prompt for AI Agents</summary>

Verify each finding against the current code and only fix it if needed.

In @skills/elite-frontend-design-2026/SKILL.md around lines 25 - 29, The fenced
code block containing the dial definitions (DESIGN_VARIANCE, MOTION_INTENSITY,
VISUAL_DENSITY) lacks a language identifier; update the opening triple-backtick
to include a language such as plaintext or yaml (e.g., ```plaintext) so the
block is properly highlighted and complies with the static-analysis guideline
for fenced code blocks.


</details>

---

`145-145`: **Clarify availability of iOS 19-specific features.**

The reference to "Liquid Glass / Material 2026" features "introduced for iOS 19" may be premature for an April 2026 document, as iOS 19 would typically be in beta at this time. Consider either removing iOS 19-specific features or clearly marking them as beta/preview with appropriate caveats about their availability.

<details>
<summary>🤖 Prompt for AI Agents</summary>

```
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` at line 145, The line mentioning
".glassEffect()" and ".regularMaterial" uses an iOS 19-specific API; update the
text to either remove the iOS 19 claim or explicitly mark ".glassEffect()" as
beta/preview for iOS 19 (with a short caveat about limited availability and
instability) and keep ".regularMaterial" as the documented fallback for older
targets, so readers know to use ".regularMaterial" when ".glassEffect()" isn't
available.
```

</details>

---

`234-251`: **Consider adding browser compatibility caveats for baseline features.**

While the document confidently states these CSS features are "Baseline-available in April 2026," some features like anchor positioning and `@starting-style` may have varying levels of browser support. Consider adding brief notes about any remaining compatibility considerations or graceful degradation strategies, especially for features that were recently standardized.

<details>
<summary>🤖 Prompt for AI Agents</summary>

```
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` around lines 234 - 251, Add
concise browser-compatibility caveats to the "7.2 Vanilla CSS (2026
capabilities)" section: for each potentially inconsistent feature (reference
`anchor-name` / `position-anchor`, `@starting-style`, Popover API attributes
`popover`/`popovertarget`, View Transitions `document.startViewTransition()` and
`@view-transition`, scroll-driven `animation-timeline`, and `:has()`), append a
short parenthetical note like "(check browser support)" or a one-sentence
fallback strategy; include a single footnote or sentence pointing to
authoritative support trackers (MDN / Can I Use), and suggest
graceful-degradation patterns (feature-detect with CSS/JS, fallback to
`position: absolute`/JS positioning, use IntersectionObserver if
`animation-timeline` unsupported, and avoid reliance on `@starting-style` where
unsupported).
```

</details>

</blockquote></details>

</blockquote></details>

<details>
<summary>🤖 Prompt for all review comments with AI agents</summary>

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @skills/elite-frontend-design-2026/SKILL.md:

  • Line 54: Update the SwiftUI table row that currently reads "SwiftUI (iOS 18+ /
    iOS 19) | Swift 6, iOS 18" by removing the incorrect "iOS 19" reference and
    replacing it with the correct current version (e.g., "iOS 26" or "iOS 26+" for
    forward compatibility); ensure the row reads consistently (for example: "SwiftUI
    (iOS 18+ / iOS 26)" or "SwiftUI (iOS 18+ / iOS 26+)") and keep the rest of the
    cell ("Swift 6, iOS 18" and the description) unchanged.
  • Line 357: Update the inaccurate package note by changing the phrase "motion
    (formerly framer-motion)" to indicate both packages coexist; e.g., say
    "motion (recommended) or framer-motion" or add a short parenthetical that
    motion is the newer entry point while framer-motion remains maintained;
    modify the text that currently mentions "motion" and "framer-motion" so it
    reflects this coexistence and recommendation.
  • Line 111: Update the Vue Vapor Mode version requirement text to reference the
    correct minimum Vue release: change the mention of "Vue 3.5+" to "Vue 3.6+" in
    the paragraph that begins "Vue Vapor Mode:" so it accurately reflects that
    Vapor Mode was introduced in Vue 3.6.0 (alpha) and remains in beta; keep the
    rest of the note about trade-offs intact.
  • Around line 217-232: Update the phrasing about Tailwind v4 config files:
    replace "no longer used" with "no longer required" and add a brief note that
    tailwind.config.{js,ts} can still be loaded via the @config directive for
    advanced scenarios; refer to the tailwind.config.{js,ts} symbol and the
    @config directive so readers know where to find/enable legacy config support
    while keeping the CSS-first guidance (@theme, @utility) intact.

Nitpick comments:
In @skills/bugbuster/SKILL.md:

  • Line 213: Update the phrasing for the "for...in Over Array" entry so it
    clarifies that for...in itself iterates enumerable properties (including
    inherited ones) and that iterating inherited properties becomes a problem only
    if prototype pollution has occurred elsewhere; replace the current assertion
    that it "includes prototype pollution additions" with a note like "iterates
    inherited enumerable properties — which can expose prototype-polluted properties
    if prototype pollution has occurred."
  • Line 223: Update the phrasing that follows the bullet "* datetime.utcnow()
    Naive:
    Comparisons with aware datetimes raise." to explicitly state the
    exception type: change it to something like "Comparisons between naive and aware
    datetimes raise a TypeError; use datetime.now(timezone.utc) for aware
    datetimes." Target the bullet that contains "datetime.utcnow() Naive" and
    replace the imprecise wording with the clarified sentence mentioning
    TypeError.

In @skills/elite-frontend-design-2026/SKILL.md:

  • Around line 567-572: Locate the fenced code block that contains the grid
    composition diagram (the lines starting "Row 1: grid-cols-3 → card-wide
    (col-span-2) | card-square", "Row 2: grid-cols-3 → card-square | card-wide
    (col-span-2)", and "Row 3: grid-cols-2 → card-tall | card-tall") and add a
    language identifier to the opening fence (for example change toplaintext
    or ```text) so the fenced block includes the language specifier.
  • Around line 25-29: The fenced code block containing the dial definitions
    (DESIGN_VARIANCE, MOTION_INTENSITY, VISUAL_DENSITY) lacks a language identifier;
    update the opening triple-backtick to include a language such as plaintext or
    yaml (e.g., ```plaintext) so the block is properly highlighted and complies with
    the static-analysis guideline for fenced code blocks.
  • Line 145: The line mentioning ".glassEffect()" and ".regularMaterial" uses an
    iOS 19-specific API; update the text to either remove the iOS 19 claim or
    explicitly mark ".glassEffect()" as beta/preview for iOS 19 (with a short caveat
    about limited availability and instability) and keep ".regularMaterial" as the
    documented fallback for older targets, so readers know to use ".regularMaterial"
    when ".glassEffect()" isn't available.
  • Around line 234-251: Add concise browser-compatibility caveats to the "7.2
    Vanilla CSS (2026 capabilities)" section: for each potentially inconsistent
    feature (reference anchor-name / position-anchor, @starting-style, Popover
    API attributes popover/popovertarget, View Transitions
    document.startViewTransition() and @view-transition, scroll-driven
    animation-timeline, and :has()), append a short parenthetical note like
    "(check browser support)" or a one-sentence fallback strategy; include a single
    footnote or sentence pointing to authoritative support trackers (MDN / Can I
    Use), and suggest graceful-degradation patterns (feature-detect with CSS/JS,
    fallback to position: absolute/JS positioning, use IntersectionObserver if
    animation-timeline unsupported, and avoid reliance on @starting-style where
    unsupported).

</details>

<details>
<summary>🪄 Autofix (Beta)</summary>

Fix all unresolved CodeRabbit comments on this PR:

- [ ] <!-- {"checkboxId": "4b0d0e0a-96d7-4f10-b296-3a18ea78f0b9"} --> Push a commit to this branch (recommended)
- [ ] <!-- {"checkboxId": "ff5b1114-7d8c-49e6-8ac1-43f82af23a33"} --> Create a new PR with the fixes

</details>

---

<details>
<summary>ℹ️ Review info</summary>

<details>
<summary>⚙️ Run configuration</summary>

**Configuration used**: defaults

**Review profile**: CHILL

**Plan**: Pro

**Run ID**: `435d12d7-a58d-45b6-b82f-e581cef19783`

</details>

<details>
<summary>📥 Commits</summary>

Reviewing files that changed from the base of the PR and between d3696fbabe59898448c7ee22bcacc912e0f9c3cd and 14a4a485f7f574446cdb074d92f2dbe2ca6d300a.

</details>

<details>
<summary>📒 Files selected for processing (2)</summary>

* `skills/bugbuster/SKILL.md`
* `skills/elite-frontend-design-2026/SKILL.md`

</details>

</details>

<!-- This is an auto-generated comment by CodeRabbit for review status -->

| A | Astro 5 | Astro 5.0 | Content-heavy sites, marketing, blogs, docs — Server Islands by default. |
| A | SolidJS 1.9+ / SolidStart | Solid 1.9 | Ultra-fast reactivity without VDOM; great for real-time UIs. |
| B | Qwik 2 + Qwik City | Qwik 2.0 | Resumability; instant-load marketing pages. |
| S | SwiftUI (iOS 18+ / iOS 19) | Swift 6, iOS 18 | Apple platforms; use Observation framework and `@Observable`. |
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

When is iOS 19 expected to be released? What is the typical iOS release schedule?

💡 Result:

iOS 19 was skipped; Apple rebranded to year-based versioning starting with iOS 26, released on September 15, 2025. There is no iOS 19 release. The next version, iOS 27, is expected to be announced at WWDC on June 8, 2026, with developer beta that day, public beta in July 2026, and public release around mid-September 2026 (likely September 14). Apple's typical iOS release schedule is: announcement at WWDC in early June, developer betas starting immediately after, public betas in July, and stable public release in mid-September alongside new iPhones. Historical examples: iOS 26 (Sep 15, 2025), iOS 18 (Sep 16, 2024), iOS 17 (Sep 18, 2023).

Citations:


Remove the iOS 19 reference from the SwiftUI row.

iOS 19 does not exist. Apple switched to year-based versioning; as of April 2026, iOS 26 is current, with iOS 27 expected in September 2026. The row should reference only iOS 26, or iOS 26+ if forward-compatibility is intended.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` at line 54, Update the SwiftUI
table row that currently reads "SwiftUI (iOS 18+ / iOS 19) | Swift 6, iOS 18" by
removing the incorrect "iOS 19" reference and replacing it with the correct
current version (e.g., "iOS 26" or "iOS 26+" for forward compatibility); ensure
the row reads consistently (for example: "SwiftUI (iOS 18+ / iOS 26)" or
"SwiftUI (iOS 18+ / iOS 26+)") and keep the rest of the cell ("Swift 6, iOS 18"
and the description) unchanged.

- **`<script setup>` is mandatory.** No Options API in new code.
- **`defineModel()`** replaces manual `v-model` prop/emit pairs.
- **Reactive props destructuring** is stable — destructure `const { foo } = defineProps<{...}>()` and it stays reactive.
- **Vue Vapor Mode:** for performance-critical islands, opt in to Vapor Mode (no VDOM, compile-to-direct-DOM). Mention the trade-off: smaller, faster, but smaller ecosystem support.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🌐 Web query:

What is Vue Vapor Mode and is it available in Vue 3.5?

💡 Result:

Vue Vapor Mode is an opt-in compilation mode for Vue Single-File Components (SFCs) that skips the Virtual DOM at runtime. The compiler generates direct DOM-update code using Vue's reactive system, resulting in smaller bundle sizes (e.g., 65% reduction in Hello World app), lower memory usage (42% less), and faster updates (up to 66% faster in list diffing benchmarks). It supports Composition API with <script setup vapor> and a subset of features (no Options API, limited SSR/Transitions/KeepAlive in early versions). Vapor components can mix with VDOM via vaporInteropPlugin or createVaporApp for pure Vapor apps. It is not available in Vue 3.5, which focuses on reactivity optimizations, reactive props destructure, SSR improvements, and other features without Vapor Mode mentions. Vapor Mode was merged via PR #12359 into the minor branch and first appeared in Vue 3.6.0-alpha.1 (July 2025), with betas continuing into March 2026 (e.g., 3.6.0-beta.9). As of 2026-04-18, Vue 3.5 remains the stable release (up to 3.5.32), while 3.6 is in beta/prerelease.

Citations:


Correct Vue version requirement for Vapor Mode.

Vue Vapor Mode is not available in Vue 3.5—it was first released in Vue 3.6.0-alpha.1 (July 2025) and remains in beta as of April 2026. Update the document to reference "Vue 3.6+" instead of "Vue 3.5+" when discussing Vapor Mode.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` at line 111, Update the Vue Vapor
Mode version requirement text to reference the correct minimum Vue release:
change the mention of "Vue 3.5+" to "Vue 3.6+" in the paragraph that begins
"**Vue Vapor Mode:**" so it accurately reflects that Vapor Mode was introduced
in Vue 3.6.0 (alpha) and remains in beta; keep the rest of the note about
trade-offs intact.

Comment on lines +217 to +232
- **CSS-first config.** The `tailwind.config.{js,ts}` file is no longer used. Configuration lives in CSS via `@theme` and `@utility`:
```css
@import "tailwindcss";
@theme {
--color-accent: oklch(68% 0.19 145);
--font-display: "Geist", sans-serif;
--radius-card: 2rem;
}
```
- **PostCSS plugin:** use `@tailwindcss/postcss` — **never** `tailwindcss` as a PostCSS plugin (that was v3 syntax and breaks v4 builds).
- **Vite plugin** (`@tailwindcss/vite`) is the fastest path for Vite projects.
- **No `content` array.** v4 auto-detects.
- **Container queries are first-class:** `@container` utilities (`@lg:grid-cols-3`) work out of the box.
- **Dynamic utilities:** `w-[72rem]`, `text-[13px]`, `grid-cols-[1fr_auto_1fr]` — use them; they compile.
- **CSS variables are real CSS variables.** Every theme token is exposed as `--color-accent`, `--font-display`, etc. Use them directly in arbitrary values: `bg-[--color-accent]`.
- **Version detection:** inspect `package.json`. If `tailwindcss@^3`, do not emit v4 syntax. If `tailwindcss@^4`, do not emit `tailwind.config.ts` edits.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

What is the configuration system for Tailwind CSS v4? Does it use CSS-first @theme blocks?

💡 Result:

Tailwind CSS v4 uses a CSS-first configuration system with @theme blocks, replacing the traditional JavaScript tailwind.config.js file. Customizations like design tokens (colors, fonts, breakpoints) are defined directly in CSS using the @theme directive after importing Tailwind. Example: @import "tailwindcss"; @theme { --font-display: "Satoshi", "sans-serif"; --breakpoint-3xl: 1920px; --color-avocado-500: oklch(0.84 0.18 117.33); } This generates corresponding utility classes (e.g., font-display, 3xl:, bg-avocado-500) and exposes values as CSS variables on :root. Legacy JS configs can still be loaded via @config if needed, but CSS-first is the primary approach with zero-config by default for content detection.

Citations:


🌐 Web query:

Tailwind CSS v4 PostCSS plugin setup and configuration @tailwindcss/postcss``

💡 Result:

To set up and configure the Tailwind CSS v4 PostCSS plugin (@tailwindcss/postcss): 1. Install the required packages: npm install tailwindcss @tailwindcss/postcss postcss 2. Configure your postcss.config.mjs (or postcss.config.js): export default { plugins: { "@tailwindcss/postcss": {}, } } Note: Remove 'postcss-import' and 'autoprefixer' if previously used, as they are handled automatically in v4. 3. In your main CSS file (e.g., src/input.css), import Tailwind: @import "tailwindcss"; 4. Run your build process (e.g., npm run dev). For manual setups, use PostCSS CLI: npx postcss src/input.css -o dist/output.css --watch 5. Link the output CSS in your HTML and start using Tailwind classes. Key changes from v3: The PostCSS plugin is now in a separate @tailwindcss/postcss package (not tailwindcss directly). Use @import instead of @tailwind directives. Configuration is CSS-first with @theme (optional, zero-config by default). Content paths in tailwind.config.js if needed for custom scanning.

Citations:


🌐 Web query:

Tailwind CSS v4 Vite plugin @tailwindcss/vite setup

💡 Result:

To set up Tailwind CSS v4 with the @tailwindcss/vite plugin in a Vite project: 1. Create a new Vite project (if needed): npm create vite@latest my-project cd my-project 2. Install the packages: npm install tailwindcss @tailwindcss/vite 3. Configure the Vite plugin in vite.config.ts (or vite.config.js): import { defineConfig } from 'vite' import tailwindcss from '@tailwindcss/vite' export default defineConfig({ plugins: [tailwindcss], }) 4. Add to your main CSS file (e.g., src/style.css or src/index.css): @import "tailwindcss"; 5. Ensure the CSS is imported in your HTML or entry point (e.g., or via JS import). 6. Run the dev server: npm run dev Start using Tailwind classes in your HTML/JSX/TSX files. No tailwind.config.js or content configuration is needed; v4 auto-detects content. This uses the official first-party Vite plugin for optimal performance, replacing the old PostCSS setup.

Citations:


🌐 Web query:

Tailwind CSS v4 container queries and dynamic utility classes

💡 Result:

Tailwind CSS v4 introduces native support for container queries and enhanced dynamic utility capabilities. Container Queries: - Mark a parent element with the @container class to establish a query container. - Use @sm, @md, etc., prefixes on child utilities for min-width queries (mobile-first, applies at target size and above). - Use @max-sm, @max-md for max-width queries. - Combine for ranges, e.g., @sm:@max-lg:flex-row. - Default breakpoints: @3xs (16rem) to @7xl (80rem). - Customize via --container-* CSS variables in @theme. - Supports container query units like cqw (container query width), e.g., w-[50cqw]. - No plugin needed; built-in since v4.0 alpha (released Jan 2025). Dynamic Utility Classes: - Many utilities now accept arbitrary numbers without config, e.g., grid-cols-15, px-7.5 (derived from --spacing scale). - Spacing utilities (px-, mt-, w-, etc.) dynamically compute from --spacing CSS var. - Arbitrary values enhanced: [value] syntax generates on-demand; supports CSS vars like fill-[var(--my-color)], or shorthand fill-(--my-brand-color). - Functional utilities via @utility in CSS: e.g., @utility tab- { tab-size: --value(--tab-size-*); } for tab-4, tab-[8]. - Supports theme values, bare values (inherit), arbitrary ([length]), modifiers (/50). - Custom utilities with addUtilities/matchUtilities APIs available (v3-like, limited). - Runtime dynamic classes (e.g., bg-${color} from API) don't work due to build-time compilation; use safelist, inline styles, or CSS vars for truly dynamic needs. - Arbitrary properties: [clip-path:circle(50%)]. Examples: Container:

Dynamic:
Official docs: tailwindcss.com/docs/responsive-design (containers), tailwindcss.com/blog/tailwindcss-v4 (overview), tailwindcss.com/docs/adding-custom-styles (custom/dynamic utils). v4.0 released Jan 22, 2025.

Citations:


Clarify the status of Tailwind v4 config files—they are optional, not deprecated.

The document correctly describes Tailwind v4's CSS-first architecture: the @theme block, @tailwindcss/postcss PostCSS plugin, and @tailwindcss/vite Vite plugin are all accurately presented. Container queries, dynamic utilities, and CSS variable exposure are confirmed features.

One clarification: tailwind.config.{js,ts} files are no longer required (zero-config by default), but they can still be loaded via the @config directive if needed for advanced scenarios. Rephrase to "no longer required" rather than "no longer used" for precision.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` around lines 217 - 232, Update
the phrasing about Tailwind v4 config files: replace "no longer used" with "no
longer required" and add a brief note that `tailwind.config.{js,ts}` can still
be loaded via the `@config` directive for advanced scenarios; refer to the
`tailwind.config.{js,ts}` symbol and the `@config` directive so readers know
where to find/enable legacy config support while keeping the CSS-first guidance
(`@theme`, `@utility`) intact.


### 10.1 Library selection

- **Web (React):** `motion` (formerly `framer-motion`) for component animations; `gsap` for complex scroll-telling; `three` + `@react-three/fiber` for 3D.
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟡 Minor

🧩 Analysis chain

🌐 Web query:

Has framer-motion been renamed to motion package on npm?

💡 Result:

No, framer-motion has not been renamed to a package simply called "motion" on npm. Framer Motion has become independent from Framer and is now branded as "Motion", but the primary npm package remains "framer-motion", actively maintained with version 12.38.0 as of March 2026, hosted at github.com/motiondivision/motion. A separate "motion" package exists (also version 12.38.0), but it depends on "framer-motion" and serves as an alternative entry point. Official upgrade instructions recommend uninstalling framer-motion and installing "motion", then changing imports to "motion/react". However, the framer-motion package continues to receive updates, points to motion.dev, and explicitly states "Framer Motion is now Motion". Both packages are published by the same author (Matt Perry), share the same repository, and have high download counts (framer-motion: 39.6M weekly; motion: 10.7M weekly). Existing code using framer-motion continues to work without changes.

Citations:


Correct the framer-motion package reference. The statement "motion (formerly framer-motion)" is inaccurate. Framer Motion has not been renamed; instead, a new motion package exists as the recommended alternative entry point, while framer-motion remains actively maintained. Update to: "motion (recommended) or framer-motion" or provide context that explains both packages coexist with motion being the newer approach.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@skills/elite-frontend-design-2026/SKILL.md` at line 357, Update the
inaccurate package note by changing the phrase "motion (formerly
`framer-motion`)" to indicate both packages coexist; e.g., say "`motion`
(recommended) or `framer-motion`" or add a short parenthetical that `motion` is
the newer entry point while `framer-motion` remains maintained; modify the text
that currently mentions "motion" and "framer-motion" so it reflects this
coexistence and recommendation.

Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 2 files

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="skills/bugbuster/SKILL.md">

<violation number="1" location="skills/bugbuster/SKILL.md:149">
P2: Conflicting policy text gives opposite instructions on dependency/supply-chain findings, causing inconsistent reviewer behavior.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

Comment thread skills/bugbuster/SKILL.md
* **NO "Missing Error Handling" Without a Caller:** Unhandled throw is fine if the caller is a framework boundary that renders a 500. Confirm the caller before flagging.
* **NO Regex Paranoia:** Not every regex is ReDoS. Flag only when (a) user-controllable input reaches the pattern and (b) the pattern has nested quantifiers or ambiguous alternation.
* **NO "Weak Cryptography" Blanket Claims:** MD5 is fine for file-dedupe checksums. Flag only in authentication, integrity, password, or signature contexts.
* **NO Dependabot Replay:** If the user has not requested a dependency audit, do not produce one. Those findings belong in a separate tool.
Copy link
Copy Markdown

@cubic-dev-ai cubic-dev-ai Bot Apr 18, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: Conflicting policy text gives opposite instructions on dependency/supply-chain findings, causing inconsistent reviewer behavior.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At skills/bugbuster/SKILL.md, line 149:

<comment>Conflicting policy text gives opposite instructions on dependency/supply-chain findings, causing inconsistent reviewer behavior.</comment>

<file context>
@@ -0,0 +1,445 @@
+* **NO "Missing Error Handling" Without a Caller:** Unhandled throw is fine if the caller is a framework boundary that renders a 500. Confirm the caller before flagging.
+* **NO Regex Paranoia:** Not every regex is ReDoS. Flag only when (a) user-controllable input reaches the pattern and (b) the pattern has nested quantifiers or ambiguous alternation.
+* **NO "Weak Cryptography" Blanket Claims:** MD5 is fine for file-dedupe checksums. Flag only in authentication, integrity, password, or signature contexts.
+* **NO Dependabot Replay:** If the user has not requested a dependency audit, do not produce one. Those findings belong in a separate tool.
+* **NO "Hardcoded Secret" on Placeholders:** `"YOUR_API_KEY_HERE"` or `.env.example` fixtures are not leaked secrets. Confirm entropy and surrounding context.
+
</file context>
Fix with Cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants