Claude Skills by KevinZai

Push notification setup and best practices — FCM, APNs, OneSignal, rich notifications, and engagement optimization.

React Native development patterns — navigation, native modules, Expo, state management, and cross-platform best practices.

SwiftUI development — MVVM architecture, iOS features, Combine/async-await, and Apple platform best practices.

Cross-agent coordination between CCC and OpenClaw fleet

CCC domain — complete research ecosystem — 8 skills in one. Deep research, spec interviews, cross-model review, literature review, competitive analysis, data ingestion, trend analysis, and Gemini fallback.

Analyze competing products, tools, or libraries with feature comparison, SWOT analysis, and strategic recommendations.

Review code, architecture, or decisions using multiple AI models for diverse perspectives and higher confidence.

Ingest, process, and summarize large documents, codebases, or datasets into structured, actionable summaries.

Multi-source deep research with parallel agents, citation tracking, and synthesis into structured deliverables.

Route tasks to Gemini's 1M+ token context window when content exceeds Claude's context limits.

Academic and technical literature review with source evaluation, structured synthesis, and citation management.

Structured 5-7 question interview to create detailed project specifications before writing any code.

Analyze trends in technology, markets, or usage patterns using data signals, community sentiment, and trajectory modeling.

CCC domain — complete SaaS development ecosystem -- 20 skills in one. Scaffold, authenticate, bill, ship, and grow a production SaaS from zero to revenue.

REST API design patterns including resource naming, status codes, pagination, filtering, error responses, versioning, and rate limiting for production APIs.

Backend architecture patterns, API design, database optimization, and server-side best practices for Node.js, Express, and Next.js API routes.

Stack: `better-auth` + Drizzle adapter + Next.js App Router **NOT NextAuth. NOT Clerk.** Better Auth is the auth library for all projects.

Build automated billing systems for recurring payments, invoicing, subscription lifecycle, and dunning management. Use when implementing subscription billing, automating invoicing, or managing recu...

Database Designer - POWERFUL Tier Skill

Stack: Drizzle ORM + `@neondatabase/serverless` + `drizzle-kit`

Stack: Fastify + Drizzle ORM + Zod validation + TypeScript Used for: GuestNetworks MCP server, internal APIs

Feature flag implementation -- PostHog, LaunchDarkly, custom database/Redis flags, gradual rollouts, A/B testing integration, flag lifecycle management

When the user wants to optimize any form that is NOT signup/registration — including lead capture forms, contact forms, demo request forms, application forms, survey forms, or checkout forms. Also use when the user mentions "form optimization," "lead form conversions," "form friction," "form fields," "form completion rate," "contact form," "nobody fills out our form," "form abandonment," "too many fields," "demo request form," or "lead form isn't converting." Use this for any non-signup form ...

Multi-tenancy patterns for B2B SaaS -- schema-per-tenant, row-level security, subdomain routing, tenant-aware queries, data isolation

Next.js 15+ App Router patterns with TypeScript strict, Tailwind CSS v4, shadcn/ui, Drizzle ORM + Neon Postgres, Better Auth, Framer Motion, deployed to Vercel. Covers route groups, server/client components, server actions, streaming, parallel/intercepting routes, middleware, metadata, caching, and more. Use when: building Next.js apps, App Router questions, server components, server actions, data fetching, caching strategy.

When the user wants to create or optimize in-app paywalls, upgrade screens, upsell modals, or feature gates. Also use when the user mentions "paywall," "upgrade screen," "upgrade modal," "upsell," "feature gate," "convert free to paid," "freemium conversion," "trial expiration screen," "limit reached screen," "plan upgrade prompt," "in-app pricing," "free users won't upgrade," "trial to paid conversion," or "how do I get users to pay." Use this for any in-product moment where you're asking us...

SaaS financial health advisor. Use when a user shares revenue or customer numbers, or mentions ARR, MRR, churn, LTV, CAC, NRR, or asks how their SaaS business is doing.

Routes SaaS development requests to the right specialist skill within ccc-saas

End-to-end SaaS scaffold generator -- takes a starter template and customizes it with database, auth, billing, and environment configuration

shadcn/ui patterns for Next.js App Router — NOT a library, it's copy-paste components you OWN. Covers setup, cn() utility, cva variants, react-hook-form + zod forms, data tables with tanstack, command menus, dialogs, toasts, theming, dark mode, and building custom components. Use when: shadcn, forms, data table, command palette, dialog, toast, theme, dark mode, component variants.

When the user wants to optimize signup, registration, account creation, or trial activation flows. Also use when the user mentions "signup conversions," "registration friction," "signup form optimization," "free trial signup," "reduce signup dropoff," "account creation flow," "people aren't signing up," "signup abandonment," "trial conversion rate," "nobody completes registration," "too many steps to sign up," or "simplify our signup." Use this whenever the user has a signup or registration f...

Stripe subscription lifecycle patterns: checkout sessions, webhook verification (raw body gotcha), customer portal, usage-based billing, proration, and trial management.

Tailwind CSS v4 — major breaking change from v3. No tailwind.config.js, CSS-based configuration with @theme directive, @import 'tailwindcss', container queries, new utilities. Use when: Tailwind v4, CSS config, @theme, container queries, migration from v3, dark mode variants, custom utilities.

Webhook implementation patterns -- receiving with signature verification, sending with retries, idempotency, event storage, dead letter queues, local testing

CCC domain — complete security ecosystem — 8 skills in one. Security audits, prompt injection defense, dependency audits, secrets scanning, OWASP Top 10, CodeQL, variant analysis, and incident response.

Set up CodeQL for automated security analysis in CI/CD pipelines with custom queries and alert management.

Audit npm, pip, cargo, and other package dependencies for known vulnerabilities, license compliance, and supply chain risks.

Security incident response playbook — containment, investigation, remediation, and post-incident review procedures.

Check applications against the OWASP Top 10 vulnerabilities with specific tests, examples, and remediation for each category.

Defend AI-powered applications against prompt injection, jailbreaks, and LLM-specific attack vectors.

Scan codebases for hardcoded secrets, API keys, tokens, passwords, and credentials with remediation guidance.

Comprehensive security audit combining SAST, DAST, manual code review, and threat modeling for applications.

Find variants of known vulnerabilities across a codebase — when one bug is found, systematically find its siblings.

Complete SEO ecosystem — 20 skills. Technical SEO, AI search optimization, content strategy, analytics, and programmatic SEO at scale.

Agentic AI Optimization — make websites crawlable, citable, and usable by AI agents and browser automation. Use when building or auditing web projects for AI discoverability, implementing robots.txt AI bot policies, adding JSON-LD structured data, creating markdown twin routes, building accessibility trees for agent UX, or optimizing content structure for AI citation. Triggers on: AI SEO, AAIO, agentic optimization, AI discoverability, llms.txt, markdown twins, agent-ready, AI crawlers, struc...

When the user wants to optimize content for AI search engines, get cited by LLMs, or appear in AI-generated answers. Also use when the user mentions 'AI SEO,' 'AEO,' 'GEO,' 'LLMO,' 'answer engine optimization,' 'generative engine optimization,' 'LLM optimization,' 'AI Overviews,' 'optimize for ChatGPT,' 'optimize for Perplexity,' 'AI citations,' 'AI visibility,' 'zero-click search,' 'how do I show up in AI answers,' 'LLM mentions,' or 'optimize for Claude/Gemini.' Use this whenever someone wa...

Set up analytics and conversion tracking for Next.js + shadcn/ui projects. GA4, Plausible, PostHog, event tracking, UTM handling, A/B testing, conversion funnels, cookie consent (GDPR), and heatmap integration. Use when: user wants analytics, tracking, A/B tests, conversion optimization, or cookie consent banners.

Analytics de produto — PostHog, Mixpanel, eventos, funnels, cohorts, retencao, north star metric, OKRs e dashboards de produto.

Audit a domain's backlink profile using the SemRush API. Use when the user says "audit backlinks", "check my backlinks", "backlink analysis", "link profile", "toxic links", "disavow", "link building opportunities", "referring domains", "anchor text", or asks about a site's link authority.

Build SEO-optimized blog systems for Next.js + shadcn/ui projects. MDX content, pagination, categories/tags, RSS feeds, reading time, TOC, related posts, search (Pagefind/Algolia), author pages, and social share cards. Use when: user wants a blog, content system, MDX setup, RSS feed, or content-driven pages.