Skills DirectorySkills Directory
SkillsLearnSecurityCategoriesDocsCommunityBlog
Sign InSubmit Skill
Skills Directory

Security-tested agent skills for Claude, coding agents, and AI workflows.

Directory

  • Browse Skills
  • All Skills A–Z
  • Claude Skills
  • Claude Code Skills
  • Agent Skills
  • Categories
  • Authors
  • Submit a Skill

Learn

  • Learn Hub
  • Install Claude Skills
  • Write SKILL.md
  • Skills vs MCP
  • Directories Compared

Security

  • Security
  • Methodology
  • Secure Claude Skills
  • Security Badges

Company

  • About
  • Community
  • Blog
  • API Docs
  • Advertise

2026 Skills Directory. All rights reserved.

ProTermsPrivacyRefunds
Back to skills

Setup Stack

ASecurity

Selects and pins the technology stack — project type, backend (Go/PHP-Yii3/Node), frontend (Angular/Vue/Nuxt), UI kit (Material/Taiga), API style (GraphQL default), game engine (three.js/Pixi/Phaser), database, tests, CI, layout — and writes technical-preferences.md with exact versions from the stack reference. Run once at project start or when the stack changes.

3 stars
0 votes
0 copies
0 views
Added 9/22/2026
developmentgophpbashsqlvueangularnodedockerkubernetesgit

Works with

cliapi

Security Analysis

A100/100

Scanned 9/22/2026

Install to Claude Code

$npx -y skills add gonimar/claude-web-studio --skill setup-stack --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Setup Stack?

Add the live security badge to your README — it updates automatically with every re-scan.

Security grade badge for Setup Stack
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/gonimar-setup-stack/badge)](https://www.skillsdirectory.com/skills/gonimar-setup-stack)

More formats (shields.io, HTML) on the badges page.

Download with Pro
Files
SKILL.md
---
name: setup-stack
description: "Selects and pins the technology stack — project type, backend (Go/PHP-Yii3/Node), frontend (Angular/Vue/Nuxt), UI kit (Material/Taiga), API style (GraphQL default), game engine (three.js/Pixi/Phaser), database, tests, CI, layout — and writes technical-preferences.md with exact versions from the stack reference. Run once at project start or when the stack changes."
argument-hint: "[type: site|spa|api|fullstack|game|game+backend] [--quick]"
user-invocable: true
allowed-tools: Read, Glob, Grep, Write, Edit, Bash, AskUserQuestion, Task
model: sonnet
---

# Setup Stack

Reply in the project conversation language (CLAUDE.md → Language); code, identifiers, paths and commit messages stay in English.

Result: `.claude/docs/technical-preferences.md` without `[TO BE CONFIGURED]` plus a decision-log line.
Big forks are recorded as ADRs via `/architecture-decision`.

## Phase 1: Context
Read `technical-preferences.md`, `docs/specs/product-spec.md` (if any), `stack-reference/index.md`
(current versions; older than 60 days → suggest `/stack-update` first).
Check the environment: `go version`, `php -v`, `node -v`, `pnpm -v`, `docker --version` — report what is missing.

## Phase 2: Interview (one `AskUserQuestion` at a time, recommendation first)
1. Project type (argument or question), platforms (desktop/mobile-web/PWA), rendering (SPA/SSR/SSG).
2. Backend: **Go 1.27** (services, realtime, games) | **PHP 8.5** (content systems, existing PHP ecosystem) | **Node 24** (BFF/SSR) | none. Recommendation by type. PHP → the version, one `AskUserQuestion`: **8.5** (Recommended — the studio target per `php.md`) | 8.4 (the floor per `php.md`; only when the hosting cannot run 8.5 yet — recorded in **Language/runtime** with the reason and an upgrade story); then `php_framework`, one `AskUserQuestion`: **Yii3** (Recommended — the only framework with a full studio reference, `yii3.md`) | Symfony (`symfony.md`, stub) | Laravel (`laravel.md`, stub) | Slim | none (PSR-15 pipeline only); any choice but Yii3 is recorded with the line "php-engineer works from the official documentation; the studio reference is a stub".
3. API style: **GraphQL (SDL, default for the client API)** | REST/OpenAPI | both (GraphQL + REST for files/webhooks). Then `api_contract_path` — for a Go module `api/schema.graphqls` (Recommended; gqlgen reads it in place), otherwise `docs/architecture/api/schema.graphql`; and, with gqlgen, `graphql_models`: **dto** (generated models mapped in resolvers — Recommended) | bind (domain types in `gqlgen.yml`).
4. Frontend: **Angular 22** (+ Material 22 | Taiga UI 5) | **Vue 3.5 / Nuxt 4** (+ UI kit) | vanilla TS (a game without a UI framework).
5. Game (type game): three.js r185 (3D) | PixiJS 8 (2D) | Phaser | Babylon 8; networking: none | server-authoritative.
6. Data: PostgreSQL 18 (+ Redis 8) — confirm; auth: sessions | OIDC | JWT+BFF.
7. Infra: Docker + compose, GitHub Actions — confirm. **Deploy target** (one `AskUserQuestion`): `compose-ssh` (reference script shipped — recommended for a single server) · `kubernetes` · `cloud:<name>` · a container-platform kit if one is installed (e.g. `portainer`) · `manual`; the delegate follows (`agent <name>` from `.claude/agents/*-ops.md` with `deploy-target:`, `script scripts/deploy/<target>.sh`, or `none`) — contract `docs/deploy-target-contract.md`; `compose-ssh` copies `.claude/docs/templates/deploy/compose-ssh.sh` to `scripts/deploy/compose-ssh.sh` and creates `docs/deploy/compose-ssh.md`. Shared host with its own proxy repository → also `Infra repo` and `Proxy config`.
8. Layout: monorepo (`apps/`, `packages/`) | current structure — show a proposal. For a Go backend also `go_layout`: **project-layout** (golang-standards/project-layout adapted in `go.md`: `cmd/`, `internal/`, `pkg/` only when exported, `api/`, `configs/`, `scripts/`, `build/`, `deployments/`, `test/`) — recommended for services | **minimal** (`main.go` + `go.mod`) for a single tool/PoC; show the directory tree.
9a. PHP architecture (`php.md`), one `AskUserQuestion` each, recommendation first: `php_architecture` — **layered** (`src/Domain` → `src/Application` → `src/Infrastructure`, deptrac-enforced, the framework only in Infrastructure — Recommended for a service with business rules or one that may change framework) | framework (the framework's own layout); when layered, the directory shape — **use cases per context** (Recommended) | flat — is shown as the tree and recorded in the layout ADR, not as a field; `php_static_analysis` — **PHPStan level 9** (Recommended) | Psalm level 1 (the yiisoft ecosystem's own tool); `php_cs_tool` — **ECS** (`perCs: true`, Recommended) | php-cs-fixer (`@PER-CS`); `php_domain_allow` — vendor namespaces the domain may use (default `none`); coverage gate — **Domain 90 % / Application 80 %** (Recommended) | other numbers. Show the resulting tree. The `deptrac.yaml`, analyser config, coding-standard config, `phpunit.xml`, `scripts/coverage-gate.php` and composer scripts come from `docs/templates/php/` in `/test-setup`.
9b. Go architecture (`go.md` "Architecture style"), one `AskUserQuestion` each, recommendation first: `go_architecture` — **layered** (`internal/domain` → `usecase` → `infrastructure`, depguard-enforced — Recommended for a service with business rules or several entry points) | modular (`internal/<domain>/`, handler → service → repository — a tool or a small service); when layered, the directory shape — **one use-case package per context** (Recommended) | one `usecase` package — is shown as the tree and recorded in the layout ADR, not as a field; `go_composition_root` — **internal/app** (Recommended, the `cmd/` contract by numbers) | main (the classic shape, recorded as an accepted deviation in the layout ADR); `go_router` — **chi v5** (Recommended) | net/http ServeMux; `go_domain_allow` — value libraries the domain may import (default `none`, stdlib only; e.g. `github.com/google/uuid`); coverage gate — **domain 90 % / usecase 80 %** (Recommended) | other numbers. Show the resulting tree for the chosen shape. The `.golangci.yml`, `scripts/coverage-gate.sh` and Makefile targets come from `docs/templates/go/` in `/test-setup`.
`--quick` — accept all recommendations without questions, show the summary.

## Phase 3: Draft
The full `technical-preferences.md` with exact versions from the reference, naming conventions for the chosen languages
(Angular file style v20+ without suffixes or classic — ask), performance budgets. Show it whole. "May I write `.claude/docs/technical-preferences.md`?" — one `AskUserQuestion`: write (Recommended) · show the draft/diff first · not now After the "write" answer: `touch .claude/.write-consent` (rule 7 — the consent-guard hook checks the marker).

## Phase 4: Consequences
- Propose ADRs for non-trivial forks (GraphQL vs REST, Angular vs Vue, game engine) — `/architecture-decision`.
- Propose `/test-setup` and `/threat-model` as the next mandatory architecture steps.
- Update `production/stage.txt` → `specification` if the product spec exists.

Verdict: `COMPLETE` | `BLOCKED (missing tools: …)`. Next step — one `AskUserQuestion`: `/product-spec` (Recommended) · `/game-concept` · revise the stack.

Attribution

gonimargonimar
View sourceMore from gonimar →
SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments (0)

No comments yet. Be the first to comment!

SSkills DirectorySkills Directory

Ship a skill? Prove it's safe.

Free 120-pattern security scan, letter grade, and an embeddable README badge.

Submit a skill

Related Skills

Browser Extension Developer

Use this skill when developing or maintaining browser extension code in the `browser/` directory, including Chrome/Firefox/Edge compatibility, content scripts, background scripts, or i18n updates.

284722 votes

Seo Optimizer

SEO optimization with keyword analysis, readability assessment, technical validation, content quality. Use for search rankings, blog posts, content audits, or encountering keyword density, readability scores, meta tags, schema markup errors.

2192 votes

Google Official Seo Guide

Official Google SEO guide covering search optimization, best practices, Search Console, crawling, indexing, and improving website search visibility based on official Google documentation

1862 votes

Tanstack Start

Build a full-stack TanStack Start app on Cloudflare Workers from scratch — SSR, file-based routing, server functions, D1+Drizzle, better-auth, Tailwind v4+shadcn/ui. Use whenever the user mentions TanStack Start, asks to scaffold a full-stack Cloudflare app with SSR, wants an SSR dashboard, or asks for a React 19 + Cloudflare Workers app with file-based routing and server functions — even if they don't name TanStack Start specifically. No template repo — Claude generates every file fresh per ...

9881 votes

Pentest

PTES-aligned adversarial security audit for backend, frontend, and mobile applications. Produces a CVSS-scored Hacker Report with verified PoCs and phased remediation.

5491 votes
View all in development →