Skip to content
Back to skills

Web

ASecurity

Use when working on a brand's website app or on @omega.js/web itself: Eleventy and Liquid templates, sections and components, themes, blueprints and default pages, the asset pipeline, or the omega CLI, in targets/web or packages/web/.

  • 2 stars
  • 0 votes
  • 0 copies
  • 1 view
  • Added October 17, 2026
developmentgonodetestingfrontend

Works with

  • cli

Security analysis

A100/100

Scanned October 17, 2026

npx -y skills add Omega-JS-Stack/omega --skill web --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Web?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Web
[![Security: A β€” Skills Directory](https://www.skillsdirectory.com/api/skills/omega-js-stack-web/badge)](https://www.skillsdirectory.com/skills/omega-js-stack-web)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: web
description: Use when working on a brand's website app or on @omega.js/web itself: Eleventy and Liquid templates, sections and components, themes, blueprints and default pages, the asset pipeline, or the omega CLI, in targets/web or packages/web/.
user-invocable: true
---

# OMEGA Web (@omega.js/web)

`@omega.js/web` builds a brand's marketing site and authenticated frontend: Eleventy 3 + LiquidJS with `@omega.js/template-kit`, layered themes that override by path with zero copying, the section/component library, ~60 virtual default pages, the esbuild/sass/PurgeCSS asset pipeline, and an ESM boot runtime that hands every page, layout, section and theme module the web runtime instance, `omega` (`@omega.js/web/runtime`, the `@omega.js/client` base class plus web's page chrome). It ships the `omega` CLI for the whole consumer lifecycle. It is the UJM successor, rebuilt rather than ported: never carry a Jekyll-era assumption into it.

## Where the knowledge lives

This skill routes; the docs are the source of truth. Read the guide BEFORE touching files.

- **Working in this monorepo** β€” `docs/web/index.md` is the guide (identity, module map, CLI, conventions). Its deep references: `docs/web/sections.md`, `docs/web/omega-sections-spec.md`, `docs/web/template-kit.md`, `docs/web/ads-system.md`, `docs/web/classy-v2/DIRECTION.md`. Cross-framework contracts live in `docs/shared/` (config, theming, icons, translation, testing, deploys, updates, local-dev). Long-form package detail is `packages/web/README.md`.
- **Working in a consumer project**: read `node_modules/@omega.js/manager/docs/web/index.md`: the installed manager ships the monorepo's whole `docs/` tree, and a locally linked brand's copy is synced from the monorepo before every omega verb but a read-only one.
- **The framework ships shared browser modules.** Before hand-rolling a chart, a diagram, tooltips, an icon in JS, or reCAPTCHA on a form, read `docs/web/libs.md`: it inventories `core/js/libs/` and the `__main_assets__/js/libs/<name>.js` import idiom that reaches it from any layer, consumer page modules included.
- **`@omega.js/client` comes with it.** The web runtime instance extends the client's base class on every page, so any task touching auth, Firestore, subscriptions, notifications, or `data-omega-bind` is client work too: `docs/client/index.md` and the `omega:client` skill.

## Non-negotiables

- **Read the guide before editing.** Layers, the frontmatter allow-list, and the section contract each have rules that are not guessable from the file tree.
- **🚫 Never run a consumer's `omega dev`** β€” it is the user's long-running process. Assume it is up; ask the user to start it if it is not.
- **Grep the logs FIRST.** Every verb tees its whole run to the app's `logs/` β€” `dev.log`, `build.log`, `test.log`, truncated per launch and ANSI-stripped. `tail`/`grep` them; restarting the dev server or re-running a build to see output it already wrote is never the move (`docs/shared/logging.md`).
- **Every page obeys the page paint contract** β€” static content paints immediately, user data arrives through bindings with skeletons, an answer the visitor acts on resolves ONCE, every wait has a deadline and a named fallback, and a form's submit control is gated until its answers land: `docs/web/page-contract.md`.
- **Consumer page frontmatter is meta-only** and content keys are stripped with a build warning. Content belongs in sections.
- **Compose, never hand-roll HTML.** `/test/sections` (dev builds only) is the auto-generated gallery of every RESOLVED section and component: the entry page carries the args contract and embeds each demo variant as its own frame page. Read it before writing markup for a page β€” `docs/web/sections.md` Β§9.
- **Secrets never enter `config/omega.json5`** β€” `.env` only; the config validator hard-fails secret-shaped keys.
- **Nothing generated is committed** β€” `dist/` and `.omega/` are artifacts. The translation cache is the one deliberate exception.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.