code-audit-frontend
Comprehensive code review, security audit, performance analysis, and architectural assessment. Goes beyond linting and type-checking to identify…
- `@conform-to/zod` must **always** be imported from the `/v4` subpath. Flag any import from the bare `@conform-to/zod` package as **Critical**. The default export targets Zod v3 and causes a silent runtime failure, typecheck, lint, and build do not catch it.
$ npx -y skills add gaia-react/gaia --agent claude-codeHow it fires
How this agent gets triggered: by you, by Claude, or both.
Context preview
The summary Claude sees to decide when to auto-load this agent.
- `@conform-to/zod` must **always** be imported from the `/v4` subpath. Flag any import from the bare `@conform-to/zod` package as **Critical**. The default export targets Zod v3 and causes a silent runtime failure, typecheck, lint, and build do not catch it.
subagents: [react-patterns, typescript] library: '@conform-to/zod'
// BAD, runtime failure, no build-time error
import {parseWithZod} from '@conform-to/zod';
import {getZodConstraint} from '@conform-to/zod';
// GOOD
import {parseWithZod} from '@conform-to/zod/v4';
import {getZodConstraint} from '@conform-to/zod/v4';Claude is raw power. GAIA is order and focus. The foundation that keeps Claude-shipped code production-grade as your team scales. The React frontend is handled. You build the rest of your app on top. Every convention enforced in code.
Repo: gaia-react/gaia
Comprehensive code review, security audit, performance analysis, and architectural assessment. Goes beyond linting and type-checking to identify…
Use project form components instead of native elements in all `.tsx` files. Native form elements bypass GAIA's Conform integration and accessible error/label…
- Single `useTranslation()` call per component, flag multiple `useTranslation` calls in the same component - Namespace override via `{ns: 'other'}` as the…
- Import only from `tailwind-merge`, flag any use of `clsx`, `classnames`, or `cn` wrappers for class merging - `twJoin` when no class conflict is possible…
Audits GitHub Actions workflow YAML and composite-action YAML for supply-chain, injection, permission, and secret-handling defects. Advisory-only (no…
Maintainer-only audit of the framework Node/CLI TypeScript, its render templates and test snapshots, and the CLI build/config surface the roster grants it:…