framework-compliance-t…
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
React 19 patterns with React Compiler. Trigger: When writing React 19 components/hooks in .tsx (React Compiler rules, hook patterns, refs as props). If using Next.js App Router/Server Actions, also use nextjs-16.
Claude Code
$ npx -y skills add prowler-cloud/prowler --skill react-19 --agent claude-code
Codex
$ npx skills add prowler-cloud/prowler --skill react-19 -a codex -y
Cursor
$ npx skills add prowler-cloud/prowler --skill react-19 -a cursor -y
Gemini CLI
$ npx skills add prowler-cloud/prowler --skill react-19 -a gemini-cli -y
GitHub Copilot
$ npx skills add prowler-cloud/prowler --skill react-19 -a github-copilot -y
OpenCode
$ npx skills add prowler-cloud/prowler --skill react-19 -a opencode -y
Windsurf
$ npx skills add prowler-cloud/prowler --skill react-19 -a windsurf -y
name: react-19 description: > React 19 patterns with React Compiler. Trigger: When writing React 19 components/hooks in .tsx (React Compiler rules, hook patterns, refs as props). If using Next.js App Router/Server Actions, also use nextjs-16. license: Apache-2.0 metadata: author: prowler-cloud version: "1.1" scope: [root, ui] auto_invoke: "Writing React components" allowed-tools: Read, Edit, Write, Glob, Grep, Bash, WebFetch, WebSearch, Task
Prowler UI enables the React Compiler (`reactCompiler: true` in `ui/next.config.js`), so manual memoization is unnecessary.
// ✅ React Compiler handles optimization automatically
function Component({ items }) {
const filtered = items.filter(x => x.active);
const sorted = filtered.sort((a, b) => a.name.localeCompare(b.name));
const handleClick = (id) => {
console.log(id);
};
return <List items={sorted} onClick={handleClick} />;
}
// ❌ NEVER: Manual memoization
const filtered = useMemo(() => items.filter(x => x.active), [items]);
const handleClick = useCallback((id) => console.log(id), []);// ✅ ALWAYS: Named imports
import { useState, useEffect, useRef } from "react";
// ❌ NEVER
import React from "react";
import * as React from "react";// ✅ Server Component (default) - no directive
export default async function Page() {
const data = await fetchData();
return <ClientComponent data={data} />;
}
// ✅ Client Component - only when needed
"use client";
export function Interactive() {
const [state, setState] = useState(false);
return <button onClick={() => setState(!state)}>Toggle</button>;
}import { use } from "react";
// Read promises (suspends until resolved)
function Comments({ promise }) {
const comments = use(promise);
return comments.map(c => <div key={c.id}>{c.text}</div>);
}
// Conditional context (not possible with useContext!)
function Theme({ showTheme }) {
if (showTheme) {
const theme = use(ThemeContext);
return <div style={{ color: theme.primary }}>Themed</div>;
}
return <div>Plain</div>;
}// actions/feature/feature.ts
"use server";
// useActionState passes the previous state first, then the FormData
export async function submitForm(prevState: FormState, formData: FormData) {
await saveToDatabase(formData);
revalidatePath("/");
return { ok: true };
}
// Client component
"use client";
import { useActionState } from "react";
function Form() {
const [state, action, isPending] = useActionState(submitForm, { ok: false });
return (
<form action={action}>
<button disabled={isPending}>
{isPending ? "Saving..." : "Save"}
</button>
</form>
);
}Most Prowler forms use `react-hook-form` + `zodResolver` and call the server action from `handleSubmit` instead (see `prowler-ui`).
// ✅ React 19: ref is just a prop
function Input({ ref, ...props }) {
return <input ref={ref} {...props} />;
}
// ❌ Old way (unnecessary now)
const Input = forwardRef((props, ref) => <input ref={ref} {...props} />);`forwardRef` still appears in the deprecated `ui/components/ui/` shims; do not copy that pattern into new code.
Prowler is the world’s most widely used Open-Source Cloud Security Platform that automates security and compliance across any cloud environment.
Make a cloud account compliant with a security or industry framework using Prowler Cloud.
Vercel AI SDK patterns for the installed major (ui/package.json: `ai` 6.x, `@ai-sdk/react` 3.x). The skill name is historical;…
Django REST Framework patterns. Trigger: When implementing generic DRF APIs (ViewSets, serializers, routers, permissions,…
Reviews Django migration files for PostgreSQL best practices specific to Prowler. Trigger: When creating migrations, running…
Create and maintain GitHub Agentic Workflows (gh-aw) for Prowler. Trigger: When creating agentic workflows, modifying gh-aw…
Strict JSON:API v1.1 specification compliance. Trigger: When creating or modifying API endpoints, reviewing API responses, or…
Use for authorized security assessment of REST, GraphQL, WebSocket, or SOAP APIs, including discovery, authentication,…
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys)…
Clean and finalize authorized natural-language text intended for readers by auditing suspicious invisible Unicode and rewriting…