Packs
Each pack is a skill in the open Agent Skills standard, versioned and served over a CDN.
schematize-go
Go/Rust backend engineering standards: server-side security, tests that prove, an index as source of truth and mandatory archiving.
schematize-web
Next.js/Astro frontend standards: secrets server-side, WCAG 2.2 AA accessibility, Core Web Vitals as a contract, SEO + structured data and i18n. The frontend sibling of schematize-go.
schematize-rust
Normative engineering standards for backends with Rust as the primary language (Go auxiliary).
schematize-node
Normative standards for maintaining legacy Node.js/TypeScript and migrating out to Go/Rust — no new Node backends.
schematize-engineering
The house's shared, language-agnostic engineering base: architecture/DDD, MAP+graph+endpoints, security, data, observability, delivery/DoD/archive, and orchestration (split into mini-tasks + parallelize with subagents — time over tokens). The language skills specialize it.
schematize-pentest
House security testing: defensive AppSec (per-route rejection, IDOR/BOLA, BFLA, injection, SSRF, JWT/OAuth) and authorized red-team (concrete attack chains, ATT&CK). Arsenal by class + OWASP Web/API Top 10 coverage + STRIDE threat modeling + authz matrix — always under authorization + scope + RoE.
schematize-seo
Normative SEO standards: technical, on-page, content/keywords, structured data, international/multi-domain (no cannibalization), AIO/LLMO/GEO, authority/E-E-A-T and measurement.
schematize-elixir
Normative engineering standards for Elixir backends — Phoenix/Ecto/OTP on the BEAM, realtime and fault-tolerant high concurrency.
schematize-csharp
Normative engineering standards for C# / .NET backends (ASP.NET Core, EF Core).
schematize-zig
Normative engineering standards for systems in Zig — low-level, performance and manual memory control.
schematize-ruby
Normative engineering standards for Ruby backends, services and scripts (Rails/Sinatra).
schematize-audit
House history audit: enumerates and COUNTS every checklist created (overdev, QA, handoffs, plans, ADRs, parked questions, premature-stops) and proves each item was actually RESOLVED — finds RED orphans, reopens 'done' without proof, generates a remediation checklist and blocks the verdict if any orphan remains.
schematize-ai
House AI/LLM systems engineering: provider-agnostic (Claude default, pluggable), prompt & context engineering, RAG (chunking/embeddings/retrieval/evaluation), agents & tool-use (loop/function-calling/MCP), evals & guardrails (red-team, jailbreak, PII, validated structured output, deny-by-default), cost/caching and LLM observability. Floors: no LLM decides authorization, every AI output is untrusted until validated, prompt injection is a first-line attack, secrets never in the prompt/client, RAG isolated per tenant.
schematize-data
House data engineering: treats data as a CONTRACT — versioned schema with compatibility (back/forward/full), batch and streaming ETL/ELT pipelines, event sourcing/CDC via Outbox (dual-write forbidden), quality with quarantine and dead-letter (bad data never contaminates downstream), lineage & catalog, reversible expand-contract migrations, idempotency/replay and PII governance (deny-by-default, legal basis + retention, GDPR/LGPD).
schematize-mobile
House mobile app engineering: the same floor (security, IAM, testing, ops, DoD, archive) on the hostile client that is the device — platform choice native (Swift/Kotlin) vs cross (KMP/Flutter/RN) by fit + ADR; offline-first & sync (durable outbox, idempotency, delta sync, explicit conflict resolution, server as source of truth); mobile IAM matching iam.md (OIDC/PKCE delegating to auth.<domain>, passkeys+biometrics, secure storage, irreversible logout, NEVER a secret in the bundle, authz on the server); push (APNs/FCM), performance/battery/network, store delivery (signing, staged rollout, in-policy OTA, review), observability/crash and security (SPKI pinning, root/jailbreak as signal, sensible obfuscation).
schematize-infra
House Infra/DevOps/SRE: run production with minimal blast radius — per-app isolation (dedicated Linux user + hardened systemd + container per service), declarative/idempotent/reviewable IaC, GATED deploy (nothing skips a stage; front is manual/gated), secrets never in the repo (vault + rotation), built-in observability (SLO/alerts), backup & DR with TESTED restore, deny-by-default networking/TLS/hardening, and supply-chain (SBOM/pinning/signing). Deny-by-default, least-privilege, everything audited.
schematize-docs
House documentation as a discipline: docs are part of the Definition of Done (not optional), docs-as-code (in the repo, reviewed, versioned, TESTED), an ADR for every relevant decision (proposed → accepted/rejected), operational runbooks, API docs/OpenAPI generated from code, changelog + SemVer, C4/mermaid diagrams, and the index/archive the audit consumes.
schematize-scaffold
The house scaffolder: the executable blueprint of a 'new house project', the backing for `schematize new <project>`. Creates a project that is BORN with the day-0 floor — repos per context (`<project>_<ctx>_<lang>`), IAM as a separate app (`<project>_auth_<lang>` + `authfront`, OIDC delegation), separate frontend, `<project>_ops` with per-app isolation, CI with gated deploy, tests/pentest, DoD, archive/index and overdev; language by fit + ADR. Ships scaffold-new (create) and scaffold-check (audit an existing project's floor). No project 'without IAM/without ops for later' — the floor is day 0.
schematize-overdev-context
The house overdev context builder (Phase 0 / foundation): sweeps the session/repo and collects the AGREED decisions (decision · rationale · rejected alternative · origin), anchors on the index GRAPH (MAP + adjacency), writes the HEAVY plan (scope, verifiable items, order, parallelism, risks, DoD), derives the exhaustive CHECKLIST by count in the 2-level convention (`- [ ]` machine / `- [H ]` human / `- [~]` on-hold) and delivers the GENERAL CONTEXT document — the briefing that /eng-overdev and `schematize overdev start` CONSUME before the loop.
schematize-institutional
Building house institutional websites: the STRUCTURE/information architecture (page inventory — Home, About, Services index+detail, Legal index + 7 legal subpages, Contact, FAQ, Blog, Careers…), per-page content templates/checklists, the legal pages as SCAFFOLD (structure + mandatory LGPD points — NOT legal advice), structured data (JSON-LD: Organization+WebSite, BreadcrumbList, LocalBusiness, Service/Product, FAQPage, Article) and the minimal sitemap.xml+robots.txt+hreflang so the site is born indexable. Frontend ENGINEERING delegates to schematize-web; fine/multi-domain SEO to schematize-seo.
schematize-qa
The house's Q.A./testing discipline (language-agnostic): strategy and pyramid (unit→component→integration→e2e), tests that prove BEHAVIOR not 'it rendered', 'truly-green' smoke (content + self-check), a11y and visual regression that block, contract/data tests, flaky (detection+quarantine), useful coverage (mutation, not vanity), plan-first Q.A. with approval, and test/a11y/CWV CI gates. Extracted from engineering; offensive security is pentest.
schematize-database
House database modeling (schema design, language-agnostic): the DESIGN of the relational schema — entities→tables, attributes→columns with the right type, 1:1/1:N/N:N relations with junction tables, normalization 1NF–3NF (and when to DELIBERATELY denormalize), keys (surrogate PK ULID/UUIDv7 + natural key as UNIQUE; identity≠email), constraints (NOT NULL/default, UNIQUE, CHECK, FK with deliberate ON DELETE), indexes (composite/covering/partial, column order, no PII in an index), partitioning and the PII/LGPD floor (marked column, legal basis + retention). Emits CREATE TABLE + reversible expand-contract migration + a model summary. DATA engineering (pipeline/ETL/CDC/contracts/streaming) belongs to schematize-data; the IMPLEMENTATION (parameterized queries, ORM, running migrations) to the language skills.
One CLI for the whole catalog.
schematize is a Rust CLI — desktop app included — that installs and versions every skill from a live remote index. New skills show up without reinstalling anything.