Reusable skills for the Mosoo coding agents. Each skill lives under skills/ as its own directory containing a SKILL.md (the entry point) and any supporting references/, scripts, or assets.
Skill provenance and refresh commands are tracked in SOURCES.md. 12 of the 20 skills are managed by the skills CLI (run npx skills check / npx skills update); 6 are refreshed from public upstreams by scripts/sync-local.sh; the remaining 2 are mosoo originals — edit in place.
| Skill | Description |
|---|---|
| agents-sdk | Build AI agents on Cloudflare Workers using the Agents SDK. |
| better-auth-best-practices | Integrating Better Auth — the comprehensive TypeScript authentication framework. |
| better-auth-create-auth | Create auth layers in TypeScript/JavaScript apps using Better Auth. |
| better-auth-email-and-password | Guidance and enforcement rules for secure email + password auth with Better Auth. |
| better-auth-security | Cross-cutting Better Auth security: rate limiting, CSRF, session, trusted origins, secrets, OAuth, IP tracking, auditing. |
| building-ai-agent-on-cloudflare | Build AI agents on Cloudflare with state, real-time WebSockets, scheduled tasks, tools, and chat. |
| building-mcp-server-on-cloudflare | Build remote MCP (Model Context Protocol) servers on Cloudflare Workers with tools and OAuth. |
| cloudflare | Comprehensive Cloudflare platform skill: Workers, Pages, KV/D1/R2, Workers AI, Vectorize, Agents SDK, networking, security, IaC. |
| cloudflare-email-service | Send and receive transactional emails with Cloudflare Email Service (Email Sending + Email Routing). |
| code-review-guardrails | Catch sub-optimal coding patterns, tech debt, and constraint violations before commit/merge. |
| complexity-optimizer | Audit and improve code complexity, N+1 queries, repeated scans, and render-heavy paths without changing behavior. |
| durable-objects | Create and review Cloudflare Durable Objects (stateful coordination, RPC, SQLite, alarms, WebSockets). |
| no-use-effect | Enforce the no-useEffect rule when writing or reviewing React code. |
| playwright-cli | Automate browser interactions, test web pages, and work with Playwright tests. |
| sandbox-sdk | Build sandboxed applications for secure code execution (code interpreters, CI/CD, dev environments). |
| typescript-expert | TypeScript expert: strict type safety, boundary contracts, parser/admission design, monorepo diagnostics. |
| typescript-style-guardrails | Readability-first TypeScript/TSX style guardrails for strict codebases. |
| web-perf | Analyze web performance with Chrome DevTools MCP — Core Web Vitals, render-blocking, network chains, CLS. |
| workers-best-practices | Review and author Cloudflare Workers code against production best practices. |
| wrangler | Cloudflare Workers CLI for deploying and managing Workers, KV, R2, D1, Vectorize, Hyperdrive, Workers AI, Containers, Queues, Workflows, Pipelines, and Secrets Store. |
mosoo-skills/
├── README.md
├── SOURCES.md # upstream provenance per skill
├── package.json # consumed by the skills CLI
├── skills-lock.json # CLI-tracked skill versions + content hashes
├── scripts/
│ └── sync-local.sh # refresh the 6 non-CLI-managed skills with public upstreams
└── skills/
└── <skill-name>/
├── SKILL.md # entry point — frontmatter `name` + `description`, then body
└── references/ # optional supporting material
# 12 CLI-tracked skills
npx skills check # show drift from upstream
npx skills update # apply pending updates, rewrites skills/<name>/ + skills-lock.json
# 6 manually-synced skills with public upstreams (see SOURCES.md for refs)
scripts/sync-local.sh # refresh all
scripts/sync-local.sh <skill-name> # refresh oneThe 2 mosoo originals (code-review-guardrails, typescript-style-guardrails) have no remote upstream — edit their SKILL.md in place. Review the resulting git diff before committing — upstream changes from the CLI or sync script are not auto-accepted.
- Create
skills/<skill-name>/SKILL.mdwith YAML frontmatter:--- name: <skill-name> description: One-line summary that helps an agent decide whether to load this skill. ---
- Add an entry to the Skills table above — link the skill name to its
SKILL.md. - Record the upstream in
SOURCES.md. If it ships in a repo theskillsCLI can read, also runnpx skills add <owner/repo> --skill <skill-name> --copy -yfrom the repo root so it lands inskills-lock.json. - Keep skill names in
kebab-caseand match the directory name to thenamefrontmatter field where practical.