#1
React and Next.js performance guidance for writing, reviewing, and refactoring production UI code.
31K starsAug 28, 2026 pushcoding-agentsCodexClaude Code
$ npx skills add vercel-labs/agent-skills --skill vercel-react-best-practicesAlternatives
Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.
Current skill
Hunt Forgot Password / Account Recovery Authentication Flaws — 5 distinct patterns: (1) username enumeration via different responses for valid vs invalid email, (2) reset token exposed directly in the API response body, (3) reset token not invalidated after use (replay), (4) password reset link works from a different IP/browser (no binding), (5) no rate limit on the reset request endpoint. These are the standalone recovery-flow broken-auth primitives — distinct from reset-email host-header poisoning (hunt-host-header) and the full ATO chain (hunt-ato owns password-reset as an ATO path; prove the primitive here, chain it there). Detection: trace the full forgot-password flow from request to token to use; check response diffs between valid/invalid emails; test token replay after consumption. Medium to High (enumeration=Medium, token-reuse=High, account-takeover=Critical when chained to known-email).
React and Next.js performance guidance for writing, reviewing, and refactoring production UI code.
$ npx skills add vercel-labs/agent-skills --skill vercel-react-best-practicesReview a branch or diff against repository standards and the originating spec in two independent analysis passes.
$ npx skills add mattpocock/skills --skill code-reviewBreak a plan, spec, or conversation into independently actionable tracer-bullet tickets with explicit blocking relationships.
$ npx skills add mattpocock/skills --skill to-ticketsImplement work from an approved spec or ticket set, run focused and full tests, invoke code review, and commit the result to the current branch.
$ npx skills add mattpocock/skills --skill implementA relentless interview that pressure-tests a plan against the codebase, sharpens domain language, and updates CONTEXT.md and ADRs when decisions become durable.
$ npx skills add mattpocock/skills --skill grill-with-docsTurn the current conversation and codebase context into a structured implementation spec, then publish it to the configured project issue tracker.
$ npx skills add mattpocock/skills --skill to-specThe open source coding agent.
$ npx skills add anomalyco/opencodePlatform to build admin panels, internal tools, and dashboards. Integrates with 25+ databases and any API.
$ npx skills add appsmithorg/appsmithA React Framework for building internal tools, admin panels, dashboards & B2B apps with unmatched flexibility.
$ npx skills add refinedev/refineOpensource IDE For Exploring and Testing API's (lightweight alternative to Postman/Insomnia)
$ npx skills add usebruno/brunoAutomated auditing, performance metrics, and best practices for the web.
$ npx skills add GoogleChrome/lighthouseCreate beautiful slides on the web using a coding agent's frontend skills
$ npx skills add zarazhangrui/frontend-slidesA lightweight coding agent for open models like Deepseek, Kimi, and Qwen
$ npx skills add openinterpreter/openinterpreterA modern file manager that helps users organize their files and folders.
$ npx skills add files-community/FilesCollection of handy online tools for developers, with great UX.
$ npx skills add CorentinTh/it-toolsLightning-fast and Powerful Code Editor written in Rust
$ npx skills add lapce/lapceHow to choose
Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep hunt-forgot-password if it already passes your workflow test and repository review.
Next step
Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.