senior-fullstack

Senior Fullstack

Fullstack development skill that scaffolds production-ready project structures (Next.js, FastAPI+React, MERN, Django+React) and runs static code quality analysis across security, complexity, dependency health, test coverage, and documentation — paired with reference guides for architecture patterns, development workflows, and stack selection.

Core Capabilities

• Project scaffolding — generate complete Next.js, FastAPI+React, MERN, or Django+React structures with TypeScript, Docker/docker-compose, env templates, and package configs.
• Code quality analysis — static scan for security issues, cyclomatic complexity, dependency CVEs, test coverage estimate, and documentation scoring, with an overall score/grade and prioritized P0/P1/P2 recommendations.
• Stack selection — decision matrix and trade-off guides for frameworks, databases, ORMs, auth, and deployment platforms by use case (MVP, SaaS, Enterprise).
• Architecture patterns — frontend component design, backend clean architecture, API design (REST/GraphQL), caching, and authentication.
• Lifecycle workflows — local setup, git, CI/CD, testing, code review, deployment, and observability.

When to Use

Use this skill when you hear:

• "scaffold a new project" / "set up a fullstack project" / "generate project boilerplate"
• "create a Next.js app" / "set up FastAPI with React"
• "analyze code quality" / "check for security issues in codebase"
• "what stack should I use"

Clarify First

Before scaffolding, confirm these inputs. If any is unknown or vague, ASK — do not assume:

• Stack — Next.js / FastAPI+React / MERN / Django+React (selects the scaffold template and entire file tree)
• App name & output path — where the project is written (project_scaffolder positional args)
• Task — scaffold a new project vs analyze an existing codebase's quality (selects project_scaffolder vs code_quality_analyzer)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Tools

Tool	Purpose	Command
project_scaffolder.py	Scaffold a fullstack project structure with boilerplate, Docker, and env config	python scripts/project_scaffolder.py nextjs my-app --output ./projects
code_quality_analyzer.py	Static-analyze a codebase for security, complexity, deps, coverage, and docs	python scripts/code_quality_analyzer.py . --verbose --json --output audit.json

References

Load the reference that matches the task — keep this file lean and pull detail on demand:

• references/tooling-workflows-and-quality.md — full tool docs (templates, flags, sample output, output formats), the three end-to-end workflows, the stack decision matrix / common issues, the troubleshooting table, and the success-criteria bar. Read when running the tools in depth or checking generated work before shipping.
• references/architecture_patterns.md — frontend component architecture, backend clean architecture / repository pattern, REST & GraphQL API design, database patterns, caching strategies, and authentication architecture. Read when designing or reviewing system structure.
• references/development_workflows.md — local dev setup, git workflows, CI/CD pipelines, testing strategies, code review process, deployment strategies, and observability. Read when standing up the development lifecycle.
• references/tech_stack_guide.md — frontend/backend framework comparisons, database selection, ORMs, auth solutions, deployment platforms, and stack recommendations by use case. Read when choosing a stack.

Scope & Limitations

What this skill covers:

• Project scaffolding for Next.js, FastAPI+React, MERN, and Django+React stacks with Docker, TypeScript, and environment configuration
• Static code quality analysis including complexity metrics, security pattern detection, dependency vulnerability checks, test coverage estimation, and documentation scoring
• Stack selection guidance via the tech stack decision matrix and reference guides
• Fullstack architecture patterns (frontend component design, backend clean architecture, API design, caching, auth)

What this skill does NOT cover:

• Runtime performance profiling, load testing, or APM instrumentation -- see senior-devops for observability tooling
• Infrastructure provisioning, Terraform/Pulumi, or cloud deployment automation -- see aws-solution-architect and senior-devops
• Comprehensive CVE scanning against live vulnerability databases -- use npm audit, pip-audit, or senior-secops for deep security analysis
• Mobile or native desktop application scaffolding -- this skill targets web-based fullstack architectures only

Integration Points

Skill	Integration	Data Flow
senior-devops	CI/CD pipeline setup for scaffolded projects	Scaffolder output directory feeds into DevOps pipeline configuration and Docker deployment workflows
senior-secops	Deep security audit after initial quality scan	Code quality analyzer P0/P1 security findings hand off to SecOps for remediation tracking and penetration testing
senior-qa	Test strategy for scaffolded projects	Test coverage estimation from the analyzer informs QA test plan gaps; scaffolded test infrastructure provides the harness
code-reviewer	Automated review of generated and existing code	Quality analyzer JSON report provides structured input for code review checklists and PR approval criteria
senior-architect	Architecture validation of stack choices	Tech stack guide recommendations feed into architecture decision records; complexity metrics validate design compliance
aws-solution-architect	Cloud deployment of scaffolded applications	Docker Compose configurations from the scaffolder translate into ECS/EKS task definitions and infrastructure blueprints