Leon's Agent Skills
A skill set that takes a web app from idea to production: build, security and SEO review, and deployment to Vercel
- 126 ★ on the repository
- Last commit
Broad access
Why this level
- The deploy skill creates databases, storage and environment variables at the hosting provider and deploys with your credentials.
- Paid resources and writing secrets into the service environment are possible.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add skills/leon-s-agent-skillsDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- The deploy skill creates databases, storage and environment variables at the hosting provider and deploys with your credentials.
- Paid resources and writing secrets into the service environment are possible.
This is third-party code. Review the repository files before installing.
What it does
Leon van Zyl's repository holds skills for Claude Code, Cursor, Codex, OpenCode and other agents supported by the skills CLI. Three main steps. `start-an-app` asks about the app, picks a stack and assembles a working Next.js project with sign-in, a database, a landing page, a dashboard and legal pages. `review-an-app` checks the project for OWASP Top 10, SEO, AI discoverability and drift between the site's claims and the real code. `deploy-an-app` puts the app live on services such as Vercel. Each skill keeps stack components in a `references` folder: auth, database, email, payments, storage. Any file can be swapped. Extras include `create-brand-kit` for brand identity, `build-a-game` for a 3D browser game and video skills.
Who it is for. Vibe coders and solo developers who need a path from an app description to a live site with a security check.
Good fit when
- You have a web app idea and need a working project with sign-in and a database from the first commit.
- A finished project needs an OWASP Top 10 check and sitemap and llms.txt freshness before launch.
- The landing page and privacy policy promise what the app no longer does.
- An app must go live with environment variables set before the first build.
Not a fit when
- The project is not Next.js: `start-an-app` builds on that stack, though references can be swapped.
- The host has no CLI an agent can drive: `deploy-an-app` relies on service commands.
- You need a stated license: the repository does not declare one.
Example request
Use the start-an-app skill. I want to build a booking service for barbershops with payments and an admin dashboard.Limitations
The repository declares no license, so reuse terms are worth confirming with the author. The default stack is set by files in `references`, and switching a provider means editing those files. The deploy skill relies on the chosen host's CLI and creates resources, such as a database and storage, that may cost money. By the author's design the game skill runs ten steps with your confirmation after each, and spending on voices and sound waits for your consent. The latest commit is from November 2026.
How to disable. Delete the installed skills from `.claude/skills`, `.agents/skills` or the equivalent folder of your agent and the entry in the `skills-lock.json` lock file if present.
FAQ
How do I install a single skill?
With `npx skills add leonvanzyl/skills --skill <skill-name>`, for example `--skill review-an-app`.
What does review-an-app check?
Security against OWASP Top 10, SEO and AI discoverability (sitemap, robots.txt, llms.txt) and drift between what the landing page, docs and policy claim and what the app does. The skill is read-only by default.
How do I swap the auth provider?
Ask the agent to replace it in the skill's `references/auth.md`. The host in the `deploy-an-app` references is changed the same way if the service has a CLI.
What does build-a-game do?
Takes a few sentences to a finished Three.js 3D browser game in ten steps with a check after each. It deploys to Hostinger, Vercel, itch.io or another static host.
Which video skills exist?
`create-video-shorts`, `create-youtube-thumbnails`, `agent-music-video` and two DaVinci Resolve editing skills.
Discussion
No questions or reviews yet.
Related
SkillsNine personal engineering skills: an idea-to-PR chain, standards search, a sandboxed review loop and wizard pages for changes
15 skills for Claude Code and Codex: Laravel, Docker, UI, debugging, tests and docs in four ready plugin bundles
A plugin of 24 Claude Code skills for AI apps on Next.js, AI SDK 7, shadcn/ui and pgvector, with in-browser UI checks
17 ready skills for tests, Git, READMEs and multi-agent work plus a kernel that checks skill execution in Claude Code and Codex.
Catalog of 46 versioned skills for code review, releases, CI and landing pages, installed as the lstack plugin or through npx.
Softaworks Agent Toolkit
Softaworks Agent Skills
A marketplace of skills, subagents and commands for coding agents: development, documentation, planning and workplace communication
README in short
One command installs every skill in the repository, and browsing the list or picking a single skill is also supported. A ready phrase can be pasted straight into the agent.