---
name: borghei/senior-fullstack
source: https://app.decimal.ai/s/borghei-senior-fullstack@1/SKILL.md
source_sha256: b862faa03313
---

# Senior Fullstack

Fullstack development skill that scaffolds production-ready project structures (Next.js, FastAPI+React, MERN, Django+React) and runs static code quality analysis across security, complexity, dependency health, test coverage, and documentation — paired with reference guides for architecture patterns, development workflows, and stack selection.

## Core Capabilities

- **Project scaffolding** — generate complete Next.js, FastAPI+React, MERN, or Django+React structures with TypeScript, Docker/docker-compose, env templates, and package configs.
- **Code quality analysis** — static scan for security issues, cyclomatic complexity, dependency CVEs, test coverage estimate, and documentation scoring, with an overall score/grade and prioritized P0/P1/P2 recommendations.
- **Stack selection** — decision matrix and trade-off guides for frameworks, databases, ORMs, auth, and deployment platforms by use case (MVP, SaaS, Enterprise).
- **Architecture patterns** — frontend component design, backend clean architecture, API design (REST/GraphQL), caching, and authentication.
- **Lifecycle workflows** — local setup, git, CI/CD, testing, code review, deployment, and observability.

## When to Use

Use this skill when you hear:
- "scaffold a new project" / "set up a fullstack project" / "generate project boilerplate"
- "create a Next.js app" / "set up FastAPI with React"
- "analyze code quality" / "check for security issues in codebase"
- "what stack should I use"

## Clarify First

Before scaffolding, confirm these inputs. If any is unknown or vague, ASK — do not assume:

- [ ] **Stack** — Next.js / FastAPI+React / MERN / Django+React (selects the scaffold template and entire file tree)
- [ ] **App name & output path** — where the project is written (`project_scaffolder` positional args)
- [ ] **Task** — scaffold a new project vs analyze an existing codebase's quality (selects `project_scaffolder` vs `code_quality_analyzer`)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

## Tools

| Tool | Purpose | Command |
|------|---------|---------|
| `project_scaffolder.py` | Scaffold a fullstack project structure with boilerplate, Docker, and env config | `python scripts/project_scaffolder.py nextjs my-app --output ./projects` |
| `code_quality_analyzer.py` | Static-analyze a codebase for security, complexity, deps, coverage, and docs | `python scripts/code_quality_analyzer.py . --verbose --json --output audit.json` |

## References

Load the reference that matches the task — keep this file lean and pull detail on demand:

- **[references/tooling-workflows-and-quality.md](references/tooling-workflows-and-quality.md)** — full tool docs (templates, flags, sample output, output formats), the three end-to-end workflows, the stack decision matrix / common issues, the troubleshooting table, and the success-criteria bar. Read when running the tools in depth or checking generated work before shipping.
- **[references/architecture_patterns.md](references/architecture_patterns.md)** — frontend component architecture, backend clean architecture / repository pattern, REST & GraphQL API design, database patterns, caching strategies, and authentication architecture. Read when designing or reviewing system structure.
- **[references/development_workflows.md](references/development_workflows.md)** — local dev setup, git workflows, CI/CD pipelines, testing strategies, code review process, deployment strategies, and observability. Read when standing up the development lifecycle.
- **[references/tech_stack_guide.md](references/tech_stack_guide.md)** — frontend/backend framework comparisons, database selection, ORMs, auth solutions, deployment platforms, and stack recommendations by use case. Read when choosing a stack.

## Scope & Limitations

**What this skill covers:**
- Project scaffolding for Next.js, FastAPI+React, MERN, and Django+React stacks with Docker, TypeScript, and environment configuration
- Static code quality analysis including complexity metrics, security pattern detection, dependency vulnerability checks, test coverage estimation, and documentation scoring
- Stack selection guidance via the tech stack decision matrix and reference guides
- Fullstack architecture patterns (frontend component design, backend clean architecture, API design, caching, auth)

**What this skill does NOT cover:**
- Runtime performance profiling, load testing, or APM instrumentation -- see `senior-devops` for observability tooling
- Infrastructure provisioning, Terraform/Pulumi, or cloud deployment automation -- see `aws-solution-architect` and `senior-devops`
- Comprehensive CVE scanning against live vulnerability databases -- use `npm audit`, `pip-audit`, or `senior-secops` for deep security analysis
- Mobile or native desktop application scaffolding -- this skill targets web-based fullstack architectures only

## Integration Points

| Skill | Integration | Data Flow |
|-------|-------------|-----------|
| `senior-devops` | CI/CD pipeline setup for scaffolded projects | Scaffolder output directory feeds into DevOps pipeline configuration and Docker deployment workflows |
| `senior-secops` | Deep security audit after initial quality scan | Code quality analyzer P0/P1 security findings hand off to SecOps for remediation tracking and penetration testing |
| `senior-qa` | Test strategy for scaffolded projects | Test coverage estimation from the analyzer informs QA test plan gaps; scaffolded test infrastructure provides the harness |
| `code-reviewer` | Automated review of generated and existing code | Quality analyzer JSON report provides structured input for code review checklists and PR approval criteria |
| `senior-architect` | Architecture validation of stack choices | Tech stack guide recommendations feed into architecture decision records; complexity metrics validate design compliance |
| `aws-solution-architect` | Cloud deployment of scaffolded applications | Docker Compose configurations from the scaffolder translate into ECS/EKS task definitions and infrastructure blueprints |