Turn your AI coding agent into a production-focused full-stack engineer

Fullstack Forge is an Agent Skill that guides AI coding agents through architecture, security,
databases, APIs, frontend, UI, UX, testing, performance, reliability, and release readiness.

Once installed, it works automatically. Continue talking to your AI agent normally. Forge is
agent-guided, with deterministic CLI checks and evidence gates where supported.

Install

Requires Node.js 20.19+, 22.13+, or 24+.

npm install --save-dev "git+https://github.com/is-bo/fullstack-forge-skill.git#v0.1.0"
npx forge init
npx forge doctor

Restart or reopen your AI coding agent only if it does not refresh installed project skills
automatically. forge init installs skills and ownership-managed project instructions for detected
hosts; use forge init all only when you intentionally want every bundled platform.

How to use it

Tell your AI agent what you want:

Add appointment cancellation and notify the patient.

Review the database queries and optimise anything that is actually inefficient.

Improve the mobile booking experience.

Prepare this application for release.

Forge activates automatically and loads only the relevant modules. No Forge command is required.

Optional commands

Use an explicit Forge command when you want to force or narrow a workflow:

$forge audit security
$forge audit queries
$forge audit cache
$forge frontend
$forge ui review
$forge ux review
$forge verify
$forge ship

The installed skill name is forge; host syntax differs:

Agent Skills form where supported:  $forge audit cache
Slash form where the host exposes skills as commands:  /forge audit cache
Terminal and CI:  npx forge audit cache

The terminal form is the stable executable interface. See
platform support for host-specific selection forms and live-UI
limitations. Explicit commands preserve the same evidence and approval rules as automatic use.

What Forge does

For a normal feature, Forge helps the agent:

• understand the existing application;
• select relevant engineering modules;
• implement through existing patterns;
• check related production concerns;
• run focused tests and tools;
• report what was verified and what remains uncertain.

Forty-two specialist modules cover foundation, frontend experience, APIs and trust boundaries, data,
delivery, and capabilities such as notifications, AI, payments, realtime, and offline behavior.
Natural-language routing is an initial aid: direct repository evidence determines final
applicability.

Short example

User:
Add a feature that lets doctors cancel appointments and notify patients.

Agent with Fullstack Forge:
- Inspects the appointment and notification architecture.
- Selects API, database, authorization, notification, UX, and testing guidance.
- Implements status transitions and prevents unauthorized cancellation.
- Handles notification failure and adds focused tests.
- Reports the checks that passed and any proof that remains unavailable.

For a one-line visual adjustment, Forge keeps the plan and validation focused. For identity,
permissions, personal data, payments, uploads, destructive operations, secrets, or tenancy, it
requires stronger evidence and surfaces approval boundaries.

Supported agents

Installation is manifest-owned, path-contained, and symlink-free. Updates preserve modified and
user-authored instructions; uninstall removes only unchanged Forge-owned content. See
getting started and platform support.

Evidence and limitations

Forge is not a standalone universal scanner and does not guarantee that an application is
production-ready. It gives the AI agent a structured, evidence-based production-readiness workflow.

A PASS requires affirmative evidence. Applicable proof that cannot be obtained stays
NOT_VERIFIED or BLOCKED; a concern shown to be outside the affected boundary is reasoned
NOT_APPLICABLE, never a synthetic pass. Agent-authored findings bind source or runtime evidence,
revision, commands, limitations, and verification. Build state and historical reports never satisfy
the independent Ship gate.

Detailed references:

• Architecture
• Commands and CLI reference
• Finding schema and report schema
• Build mode and release workflow

Development and contributor information

Canonical skill sources live in src/fullstack-forge/. Generated platform copies must not be edited
by hand.

npm ci --ignore-scripts --no-audit --no-fund
npm run generate
npm run check

See development, contributing, and
security.

Version policy

v0.1.0 is the first intentionally supported public release of the agent-first Fullstack Forge
product. Earlier numbered snapshots were development previews preserved in Git history.

License

Apache-2.0. See LICENSE, NOTICE, and
THIRD_PARTY_NOTICES.md.