What problem does it solve? Building full-stack SvelteKit applications involves many error-prone decisions: where to put secrets, how to wire SSR loads to a backend API, how to configure form actions, sessions, CSRF, CSP, and adapter-node deployment. This Skill encodes those decisions as concrete rules and reference guides so routes, auth, and deploys follow a consistent, secure pattern. ## Core Features & Use Cases - SSR and routing guidance: Server load functions, +page.server.ts patterns, layout data, and Svelte 5 runes ($state, $props, $derived) for new components. - Forms, sessions, and security: Form actions with fail(), hooks.server.ts locals, httpOnly cookie sessions, CSRF, CSP, and XSS rules from references/security.md. - Deployment and testing: adapter-node builds run under Bun on a VPS behind Caddy, with systemd, env var tables, and Vitest/Playwright testing layers. - Use Case: You are adding a login page and dashboard to a SvelteKit app backed by a Rust Axum API. The Skill walks you through the form action, cookie flags, event.locals synchronization, same-origin /api proxying, and the Bun-based production deploy. ## Quick Start Ask the agent to implement a SvelteKit route with a server load and a form action using this skill, then follow its security and deploy checklists.
