Reconnaissance only — no installation recommended

81 backend agent-skill candidates found on the public web, but only 10 fit this Fastify + SQLite stack tightly — and Fastify fit is unknown for every one

Asked:Find high-quality Agent Skills / SKILL.md packages that could improve an AI coding agent working on a production backend: Node.js, TypeScript, Fastify, SQLite, REST/HTTP API, authentication and authorization, Google OIDC, secure cookie sessions, CSRF protection, database migrations, idempotent writes, optimistic concurrency/revisions, audit logging, integration testing, explicit health/readiness, reverse proxy / Cloudflare edge later, security-sensitive data, human-gated migrations/deployment. We prefer skills that teach reusable backend reasoning and workflows, not framework boilerplate. Aim for broad recall first: at least 75 plausible candidates. Do NOT recommend installation yet. This is discovery only.

One deduplicated result set: 81 candidate Agent Skills / SKILL.md packages gathered from skills.sh, GitHub, vendor repositories and skill catalogs — 28 distinct repositories where visible and 115 public source URLs, 185 discovery mentions in total. Fit is graded HIGH / MEDIUM / LOW / UNKNOWN from the public pages only; nothing was installed, cloned, or executed.

Fit matrix — every candidate against the five gradings, HIGH project fit first

HIGHMEDIUMLOWUNKNOWN — the public page gave too little detail; unknown does not mean safeHover a row for description, repository and sources

What the matrix cannot say alone

The single most-cited candidate is Matt Pocock's tdd skill — 21 discovery mentions and a 818.4K popularity signal — and workflow skills like it (TDD, verification, code review) are the most framework-portable finds.

Fastify fit is UNKNOWN for all 81 candidates: no first-class Fastify production-architecture skill surfaced. Vendor database skills such as firebase-auth-basics assume hosted platforms, dragging SQLite fit down (18 rows graded LOW).

Security material skews to offensive checklists — e.g. yaklang/hack-skills OAuth/OIDC misconfiguration — rather than a cohesive secure-backend lifecycle for cookie sessions, CSRF, authz modeling or audit logging.

Ecosystem gaps where nothing explicit was found: SQLite migration discipline and locking semantics, idempotency keys and safe write replay, optimistic concurrency/revisions, Google OIDC integration detail, tamper-evident audit logs, liveness/readiness contracts, Cloudflare trust boundaries, and human-gated migration/deploy workflows. One deployment skill observed in research directed git add . plus automatic global package installs; no red flag in this table is source-supported for any row, so none is asserted.

All 81 candidates

Skill	Repository	Focus	Proj	Sec	SQLite	Fastify	Mentions · popularity	Sources

Public-web discovery only: 81 deduplicated Agent Skill / SKILL.md candidates, one row each, from skills.sh, GitHub, vendor repositories, catalogs and individual public pages (28 visible repositories, 115 source URLs). Fits graded HIGH/MEDIUM/LOW/UNKNOWN from visible pages; red flags recorded only when source-supported (none were). Table shows up to 4 source links per row for space; general backend value is MEDIUM for every row and is shown only in the matrix. Nothing was installed, cloned, or executed.

This report was generated automatically by Keenable SELECT at a user's request, from publicly available web sources linked herein. Keenable does not review, verify, or endorse its contents and makes no representation as to accuracy, completeness, or timeliness; AI-based extraction may contain errors. Nothing in this report is investment, legal, financial, or other professional advice. All trademarks and referenced content remain the property of their respective owners; no affiliation or endorsement is implied. To report an error, rights concern, or request removal: legal@keenable.ai.