solid-start-v2 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited solid-start-v2 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill for SolidStart v2 app work. Keep it focused on Start-specific architecture and server boundaries.
If the task is mainly about Solid core reactivity, component semantics, or Solid 2.x API behavior, use the matching Solid skill alongside this one.
Loading, Errored, split createEffect, or top-level reactive read warnings.Classify the task before editing:
Then choose the smallest SolidStart-native pattern that fits.
query(..., key) for server-backed reads that participate in router caching and invalidation.action(..., key) for writes and form submissions.route.preload to start route work early. Do not await there unless blocking is truly required.createAsync(() => queryFn(...)) in route components to consume async route data."use server".If the user needs route data:
references/data-and-mutations.mdIf the user needs auth, sessions, or protected pages:
references/auth-middleware-sessions.mdIf the user needs an endpoint for webhooks, OAuth callbacks, REST, or files:
references/api-routes-and-responses.mdIf the user needs route structure or end-to-end app design:
references/app-architecture.mdIf the user needs metadata, social tags, or image guidance:
references/seo-meta-and-images.mdIf the user needs setup, migration, env, or runtime guidance:
references/config-and-runtime.mdIf the user needs Start v2 platform changes, Nitro 3 context, image support, or plugin-package guidance:
references/v2-changes-and-ecosystem.mdIf the task needs a final quality pass before wrapping up:
references/release-checklist.mdStart with the smallest correct SolidStart shape instead of a framework-agnostic one.
When implementing a feature, think through:
Prefer local, minimal changes when editing an existing app. Do not rewrite working route structure just to make it look more abstract.
fetch calls in component bodies.event.locals, but security-sensitive checks should live in server queries, actions, API routes, or server utilities.Before finishing substantial SolidStart work, quickly check:
"use server" and out of client bundles?Title, Meta, or share tags?If you see these patterns, correct them unless the repo has a strong reason not to:
onMount for first renderSolidStart v2 is still close to evolving ecosystem boundaries. If the installed project exports or package names differ from this skill, trust the repo's actual dependencies and current package exports.
Be especially careful with older examples that still mention Vinxi-era helpers. Use current local imports when available.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.