perfex-crm-skills

# perfex-crm-skills

> Nine open-source Agent Skills (agentskills.io spec) that teach AI coding assistants — Claude Code, Cursor, Codex — how Perfex CRM (CodeIgniter 3, PHP) actually behaves. Every rule is verified against Perfex 3.4.0 core source and traces to a production incident. MIT. Last verified 2026-09-15.

Who it's for: freelancers and agencies building Perfex CRM modules, payment gateways, client-area themes, PDF templates and custom fields with an AI coding assistant. Not for Perfex SaaS forks or the REST API.

Install: `npx skills add https://github.com/yasserstudio/perfex-crm-skills` (or `/plugin marketplace add yasserstudio/perfex-crm-skills` in Claude Code).

## Skills

- [perfex-core-apis](skills/perfex-core-apis/SKILL.md): get_option() ignores its default argument, _l() always sprintf()s, hooks() payloads and accepted_args, log_message() is off in production (use log_activity()), CI loader inside Perfex, auth helpers, render_* form helpers.
- [perfex-module-dev](skills/perfex-module-dev/SKILL.md): module folder layout, header block, activation/deactivation/uninstall hooks, register_language_files(), config/routes.php, controllers extending AdminController/ClientsController, tblmodules.installed_version and the manual Upgrade Database step, add_module_support('my_prefixed_view_files'), inter-module dependencies, register_cron_task().
- [perfex-database](skills/perfex-database/SKILL.md): signed-INT foreign keys to core tables, utf8mb4 + VARCHAR(191), idempotent install.php, App_module_migration (migrations/NNN_version_NNN.php, one consecutively-numbered file per Version: bump), dbforge prefix trap, list_fields() vs field_exists(), production schema drift.
- [perfex-security](skills/perfex-security/SKILL.md): open-redirect guards, race-safe single-use tokens with affected_rows(), rate-limiting enumeration endpoints, PII-safe logging, target="_blank" rel, CSRF (csrfData for AJAX, POST-only token), modules/<m>/config/csrf_exclude_uris.php regexes, deserialization defence.
- [perfex-email](skills/perfex-email/SKILL.md): send_simple_email(), admin-recipient fallback chain, email-client-safe templates, retry queue with backoff via register_cron_task(), language fallback and its two traps (lazy template rows, _l() not switched), PHPMailer smtp_debug/smtp_timeout pitfalls.
- [perfex-customfields](skills/perfex-customfields/SKILL.md): the 18 real tblcustomfields columns (disalow_client_to_edit typo, only_admin, show_on_client_portal, bs_column), real field types (date_picker, date_picker_time), comma-separated options, tblcustomfieldsvalues.fieldto, get_custom_field_value() by slug, handle_custom_fields_post(), render_custom_fields() $where argument.
- [perfex-theme](skills/perfex-theme/SKILL.md): client-area theme layout, functions.php + register_theme_assets_hook(), App_css/App_scripts registry and cache busting, my_ view overrides, jQuery Validate submit-button bug, dark mode without FOUC, RTL, Bootstrap 3 specificity, custom.css needs app_customers_head() in a custom theme.
- [perfex-payment-gateway](skills/perfex-payment-gateway/SKILL.md): App_gateway (setId/setName/setSettings, decryptSetting), register_payment_gateway(), the real process_payment() $data keys, addPayment() and processing fees, webhook controller with signature check and transactionid dedup, server-side gateway/currency re-validation, Stripe Basil changes.
- [perfex-pdf](skills/perfex-pdf/SKILL.md): TCPDF templates and the my_ prefix override, font selection for Arabic/CJK, custom fonts before setFont() (pdf_construct fires too late), pdf_* hooks, items_table_class filter for the line-items table, headings, logo, e-invoice JSON/XML (3.4.0+).

## Repository docs

- [README](README.md): what the skills prevent, gotcha index, install, FAQ.
- [CHANGELOG](CHANGELOG.md): per-release changes; v1.5.0 lists every corrected claim.
- [CONTRIBUTING](CONTRIBUTING.md): versioning policy, PR checklist, release process.
- [AGENTS.md](AGENTS.md): instructions for agents editing this repo.
- [scripts/verify-against-core.sh](scripts/verify-against-core.sh): checks every referenced API against a local Perfex install.

## Optional

- [VERSIONS.md](VERSIONS.md): per-skill version table.
- [SECURITY.md](SECURITY.md), [CODE_OF_CONDUCT.md](CODE_OF_CONDUCT.md), [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md), [CITATION.cff](CITATION.cff).