Runs a two-pass vulnerability scan on a snippet, file, or diff — a static pattern pass across fixed categories (injection, secrets, auth…
Hardens a feature against attack before or while it's built — threat-model trust boundaries with STRIDE, apply the Always/Ask-First/Never…
Reviews code for security vulnerabilities across Go, TypeScript, PHP, and infrastructure config.
Audits an agent harness's own configuration — CLAUDE.md, .claude/settings.json, MCP server configs, hooks, and agent definitions — for…
Optimize for search engine visibility and ranking.
Writes a structured, human-reviewed specification before any code, deriving implementation from that written contract rather than from a…
Use when deciding whether to manually compact conversation context now versus later — at a phase boundary (research done, plan written…
Drives development with tests written before implementation code, in Go, TypeScript, PHP, or any language.
Generates comprehensive unit, table-driven, and concurrency tests for a given function or module — happy paths, error paths, boundary…
Guides synthesizing raw qualitative user research into defensible themes using affinity mapping (the KJ method) and conducting…
Comprehensive web quality audit covering performance, accessibility, SEO, and best practices.
Five-phase umbrella playbook for an initiative shepherd.
Use when formatting shell scripts with shfmt.
Database migration best practices for schema changes, data migrations, rollbacks, and zero-downtime deployments across PostgreSQL, MySQL…
PostgreSQL database patterns for query optimization, schema design, indexing, and security.
Codified expertise for returns authorization, receipt and inspection, disposition decisions, refund processing, fraud detection, and…
Complete shipping and logistics intelligence system for ecommerce sellers, importers, exporters, and anyone moving physical goods.
Issue-driven development orchestrator. Turns improvement intent into a well-specified, bilingual issue set; clusters issues into…
Ship a batch of work-units (tracker issues, or the current local changes) end to end and concurrently: implement, comment-cleanup, review…
Transform learning content (like YouTube transcripts, articles, tutorials) into actionable implementation plans using the Ship-Learn-Next…
Ship phase. Isolated integration test in fresh worktree, PR creation, CI monitoring, auto-fix on failure.