skill-inventory-drift

Review a proposed sharing or publishing workflow for a private AI skill using supplied repository visibility and authorization details.

Review supplied software release receipts and state exactly which source, test, deployment, installation and runtime claims they support.

Generate and maintain a Keep a Changelog style CHANGELOG.md from Conventional Commits, grouped by type with correct semver headings.

Enforce and author Conventional Commits messages, validate commit history, and map commit types to semantic-version bumps.

Harden Dockerfiles for security and size — non-root users, pinned bases, multi-stage builds, minimal layers, and supply-chain hygiene.

Drive git bisect to find the exact commit that introduced a regression, including automated test scripts and merge-commit handling.

Stand up deterministic HTTP API mocks for tests and local dev using MSW, Nock, or Prism — request matching, stateful handlers, and contract fidelity.

DELIBERATE security-scanner test fixture — contains intentionally dangerous patterns (curl-pipe-bash, env-var exfiltration).

Triage third-party dependencies before adoption — maintenance health, security advisories, supply-chain risk, and a go/no-go scoring rubric.

Review SQL queries for correctness, performance, and safety — index usage, N+1 patterns, injection risk, and EXPLAIN-driven tuning.

Audit a project's dependency licenses for compatibility and obligations — copyleft detection, license allowlists, and SPDX-based reporting.