Security

Creates and improves portable Agent Skills with a validator, routing scenarios, and evidence-based keep, cut, merge, or retire decisions.

Audits agentic products for tool parity, authority, approval payloads, recovery, and trust using 24 rules and a ship verdict.

Audits libraries, CLIs, and SDKs using 38 rules for public contracts, package exports, piped output, errors, and configuration.

Audits and fixes technical SEO, researches search demand, creates content briefs, and measures SEO, AEO and GEO performance.

Reviews a local diff, branch diff, or PR with file:line findings in confirmed and plausible tiers, gates any test the diff adds or changes, and in apply mode…

Fact-check and hype-audit content.

Read, write, snapshot, and lock .arcgentic/state.yaml across planner, dev, audit, and optional test sessions.

Host security hardening and risk-tolerance configuration for OpenClaw deployments.

Audit, diagnose, or optimize website loading and interaction performance, Core Web Vitals, and Lighthouse performance scores.

Survey a codebase as a senior advisor and produce prioritized, self-contained implementation plans for OTHER models/agents to execute.

Audit a codebase as a read-only senior advisor and write prioritized, self-contained implementation plans under plans/ for other agents to execute; never…

Create, edit, improve, or audit AgentSkills.

GitHub operations via `gh` CLI: issues, PRs, CI runs, code review, API queries.

Host security hardening and risk-tolerance configuration for Brigade deployments.

Use before cutting any gflow-cli release or after a major documentation change — systematic council-driven audit that combines a mechanical 7-section…

Surface open known issues.

Single entry point that routes any ASO, App Store, Google Play, app marketing, paid UA, monetization, retention, reviews, ratings, market-intel, or…

Sync changes from dev brayness/ to the published git mirror at `skills/brayness-sync/published/`.

Full code quality audit for a file, package, or directory.

Audits font loading, type scales, measure, spacing, OpenType, and rendered punctuation with 78 scoped rules.

Remote control of DOCA Flow over gRPC with the shipped `doca_flow_grpc` server: program Flow pipes and entries from Python, Go, Rust or Java, or from another…

Operate the DOCA UROM Service container on BlueField Arm for remote memory operations (puts, gets, atomics, collectives) enqueued by a paired host using…

WCAG 2.2 AA compliance as required by the European Accessibility Act.

Fix a CRITICAL Trivy finding that is failing CI in this repo (a vulnerability, misconfiguration, or secret from security-scan.yml or image-scan.yml), or add…