Security

Audit a project's dependencies and remove the unnecessary ones — dead declarations, dead code holding a library alive, redundant/overlapping deps, and…

Finds comments made redundant by the code beneath them — plain restatements, name echoes, banners, signature echoes — and reports them as removal candidates…

Discover and use Tasleemat's Arabic and English project-management deliverables, templates, practitioner guides, examples, and supported structured-data…

Maintains a repo's .gitignore by driving the gitignore-sync CLI and supplying the judgement the CLI deliberately leaves open — which stacks a repo declares…

Audit a repo against Cloudflare/isitagentready signals for AI agent readiness: robots.txt, llms.txt, Markdown negotiation, MCP/API catalogs, OAuth discovery…

Audit real codebases for SEO: metadata, rendering, crawlability, canonicals, schema, OG/social previews, i18n, sitemaps, robots, internal links, and AI-era…

Read-only ops diagnostics — resolve-time-window, audit-query, audit-trace, and ops-lookup.

Setup-wizard status, defer, and system-secret-capture-request.

Start code reviews, PR checks, or bug analysis.

Audit a software supply chain — dependency manifests and lockfiles, build provenance, SBOMs, and release artifacts — for what makes it untrustworthy…

Retrieve a ranked code symbol and its exact implementation, answer explicit dependency questions, or audit a patch's possible missed callers.

Use when the user says "yoda", "be lazy", "lazy mode", "simplest solution", "yagni", "do less", complains about over-engineering, bloat, boilerplate or an…

Run a whole-codebase, longitudinal engineering-practices review that produces a graded trend scorecard (security, architecture, type safety, testing…

Check whether a cold email sending domain is set up correctly.

Rigorous visual and UX design review for UI screens and flows.

Use when user wants to work with Dependabot PRs, alerts, or the Dependabot configuration file.

Deploy to Supabase from CI — `supabase db push` forward-only semantics, "only one db push at a time" concurrency, migrations in CI via session-mode `--db-url`…

Orchestrates any non-trivial development or analysis task end-to-end — discovery, alignment, blueprint, registration, implementation and delivery.

Use when building software that integrates with GitHub — GitHub Apps, OAuth apps, webhook consumers, bots, CI checks, and automation built on the GitHub API.

Score a claim against the evidence behind it.

Audit, classify, reclaim, and prevent regrowth of local filesystem cruft and agent-workspace storage.

Use Grok 4.5 as an explicit strategic control plane above Codex for plan, replan, and completion-audit lifecycles.

Handle a security incident through the NIST SP 800-61 lifecycle — validate and scope the signal, build a timestamped fact timeline, classify severity, plan…

Use when generating or validating GitHub Flavored Markdown structure and mechanics, including headings, links, tables, lists, code fences, anchors, templates…