Security

Apply evidence-based rules when composing tool calls, parsing their output, interpreting non-zero exits, or turning repeated operations into durable routines.

Rigorous agentic engineering workflow — 23 playbooks and 23 principle rules for bug fixes, features, refactors, performance work, investigations, architecture…

Enforce and audit FAIR data principles (Findable, Accessible, Interoperable, Reusable) across scientific datasets, bioinformatics workflows, metadata…

Establish, audit, and enforce a consistent logging strategy in any Flutter/Dart project using package:logging — installs the dependency if missing, builds a…

Give an overview of large chained work on GitHub (tracking issues with sub-issues and blocked-by dependencies) and recommend where the user should put their…

Authoritative verification for @zereight/mcp-gitlab — mock GitLab, stdio MCP tool calls, npm test harness.

Scaffold or audit a repo's hierarchical AGENTS.md Intent Layer.

Migration and housekeeping utilities for BMad artifacts and l3io-pm state.

Red team security analysis agent.

Run Google Lighthouse against a URL (mobile and desktop), trace the performance, accessibility, SEO, and best-practices findings to the project's actual…

Developer reference for connecting to OpenAI, Anthropic, Gemini, DeepSeek, GLM, MiniMax, MiMo, Mistral, xAI, Qwen, Kimi, Cohere, OpenRouter, Together, and…

Audit and evolve the brain vault - prune outdated content, discover cross-cutting principles, review skills for structural encoding opportunities.

Use when the operator says prune, audit, or sweep memory, the memories are cluttered, or relocate a lesson.

Transform security review findings into targeted GitHub PR review comments.

Deep, whole-codebase review of a Python project that writes a new REVIEW.md, a verified and prioritized list of fixes and improvements.

Runs react-doctor on React codebases and iteratively fixes diagnosed issues until the project reaches a verified score of 100 without shortcuts.

Fully automatic repository health audit with mandatory silent remediation loop.

Challenge whether a requirement deserves to exist before planning or implementing it.

Run the `fallow` CLI on any JavaScript/TypeScript project to find dead code, unused dependencies, duplication, complexity hotspots, and security candidates…

Manage .env files and development secrets using the Bitwarden personal Password Manager CLI (bw).

Repo-local skill factory and auditor for the vegafactory monorepo.

Pick an open GitHub issue and set up a branch for it: checks gh auth, picks the repo, shortlists unclaimed issues, recommends one, then forks, clones…

Use this skill when retrieving SonarQube issues and security hotspots for a project, branch, or pull request without changing findings or code.

Choose or generate a target technology stack: compare frameworks with TCO, security and ecosystem scoring, plan a migration, or write a blueprint for a new or…