Security

Apply modern web development best practices for security, compatibility, and code quality.

Evaluates code against Apple's App Store Review Guidelines.

Extract a comprehensive design system (DESIGN.md) directly from frontend source code — React, Vue, Svelte, Angular, plain HTML/CSS, or any web framework.

Write and structure RFDs (Requests for Discussion) for the Symposium project.

Connect, verify, and troubleshoot Xquik's remote MCP server.

Use when the user wants to provision infrastructure or third-party services using Stripe Projects.

Host security hardening and risk-tolerance configuration for Bitterbot deployments.

Researches malware analysis, CVEs, attribution reports, and hacker community sources.

Use when the user mentions Arcgentic, or wants substantial AI-written code taken through a gated plan → development → self-audit → external audit workflow…

Use when the user says Arcgentic, asks to use Arcgentic, or wants an idea taken through a complete plan → development → self-audit → external audit workflow…

Use when building any system where email content triggers actions — AI agent inboxes, automated support handlers, email-to-task pipelines, or any workflow…

Use when building email features, emails going to spam, high bounce rates, setting up SPF/DKIM/DMARC authentication, implementing email capture, ensuring…

Run CodeRabbit CLI reviews, retrieve saved local or GitHub PR fix prompts, and interpret CodeRabbit authentication and review output.

Routes Snowflake-related operations to Cortex Code CLI for specialized Snowflake expertise.

Inspect Kooboo CMS history, list and filter change records, view object versions, compare revisions, undo selected changes, restore a website to a historical…

Inspect Kooboo CMS history, list and filter change records, view object versions, compare revisions, undo selected changes, restore a website to a historical…

Structure a dev-tool homepage that converts developers into champions.

Use only after an arcgentic round has an external audit PASS and state.yaml is in passed.

Detect recurring P2/P3 audit patterns across recent rounds and promote them into lesson cards.

Use when a planned round handoff exists and needs to be implemented end-to-end via the 4-commit chain (entry-admin → BA design → dev body with inline CR + SE…

Entry skill for the arcgentic plugin — establishes the four-role workflow (planning / dev+self-audit / external-audit / reference-tracking), the round state…

Creates and improves portable Agent Skills with a validator, routing scenarios, and evidence-based keep, cut, merge, or retire decisions.

Audits agentic products for tool parity, authority, approval payloads, recovery, and trust using 24 rules and a ship verdict.

Audits libraries, CLIs, and SDKs using 38 rules for public contracts, package exports, piped output, errors, and configuration.