Security

Define, review, or update SECURITY_MODEL.md files that tell security review tools a repository's threat model, trust boundaries, invariants, reportable…

Security code review for vulnerabilities.

Scan agent skills for security issues.

Architecture audit that maps module dependencies, checks layering integrity, and flags structural decay across a codebase, drawing on twelve classic…

Full-sweep mode: runs a unified analysis across all quality dimensions — code decay, architecture, tech debt, and test quality — then applies fixes directly…

Audit or rewrite AGENTS.md so it holds only lasting principles.

Audit and prioritize performance work through bounded-work and forward-progress checks.

Audit whether tests earn their maintenance cost and which suite owns each contract.

Review changed code for naming, stale references, unnecessary complexity, and comment quality.

Break large features into independently verifiable, human-reviewable slices under a feature directory in specs/.

Add GitHub skill repos to the ASM index: clone, audit, eval, regenerate index, rebuild catalog, open PR.

Analyzes code files and reports statistics including line counts, file counts by extension, and total size.

ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup…

Perform Porter's Five Forces analysis — competitive rivalry, supplier power, buyer power, threat of substitutes, and threat of new entrants.

Draft a detailed privacy policy covering data types, jurisdiction, GDPR and compliance considerations, and clauses needing legal review.

The durable documentation set that makes an AI-built (vibe-coded) app reviewable before shipping.

Guidance for using asc cli in this repo (flags, output formats, pagination, auth, and discovery).

Django performance code review.

Use binance-cli for Binance Spot, Futures (USD-S), and Convert.

Statute and regulation interpretation framework.

Assess IT vendors and third-party partners with multi-factor risk scoring and regulatory compliance checklists.

Audit whistleblower systems and draft compliant reporting policies.

Classify germline variants from VCF/BCF files according to the ACMG/AMP 2015 28-criteria evidence framework and generate clinical-grade interpretation reports…

Define, validate, run, resume, and audit repo-local multi-step automations with current `asc workflow` and `.asc/workflow.json`, including step outputs and…