★ Flagship: Code Review
Review a diff for correctness bugs, security holes, and unnecessary complexity -- with a verify pass that kills false positives before they reach the output.
Read the code-review skill →Code Quality 5 skills
Code Review
Review a diff for correctness bugs, security holes, and unnecessary complexity -- with a verify pass that kills false positives before they reach the output.
Complexity Analyzer
Point at the functions actually worth simplifying by combining cyclomatic complexity, nesting depth, and how often the function actually changes.
Dead Code Finder
Find code nothing calls -- unused exports, unreachable branches, orphaned files -- and verify each one before recommending deletion.
Simplify & Refactor
Reduce accidental complexity in changed code without changing behavior -- reuse, flatten, and remove, never redesign.
Style Consistency Checker
Check a diff against the conventions the rest of the codebase already follows -- inferred from existing code, not an external style guide.
Data & APIs 5 skills
API Contract Validator
Check that an API's implementation actually matches its published contract (OpenAPI/schema spec) -- field types, required-ness, and status codes -- not just that it 'works' for the happy path.
Data Model Auditor
Check a schema/data model for normalization issues, missing constraints, and the specific place invalid data will slip through if the database doesn't enforce it.
GraphQL Schema Reviewer
Review a GraphQL schema change for N+1 resolver risk, nullability correctness, and whether it's actually backward compatible with existing clients.
SQL Review
Review a hand-written query for correctness first -- does it actually compute what the author thinks -- then for the index/plan implications.
Schema Migration Reviewer
Check a database migration for backward compatibility during a rolling deploy, lock behavior on a large table, and whether it's actually reversible.
Debugging & Incidents 5 skills
Bug Reproducer
Turn a vague bug report into a minimal, deterministic reproduction -- the single highest-leverage step in fixing anything, and the one most often skipped.
Incident Postmortem Writer
Write a blameless postmortem that captures the real timeline and root cause, with action items that would actually have prevented this -- not vague promises to 'be more careful.'
Log Triage Assistant
Pull the signal out of a large log dump during an active incident -- the first anomaly, the error cascade, and what changed right before it started.
Root Cause Analyzer
Trace a reproduced bug back to its actual root cause using the code path, not assumption -- and check whether the obvious fix addresses the cause or just the symptom.
Stack Trace Explainer
Translate a raw stack trace into the actual failing line, the call path that reached it, and what state at that point would cause the exact exception shown.
DevOps & Infrastructure 5 skills
CI Pipeline Reviewer
Review a CI/CD pipeline definition for the mistakes that cause it to pass when it shouldn't -- swallowed exit codes, skipped steps, and caching that hides a real failure.
Docker Image Optimizer
Shrink and harden a Dockerfile -- layer caching, multi-stage builds, and running as non-root -- checked against what the image actually needs at runtime.
Kubernetes Manifest Auditor
Check a Kubernetes manifest for the defaults that quietly cause outages -- missing resource limits, no readiness probe, and running as root.
Release Checklist Runner
Walk a release against a concrete, verifiable checklist -- migrations, feature flags, rollback plan -- and report exactly what's confirmed vs. still open, not a vibe check.
Terraform Plan Reviewer
Read a `terraform plan` output for what it actually means -- especially resource replacement (destroy + recreate) hiding behind an innocuous-looking diff.
Documentation 5 skills
API Doc Generator
Document an API's actual behavior -- request/response shape, status codes, error cases -- by reading the implementation, including the edge cases the happy-path handler comment leaves out.
Architecture Decision Record Writer
Capture a real architectural decision -- context, options actually considered, trade-offs, and the choice made -- while the reasoning is still fresh, not after the fact from memory.
Docstring Writer
Write docstrings for the non-obvious parts -- preconditions, units, error behavior -- and skip functions whose names and types already say everything.
Onboarding Guide Generator
Write the guide a new engineer actually needs on day one -- verified setup steps, where the real logic lives, and the non-obvious conventions -- not a restated README.
README Generator
Write a README from what the codebase actually does -- entry points, real commands, actual dependencies -- not a generic template with placeholders.
Frontend & Accessibility 5 skills
Accessibility Audit
Check a UI against WCAG basics that automated tools miss -- keyboard navigation, focus order, and whether screen-reader text actually makes sense, not just whether alt attributes exist.
CSS Consistency Checker
Catch new styling that drifts from the design system's actual tokens -- hardcoded colors/spacing that should reference an existing variable -- and responsive gaps a desktop-only check misses.
Design System Consistency Checker
Check a new component against the design system's actual existing components before it's built from scratch -- most 'new' UI needs are a variant of something that already exists.
Internationalization Checker
Find hardcoded user-facing strings, string concatenation that breaks in other languages, and formatting that assumes one locale's conventions.
React Component Auditor
Check a component for the specific bugs React's model makes possible -- stale closures, missing dependency array entries, and unnecessary re-renders -- not general style.
Git & PR Workflow 5 skills
Breaking Change Detector
Check a diff against a package's actual public surface (exported API, wire format, CLI flags, config schema) to catch breaking changes the author didn't flag as one.
Changelog Generator
Turn a range of commits into a user-facing changelog entry, grouped by category and written for the person consuming the software, not the people who built it.
Commit Message Writer
Write a commit message that explains why a change was made, derived from the actual diff and conversation context -- not a restatement of the diff itself.
PR Description Writer
Summarize a branch's full commit range for reviewers -- what changed and why, plus a concrete test plan -- not just the latest commit's message.
Release Notes Generator
Write release notes that lead with what matters to users (highlights, breaking changes, upgrade steps) instead of a flat, chronological commit dump.
Performance 5 skills
Bundle Size Auditor
Find what's actually inflating a frontend bundle -- using a real size analysis, not guesswork -- and separate genuinely removable weight from load-bearing dependencies.
Cache Strategy Advisor
Pick and validate a caching approach for a specific access pattern -- and design the invalidation strategy first, since that's the part that actually causes incidents.
Memory Leak Hunter
Find what's holding a reference it shouldn't -- from a heap snapshot diff or growth pattern, not a guess about 'probably the cache.'
Performance Profiler Guide
Turn a profiler's raw output into a ranked list of what's actually worth optimizing -- self time vs. cumulative time, and whether the hot path is even on the critical path a user feels.
Query Optimizer
Diagnose a slow query from its actual execution plan -- missing index, bad join order, N+1 pattern -- rather than guessing from the SQL text alone.
Security 5 skills
Auth Flow Reviewer
Check a new or changed authentication/authorization flow for the specific mistakes that actually cause breaches: missing object-level checks, token misuse, and session handling gaps.
Dependency Vulnerability Auditor
Turn a raw dependency-audit tool's output into a prioritized, actionable list -- which CVEs are actually reachable from this codebase's usage, not just present in the lockfile.
SQL Injection Auditor
Trace every place user input reaches a database query in a diff, and confirm parameterization -- string-built SQL is the finding, not a maybe.
Secrets Scanner
Find credentials, API keys, and tokens accidentally committed to a diff or repo, distinguishing real secrets from test fixtures and placeholders.
Security Review
Review a diff for OWASP-class vulnerabilities that this specific change could introduce -- scoped to what actually applies, with a verify pass before anything is reported.
Testing 5 skills
Flaky Test Detector
Diagnose why a test fails intermittently -- timing, ordering, shared state, or real non-determinism -- instead of just retrying until it passes.
Mutation Testing Advisor
Manually 'mutate' small pieces of logic (flip a comparison, off-by-one a bound) and check whether any existing test actually catches it -- a cheap way to find tests that pass but don't test anything.
Regression Test Planner
Given a bug that shipped, design the minimal set of tests that would have caught it, plus the nearby cases it implies are also at risk.
Test Coverage Reporter
Turn a coverage report into a short, prioritized list of the specific untested branches that actually carry risk -- not a percentage to chase.
Test Writer
Write tests for the behavior a diff actually introduced -- happy path, the edge cases that diff makes possible, and the failure modes a reviewer would ask about.