Revisió de codi
Revisió i anàlisi automatitzades del codi
cyclonedx-spec-reviewer
cdxgen
Reviews cdxgen changes for CycloneDX schema compliance, semantic field correctness, and unnecessary custom properties across spec versions 1.5 through 2.0, including AI-BOM modeling via formulation, modelCard, pedigree, and evidence. Use when a pull request changes CycloneDX output, schema handling, validators, package-manager integrations, BOM enrichment, or custom properties.
clawsec-suite
prompt-security
ClawSec suite manager with embedded advisory-feed monitoring, cryptographic signature verification, approval-gated malicious-skill response, and guided setup for additional security skills.
soul-guardian
prompt-security
Drift detection + baseline integrity guard for agent workspace files with automatic alerting support
prowler-ci
prowler-cloud
Helps with Prowler repository CI and PR gates (GitHub Actions workflows). Trigger: When investigating CI checks failing on a PR, PR title validation, changelog gate/no-changelog label, conflict marker checks, secret scanning, CODEOWNERS/labeler automation, or anything under .github/workflows.
prowler-changelog
prowler-cloud
Manages changelog entries for Prowler components following keepachangelog.com format. Trigger: When creating PRs, adding changelog entries, or working with any CHANGELOG.md file in ui/, api/, mcp_server/, or prowler/.
prowler-pr
prowler-cloud
Creates Pull Requests for Prowler following the project template and conventions. Trigger: When working on pull request requirements or creation (PR template sections, PR title Conventional Commits check, changelog gate/no-changelog label), or when inspecting PR-related GitHub workflows like conventional-commit.yml, pr-check-changelog.yml, pr-conflict-checker.yml, labeler.yml, or CODEOWNERS.
prowler-sdk-check
prowler-cloud
Creates Prowler security checks following SDK architecture patterns. Trigger: When creating or updating a Prowler SDK security check (implementation + metadata) for any provider (AWS, Azure, GCP, K8s, GitHub, etc.).
manage-skill-flavors
UiPath
"Maintain build-time skill flavors in the UiPath skills repository. Use when adding or editing skill-flavor marker blocks, sparse flavor overrides, generic flavor discovery, marker-free default or custom npm packages, package inspection, flavor CI, or composer/package tests. Preserve SKILL.md as the complete default, keep overrides exceptional, and validate finished trees and tarballs."
pr-review
Gentleman-Programming
Reviews GitHub PRs and leaves human, direct comments. Trigger: When user asks to review a PR, check a PR, or gives a PR URL.
humanizer
zed-industries
Remove signs of AI-generated writing from text. Use after drafting to make copy sound more natural and human-written. Based on Wikipedia's "Signs of AI writing" guide.
hugging-face-evaluation
huggingface
Add and manage evaluation results in Hugging Face model cards. Supports extracting eval tables from README content, importing scores from Artificial Analysis API, and running custom model evaluations with vLLM/lighteval. Works with the model-index metadata format.
code-review
JackyST0
Smart code review skill that helps review code quality, identify potential issues, and provide improvement suggestions.
codex
skills-directory
Use when the user asks to run Codex CLI (codex exec, codex resume) or references OpenAI Codex for code analysis, refactoring, or automated editing
brand-writer
zed-industries
Write clear, developer-first copy for Zed — leading with facts, grounded in craft.
stop-loss-strategies
Bhala-Srinivash
Stop-loss placement strategies for NSE/BSE equity trades. Covers structure-based, ATR-based, support/resistance-based, and moving average-based stops with buffer rules and hard limits. Use when the user asks: "where to set stop-loss", "stop-loss for [stock]", "how to protect this trade", "what's a good stop level", "risk management for [position]", or any question about initial stop-loss placement for Indian equity trades.
code-review
vstorm-co
Review Python code for quality, security, and best practices
Code Review
zapier
Performs comprehensive code reviews of git branches, analyzing code quality, security, performance, and best practices. Use when the user says "review" or "code review" or asks to review pull requests, merge requests, or analyze branch changes before merging.
review-nurosos-contributions
SlopDotCash
Review an existing NurosOS PR for reproducibility, checkpoint/replay correctness, research claims, and useful evidence. Use for advisory exact-head review in modarresi1913/NurosOS, after checking current project and execution authority.
review-slopdotcash-contributions
SlopDotCash
Reviews exact-head Slop (SlopDotCash/slopdotcash) contributions for MVP scope, correctness, security and real evidence. Use on an existing PR into development; excludes implementation ownership, self-approval, scoring decisions and payment decisions.
review-eliza-contributions
SlopDotCash
"Independently evaluate an elizaOS/eliza implementation, real-system verification, diagnosis, evidence artifact, or substantive review for quality, security, duplication, provenance, and contribution credit. Use in project CI or maintainer review before accepting work or changing a public reward allocation; reject unit-only or mock-only proof."
review-darling-arm64-contributions
SlopDotCash
"Independently evaluate an xchemtina/darling-arm64 tier claim, upstream fix, falsified finding, flake analysis, or harness for architecture honesty, control discipline, A/B/A integrity, reproducibility, attribution, and contribution credit. Use in project CI or maintainer review before accepting work or changing a public reward allocation."
review-thenetwork-contributions
SlopDotCash
Reviews exact-head The Network (eliza-research/thenetwork) contributions for PRD scope, matching correctness, safety gates and real evidence. Use on an existing PR into main; excludes implementation ownership, self-approval, scoring and payment decisions.
review-delta-star-contributions
SlopDotCash
"Independently evaluate a SlopDotCash/proximityprize Delta Star implementation, Lean proof, test, refutation, diagnosis, or evidence artifact for correctness, security, duplication, provenance, and contribution credit. Use in project CI or maintainer review before publishing a Proximity Prize contribution share."
contribute-to-nurosos
SlopDotCash
Prepare a bounded NurosOS contribution with reproducible developmental experiments and exact-head evidence. Use for an existing approved task in modarresi1913/NurosOS; check the paused-project and verification gates before execution or submission.