Code Review
Automated code review and analysis
triage-validation
by Sekolah76
Finding validation before writing any report — 7-Question Gate (all 7 questions), 4 pre-submission gates, always-rejected list, conditionally valid with chain table, CVSS 3.1 quick reference, severity decision guide, report title formula, 60-second pre-submit checklist. Use BEFORE writing any report. One wrong answer = kill the finding and move on. Saves N/A ratio.
cicd-security
by Sekolah76
CI/CD pipeline security hunting — GitHub Actions workflow injection, secret exfiltration, self-hosted runner poisoning, dependency confusion, OIDC token theft, and supply chain attacks. Covers sisakulint scanning, manual workflow analysis, and chaining CI/CD bugs into critical findings. Use when a target has public repos, GitHub Actions, CircleCI, Jenkins, or GitLab CI.
memory-forensics
by Sekolah76
"Comprehensive techniques for acquiring, analyzing, and extracting artifacts from memory dumps for incident response and malware analysis."
threat-modeling-expert
by Sekolah76
"Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems."
submission-review-gate
by Sekolah76
7-Stage Bug Bounty Pipeline & 14-Point Mandatory Pre-Submission Quality Gate. Prevents false positives, severity inflation, and premature submissions.
guidelines-advisor
by Sekolah76
Smart contract development advisor based on Trail of Bits' best practices. Analyzes codebase to generate documentation/specifications, review architecture, check upgradeability patterns, assess implementation quality, identify pitfalls, review dependencies, and evaluate testing. Provides actionable recommendations.
burp-suite-testing
by Sekolah76
"Execute comprehensive web application security testing using Burp Suite's integrated toolset, including HTTP traffic interception and modification, request analysis and replay, automated vulnerability scanning, and manual testing workflows."
encrypting-and-decrypting-data
by Sekolah76
Validate encryption implementations and cryptographic practices. Use when reviewing data security measures. Trigger with 'check encryption', 'validate crypto', or 'review security keys'.
address-github-comments
by benjaminasterA
"Use when you need to address review or issue comments on an open GitHub Pull Request using the gh CLI."
caveman-review
by JuliusBrussee
Ultra-compressed code review comments. Cuts noise from PR feedback while preserving the actionable signal. Each comment is one line: location, problem, fix. Use when user says "review this PR", "code review", "review the diff", "/review", or invokes /caveman-review. Auto-triggers when reviewing pull requests.
cavecrew
by JuliusBrussee
Decision guide for delegating to caveman-style subagents. Tells the main thread WHEN to spawn cavecrew-investigator (locate code), cavecrew-builder (1-2 file edit), or cavecrew-reviewer (diff review) instead of doing the work inline or using vanilla Explore. Subagent output is caveman-compressed so the tool-result injected back into main context is ~60% smaller — main context lasts longer across long sessions. Trigger: "delegate to subagent", "use cavecrew", "spawn investigator/builder/reviewer", "save context", "compressed agent output".
tests-maintenance
by JetBrains
Maintains IdeaVim test suite quality. Reviews disabled tests, ensures Neovim annotations are documented, and improves test readability. Use for periodic test maintenance.
yao-geo-comparison-builder
by yaojingang
当用户需要生成 GEO 品牌对比内容、品牌替代方案、选型页、竞品对比页、FAQ 对比问答或“某品牌和其他方案怎么选”的内容包时使用，面向 DeepSeek、豆包、千问、Kimi、腾讯元宝生成中文简体、证据绑定、同口径、公平表达的品牌对比报告，并默认交付 Word、PDF、HTML、Markdown 四格式。
yao-geo-panorama-audit
by yaojingang
当用户需要基于品牌官网抓取、公开事实交叉验证、内容资产诊断、站内站外 GEO 机会地图、项目启动诊断、季度复盘或投放前评估时使用；不用于问答平台采样监测、单页诊断、文章写作、标题生成、后端归因或执行路线图拆解。
yao-geo-page-audit
by yaojingang
Diagnose a website page or small page set for GEO readiness with authoritative public evidence, systematic page analysis, code/content/schema fixes, and four-format Chinese report delivery.
anthropic-architect
by jamesrochabrun
Determine the best Anthropic architecture for your project by analyzing requirements and recommending the optimal combination of Skills, Agents, Prompts, and SDK primitives.
yao-deepseek-crawler
by yaojingang
"Use when a user provides DeepSeek web AI-search keywords, repeat count, target entity, and entity type, then needs repeated fresh-window crawls aggregated into JSON plus a Kami HTML GEO report. Not for generic website crawling, DeepSeek API chat, SEO writing, or one-off answer generation."
yao-chatgpt-crawler
by yaojingang
"Use when a user provides ChatGPT web AI-search keywords, repeat count, target entity, entity type, OpenCLI profile, and crawl interval preference, then needs repeated crawls aggregated into JSON plus a Kami HTML GEO report. Not for generic crawling, ChatGPT API chat, SEO writing, or one-off answers."
scrub-reflection-self-improvement
by marin-community
Run the repository self-improvement scrub only from its scheduler or an explicit request for that scrub.
refresh-fork
by marin-community
Refresh a named Marin external fork pin onto a newer upstream base using its configured descriptor and required end-to-end test.
write-tests
by marin-community
Add, revise, or review Marin tests for an explicit behavior change, regression, or test-quality request.
commit
by marin-community
Use only when a change is ready to commit, push, or open or update its pull request; do not activate during implementation.
noslop
by marin-community
Deslop, simplify, or review low-value tests and prose only when explicitly requested for a branch or diff.
improve-animations
by emilkowalski
Survey a codebase's animation and motion code as a senior motion advisor, then produce a prioritized audit and self-contained implementation plans for other agents (or cheaper models) to execute. Read-only on source code — it plans improvements, it does not apply them. Use when the user asks to "improve the animations", "audit the motion", "make this app feel better", or wants a roadmap of animation fixes rather than a review of a single diff.