All Skills

Detect recurring implementation patterns and record them for reuse. When the same code pattern appears 3+ times, it belongs in the pattern library.

Implement snapshot/golden file tests with temporal normalization so tests don't break daily. Use when implementing tests that compare output against expected snapshots.

Find latent patterns, relationships, anomalies, or insights not explicitly specified. Use when exploring unknown structure, finding hidden connections, or uncovering emergent phenomena.

--- name: poke-holes description: This skill shifts posture to adversarial/rigorous mode for challenging ideas. Appropriate when the user wants critical analysis, not validation. Triggers include "poke holes in this", "tear this apart", "what am I missing", "stress test this", "find what's wrong",

Email sequence design and optimization. Use when creating drip campaigns, automated flows, nurture sequences, onboarding emails, welcome sequences, re-engagement emails, or lifecycle email programs.

Design and evaluate programmatic SEO strategies for creating SEO-driven pages at scale. Use when working with programmatic SEO, template pages, directory pages, location pages, or keyword-pattern page generation.

Research for Disneyland trip planning. Searches web content, analyzes Reddit discussions, extracts YouTube transcripts, interprets crowd calendars, and synthesizes findings into actionable recommendations.

Post-Disneyland memory compilation. Transforms trip notes, photos, and memories into shareable narratives including blog posts, social media content, and memory books.

This skill should be used when the user asks to "decompose a problem", "apply Cartesian method", "break this down systematically", "reduce to first principles", "analyze from the ground up", "apply methodical doubt", or wants to process input through Cartesian Reductionism to decompose complex wholes into clear, distinct parts.

Structured incident response and diagnosis workflows

Docker container operations and debugging

GitOps workflows with ArgoCD for Kubernetes deployments

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct expression injection, dangerous sandbox configurations, and wildcard user allowlists. Use when reviewing workflow files that invoke AI coding agents, auditing CI/CD pipeline security for prompt injection risks, or evaluating agentic action configurations.

Cross-platform log analysis patterns and techniques

Find similar vulnerabilities and bugs across codebases using pattern-based analysis. Use when hunting bug variants, building CodeQL/Semgrep queries, analyzing security vulnerabilities, or performing systematic code audits after finding an initial issue.

Fast-track an urgent fix through a streamlined pipeline. Skips Product/Feature Council, applies the fix, runs a focused review, and creates a PR with optional Deployment Council. Use for production bugs, security patches, or critical regressions that cannot wait for the full planning pipeline.

Searches and explores Burp Suite project files (.burp) from the command line. Use when searching response headers or bodies with regex patterns, extracting security audit findings, dumping proxy history or site map data, or analyzing HTTP traffic captured in a Burp project.

Runs external LLM code reviews (OpenAI Codex or Google Gemini CLI) on uncommitted changes, branch diffs, or specific commits. Use when the user asks for a second opinion, external review, codex review, gemini review, or mentions /second-opinion.

This skill should be used when the user asks to "assess quality", "apply Pirsig's framework", "analyze through Metaphysics of Quality", "evaluate static vs dynamic quality", "examine value conflicts", "apply MoQ", or wants to process input through Pirsig's Metaphysics of Quality to understand value, quality, and the tensions between static patterns and dynamic change.

Initialize the design system or create new UI components with accessibility, Tailwind/shadcn integration, and documentation. Use when setting up the initial design system, adding component categories, or creating complex UI components that need design review.

Use when establishing branching strategies, implementing Conventional Commits, creating or reviewing PRs, resolving PR review comments, merging PRs (including CI verification, auto-merge queues, and post-merge cleanup), managing PR review threads, merging PRs with signed commits, handling merge conflicts, or integrating Git with CI/CD.

Implement a full-stack feature following an approved plan. Builds database layer, backend API, frontend components, and tests. Use after plan-feature has produced an approved implementation plan, or when you have a clear set of tasks to implement across the stack.

Professional API design skill covering RESTful APIs, GraphQL, API versioning, authentication, idempotency, and API documentation best practices.

Plan a new feature from concept to approved implementation plan. Activates Product Council for strategic evaluation, then Feature Council for technical planning. Produces a documented decision and scoped task breakdown. Use when starting any new feature work.