Skills

Adversarial review of the current diff: bugs, edge cases, and reuse opportunities flagged with one-line reasoning.

Generate a conventional commit message from the staged diff — type, scope, subject, and an optional body.

Review recent changes for reuse, redundant abstractions, and dead code — then propose targeted cleanups.

Scan the codebase and generate a clean CLAUDE.md / AGENTS.md / .cursorrules with conventions and gotchas.

Walk through unfamiliar code: TL;DR, flow, key concepts, and gotchas — calibrated to the reader's level.

Write focused unit tests for a function or recent change. Covers the golden path and the edges that actually break.

Write a PR description from the diff and commits. Summary, notes, test plan — no fluff, no auto-generated screenshot section.

Add strategic debug logs to trace a bug, then remove them once the cause is found. Two-phase: instrument, then clean up.

Adversarial security review of the current diff. Focuses on OWASP-style real-world holes, not theoretical risks.

Add precise type annotations to untyped code without changing behavior. Infer from call sites, not from optimistic guesses.

Refresh the README so it actually matches the current code. Verify every command, version, and file path before writing.

Review SQL queries or migrations for safety, performance, and indexing. Built for app code that talks to Postgres or MySQL.

Generate a Keep-a-Changelog entry from a git range. Group by Added / Changed / Fixed — no raw commit dump.

Audit the project's dependencies for unused packages, stale versions, and known vulnerabilities. Action list, not a wall of warnings.

Extract a function from a complex block without changing behavior. Names earn their place, parameters stay minimal, tests must still pass.

Write JSDoc/TSDoc/docstrings for the current diff. Covers params, returns, throws, and one usage example.

Plan a stepwise dependency or framework upgrade. Reversible steps, ordered by risk, with a rollback for each.

Audit the current diff for hot-path issues: N+1 queries, sync I/O, unbounded loops, missing memoization.

A11y review of UI changes: alt text, aria-labels on icon buttons, label associations, heading order, focus traps.

Generate realistic test fixtures from a Prisma, SQL, or TypeScript schema. Honors constraints and includes edge cases.

Add missing error handling to the current diff: wrap async ops, propagate with context, no silent catches.

Check env vars stay consistent across .env.example, code, and docs. Flags missing, stale, and unused.

Generate a CONTRIBUTING or onboarding doc from the repo's actual scripts, structure, and setup.

Compare two branches or commits for breaking API and schema changes. Outputs a semver-ready summary.

Extract hardcoded user-facing strings into the project's i18n catalog with stable keys.