andrem-sec
- 65 skills
- 0 followers
- 6 hours ago last updated
- ▌ Roe · andrem-secRules of Engagement authorization gate — required before any security operation, autonomous scanning, or action with real-world effects outside the local codebase
- ▌ Learner · andrem-secCapture codebase-specific knowledge as a reusable skill — passes 3-point quality gate before writing
- ▌
- ▌ Cso · andrem-secChief Security Officer mode — multi-phase security audit covering OWASP, STRIDE, secrets, CI/CD, and LLM attack surfaces
- ▌
- ▌
- ▌
- ▌
- ▌ Heartbeat · andrem-secSession-start orientation — loads context, surfaces learnings, confirms registry
- ▌ Batch · andrem-secParallel agent swarm — decomposes work into independent units, spawns isolated workers, tracks PRs via fan-in
- ▌
- ▌
- ▌ Canary · andrem-secPost-deploy production monitoring — watches live app for errors, regressions, and failures after deployment
- ▌ Resume · andrem-secResume an interrupted mid-task session — reconstructs state from context files and picks up at the right step
- ▌ Distill · andrem-secMemory consolidation — distills session learnings and transcripts into persistent memory files
- ▌ Reflect · andrem-secExtract instinct candidates from the current session and add confirmed ones to the instinct store
- ▌
- ▌ Refactor · andrem-secSafe refactoring protocol — behavior-preserving restructuring with test coverage gate
- ▌ Simplify · andrem-sec3-agent parallel code review — reuse, quality, and efficiency — fixes issues found
- ▌ Security Gate · andrem-secPre-deploy security assessment — validates against OWASP Top 10 and project standards
- ▌
- ▌
- ▌
- ▌ Doc Review · andrem-secDual-dimension document quality gate — presentation rubric + hallucination grounding check
- ▌
- ▌ Plan First · andrem-secPlan-mode enforcement — required before edits affecting 3+ files, cross-domain work, or security-sensitive changes
- ▌
- ▌
- ▌ Public Mode · andrem-secActivates clean-output constraints when working on public repos — no internal tool names, no AI attribution in commits
- ▌
- ▌ Fix Pipeline · andrem-secBug fix workflow — debug-session → tdd → refactor (optional) → code-review
- ▌ Github Issue · andrem-secFile a structured GitHub issue — reads the actual template at runtime, auto-gathers context, enforces one concept per issue
- ▌
- ▌
- ▌
- ▌
- ▌ Token Budget · andrem-secContext window management — track spend, decide when to compact, preserve state
- ▌ Brand Context · andrem-secLoad and validate brand assets before any design work — logo, colors, typography, voice. Gates UI and marketing work behind confirmed brand context.
- ▌ Debug Session · andrem-secStructured debugging protocol — hypothesis-driven investigation with evidence tracking
- ▌ Deep Research · andrem-sec6-step multi-source research workflow with inline citations and synthesis
- ▌ Intent Router · andrem-secClassify ambiguous requests and route to the correct skill or agent before any execution begins
- ▌
- ▌ Site Teardown · andrem-secFetch and analyze the full HTML, CSS, and JavaScript of a reference website — not a WebFetch summary. Identifies techniques, effects, and patterns powering the design for cloning or inspiration extraction.
- ▌ UI Slop Guard · andrem-secAudit UI code for AI slop patterns — generic color palettes, missing interaction states, cookie-cutter gradients, and template-clone layouts. Returns SLOP/RISK/CLEAN verdicts with specific remediation.
- ▌ Animation Safe · andrem-secAudit animations and transitions for motion accessibility, performance safety, and design intent. Enforces prefers-reduced-motion compliance and blocks layout-triggering transitions.
- ▌ Component Spec · andrem-secDefine component API, states, variants, and ARIA requirements before writing a line of implementation code. Gates component work behind a confirmed spec.
- ▌ Consensus Plan · andrem-secPlanner → Architect → Critic deliberation loop — produces a formally validated ADR
- ▌ Context Budget · andrem-secToken audit across agents, skills, and MCP with cost optimization guidance
- ▌ Deep Interview · andrem-secSocratic problem exploration — identifies critical unknowns and gates on ≤20% ambiguity before proceeding
- ▌ Reasoning Gates · andrem-secScan task for high-cost branch points, confirm which get deep reasoning, execute with gates active
- ▌ Screenshot Loop · andrem-secVisual QA loop for UI development — build, screenshot, compare to reference, identify delta, prompt correction, repeat. Formalizes the self-review cycle and defines when to disable it.
- ▌
- ▌ Feature Pipeline · andrem-secFull feature workflow — deep-interview → prd → consensus-plan → tdd → code-review → security-gate
- ▌
- ▌ Inspiration Brief · andrem-secGate before any UI implementation — requires confirmed inspiration references, color intent, typography direction, visual storytelling concept, and product-type design system. No HTML/CSS written until brief is confirmed.
- ▌ Responsive Design · andrem-secEnforce mobile-first responsive design — breakpoint definition, content reflow audit, touch target validation, and layout stress testing at each tier.
- ▌
- ▌ Verification Loop · andrem-sec6-phase pre-PR verification sweep with structured PASS/FAIL reporting
- ▌ Design Token Guard · andrem-secEnforce the design token layer — block raw hex values, hardcoded font sizes, and magic spacing numbers in component files. All visual values must reference semantic tokens.
- ▌ Agentic Engineering · andrem-secFramework for decomposing agent-driven tasks into independently verifiable units
- ▌ Codebase Onboarding · andrem-sec4-phase systematic codebase onboarding with reconnaissance and artifact generation
- ▌ JWT Algorithm Confusion Prevention · andrem-secPrevent algorithm confusion attacks when validating JWTs — RS256 tokens accepted as HS256
- ▌ AI Regression Testing · andrem-secTest specifically for AI-introduced regressions that repeat without tests
- ▌ Continuous Learning V2 · andrem-secCross-session instinct learning with confidence-based promotion and global scope
- ▌ Agent Harness Construction · andrem-secFramework for designing quality agents with proper action space and contracts