byerlikaya
- 40 skills
- 0 followers
- 9 hours ago last updated
- ▌ Adr · byerlikayaArchitecture Decision Record: context-decision-consequences, for decisions that are expensive to reverse. Written under docs/adr/.
- ▌ A11Y · byerlikayaFrontend accessibility audit (WCAG): semantic HTML, keyboard access, focus management, contrast, ARIA, screen readers. Use when building or changing UI, or before shipping a user-facing screen.
- ▌ Deploy · byerlikaya bundleShip a build reversibly — to a host you manage or a platform that manages it. Pick the topology first, keep the previous version reachable, gate on health, roll back without rebuilding. Use when shipping anywhere users can reach.
- ▌ Handoff · byerlikaya bundleSession handover: when context fills, a phase closes, or the topic changes, write an action-oriented handover to docs/SESSION_STATE.md, then recommend /clear.
- ▌ Iterate · byerlikayaRefine-to-Done loop: repeat until tests green + review clean + nothing deferred; bounded. Not the harness /loop.
- ▌ Reflect · byerlikayaRetrospective self-audit after nontrivial work: unverified assumptions, skipped items, is-this-the-right- approach — findings, not code. The step-back counterpart to iterate's refine-to-done loop.
- ▌ Release · byerlikayaVersioning and CHANGELOG: SemVer mapped from Conventional Commits, Keep a Changelog format, tagging, pre-release gates. Use when cutting a version: bumping, writing the CHANGELOG entry, or tagging.
- ▌ Testing · byerlikaya bundleThe how of testing: pyramid, AAA, isolation, risk coverage, determinism. Guarantees the DoD's "tests are green". test-expert-csk applies it. Use when writing or changing tests, or when a suite is flaky, slow or green for the wrong reason.
- ▌ Frontend · byerlikaya bundleStack-agnostic frontend discipline (web · mobile · desktop): component structure, state, data fetching, loading/empty/error states, i18n, accessibility, performance. frontend-expert-csk applies it on every stack.
- ▌ Red Team · byerlikayaAttacker's-eye test of LLM/agent defenses: instruction hijacking, data exfiltration and tool abuse through untrusted content; verifies whether the defense actually holds.
- ▌ Worktree · byerlikayaIsolate risky or parallel file-mutating work in a git worktree so the main tree's uncommitted changes are never clobbered. For fan-out agents that edit files, throwaway experiments, or any change you may want to discard cleanly.
- ▌ Teamboard · byerlikayaShared team board: claim a work item before starting, hand it over, finish it. The claim is a git-ref lock, so two people cannot take the same item.
- ▌ API Design · byerlikayaAPI contract design: resource naming, error model, versioning, pagination, backward compatibility, OpenAPI. A predictable interface that evolves without breaking consumers.
- ▌ Brainstorm · byerlikayaDivergent discovery BEFORE planning: turn a fuzzy ask into 2–4 scoped options + named unknowns, pick a direction, hand to spec-planning. Bounded; converges to explicit choices, never guesses.
- ▌ Trace Scan · byerlikayaTrace scan (§4.1/§4.2): before a commit, scans the staged changes and the message for AI traces (co-author trailers, footers, robot emoji, tool names) and vendor template names. The git hooks apply it automatically.
- ▌ CI Pipeline · byerlikayaCI pipeline discipline: lint→build→test→quality→security, fail-fast, deterministic build, secret handling, PR gates.
- ▌ Docs Writer · byerlikaya bundleKeeps documentation in sync with the code: README, usage and related docs when a public API or behavior changes. Leaves no dead or misleading docs behind.
- ▌ Eval Grader · byerlikaya bundleMeasure output quality, don't vibe it: score a generative task with a two-layer grader — deterministic code metrics + per-dimension LLM-as-judge — over a fixed task set, as signed deltas vs a pinned baseline. Grades cost alongside correctness (pass-slow).
- ▌ MCP Builder · byerlikaya bundleBuild a Model Context Protocol (MCP) server so an AI client can call your tools/resources: design tool schemas, pick a transport, handle errors, and test it. For exposing an API, database, or service to Claude and other clients.
- ▌ Performance · byerlikaya bundleStack-agnostic performance: measure first, find the bottleneck, then optimise. N+1, needless allocation, wrong async boundary, missing index/cache, heavy payload. No premature optimisation. Use when something is slow, before optimising anything, and when a change touches a hot path.
- ▌ DB Migration · byerlikaya bundleApply schema migrations safely: detect the tool, classify the change by risk, gate destructive ones behind approval, back up in prod, preview-apply-verify, roll back on failure. Use when a schema change is about to be applied to any environment.
- ▌ Threat Model · byerlikaya bundleScope a security audit BEFORE scanning, to cut false positives: map assets, entry points, trust boundaries and 5-8 domain-specific attack classes into a parseable THREAT_MODEL.md. A threat survives a patch; a vulnerability is only evidence for one. Feeds security-scan.
- ▌ Token Budget · byerlikayaContext/token discipline: subagent isolation, output = summary, move-to-file, delegation threshold, lean skills.
- ▌ Observability · byerlikayaStack-agnostic observability: structured logs, correlation ids, metrics and traces; no PII or secrets in logs. Makes a production issue traceable to why it happened. Use when adding a log line, an error path, a metric, or when an incident could not be traced.
- ▌ Security Scan · byerlikaya bundleStack-agnostic security audit: map the attack surface, trace untrusted input to dangerous calls, surface dependency and configuration flaws. Severity-ranked report with fixes. Use when auth, input handling, secrets or dependencies change, and before a release.
- ▌ Spec Planning · byerlikayaSpec-first planning: task breakdown, measurable acceptance criteria, dependency order, risk priority. planner-csk applies it; the plan goes to docs/PLAN.md. Use when the scope is unclear or the work spans more than one change.
- ▌ Commit Message · byerlikaya bundleConventional Commits: reads the staged diff and proposes `type(scope): summary`, with body/footer when needed. One logical change = one commit. commit-agent-csk applies it.
- ▌ Devarch Module · byerlikaya bundleDevArchitecture backend pattern: MediatR CQRS handler/command/query, IResult/IDataResult, Autofac AOP chain, FluentValidation, i18n. backend-expert-csk applies it.
- ▌ I18N Integrity · byerlikayaTranslation integrity: every key present in every language, no hardcoded strings, consistent placeholders and plurals. Runs when user-facing text changes.
- ▌ Automode Policy · byerlikaya bundleAuto-mode classifier config: inspect what the classifier that now answers permission prompts is configured with, and catch the silent case where a custom autoMode block drops the built-in block rules.
- ▌ Code Review Csk · byerlikaya bundleCode review discipline: severity-ranked, reasoned feedback on whether a change improves the system's overall code health. review-agent-csk applies it. Use when reviewing a change set, and when acting on a review someone else wrote.
- ▌ Frontend Design · byerlikaya bundleVisual and UX design quality for interfaces: hierarchy, spacing rhythm, typographic scale, a restrained color system, layout composition, and polished states. The taste layer above frontend architecture and a11y.
- ▌ Sonarqube Check · byerlikayaSonarQube quality gate, any language, no company server needed: run SonarQube Community Build locally (Docker), read the real gate + issues, fix by rule id, re-scan and diff. A linter's green build is a pre-check, never the gate.
- ▌ Confidence Check · byerlikayaReadiness gate BEFORE writing implementation code: does this already exist, does it fit the project's architecture, is the API claim actually checked, is there a working reference, is the root cause known.
- ▌ Dependency Audit · byerlikayaDependency risk assessment, read-only: known CVEs, deprecated packages, licence compliance, maintenance status, lockfile integrity, and a justification for every new dependency. Acting on it is dependency-upgrade.
- ▌ Frontend Rn Expo · byerlikayaOPTIONAL, stack-specific: React Native + Expo (prebuild). Mobile RN projects only; the generic principles live in the `frontend` skill.
- ▌ Incident Runbook · byerlikaya bundleProduction incident response: diagnose → mitigate → resolve, then a blameless postmortem and a repeatable runbook. Stop the impact first, root cause second. Use when production is degraded or broken, and again for the postmortem afterwards.
- ▌ Dependency Upgrade · byerlikayaBring dependencies current without breaking the build: find what is vulnerable, deprecated or behind, classify each target version by risk, apply what is safe, verify, and roll back what is not.
- ▌ Privacy Compliance · byerlikayaKVKK/GDPR audit method: data inventory, purpose/basis/retention, minimisation, consent, transparency, data-subject rights, cross-border transfer. privacy-agent-csk applies it.
- ▌ Systematic Debugging · byerlikaya bundleRoot-cause a bug before touching a fix: reproduce, isolate, form and test a hypothesis, confirm the cause, then fix and verify. Stops guess-driven patching. For persistent, intermittent, or "already tried a few things" bugs.