stefaniuk
- 34 skills
- 0 followers
- 1 week ago last updated
- ▌ Incremental Implementation · stefaniukDelivers changes incrementally. Use when implementing any feature or change that touches more than one file. Use when you're about to write a large amount of code at once, or when a task feels too big to land in one step.
- ▌ Dispatching Parallel Agents · stefaniukUse when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies
- ▌ Subagent Driven Development · stefaniuk bundleUse when executing implementation plans with independent tasks in the current session
- ▌ Browser Testing With Devtools · stefaniukTests in real browsers via Chrome DevTools MCP. Use when building or debugging anything that runs in a browser. Use when you need to inspect the DOM, capture console errors, analyze network requests, profile performance, or verify visual output with real runtime data. Requires the chrome-devtools MCP server to be configured.
- ▌ Finishing A Development Branch · stefaniukUse when implementation is complete, all tests pass, and you need to decide how to integrate the work
- ▌ Speckit Converge · stefaniukAssess the current codebase against the feature's spec, plan, and tasks, then append any remaining unbuilt work as new tasks to tasks.md so implement can complete it.
- ▌ Architecture Docs · stefaniuk bundleGenerate architecture documentation for a repository, producing structured artefacts from repository maps to C4 models and infrastructure diagrams.
- ▌ Enforcement Audit · stefaniuk bundleRun a compliance audit against a technology instruction file, detecting discrepancies, planning workstreams, implementing fixes, and validating quality gates.
- ▌ Speckit Checklist · stefaniukGenerate a custom checklist for the current feature based on user requirements.
- ▌
- ▌ Spec Consolidation · stefaniuk bundleConsolidate per-feature Spec Kit artefacts under specs/ into a product-facing specification set aligned to a selected baseline, excluding plan.md and tasks.md from the final output.
- ▌ Virtual Think Tank · stefaniuk bundleRun a structured multi-step think tank for engineering, architecture, product, process, policy, vendor, or organisational decisions. Use when the user needs conflicting viewpoints, explicit trade-offs, and a forced human decision rather than a one-shot answer.
- ▌ Gha Security Review · stefaniuk bundleGitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks. Exploitation-focused with concrete PoC scenarios.
- ▌ Repository Template · stefaniuk bundleCreate code repository from template, or/and update it in parts from the content of the template that contains example of use of tools like make, pre-commit git hooks, Docker, and quality checks.
- ▌ Using Git Worktrees · stefaniukUse when starting feature work that needs isolation from current workspace or before executing implementation plans - ensures an isolated workspace exists via native tools or git worktree fallback
- ▌ Speckit Constitution · stefaniukCreate or update the project constitution from interactive or provided principle inputs.
- ▌ System Documentation · stefaniuk bundleEstablish, synchronise, audit, and review an opinionated repository documentation system across entrypoints, architecture, reference, explanation, tutorials, how-to guides, operations, audience indexes, and governance/lifecycle artefacts.
- ▌ Receiving Code Review · stefaniukUse when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
- ▌ Speckit Taskstoissues · stefaniukConvert existing tasks into actionable, dependency-ordered GitHub issues for the feature based on available design artifacts.
- ▌ Requesting Code Review · stefaniuk bundleUse when completing tasks, implementing major features, or before merging to verify work meets requirements
- ▌ Security And Hardening · stefaniukHardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when personal data or privacy compliance (GDPR, CCPA) is involved.
- ▌ Semgrep · stefaniuk bundleRuns a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan modes, "run all" for full ruleset coverage and "important only" for security findings at medium-to-high confidence and impact. Uses Semgrep Pro for cross-file taint analysis when it is available. Use when asked to scan code for vulnerabilities, run a security audit with Semgrep, find bugs, or perform static analysis. For the same scan without the approval gate, use the /static-analysis:semgrep-scan workflow.
- ▌ Code Review · stefaniuk bundleRun a structured Spec Kit review focused on code compliance, documentation quality, or test coverage, positioned within the spec-driven development pipeline.
- ▌ MCP Builder · stefaniuk bundleGuide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
- ▌ Speckit Plan · stefaniukExecute the implementation planning workflow using the plan template to generate design artifacts.
- ▌ Brainstorming · stefaniuk bundleYou MUST use this before any creative work - creating features, building components, adding functionality, or modifying behavior. Explores user intent, requirements and design before implementation.
- ▌ Skill Scanner · stefaniuk bundleScan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply chain risks.
- ▌ Speckit Tasks · stefaniukGenerate an actionable, dependency-ordered tasks.md for the feature based on available design artifacts.
- ▌ Writing Plans · stefaniuk bundleUse when you have a spec or requirements for a multi-step task, before touching code
- ▌ Writing Skills · stefaniuk bundleUse when creating new skills, editing existing skills, or verifying skills work before deployment
- ▌ Executing Plans · stefaniukUse when you have a written implementation plan to execute in a separate session with review checkpoints
- ▌ Speckit Analyze · stefaniukPerform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.
- ▌ Speckit Specify · stefaniukCreate or update the feature specification from a natural language feature description.
- ▌ Mutation Testing · stefaniuk bundleConfigures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign.