tomevault-io
- 62k skills
- 0 followers
- 1 day ago last updated
- ▌ Staging Validation Phase 3 · tomevault-io bundleThis skill orchestrates the staging validation phase, which occurs after /ship-staging and before /ship-prod in the staging-prod deployment workflow. Use when this capability is needed.
- ▌ Deep Plan 2 · tomevault-io bundleUse when an implementation plan is proposed but requires a deep architectural audit for risks, side effects, and ambiguities before writing any code.
- ▌ Milestone 2 · tomevault-io bundleUse BEFORE running /compact or when a significant task milestone is reached to document technical decisions, experiments, and progress. Use when this capability is needed.
- ▌ Bio Machine Learning Biomarker Discovery 3 · tomevault-io bundleSelects informative features for biomarker discovery using Boruta all-relevant selection, mRMR minimum redundancy, and LASSO regularization. Use when identifying biomarkers from high-dimensional omics data. Use when this capability is needed.
- ▌ Nodejs Backend Patterns 26 · tomevault-io bundleBuild production-ready Node.js backend services with Express/Fastify, implementing middleware patterns, error handling, authentication, database integration, and API design best practices. Use when creating Node.js servers, REST APIs, GraphQL backends, or microservices architectures. Use when this capability is needed.
- ▌ Apply Backend Service Guidelines 2 · tomevault-io bundleApply cross-cutting backend service patterns across routing, services, repositories, validation, configuration, errors, and tests. Use when this capability is needed.
- ▌ Implementing File Integrity Monitoring With Aide 2 · tomevault-io bundleConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, Use when this capability is needed.
- ▌ Marketing Demand Acquisition 12 · tomevault-io bundleMulti-channel demand generation, paid media optimization, SEO strategy, and partnership programs for Series A+ startups Use when this capability is needed.
- ▌ Content Trend Researcher 2 · tomevault-io bundleAdvanced content and topic research skill that analyzes trends across Google Analytics, Google Trends, Substack, Medium, Reddit, LinkedIn, X, blogs, podcasts, and YouTube to generate data-driven article outlines based on user intent analysis Use when this capability is needed.
- ▌ Information Security Manager Iso27001 2 · tomevault-io bundleISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies. Use for ISMS design, security risk assessment, control implementation, ISO 27001 certification, security audits, incident response, and compliance verification. Covers ISO 27001, ISO 27002, healthcare security, and medical device cybersecurity. Use when this capability is needed.
- ▌ Project Development 6 · tomevault-io bundleUse standardized scripts to manage the project environment, testing, and linting. Use when this capability is needed.
- ▌ LLM Evaluation 5 · tomevault-io bundleLLM evaluation and testing patterns including prompt testing, hallucination detection, benchmark creation, and quality metrics. Use when testing LLM applications, validating prompt quality, implementing systematic evaluation, or measuring LLM performance. Use when this capability is needed.
- ▌ Swift Concurrency 4 · tomevault-io bundleDiagnose Swift Concurrency issues, refactor callback-based code to async/await, and guide Swift 6 migration when working with tasks, actors, @MainActor, Sendable, data races, thread safety, or concurrency-related compiler and linter warnings. Use when this capability is needed.
- ▌ Browser Automation 11 · tomevault-io bundleWeb browser automation for tasks requiring UI interaction, login-protected pages, or human-like browsing when APIs are insufficient. Use when this capability is needed.
- ▌ Obsidian Canvas Creator 2 · tomevault-io bundleCreate Obsidian Canvas files from text content, supporting both MindMap and freeform layouts. Use this skill when users want to visualize content as an interactive canvas, create mind maps, or organize information spatially in Obsidian format. Use when this capability is needed.
- ▌ API Documenter 5 · tomevault-io bundleMaster API documentation with OpenAPI 3.1, AI-powered tools, and Use when this capability is needed.
- ▌ AWS Serverless 3 · tomevault-io bundleSpecialized skill for building production-ready serverless applications on AWS. Covers Lambda functions, API Gateway, DynamoDB, SQS/SNS event-driven patterns, SAM/CDK deployment, and cold start optimization. Use when this capability is needed.
- ▌ Pr Description 7 · tomevault-io bundlePull request authoring standards — structured descriptions, linking issues, providing test evidence, and writing good summaries. Reference when creating or describing pull requests. Use when this capability is needed.
- ▌ Suggest Awesome Github Copilot Instructions 4 · tomevault-io bundleSuggest relevant GitHub Copilot instruction files from the awesome-copilot repository based on current repository context and chat history, avoiding duplicates with existing instructions in this repository, and identifying outdated instructions that need updates. Use when this capability is needed.
- ▌ Git Workflow Helper 3 · tomevault-io bundleAutomates git workflow tasks including status checks, branch creation, file staging, conventional commit message generation, and pull request creation with gh CLI. Use this skill when you need to commit changes, create PRs, check git status, create branches, push code, or generate commit messages. Ensures proper git workflow and commit standards.
- ▌ Bootstrap Project 4 · tomevault-io bundleUse when creating a new project repository to initialize it with standard CLAUDE.md, .cursorrules, CLAUDE.local.md, SESSION_LOG.md, and gitignore entries
- ▌ Code Explainer 4 · tomevault-io bundleProvides a brief explanation of the code attached, including key components, notable patterns, and a code walkthrough.
- ▌ Documentation Authoring 2 · tomevault-io bundleCreate or augment skills and documentation. Use when writing new skills, updating existing skills, or modifying project documentation like AGENTS.md. Use when this capability is needed.
- ▌ Suggest Awesome Github Copilot Instructions 5 · tomevault-io bundleSuggest relevant GitHub Copilot instruction files from the awesome-copilot repository based on current repository context and chat history, avoiding duplicates with existing instructions in this repository, and identifying outdated instructions that need updates. Use when this capability is needed.
- ▌ Model Evaluation Framework 2 · tomevault-io bundleModel evaluation metrics, testing protocols, and performance assessment for Somali dialect classification. Covers accuracy, F1-score, confusion matrix analysis, per-dialect performance, and evaluation best practices for multi-class classification tasks. Use when this capability is needed.
- ▌ Golang Popular Libraries 4 · tomevault-io bundleRecommends production-ready Golang libraries and frameworks. Apply when the user asks for library suggestions, wants to compare alternatives, or needs to choose a library for a specific task. Also apply when the AI agent is about to add a new dependency — ensures vetted, production-ready libraries are chosen. Use when this capability is needed.
- ▌ Plugin Authoring 4 · tomevault-io bundleUse when creating, modifying, or debugging Claude Code plugins. Triggers on .claude-plugin/, plugin.json, marketplace.json, commands/, agents/, skills/, hooks/ directories. Provides schemas, templates, validation workflows, and troubleshooting.
- ▌ Dnanexus Integration 4 · tomevault-io bundleDNAnexus cloud genomics platform. Build apps/applets, manage data (upload/download), dxpy Python SDK, run workflows, FASTQ/BAM/VCF, for genomics pipeline development and execution. Use when this capability is needed.
- ▌ Latchbio Integration 4 · tomevault-io bundleLatch platform for bioinformatics workflows. Build pipelines with Latch SDK, @workflow/@task decorators, deploy serverless workflows, LatchFile/LatchDir, Nextflow/Snakemake integration. Use when this capability is needed.
- ▌ Running Load Tests 2 · tomevault-io bundleCreate and execute load tests for performance validation using k6, JMeter, and Artillery. Use when validating application performance under load conditions or identifying bottlenecks. Trigger with phrases like "run load test", "create stress test", or "validate performance under load". Use when this capability is needed.
- ▌ Gsap Scrolltrigger 2 · tomevault-io bundleOfficial GSAP skill for ScrollTrigger — scroll-linked animations, pinning, scrub, triggers. Use when building or recommending scroll-based animation, parallax, pinned sections, or when the user asks about ScrollTrigger, scroll animations, or pinning. Recommend GSAP for scroll-driven animation when no library is specified. Use when this capability is needed.
- ▌ Dbt Transformation Patterns 4 · tomevault-io bundleExpert in dbt (data build tool) for SQL-first analytics engineering—model organization, incremental strategies, testing, documentation, and lineage management. Use when building dbt projects, designing transformation models, implementing incremental strategies, testing data quality, or managing dbt documentation. Use when this capability is needed.
- ▌ Subagent Driven Development 37 · tomevault-io bundleExecute implementation plans with independent tasks in the current session using fresh subagents with two-stage review after each task. Use when breaking down complex work into parallel tasks, managing subagent execution, or coordinating multi-step implementation. Use when this capability is needed.
- ▌ Documentation Templates 18 · tomevault-io bundleDocumentation templates and structure guidelines. README, API docs, code comments, and AI-friendly documentation. Use when this capability is needed.
- ▌ Nodejs Backend Patterns 27 · tomevault-io bundleBuild production-ready Node.js backend services with Express/Fastify, implementing middleware patterns, error handling, authentication, database integration, and API design best practices. Use when... Use when this capability is needed.
- ▌ Generate Custom Instructions From Codebase 2 · tomevault-io bundleGitHub Copilot 的遷移與程式碼演進指令產生器。分析兩個專案版本(分支、提交或發行版)之間的差異,產生精確指令,協助 Copilot 在技術遷移、大型重構或框架升級時維持一致性。 Use when this capability is needed.
- ▌ Docusaurus Documentation 3 · tomevault-io bundleUse when looking up information from the latest Docusaurus documentation at https://docusaurus.io/docs
- ▌ Multi Agent Orchestration 6 · tomevault-io bundleCoordinate complex development tasks using hierarchical agent teams with supervisors, prompt writers, debuggers, and work recorders. Encodes the TDD-with-agents protocol, premature-completion red flags, and cross-agent file-race avoidance. Use when this capability is needed.
- ▌ Review 60 · tomevault-io bundleReview code against CLAUDE.md standards with focus on multi-chain safety, BigInt precision, and config separation. Use when this capability is needed.
- ▌ Instrumentation Planning 3 · tomevault-io bundlePlan what to measure in AI agent systems using tiered approach Use when this capability is needed.
- ▌ Multi Agent Coordination 2 · tomevault-io bundleInstrument multi-agent workflows, handoffs, and parent-child relationships Use when this capability is needed.
- ▌ Azure SQL Database 5 · tomevault-io bundleExpert knowledge for Azure SQL Database development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations & coding patterns, and deployment. Use when choosing vCore/DTU/Hyperscale/serverless, configuring geo‑replication, elastic pools, Data Sync, or HA/DR, and other Azure SQL Database related development tasks. Not for Azure SQL Managed Instance (use azure-sql-managed-instance), SQL Server on Azure Virtual Machines (use azure-sql-virtual-machines), Azure Cosmos DB (use azure-cosmos-db), Azure Database for PostgreSQL (use azure-database-postgresql). Use when this capability is needed.
- ▌ Manage Openapi Overlays 2 · tomevault-io bundleUse when creating, applying, or using overlays to customize SDK generation without editing the source spec. Triggers on "create overlay", "apply overlay", "overlay file", "customize SDK", "can't modify spec", "x-speakeasy extensions", "fix with overlay", "overlay fix", "overlay apply
- ▌ Code Review 320 · tomevault-io bundleBug/security/quality review of source + automated fix application, consolidated. Use after a phase or PR diff to catch regressions before ship. Use when this capability is needed.
- ▌ Documentation Templates 19 · tomevault-io bundleDocumentation templates and structure guidelines. README, API docs, code Use when this capability is needed.
- ▌ CI CD Pipeline Builder 14 · tomevault-io bundleAnalyzes your project stack and generates production-ready CI/CD pipeline configurations for GitHub Actions, GitLab CI, and Bitbucket Pipelines. Handles matrix testing, caching strategies, deployment stages, environment promotion, and secret management — tailored to your actual tech stack.
- ▌ Subagents Orchestration Guide 3 · tomevault-io bundleサブエージェントのタスク分担と連携を調整。規模判定と自律実行モードを制御。大規模タスク分割時に使用。 Use when this capability is needed.
- ▌ Subagents Orchestration Guide 4 · tomevault-io bundleCoordinates subagent task distribution and collaboration. Controls scale determination and autonomous execution mode. Use when this capability is needed.
- ▌ Azure AI Agents Persistent Java 2 · tomevault-io bundleAzure AI Agents Persistent SDK for Java. Low-level SDK for creating and managing AI agents with threads, messages, runs, and tools. Use when this capability is needed.
- ▌ Azure Communication Common Java 2 · tomevault-io bundleAzure Communication Services common utilities for Java. Use when working with CommunicationTokenCredential, user identifiers, token refresh, or shared authentication across ACS services. Use when this capability is needed.
- ▌ Azure Mgmt Apimanagement Dotnet 2 · tomevault-io bundleAzure Resource Manager SDK for API Management in .NET. Use when this capability is needed.
- ▌ C4 Architecture C4 Architecture 2 · tomevault-io bundleGenerate comprehensive C4 architecture documentation for an existing repository/codebase using a bottom-up analysis approach. Use when this capability is needed.
- ▌ Code Documentation Code Explain 2 · tomevault-io bundleYou are a code education expert specializing in explaining complex code through clear narratives, visual diagrams, and step-by-step breakdowns. Transform difficult concepts into understandable explanations for developers at all levels. Use when this capability is needed.
- ▌ Code Documentation Doc Generate 3 · tomevault-io bundleYou are a documentation expert specializing in creating comprehensive, maintainable documentation from code. Generate API docs, architecture diagrams, user guides, and technical references using AI-powered analysis and industry best practices. Use when this capability is needed.
- ▌ Code Refactoring Refactor Clean 2 · tomevault-io bundleYou are a code refactoring expert specializing in clean code principles, SOLID design patterns, and modern software engineering best practices. Analyze and refactor the provided code to improve its quality, maintainability, and performance. Use when this capability is needed.
- ▌ Codebase Cleanup Refactor Clean 3 · tomevault-io bundleYou are a code refactoring expert specializing in clean code principles, SOLID design patterns, and modern software engineering best practices. Analyze and refactor the provided code to improve its quality, maintainability, and performance. Use when this capability is needed.
- ▌ Python Performance Optimization 8 · tomevault-io bundleProfile and optimize Python code using cProfile, memory profilers, and performance best practices. Use when debugging slow Python code, optimizing bottlenecks, or improving application performance. Use when this capability is needed.
- ▌ Security Requirement Extraction 3 · tomevault-io bundleDerive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases. Use when this capability is needed.
- ▌ Security Scanning Security Sast 2 · tomevault-io bundleStatic Application Security Testing (SAST) for code vulnerability Use when this capability is needed.
- ▌ Workflow Orchestration Patterns 5 · tomevault-io bundleMaster workflow orchestration architecture with Temporal, covering fundamental design decisions, resilience patterns, and best practices for building reliable distributed systems. Use when this capability is needed.
- ▌ Kubernetes Deployment 19 · tomevault-io bundleThis skill provides guidance for deploying and scaling containerized applications on Kubernetes from basic concepts to professional production systems. It focuses on practical workflows for developers, particularly for local development using Minikube. The skill covers complete deployment lifecycle from initial setup to production-grade configurations. Use when this capability is needed.
- ▌ Code Review 321 · tomevault-io bundleComprehensive code review with security, performance, and best practices focus Use when this capability is needed.
- ▌
- ▌ Copilot Customization Selector 2 · tomevault-io bundleHelp decide which GitHub Copilot customization to use (instructions, prompts, agents, or skills). Use this skill when users ask which customization type to create, want to understand the differences, or need guidance choosing between .instructions.md, .prompt.md, .agent.md, or SKILL.md files. Use when this capability is needed.
- ▌ Django Patterns 29 · tomevault-io bundleDjango core patterns for models, views, admin, signals, middleware, and Django Ninja APIs. Use when working on projects with django in their dependencies. Use when this capability is needed.
- ▌ Pytest Patterns 4 · tomevault-io bundlePytest patterns for fixtures, parametrize, mocking, async testing, and factory_boy. Use when writing or reviewing Python tests, setting up test infrastructure, or debugging test failures. Use when this capability is needed.
- ▌ Terraform Module Library 22 · tomevault-io bundleBuild reusable Terraform modules for AWS, Azure, and GCP infrastructure following infrastructure-as-code best practices. Use when creating infrastructure modules, standardizing cloud provisioning, or implementing reusable IaC components. Use when this capability is needed.
- ▌ Kubernetes Manifest Generator 2 · tomevault-io bundleGenerate and validate Kubernetes YAML manifests with best practices for Deployments, Services, ConfigMaps, and security policies. Use when this capability is needed.
- ▌ Using Tmux For Interactive Commands 3 · tomevault-io bundleUse when you need to run interactive CLI tools (vim, git rebase -i, Python REPL, etc.) that require real-time input/output - provides tmux-based approach for controlling interactive sessions
- ▌ Exploratory Data Analysis 3 · tomevault-io bundlePerform comprehensive exploratory data analysis on scientific data files across 200+ file formats. This skill should be used when analyzing any scientific data file to understand its structure, content, quality, and characteristics. Automatically detects file type and generates detailed markdown reports with format-specific analysis, quality metrics, and downstream analysis recommendations. Covers chemistry, bioinformatics, microscopy, spectroscopy, proteomics, metabolomics, and general scientific data formats. Use when this capability is needed.
- ▌ Obsidian Vault Manager 2 · tomevault-io bundleManage Obsidian knowledge base - capture ideas, YouTube videos, articles, repositories, create study guides, publish to GitHub Pages, and share notes via URL (no server storage). Use smart AI tagging for automatic organization. Use when this capability is needed.
- ▌ Flutter Coreflutter Platform Integration 2 · tomevault-io bundleComprehensive guidance on Flutter platform integration including platform channels, native code integration, plugin development, and platform views. Use when working with platform-specific features, creating plugins, or integrating native Android/iOS code with Flutter applications. Use when this capability is needed.
- ▌ Implementing File Integrity Monitoring With Aide 3 · tomevault-io bundleConfigure AIDE (Advanced Intrusion Detection Environment) for file integrity monitoring including baseline creation, Use when this capability is needed.
- ▌ Analyze Pr 2 · tomevault-io bundlePull request analysis and review for Flutter projects. Use when analyzing PRs, reviewing changes, or preparing PR feedback. Triggers on PR, pull request, merge request, diff, changes. Use when this capability is needed.
- ▌ Algorithmic Art 18 · tomevault-io bundleCreating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations. Use when this capability is needed.
- ▌ Branch Strategy 2 · tomevault-io bundleBranch naming conventions, Git Flow vs trunk-based development, feature branch lifecycle, and release strategies. Reference when creating branches, planning releases, or choosing a branching model. Use when this capability is needed.
- ▌ Cloud Architect 6 · tomevault-io bundleExpert cloud architect specializing in AWS/Azure/GCP multi-cloud Use when this capability is needed.
- ▌ Design Patterns 4 · tomevault-io bundleReference library of proven UI design patterns, component templates, and sector-specific conventions for high-quality design generation. Use when this capability is needed.
- ▌ Security Review 30 · tomevault-io bundleSecurity review checklist covering OWASP Top 10, authentication, authorization, input validation, secrets management, and common vulnerability patterns. Reference when reviewing code for security. Use when this capability is needed.
- ▌ Information Security Manager Iso27001 3 · tomevault-io bundleSenior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies. Provides ISMS implementation, cybersecurity risk assessment, security controls management, and compliance oversight. Use for ISMS design, security risk assessments, control implementation, and ISO 27001 certification activities. Use when this capability is needed.
- ▌ Database Migrations SQL Migrations 5 · tomevault-io bundleSQL Database Migration Strategy and Implementation workflow skill. Use this skill when the user needs SQL database migrations with zero-downtime strategies for PostgreSQL, MySQL, and SQL Server. Focus on data integrity and rollback plans and the operator should preserve the upstream workflow, copied support files, and provenance before merging or handing off. Use when this capability is needed.
- ▌ Flutterdart Development 2 · tomevault-io bundleSpecialized skill for Flutter app development and Dart programming Use when this capability is needed.
- ▌ Golang Structs Interfaces 2 · tomevault-io bundleGolang struct and interface design patterns — composition, embedding, type assertions, type switches, interface segregation, dependency injection via interfaces, struct field tags, and pointer vs value receivers. Use this skill when designing Go types, defining or implementing interfaces, embedding structs or interfaces, writing type assertions or type switches, adding struct field tags for JSON/YAML/DB serialization, or choosing between pointer and value receivers. Also use when the user asks about "accept interfaces, return structs", compile-time interface checks, or composing small interfaces into larger ones. Use when this capability is needed.
- ▌ Benchling Integration 4 · tomevault-io bundleBenchling R&D platform integration. Access registry (DNA, proteins), inventory, ELN entries, workflows via API, build Benchling Apps, query Data Warehouse, for lab data management automation. Use when this capability is needed.
- ▌ Opentrons Integration 3 · tomevault-io bundleLab automation platform for Flex/OT-2 robots. Write Protocol API v2 protocols, liquid handling, hardware modules (heater-shaker, thermocycler), labware management, for automated pipetting workflows. Use when this capability is needed.
- ▌ Jeremylongshore Claude Code Plugins Plus Skills Generati 2 · tomevault-io bundleGenerating API SDKs
- ▌ Terraform Infrastructure 11 · tomevault-io bundleTerraform infrastructure as code workflow for provisioning cloud resources, creating reusable modules, and managing infrastructure at scale. Use when this capability is needed.
- ▌ Terraform Module Library 23 · tomevault-io bundleBuild reusable Terraform modules for AWS, Azure, and GCP infrastructure following infrastructure-as-code best practices. Use when creating infrastructure modules, standardizing cloud provisioning, ... Use when this capability is needed.
- ▌ Suggest Awesome Github Copilot Instructions 6 · tomevault-io bundle根據目前的儲存庫內容和對話歷史記錄,從 awesome-copilot 儲存庫建議相關的 GitHub Copilot instruction 檔案,避免與此儲存庫中現有的 instruction 重複,並識別需要更新的過時 instruction。 Use when this capability is needed.
- ▌ Docusaurus Plugin Dev 3 · tomevault-io bundleHelps develop and build Docusaurus plugins using this starter template Use when this capability is needed.
- ▌ Instrumentation Planning 4 · tomevault-io bundlePlan what to measure in mobile apps. Use when starting observability, prioritizing instrumentation, or asking "what should I track? Use when this capability is needed.
- ▌ Kubernetes Security Policies 2 · tomevault-io bundleKubernetes security policies, RBAC, and Pod Security Standards for hardened cluster deployments. Use when implementing cluster security, defining network policies, or enforcing security compliance in Kubernetes environments. Use when this capability is needed.
- ▌ Nothing Design 2 · tomevault-io bundleThis skill should be used when the user explicitly says "Nothing style", "Nothing design", "/nothing-design", or directly asks to use/apply the Nothing design system. NEVER trigger automatically for generic UI or design tasks. Use when this capability is needed.
- ▌ Bug Reporting Excellence 2 · tomevault-io bundleWrite high-quality bug reports that get fixed quickly. Use when reporting bugs, training teams on bug reporting, or establishing bug report standards. Use when this capability is needed.
- ▌ Test Automation Strategy 3 · tomevault-io bundleDesign and implement effective test automation with proper pyramid, patterns, and CI/CD integration. Use when building automation frameworks or improving test efficiency. Use when this capability is needed.
- ▌ Terraform Infrastructure 12 · tomevault-io bundleTerraform infrastructure as code workflow for provisioning cloud resources, Use when this capability is needed.
- ▌ Terraform Module Library 24 · tomevault-io bundleProduction-ready Terraform module patterns for AWS, Azure, and GCP infrastructure. Use when this capability is needed.
- ▌ Speak Like A Pirate 2 · tomevault-io bundleLet the LLM take the persona of a pirate Use when this capability is needed.
- ▌ Security Best Practices 21 · tomevault-io bundle用于按语言和框架执行安全最佳实践检查,生成安全审查报告并提出 secure-by-default 改进建议。 Use when this capability is needed.
- ▌ Security Reviewer 6 · tomevault-io bundleMulti-language security review for web apps, APIs, and CLIs. Use whenever code is added or modified — new endpoints, auth/RBAC changes, template or DOM rendering, outbound HTTP, dependency updates, IaC/config changes, or end-of-feature reviews. Covers Python, JavaScript, TypeScript, Go, Rust, Java/Kotlin, Ruby, C#/.NET, plus shared OWASP Top 10 and ASVS L1 logic. Triggers on phrases like "security review", "review this for security", "audit this code", "is this safe", "AppSec check", "threat-model this change", "supply chain risk", "before I merge", or whenever a senior engineer would pause to ask "what could go wrong here". Pairs with the `security-reviewer` subagent and the session-start / pre-bash / post-edit hooks shipped alongside it. Use when this capability is needed.