vbrevik
- 99 skills
- 0 followers
- 6 hours ago last updated
- ▌ Breakdown Feature Prd · vbrevikUse after creating a PRD to decompose individual features into detailed mini-PRDs with epic linking, functional/non-functional requirements, and per-feature acceptance criteria.
- ▌ Memstack Development Database Architect · vbrevikUse this skill when the user says 'design database', 'create tables', 'database schema', 'add table', 'database architect', 'ERD', 'data model', or is designing Supabase/Postgres table structures, relationships, RLS policies, or migrations. Do NOT use for schema migration of existing tables (use migration-planner) or code refactoring.
- ▌ N8n Workflow Builder · vbrevikUse when the user says 'n8n workflow', 'build a workflow', 'automation workflow', 'n8n', 'workflow builder', or wants to design an automated workflow with triggers, processing, and outputs.
- ▌ Sca · vbrevik bundleSoftware Composition Analysis — scan project dependencies for known vulnerabilities (CVEs) and generate Software Bill of Materials (SBOM). Uses Syft for SBOM generation and Grype for vulnerability matching. Falls back to npm audit when Syft/Grype unavailable. Produces STIG V-ID-tagged findings for /stig-compliance pipeline. Use when (1) auditing dependency security, (2) generating SBOM for compliance, (3) checking for vulnerable transitive dependencies, (4) license compliance for government procurement. Works air-gapped with pre-downloaded vulnerability database.
- ▌ Dast · vbrevik bundleRun Dynamic Application Security Testing (DAST) using Nuclei against running web applications. Produces STIG V-ID-tagged findings from runtime behavior (security headers, TLS config, cookie flags, error disclosure, auth endpoints). Feeds into /stig-compliance as a dynamic evidence source alongside /static-analysis (SAST). Use when (1) a dev server is running and you want to verify runtime security posture, (2) /stig-compliance review needs dynamic evidence for controls that cannot be verified statically (headers, TLS, cookie attributes), (3) before deployment to check runtime security configuration. Requires a running target URL.
- ▌ Echo · vbrevik bundleUse when the user references past sessions, asks 'what did we do', 'do you remember', 'last session', 'recall', or 'continue from'.
- ▌ Scan · vbrevikUse when the user says 'scan project', 'estimate', 'how much to charge', or needs codebase complexity analysis.
- ▌ Client Onboarding · vbrevikUse when the user says 'client onboarding', 'new client', 'onboard client', 'welcome client', 'kickoff', or wants to create a structured onboarding process for new clients.
- ▌ Contract Template · vbrevikUse when the user says 'contract', 'agreement', 'service agreement', 'NDA', 'freelance contract', or wants to generate a professional service contract with legal clauses.
- ▌ Invoice Generator · vbrevikUse when the user says 'invoice', 'generate invoice', 'billing', 'send invoice', or wants to create a professional invoice with line items and payment instructions.
- ▌ Pricing Strategy · vbrevikUse when the user says 'pricing strategy', 'how to price', 'pricing model', 'tier pricing', 'pricing table', 'what to charge', or needs help setting prices for a product or service.
- ▌ Memstack SEO Meta Tag Optimizer · vbrevikUse this skill when the user says 'meta tags', 'title tag', 'meta description', 'optimize meta', 'SERP preview', or needs to write or optimize HTML meta tags for better search visibility and click-through rates. Do NOT use for schema markup or full site audits.
- ▌ Content Pipeline · vbrevikUse when the user says 'content pipeline', 'content automation', 'auto-publish', 'content workflow', 'repurpose content', 'blog to social', or wants to automate the creation, formatting, and publishing of content across platforms.
- ▌ Webhook Designer · vbrevikUse when the user says 'webhook', 'webhook handler', 'webhook endpoint', 'receive webhooks', 'webhook security', or needs to build a secure webhook receiver with validation and idempotency.
- ▌ Product Description · vbrevikUse when the user says 'product description', 'product listing', 'product copy', 'Amazon listing', 'Shopify description', or wants to write optimized product listing copy for an e-commerce platform.
- ▌ Refactor Planner · vbrevikUse when the user says 'refactor', 'refactoring plan', 'code cleanup', 'tech debt', 'reduce duplication', or wants to systematically improve code quality without changing behavior.
- ▌ Create Specification · vbrevikUse after feature breakdown to create AI-optimized technical specifications with numbered requirements, data contracts, test strategy, and Given-When-Then acceptance criteria.
- ▌ User Story Generator · vbrevikUse when the user says 'user stories', 'write stories', 'backlog', 'story generator', 'acceptance criteria', 'sprint planning', or needs structured user stories for project management tools.
- ▌ Memstack SEO AI Search Visibility · vbrevikUse this skill when the user says 'AI search', 'AI visibility', 'ChatGPT ranking', 'Perplexity optimization', 'GEO', 'generative engine optimization', or needs to optimize content for AI-powered search engines and LLM citations. Do NOT use for traditional SEO audits or Google Ads.
- ▌ Migration Planner · vbrevikUse when the user says 'migration', 'schema change', 'database migration', 'alter table', or wants to plan safe database schema changes with rollback strategies.
- ▌ Memstack Development Performance Audit · vbrevikUse this skill when the user says 'performance audit', 'why is it slow', 'optimize performance', 'page speed', 'Core Web Vitals', 'lighthouse', 'load time', or needs to diagnose and fix frontend or backend performance issues. Do NOT use for code reviews or security audits.
- ▌ Competitor Analysis · vbrevikUse when the user says 'competitor analysis', 'competitive analysis', 'compare competitors', 'competitor research', 'market analysis', or wants to understand their competitive landscape.
- ▌ Work · vbrevikUse when the user says 'plan', 'todo', 'copy plan', 'append plan', 'resume plan', 'priorities', or 'what's next'.
- ▌ Diary · vbrevikUse when the user says 'save diary', 'log session', 'wrapping up', or at end of a productive session.
- ▌ Forge · vbrevikUse when the user says 'forge this', 'new skill', 'create enchantment', or wants to create a MemStack skill.
- ▌ Quill · vbrevikUse when the user says 'create quotation', 'generate quote', 'proposal', or needs a client-facing price document.
- ▌ Shard · vbrevikUse when the user says 'shard this', 'split file', or when working with files over 1000 lines.
- ▌ Sight · vbrevikUse when the user says 'draw', 'diagram', 'visualize', 'architecture', or needs a visual overview of code structure.
- ▌ State · vbrevikUse when the user says 'update state', 'project state', 'where was I', or at session start to load current context.
- ▌ Verify · vbrevikUse when the user says 'verify', 'check this work', 'does it pass', or before committing completed work.
- ▌ Project · vbrevikUse when the user says 'save project', 'handoff', or when context is running low and state must be preserved.
- ▌ Wrap Up · vbrevikEnd-of-task wrap-up routine. Run after completing a feature or fix to verify, review learnings, update backlog, commit+push, and suggest the next task.
- ▌ Memstack Development API Designer · vbrevikUse this skill when the user says 'design API', 'API endpoints', 'REST API', 'API designer', 'route structure', 'API architecture', or is designing RESTful API routes, request/response schemas, and endpoint organization. Do NOT use for API security audits or database design.
- ▌ Webinar Script · vbrevikUse when the user says 'webinar script', 'webinar', 'live presentation', 'webinar outline', 'pitch presentation', or wants a structured presentation script that sells.
- ▌ Product Pipeline · vbrevikUse when the user says 'product pipeline', 'full PRD', 'PRD pipeline', or wants to go from idea to technical spec. Orchestrates prd-writer → breakdown-feature-prd → create-specification in sequence.
- ▌ Memstack Security Secrets Scanner · vbrevikUse this skill when the user says 'scan for secrets', 'check for leaked keys', 'secrets scanner', 'hardcoded credentials', 'API key leak', or needs to detect exposed secrets in source code. Do NOT use for dependency vulnerabilities or RLS auditing.
- ▌ Memstack SEO Keyword Research · vbrevikUse this skill when the user says 'keyword research', 'find keywords', 'keyword strategy', 'search terms', 'keyword opportunities', or needs to identify target keywords with search volume, difficulty, and content mapping. Do NOT use for full site audits or ad keyword groups.
- ▌ Cron Scheduler · vbrevikUse when the user says 'cron job', 'scheduled task', 'cron', 'scheduler', 'run every', 'periodic task', or needs a recurring background job with monitoring and failure handling.
- ▌ Memstack Content Landing Page Copy · vbrevikUse this skill when the user says 'write landing page', 'landing page copy', 'sales page', 'hero section', 'conversion copy', or is creating persuasive short-form copy for a product or service landing page. Do NOT use for blog posts or email sequences.
- ▌ Memstack Deployment CI CD Pipeline · vbrevikUse this skill when the user says 'CI/CD', 'GitHub Actions', 'pipeline', 'continuous integration', 'continuous deployment', 'ci-cd-pipeline', 'automate deploys', or needs to set up automated build, test, and deployment pipelines. Do NOT use for one-time manual deployments.
- ▌ Memstack Deployment Netlify Deploy · vbrevikUse this skill when the user says 'deploy to Netlify', 'Netlify setup', 'netlify-deploy', or needs to deploy a static site or serverless functions to Netlify with build configuration and custom domains. Do NOT use for Railway, Vercel, or VPS deployments.
- ▌ Memstack Deployment Railway Deploy · vbrevikUse this skill when the user says 'deploy to Railway', 'Railway setup', 'railway-deploy', or needs to deploy a Node.js, Python, or Docker application to Railway with environment variables, custom domains, and monitoring. Do NOT use for Netlify, Vercel, or Hetzner deployments.
- ▌
- ▌ Feedback Analyzer · vbrevikUse when the user says 'analyze feedback', 'feedback analysis', 'customer feedback', 'feature requests', 'support tickets', 'user reviews', or has raw user feedback that needs categorization and prioritization.
- ▌ Memstack Security Dependency Audit · vbrevikUse this skill when the user says 'dependency audit', 'npm audit', 'pip audit', 'cargo audit', 'security vulnerabilities', 'outdated packages', 'supply chain', or needs to scan project dependencies for vulnerabilities, abandoned packages, and upgrade risks. Do NOT use for application-level security or secrets scanning.
- ▌ API Integration · vbrevikUse when the user says 'API integration', 'connect APIs', 'sync data', 'API to API', 'integrate with', or needs to build a reliable connection between two systems via their APIs.
- ▌ Measure Effectiveness · vbrevikMeasure human+Claude team effectiveness at end of task. Traces prompt contract requirements against delivered code, scores completion, and logs results. Run after completing a feature, fix, or any task that had a prompt contract.
- ▌
- ▌ Memstack SEO Schema Markup · vbrevikUse this skill when the user says 'add schema', 'schema markup', 'JSON-LD', 'structured data', 'rich results', 'rich snippets', or is adding or fixing schema.org structured data for better search result appearance. Do NOT use for meta tag optimization or full SEO audits.
- ▌ Memstack Business Scope Of Work · vbrevikUse this skill when the user says 'scope of work', 'SOW', 'define scope', 'project scope', 'write SOW', 'scope document', or is defining project boundaries, deliverables, and acceptance criteria for a formal engagement. Do NOT use for proposals, contracts, or invoicing.
- ▌ Memstack Content Email Sequence · vbrevikUse this skill when the user says 'write email sequence', 'email sequence', 'drip campaign', 'email series', 'nurture sequence', 'onboarding emails', 'launch emails', or is creating a multi-email automated campaign. Do NOT use for newsletters or single marketing emails.
- ▌ Twitter Thread · vbrevikUse when the user says 'twitter thread', 'tweet thread', 'X thread', 'write a thread', or wants to create a multi-tweet narrative for Twitter/X.
- ▌ Memstack Content Youtube Script · vbrevikUse this skill when the user says 'YouTube script', 'video script', 'write script for YouTube', 'YouTube video outline', or is creating scripted content for a YouTube video with hooks, chapters, and CTAs. Do NOT use for TikTok/Reels short-form scripts or webinar presentations.
- ▌ Sales Funnel · vbrevikUse when the user says 'sales funnel', 'funnel', 'conversion funnel', 'customer journey', 'funnel strategy', or wants to map awareness-to-retention flow for a product.
- ▌ Memstack Deployment Docker Setup · vbrevikUse this skill when the user says 'Docker', 'Dockerfile', 'docker-compose', 'containerize', 'docker-setup', or needs to containerize an application with optimized Docker images and compose configurations. Do NOT use for serverless or static site deployments.
- ▌ Test Writer · vbrevikUse when the user says 'write tests', 'add tests', 'test coverage', 'unit tests', 'integration tests', or wants to generate test files for existing code.
- ▌ Roadmap Builder · vbrevikUse when the user says 'roadmap', 'product roadmap', 'feature roadmap', 'quarterly plan', 'now next later', or needs to plan product development across a time horizon.
- ▌ Financial Model · vbrevikUse when the user says 'financial model', 'projections', 'revenue forecast', 'unit economics', 'break-even', 'cash flow', or wants to build financial projections for a business.
- ▌ Memstack Business Proposal Writer · vbrevikUse this skill when the user says 'write proposal', 'create proposal', 'proposal for', 'client proposal', 'project proposal', 'bid on project', 'pitch', or is preparing a project proposal for a client or freelance engagement. Do NOT use for contracts, invoices, or onboarding.
- ▌ Memstack Deployment Hetzner Setup · vbrevikUse this skill when the user says 'Hetzner', 'VPS setup', 'server provisioning', 'deploy to VPS', 'hetzner-setup', 'cloud server', or needs to provision, harden, and deploy applications to a Hetzner Cloud server with Docker, Nginx/Caddy, SSL, and monitoring. Do NOT use for managed platform deployments like Railway or Netlify.
- ▌ Executing Plans · vbrevikUse when you have a written implementation plan to execute in a separate session with review checkpoints
- ▌ Static Analysis · vbrevik bundleRun deterministic static code analysis using semgrep with STIG-mapped rules. Produces findings tagged with DISA STIG V-IDs that feed into /stig-compliance as pipeline evidence. Use when (1) building a prompt contract that involves security-sensitive code (guard mode injects tool constraints), (2) reviewing code changes for security issues (review mode runs semgrep), (3) /stig-compliance review needs deterministic evidence before semantic review. Supports any language semgrep supports (TypeScript, Python, Go, Java, C/C++, etc.). Works air-gapped with bundled rules.
- ▌ Stig Compliance · vbrevik bundleDISA ASD STIG compliance checks for development. Guard mode injects STIG constraints into prompt contracts before implementation. Review mode verifies compliance post-implementation with inline findings, per-check reports, and cumulative tracker updates. Invoke with /stig-compliance, /stig-compliance guard, or /stig-compliance review [categories].
- ▌ Prompt Contracts · vbrevikUse when about to implement a feature, build a component, fix a bug, or make any non-trivial code change. Replaces vague natural-language requests with structured contracts that eliminate ambiguity and prevent wrong-direction work.
- ▌ Systems Thinking · vbrevikUse when designing features, planning architecture, or making structural decisions. Analyzes feedback loops, leverage points, unintended consequences, and system boundaries before committing to an approach. Prevents narrow local fixes that create systemic problems.
- ▌ Memstack Content Blog Post · vbrevikUse this skill when the user says 'write blog post', 'blog post about', 'write article', 'create blog', 'content for blog', 'write post', or is creating long-form written content for a blog or publication. Do NOT use for landing page copy, email sequences, or social media posts.
- ▌ Memstack SEO Local SEO · vbrevikUse this skill when the user says 'local SEO', 'Google Business Profile', 'local search', 'NAP consistency', 'local listings', 'Google Maps', 'local pack', or is optimizing a business for local search results and map visibility. Do NOT use for general SEO audits or national keyword research.
- ▌ Container Security · vbrevik bundleScan container images, Dockerfiles, docker-compose files, and Kubernetes manifests for security misconfigurations and vulnerabilities. Uses Trivy for image/IaC scanning and Kubescape for K8s policy compliance. Falls back to regex-based Dockerfile and K8s YAML analysis when tools are unavailable. Produces STIG V-ID-tagged findings for /stig-compliance pipeline. Use when (1) reviewing Docker or K8s configuration changes, (2) scanning container images for OS-level CVEs, (3) validating K8s RBAC and NetworkPolicy configuration, (4) before deployment. Works air-gapped with pre-downloaded vulnerability database.
- ▌ Newsletter · vbrevikUse when the user says 'newsletter', 'email newsletter', 'weekly digest', 'write a newsletter', or wants to create a complete newsletter edition with subject line, content, and growth strategy.
- ▌ Measure Efficiency · vbrevikMeasure human+Claude team efficiency at end of task. Computes resource cost per delivered requirement and ideal-vs-actual path ratio, weighted by effectiveness. Run after /measure-effectiveness.
- ▌ Mvp Scoper · vbrevikUse when the user says 'MVP', 'minimum viable product', 'scope the MVP', 'strip to minimum', 'what to build first', or needs to ruthlessly cut a product idea down to its fastest-to-validate form.
- ▌ Prd Writer · vbrevikUse when the user says 'PRD', 'product requirements', 'product spec', 'requirements document', 'write a PRD', or needs a structured product requirements document for engineering handoff.
- ▌ Memstack Security API Audit · vbrevikUse this skill when the user says 'audit API', 'check API security', 'API routes security', 'endpoint audit', 'check my routes', or needs to verify API route protection. Reviews API endpoints for authentication, authorization, and input validation gaps. Do NOT use for frontend security headers or dependency scanning.
- ▌ Memstack SEO Site Audit · vbrevikUse this skill when the user says 'SEO audit', 'site audit', 'check SEO', 'audit my site', 'SEO check', 'technical SEO', or is evaluating a website's search engine optimization health, meta tags, performance, or structured data. Do NOT use for keyword research or schema markup generation alone.
- ▌ Google Ad · vbrevikUse when the user says 'google ad', 'search ad', 'PPC', 'Google Ads', 'AdWords', 'responsive search ad', or wants paid search campaign copy.
- ▌ Web Design Patterns · vbrevik bundleDesign patterns for website sections — heroes, cards, CTAs, trust signals, testimonials. Principle-based patterns that avoid AI-generated aesthetics. Pair with web-design-methodology for implementation.
- ▌ Memstack Business Sop Builder · vbrevikUse this skill when the user says 'create SOP', 'write SOP', 'standard operating procedure', 'document process', 'process documentation', 'runbook', 'playbook', or is creating step-by-step documentation for a repeatable process. Do NOT use for project proposals or scope documents.
- ▌ Feature Spec · vbrevikUse when the user says 'feature spec', 'spec this feature', 'write a spec', 'functional spec', 'technical spec', or needs a detailed specification for a single feature an engineer can implement without ambiguity.
- ▌ Memstack Security Csp Headers · vbrevikUse this skill when the user says 'CSP', 'Content-Security-Policy', 'security headers', 'HSTS', 'X-Frame-Options', 'clickjacking', 'unsafe-inline', 'unsafe-eval', or needs to audit, generate, or fix HTTP security headers for a web application. Do NOT use for API route audits or dependency scanning.
- ▌ Memstack Security Owasp Top10 · vbrevikUse this skill when the user says 'OWASP audit', 'OWASP top 10', 'security audit', 'vulnerability assessment', 'full security check', or needs a comprehensive web application security review against OWASP Top 10 categories. Do NOT use for dependency audits or secret scanning alone.
- ▌ Memstack Security Rls Checker · vbrevikUse this skill when the user says 'check RLS', 'audit RLS', 'RLS policies', 'row level security', 'Supabase security audit', or needs to verify table-level access control. Audits Supabase Row Level Security policies across all tables. Do NOT use for non-Supabase projects or writing RLS policies from scratch.
- ▌ Tiktok Script · vbrevikUse when the user says 'TikTok script', 'TikTok video', 'Reels script', 'Shorts script', 'short-form video', or wants to create a script for vertical short-form video content.
- ▌ Memstack Deployment Domain Ssl · vbrevikUse this skill when the user says 'setup domain', 'configure DNS', 'SSL certificate', 'domain-ssl', 'custom domain', 'HTTPS setup', or needs to configure DNS records, SSL certificates, and custom domains for any hosting provider. Do NOT use for full deployment workflows.
- ▌ Facebook Ad · vbrevikUse when the user says 'facebook ad', 'FB ad', 'Meta ad', 'Instagram ad', 'social ad', or wants ad copy for Facebook/Instagram Ads Manager.
- ▌ Launch Plan · vbrevikUse when the user says 'launch plan', 'product launch', 'launch strategy', 'go-to-market', 'GTM plan', 'launch calendar', or is planning a product or feature release.
- ▌ Lead Magnet · vbrevikUse when the user says 'lead magnet', 'opt-in', 'freebie', 'email list', 'list building', 'opt-in page', or wants to create a free resource to capture email subscribers.
- ▌ API Fuzz · vbrevik bundleDynamic API security testing using OWASP OFFAT. Fuzzes API endpoints for auth bypass, input injection, schema violations, and information disclosure. Falls back to curl-based probe testing when OFFAT is unavailable. Produces STIG V-ID-tagged findings for /stig-compliance pipeline. Use when (1) testing API endpoints for auth boundary gaps, (2) validating input validation/sanitization, (3) checking error handling for information disclosure, (4) before deploying API changes. Requires running target server. Works air-gapped.
- ▌ Catch Up · vbrevikStart-of-session context loading. Run at the beginning of a new conversation to understand project state, recent changes, and what to work on next.
- ▌ Compress · vbrevikUse when the user says 'headroom', 'compression', 'token savings', 'proxy status', or asks about context window usage.
- ▌ Familiar · vbrevikUse when the user says 'dispatch', 'send familiar', 'split task', or needs work split across parallel CC sessions.
- ▌ Governor · vbrevikUse when the user says 'new project', 'project init', 'what tier', 'scope', or discusses project maturity, complexity budget, or what's appropriate to build.
- ▌ Grimoire · vbrevikUse when the user says 'update context', 'update claude', 'save library', or after significant project changes.
- ▌ Humanize · vbrevikUse when the user says 'humanize', 'clean up writing', 'make it sound natural', or wants text to not sound AI-generated.
- ▌ Shadcn UI · vbrevik bundleAdd shadcn/ui components to a themed React project. Handles component installation, customisation, and combining components into working patterns.
- ▌ Kdp Format · vbrevik bundleUse when the user says 'kdp', 'format for kdp', 'format book', or 'manuscript' and needs print-ready output.
- ▌ Secret Scan · vbrevik bundleScan git repositories for leaked secrets (API keys, passwords, tokens, certificates) using gitleaks. Detects secrets in git history and current code. Produces STIG V-ID-tagged findings that feed into /stig-compliance as pipeline evidence. Use when (1) reviewing code changes for accidental secret commits, (2) auditing git history for previously committed secrets, (3) /stig-compliance review needs secret detection evidence. Works air-gapped.
- ▌ Spec Feature · vbrevikInterview-driven feature specification. Use when the user says "I want to build [feature]", "let's plan [feature]", or invokes /spec-feature. Conducts a structured Socratic interview covering technical implementation, edge cases, tradeoffs, and unconsidered concerns — then writes a spec. Run this BEFORE any implementation work begins.
- ▌ Threat Model · vbrevik bundleAnalyze architecture documents, data flows, and code for security threats (STRIDE) and privacy threats (LINDDUN/GDPR). Produces threat reports with STIG V-ID mappings and risk register entries. Use when (1) reviewing architecture or design docs, (2) before implementing security-sensitive features, (3) assessing privacy impact for GDPR compliance, (4) generating risk register entries for compliance audits. Fully local — Claude-based analysis, no external API needed.
- ▌ Retrospective · vbrevikUse after completing an implementation plan or finishing a development branch — reflects on what was learned, what slowed us down, and what information would have saved time if known earlier