backspace-shmackspace

backspace-shmackspace/claude-devkit

Agent Claude Code

Security-focused code review specialist for claude-devkit.

backspace-shmackspace/claude-devkit

Agent Claude Code

Code review specialist for /ship skill validation.

backspace-shmackspace/claude-devkit

Agent Claude Code

Code implementation specialist for claude-devkit.

backspace-shmackspace/claude-devkit

Agent Claude Code

Senior architect for Claude Devkit - specialized in skill design, generator architecture, and template patterns.

backspace-shmackspace/claude-devkit

Agent Claude Code

QA testing specialist for claude-devkit.

backspace-shmackspace/claude-devkit

Agent Claude Code

Security threat modeling specialist using STRIDE, PASTA, and DREAD frameworks.

backspace-shmackspace/claude-devkit

Agent Claude Code

High-level design and implementation planning. Use this agent to design architectures, create migration plans, and generate detailed blueprints for new features. Plans are saved to $DEVKITPROJECTDIR/plans/ for execution by engineering agents.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Search, retrieve, and summarize past journal entries. Use when the user says "what did I", "recall", "look up", "find in journal", "journal search", "last week", "weekly review", "what happened on", "summarize my week", "what have I been working on", "review my journal", or asks about past work, decisions, meetings…

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Periodic journal review — scans daily entries to surface unlogged decisions, unlogged learnings, untracked action items, and recurring themes. Use when the user says "journal audit", "review my entries for promotion", "extract decisions", "unlogged items", "what should I formalize", "untracked items", or wants to…

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Write entries to the Obsidian work journal. Creates daily logs, meeting notes, project updates, learnings, and decision records. Use when the user says "journal", "log", "daily entry", "meeting notes", "learning", "decision", "ADR", "capture this", "write down", "record this", or wants to document work for future…

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Security-focused review of AI-generated or AI-assisted code. Use when reviewing code produced by AI coding assistants, auditing AI-generated patches, verifying AI-assisted contributions before merge, or when a review needs to account for failure modes specific to AI code generation.

backspace-shmackspace/claude-devkit

Skill Claude Code

Research and create a technical blueprint for a new feature.

backspace-shmackspace/claude-devkit

Skill Claude Code

Deep security and performance scan with structured reporting.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Apply when reviewing or writing GitLab CI (.gitlab-ci.yml), Tekton pipeline/task YAML, or Containerfiles/Dockerfiles used in CI builds. Detects common misconfigurations that expose secrets, weaken isolation, skip security gates, grant excessive privileges, or produce insecure container images.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Apply when reviewing or writing browser-facing code that handles user input, renders HTML, sets cookies, or loads third-party scripts. Covers XSS, CSRF, CSP, clickjacking, XS-Leaks, and HTTP security headers.

backspace-shmackspace/claude-devkit

Skill Claude Code

Validate codebase against code-level compliance signals for regulatory frameworks (FedRAMP, FIPS, OWASP, SOC 2). Scoped to source code analysis only — not a compliance certification.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Harden container images and runtime configuration. Use when building, reviewing, or auditing Containerfiles, Dockerfiles, container compose files, or Kubernetes pod security settings.

backspace-shmackspace/claude-devkit

Skill Claude Code

Supply chain security audit — coordinates real CLI vulnerability scanners (npm audit, pip-audit, govulncheck, cargo audit, etc.) and synthesizes findings with license compliance and risk assessment.

backspace-shmackspace/claude-devkit

Skill Claude Code

Apply targeted fixes for specific findings from code reviews, security reviews, QA reports, or audit scans.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Apply when reviewing or writing code that processes untrusted input, constructs queries or commands, or handles user-supplied data. Covers SQL, LDAP, OS command injection, prototype pollution, and general validation strategy.

backspace-shmackspace/claude-devkit

Skill Claude CodeCodex

Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation.

backspace-shmackspace/claude-devkit

Skill Claude Code

Mine review artifacts for recurring patterns and write project learnings.

backspace-shmackspace/claude-devkit

Skill Claude Code

Pre-commit secrets detection with pattern-based scanning for API keys, tokens, passwords, private keys, and connection strings. Self-contained — no external tools required.

backspace-shmackspace/claude-devkit

Skill Claude Code

Deep semantic security review of code changes with data flow tracing, taint analysis, and trust boundary validation. Composable building block invoked by /audit when deployed.