╔══════════════════════════════════════════════════════════════╗ ║ ║ ║ ANTES de escrever QUALQUER linha de código, os seguintes ║ ║ artefatos DEVEM existir e ser APROVADOS pelo humano: ║ ║ ║ ║ 1. 🎨 MOCKUP (se tem UI) ║ ║ → Todas as telas, estados, erros, modais, mensagens ║.
Agent "QA-TEST-ENGINEER" from camilooscargbaptista/architect, covering 🧪 qa test engineer, metas inegociáveis, ⚠️ módulos sem cobertura de teste, pirâmide de testes and processo.
Agent "SECURITY-AUDITOR" from camilooscargbaptista/architect, covering 🛡️ security auditor, checklist owasp top 10, checklist segurança — typescript, segurança em integrações and ameaças específicas do domínio: devtools.
Agent "TECH-DEBT-CONTROLLER" from camilooscargbaptista/architect, covering 📊 tech debt controller, estado atual, anti-patterns detectados (agrupados por severidade), hotspots de acoplamento (tech debt) and débito em cobertura de teste.
Architecture Decision Record (ADR) — Philosophy-First: Creates well-structured ADRs using a 3-phase process: (1) Define the architectural philosophy and identity of the system, (2) Explore options through the lens of that philosophy, (3) Adversarial review by a devil's advocate agent. Use this skill whenever the user…
Adversarial architecture reviewer agent. Challenges proposed decisions by playing devil's advocate — stress-tests ADRs, finds hidden risks, questions assumptions, and validates alignment with the project's Architectural Identity. Invoke when the user says 'review this ADR', 'challenge this decision', 'devil's…
Autonomous architecture health analyzer. Scans the entire codebase to assess architectural quality — dependency direction, coupling, cohesion, layer separation, and anti-patterns. Produces a structured Architecture Health Report with severity-ranked findings and concrete refactoring recommendations. Invoke when the…
Autonomous project onboarding agent. Explores an entire codebase and generates a comprehensive Developer Onboarding Guide — project overview, architecture map, key modules, development workflow, coding conventions, and 'where to find things' reference. Invoke when the user says 'onboard me', 'explain this project'…
Autonomous release readiness assessor. Evaluates whether a project is ready for production deployment by checking code quality, test coverage, security posture, documentation, observability, rollback plan, and operational readiness. Produces a Go/No-Go Release Report. Invoke when the user says 'are we ready to…
Autonomous security audit agent. Performs a comprehensive security scan of the entire codebase — secrets detection, vulnerability patterns, authentication/authorization review, dependency audit, and OWASP Top 10 assessment. Produces a Security Audit Report with severity-classified findings and remediation steps.…
Autonomous technical debt analyzer. Scans the codebase to identify, categorize, and prioritize technical debt — code duplication, outdated dependencies, missing tests, TODO/FIXME markers, dead code, inconsistent patterns, and architectural drift. Produces a Tech Debt Inventory with effort estimates and ROI-based…
AI/ML Engineering Review: Reviews AI/ML systems for production readiness — model serving, MLOps pipelines, LLM integration patterns, prompt engineering, evaluation frameworks, and responsible AI. Covers model deployment, feature stores, experiment tracking, monitoring/drift detection, and AI safety. Use when the user…
Backend Code Review (Node.js, Java, Microservices): Expert review of backend code focusing on Node.js, Java, Clean Architecture, SOLID principles, microservices patterns, SQL/database design, messaging (Kafka, SQS, SNS), and payment flows. Use whenever the user wants a review of backend code, API design, service…
Chaos Engineering: Designs and reviews resilience testing strategies — fault injection, game days, failure mode analysis, and blast radius assessment. Covers chaos experiments for distributed systems, database failures, network partitions, and dependency outages. Use when the user mentions chaos engineering…
Code Review Router & General Analysis: Acts as the primary entry point for all code review requests. Detects the technology context and delegates to the appropriate specialized review skill (backend-review for Node/Java/NestJS, frontend-review for Angular/React, flutter-review for Dart/Flutter, security-review for…
Compliance & Governance Review: Reviews systems for regulatory compliance — SOC2, HIPAA, PCI-DSS, ISO 27001, LGPD/GDPR. Covers access control, audit logging, encryption, data retention, incident response, and compliance documentation. Use when the user mentions SOC2, HIPAA, PCI, ISO 27001, LGPD, GDPR, compliance…