Skill Claude CodeCodex
Per-language dependency vulnerability audit tool reference (cargo audit/deny, pip-audit, npm/pnpm audit, govulncheck, bundler-audit, composer audit, OWASP dependency-check, dotnet vulnerable, mixaudit). Load when adding, updating, or auditing project dependencies, wiring up CI supply-chain checks, or triaging CVEs in…
Skill Claude CodeCodex
OWASP Top 10 quick reference: the ten most critical web application security risks (access control, crypto, injection, insecure design, misconfiguration, vulnerable components, auth, integrity, logging, SSRF) each with a one-line mitigation. Load when reviewing code or designs for security vulnerabilities or threat…
Agent
Use when writing tests — follows TDD red-green-refactor cycle.
Skill Claude CodeCodex
Manage AI assistant governance rules across Claude, Cursor, Windsurf, Copilot, Gemini, and other tools using ai-rulez. Use when configuring rules, context, skills, domains, profiles, includes, plugins, or generating tool-specific outputs.
Skill Claude CodeCodex
Navigate large codebases via the basemind MCP server.
Agent
Reviews code changes for codegen output quality, FFI safety, HTTP middleware correctness, and cross-binding consistency.
Agent
General development agent for the spikard polyglot HTTP framework. Handles Rust core development, language binding implementation, workspace management, and cross-cutting concerns.
Command
Build the project using the standard task runner.
Command
Auto-fix linting, formatting, and common issues.
Command
Run linting and formatting checks via poly.
Command
Review current changes for correctness, style, and potential issues.
Command
Run the project test suite and report results.
Skill Claude CodeCodex
Skill "common-task-commands" from Goldziher/spikard, covering priority: critical and common task commands.
Skill Claude CodeCodex
Release/publish the spikard Rust core crate and CLI end-to-end. Load when releasing or publishing spikard — cutting a new version, tagging, running gh release create, and installing the released build locally. Covers version set via Taskfile, CHANGELOG roll, the clean-tree precondition, GitHub release, local install…
Skill Claude CodeCodex
Scaffold Spikard projects and generate code from OpenAPI, AsyncAPI, OpenRPC, GraphQL, and Protobuf schemas using the Spikard CLI or its MCP server. Use when building or updating Spikard-based apps, fixtures, test apps, or agent workflows that should prefer code generation over handwritten boilerplate.
Agent
Reads /tmp/basemind-harden-.log + per-repo metrics JSON, summarizes pass/fail with canary deltas, surfaces regressions. Cheap read-mostly subagent.
Agent
Migrates one basemind MCP domain from flat per-verb tools onto a single mode-dispatched tool plus a CLI subcommand group — mode enum, params, shim, helpers, CLI — without touching shared files.
Agent
Adds a mode to one of basemind's 9 MCP domains end-to-end — mode enum variant, params, shim arm, helper body, CLI subcommand, smoke assertion, README row.
Agent
Reviews diffs touching the basemind scanner / extract / store / index paths for hot-path regressions — allocations, missed memmem opportunities, hashmap churn, parser pool misuse.
Agent
Adds tree-sitter language coverage to basemind via the language-support skill — sources upstream queries from tree-sitter- /queries/tags.scm, adapts to basemind's Symbol/Call/Import shape.
Agent
Rewrites basemind's docs, skills, and plugin manifests against the 9-domain MCP/CLI surface — knows the ai-rulez generation source, the four parallel skill trees, and the hand-synced command mirrors.
Command
Run the local lint + test triad before committing.
Command
Run the real-OSS harden harness against the 8 canary repos.
Command
Run basemind scan against the current working tree (or a path argument).