Assess whether code is ready to be safely refactored. Maps structural contracts (what grep CAN verify must not change), warns about invisible contracts (what grep CANNOT detect — ordering, invariants, state machines), checks blast radius, and gates on test coverage prerequisites. Invoke when the user says "refactor…
Run a focused security scan — secrets detection, dependency audit, and basic auth pattern checks. Invoke when the user says "security scan", "security review", "security audit", "check for secrets", "vulnerability check", or "scan for credentials". Do NOT use for general code review (use /code-review) or comprehensive…
Review an external SOURCE (article, paper, repo, talk, tool, framework, blog post) against ai-governance. Extracts the source's items, abstracts each to the INTENT above the surface, checks whether the framework already covers that intent, and PROPOSES where each verdict lands (INFLUENCES.md row / reference capture /…
Onboard a project under the AI-governance framework — calibrate the mode, ask the minimal founding questions (Goal / Done-looks-like / Non-goals / app-vs-document), then lay down the governance + memory scaffolding via scaffoldproject. Invoke when the user says "start a project", "new project", "set up this project"…
Safely start, resume, validate, or clean up an isolated Git worktree for a mutating Claude Code, Codex CLI, or Codex Desktop session. Use at the start of concurrent work, when moving a session off the primary checkout, when recovering a partially prepared worktree, or before removing a completed worktree.
Generate comprehensive tests for a target file, function, module, or diff. Works in three phases — generate tests with error-path emphasis, verify against known AI test-generation failure modes (echo-chamber assertions, error-path undercount, weak mutation coverage), and revise any that fail. Auto-detects test…