Devleck Senior Engineer Skills — turns Claude Code into a senior engineering organization: full-spectrum audits of existing projects and standards-grade construction of new ones across security, data, API, DevOps, observability, testing, performance, accessibility, web presence, privacy and release readiness.
Instructions for Kin9Zeus/senior-engineer-skills, a project described as: Turn Claude Code into a senior engineering organization — 15 skills for full-spectrum audits and standards-grade construction.
Instructions for Kin9Zeus/senior-engineer-skills, a project described as: Turn Claude Code into a senior engineering organization — 15 skills for full-spectrum audits and standards-grade construction.
Principal engineer for system design and structural review. Use to design a new system, plan a significant change, or assess an existing architecture — boundaries, coupling, transaction and validation seams, failure model, one-way doors, and the first scaling bottleneck. Returns a plan or an assessment with ADRs; does…
Database and data-layer reviewer. Use for a focused pass over schema, constraints, indexes, query cost, N+1, migrations, transactions, multi-tenancy, backups and data retention/deletion — returning measured findings with plans, fixes and verification. Read-only; never runs a migration or a destructive statement.
Application security reviewer. Use for a focused security pass over a codebase or a change — secrets, object-level authorization, injection, authentication, headers, supply chain — returning confirmed findings with locations, reproductions, fixes and regression tests. Read-only; proposes fixes rather than applying…
Public web surface reviewer. Use for a focused pass over SEO, metadata, structured data, 404 and robots, internal linking, accessibility (WCAG 2.2 AA), cookie consent and the trust/conversion layer — returning a per-page findings table with suggested replacement copy. Read-only; a handful of GET requests, no crawling.
Build the privacy pack — data inventory from the code, an accurate privacy policy, working cookie consent, and an automated self-service deletion pipeline.
Audit and build interfaces to WCAG 2.2 AA — keyboard operability, focus management, semantic structure and landmarks, accessible names, colour contrast, forms and error handling, ARIA patterns, reduced motion, zoom and reflow, and testing with real assistive technology. Use when the user says "accessibility", "a11y"…
API design and contract engineering — REST resource modelling, error envelopes, pagination, filtering, idempotency, versioning and deprecation, rate limiting, webhooks, OpenAPI, GraphQL schema and N+1 defence, and contract testing. Use when designing, reviewing or documenting an endpoint or integration; when the user…
Senior database engineering — schema design, constraints, indexing, query optimisation, N+1 elimination, transactions and isolation, migrations, multi-tenancy and row-level security, backups, point-in-time recovery and restore drills, retention and deletion. Use when designing or changing a schema, writing or…
Team engineering practice — code conventions and readability, git and branching workflow, commit and pull request hygiene, code review standards, architecture decision records, documentation and runbooks, onboarding, developer experience, and managing technical debt deliberately. Use when the user says "code review"…
Observability and reliability engineering — structured logging, metrics, distributed tracing, correlation ids, error tracking, dashboards, SLIs/SLOs and error budgets, alerting that pages on symptoms rather than causes, on-call practice, incident response and blameless postmortems. Use when the user says "logging"…
Performance engineering across the stack — Core Web Vitals (LCP, INP, CLS), bundle size and rendering strategy, image and font optimisation, backend latency budgets, caching layers, database query cost, profiling, and load testing. Use when the user says "slow", "performance", "optimize", "Core Web Vitals", "LCP"…
Privacy engineering and compliance — building a data inventory from the actual code, generating a privacy policy that matches real data flows and names every third-party processor, cookie consent that genuinely gates scripts, and an automated self-service data export and deletion pipeline (DSAR / right to erasure)…