Produce a rated, prioritized, written audit of an existing codebase and save it to a AUDIT.md file. Use when the user asks to "audit", "review the codebase for", "find smells / complexity / issues", or "assess quality / security / test coverage / performance" of a whole project — NOT a single diff or PR (use a…
Audit and fix npm supply-chain security issues in the current repo. Detects the package manager, checks for missing protections (lockfile, lifecycle script blocking, release-age cooldown, exotic dependency blocking, pnpm trust policy), presents findings, and applies fixes after user confirmation. Supports npm, pnpm…
Respond to code-review comments on a GitHub PR end to end — fetch unresolved threads, triage real reviewers from CI/bot noise, fix or reason-and-push-back on each, then get one go-ahead on the real diff before pushing, replying to every thread, and resolving the ones no human is waiting on. Use when a PR has review…