stefaniuk

stefaniuk/loadout

Skill Claude CodeCodex

Use when you have a written implementation plan to execute in a separate session with review checkpoints.

stefaniuk/loadout

Skill Claude CodeCodex

Find bugs, security vulnerabilities, and code quality issues in local branch changes. Use when asked to review changes, find bugs, security review, or audit code on the current branch.

stefaniuk/loadout

Skill Claude CodeCodex

Use when implementation is complete, all tests pass, and you need to decide how to integrate the work.

stefaniuk/loadout

Skill Claude CodeCodex

GitHub Actions security review for workflow exploitation vulnerabilities. Use when asked to "review GitHub Actions", "audit workflows", "check CI security", "GHA security", "workflow security review", or review .github/workflows/ for pwn requests, expression injection, credential theft, and supply chain attacks.…

stefaniuk/loadout

Skill Claude CodeCodex

Delivers changes incrementally. Use when implementing any feature or change that touches more than one file. Use when you're about to write a large amount of code at once, or when a task feels too big to land in one step.

stefaniuk/loadout

Plugin Claude Code

Detects insecure default configurations including hardcoded credentials, fallback secrets, weak authentication defaults, and dangerous values in production.

stefaniuk/loadout

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open switches, weak crypto, permissive access, debug leakage. Parallel sweeps collect candidates, then a refuting verifier traces each one to the security decision it reaches before it is reported.

stefaniuk/loadout

Skill Claude CodeCodex

Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).

stefaniuk/loadout

Skill Claude CodeCodex

Configures mewt or muton mutation testing campaigns — scopes targets, tunes timeouts, and optimizes long-running runs. Use when the user mentions mewt, muton, mutation testing, or wants to configure or optimize a mutation testing campaign.

stefaniuk/loadout

Skill Claude CodeCodex

Automate browser interactions, test web pages and work with Playwright tests.

stefaniuk/loadout

Skill Claude CodeCodex

Writes, reviews, and debugs property-based tests — Hypothesis, fast-check, proptest, jqwik, rapid, and Echidna or Medusa for Solidity invariants. Use whenever tests should cover a whole input domain instead of a hand-picked list of examples: encode/decode and serialize/deserialize pairs, parsers, canonicalizers and…

stefaniuk/loadout

Skill Claude CodeCodex

Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation.

stefaniuk/loadout

Skill Claude CodeCodex

Create code repository from template, or/and update it in parts from the content of the template that contains example of use of tools like make, pre-commit git hooks, Docker, and quality checks.

stefaniuk/loadout

Skill Claude CodeCodex

Use when completing tasks, implementing major features, or before merging to verify work meets requirements.

stefaniuk/loadout

Skill Claude CodeCodex

Hardens code against vulnerabilities. Use when handling user input, authentication, data storage, or external integrations. Use when building any feature that accepts untrusted data, manages user sessions, or interacts with third-party services. Use when personal data or privacy compliance (GDPR, CCPA) is involved.

stefaniuk/loadout

Skill Claude CodeCodex

Runs a Semgrep security scan over a codebase: detects languages, selects rulesets, presents the plan for explicit approval, then runs every approved ruleset through scripts/run-scans.sh, which batches the semgrep processes and writes scans.json, and merges the output to SARIF. Supports two scan modes, "run all" for…

stefaniuk/loadout

Plugin Claude Code

Identify error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes.

stefaniuk/loadout

Agent

Evaluates APIs, configurations, and library interfaces for misuse resistance and footgun potential. Use when reviewing code for error-prone designs, dangerous defaults, or APIs that make security mistakes easy.

stefaniuk/loadout

Skill Claude CodeCodex

Identifies error-prone APIs, dangerous configurations, and footgun designs that enable security mistakes. Use when reviewing API designs, configuration schemas, cryptographic library ergonomics, or evaluating whether code follows 'secure by default' and 'pit of success' principles. Triggers: footgun, misuse-resistant…

stefaniuk/loadout

Skill Claude CodeCodex

Scan agent skills for security issues. Use when asked to "scan a skill", "audit a skill", "review skill security", "check skill for injection", "validate SKILL.md", or assess whether an agent skill is safe to install. Checks for prompt injection, malicious scripts, excessive permissions, secret exposure, and supply…

stefaniuk/loadout

Skill Claude CodeCodex

Consolidate per-feature Spec Kit artefacts under specs/ into a product-facing specification set aligned to a selected baseline, excluding plan.md and tasks.md from the final output.

stefaniuk/loadout

Skill Claude CodeCodex

Check code against the documentation that specifies it - which requirements hold, which the code contradicts, which are absent, and what the code does that no document mentions. Use when comparing an implementation against a whitepaper, protocol spec, or design document.

stefaniuk/loadout

Skill Claude CodeCodex

Perform a non-destructive cross-artifact consistency and quality analysis across spec.md, plan.md, and tasks.md after task generation.

stefaniuk/loadout

Skill Claude CodeCodex

Generate a custom checklist for the current feature based on user requirements.