Given ONE Sentry issue short-id, investigates the root cause and — in active mode — opens a DRAFT PR with a minimal, tested fix; in report-only mode (the default) it proposes the fix without pushing; or it DECLINES with a reason. Never auto-merges, never touches main, never edits auth/security/payments/migrations.…
Nightly Sentry orchestrator for the Shelf webapp. Classifies every unresolved issue; resolves noise/transient/already-fixed in Sentry with a reason; dispatches a sentry-issue-fixer per genuine, localized, auto-fixable bug; flags the rest for a human; emits a morning digest. Defaults to report-only. Use for "triage…
Verifies a single PR review finding from CodeRabbit, Codex, or Copilot against the current state of the Shelf codebase and returns a structured verdict. Read-only — never edits code and never writes to GitHub. Invoked by the /pr-review-loop skill, one instance per finding, in parallel.
Headless variant of shelf-security-reviewer for the pre-commit hook. Receives the staged diff inline (the wrapper script pre-computes it). Tools restricted to Skill only — no Bash, no WebFetch, no Agent — so prompt injection in the diff cannot exfiltrate. Outputs a strict JSON envelope for safe parsing. Do NOT invoke…
Security-focused reviewer for Shelf PRs and diffs. Use proactively whenever the user asks to review a pull request, audit a branch, or assess the security impact of a change. Always invokes the security-review, oauth-oidc-misconfiguration, supabase, and two-factor-authentication-best-practices skills, and layers…