What it is. An agent that audits an ASP.NET Core codebase against the OWASP Top 10 and .NET-specific risks — broken access control, secrets in source, injection, insecure config, CORS, mass assignment, weak auth, vulnerable dependencies. It produces a risk-ranked report where every finding shows the vulnerable code…
Audits an ASP.NET Core codebase for security vulnerabilities against the OWASP Top 10 and .NET-specific risks — auth/authorization gaps, injection, secrets in source, insecure config, CORS, mass assignment, and dependency vulnerabilities. Produces a ranked report with concrete fixes. Use when the user wants a security…
What it is. An agent that audits a whole .NET data layer — EF query patterns, indexing, DbContext config, resiliency, bulk-op opportunities — and produces a ranked report with fixes.
Audits a .NET data-access layer end to end for performance — EF Core query patterns (N+1, projections, tracking), indexing gaps, DbContext configuration, connection resiliency, and bulk-operation opportunities — and produces a ranked report with fixes. Use when the user wants a database/EF performance review of a…
What it is. An agent (not a single-shot skill) that reads a whole .NET repository, maps the project dependency graph, detects the intended architecture style, and produces a ranked report: layering/dependency-rule violations, coupling, CQRS hygiene, EF boundary leaks, testability — each with a concrete fix, plus a…
Reviews a .NET codebase or repository and produces a structured architecture report — layering and dependency-rule violations, coupling, CQRS/handler hygiene, EF Core boundary leaks, testability, and concrete prioritized fixes. Use when the user wants an architecture review, a "second opinion" on structure, a PR-level…
What it is. An agent that does a PR-level review of C#/.NET changes — correctness, async/EF/performance pitfalls, error handling, API design, readability, and test coverage. It returns severity-ranked comments (🔴 must-fix / 🟡 suggestion / 🟢 nit), a verdict (approve / approve-with-comments / request-changes), and…
Performs a PR-level code review of C#/.NET changes — correctness, readability, naming, error handling, async/EF/performance pitfalls, test coverage, and idiomatic .NET. Produces inline-style comments ranked by severity plus an overall verdict. Use when the user wants a code review, a second pair of eyes on a…
What it is. An agent that plans and (with approval) executes a .NET version upgrade across a solution — TFM bumps, breaking-change remediation, obsolete-API replacement, package updates, and per-stage verification.
Plans and executes a .NET version upgrade across a solution — target framework bumps, breaking-change remediation, obsolete-API replacement, package updates, and a verification plan (e.g. .NET 6→8→9→10). Use when the user wants to upgrade .NET, migrate target frameworks, modernize to a newer .NET, handle upgrade…
What it is. An agent that assesses a legacy .NET codebase and produces a pragmatic, incremental modernization roadmap (strangler-fig, not big-bang) — platform, architecture, DI, async, testability — sequenced by risk and value.
Assesses a legacy .NET codebase and produces a pragmatic, incremental modernization roadmap — from .NET Framework to modern .NET, monolith to modular, and toward testability, DI, async, and current patterns — prioritized by risk and value. Use when the user wants to modernize legacy code, migrate from .NET Framework…
What it is. An agent that audits a .NET service across traces, metrics, logs, health checks, and correlation, then gives a prioritized plan to make it properly observable.
Audits a .NET service for observability gaps — missing or incomplete tracing, metrics, logging, health checks, and correlation — and produces a prioritized plan to make the service properly observable. Use when the user wants an observability review, "can I actually debug this in production", a pre-production…