Generates and runs comprehensive, non-destructive security tests for the actual-mcp-server MCP transport covering OWASP API Top 10, JSON-RPC injection, auth bypass (OIDC + static bearer), per-user budget ACL (IDOR), ActualQL/SQL injection, malformed input, and error-leakage. Use when writing security tests, expanding…
Elite code review expert for security vulnerabilities, correctness bugs, performance, and maintainability. Runs the project's static analysis, security scanning, and tests as part of the review. Use PROACTIVELY for code quality assurance.
Ticket readiness gate for actual-mcp-server (forge-kit ticket-gate v6). Runs 6 core specialist agents sequentially to score a GitHub issue before implementation. Each agent scores 1-10; ALL must score 10 to pass. An agent whose domain the ticket does not touch auto-scores 10 (N/A). Extra specialists are added by…