agentic-workflows commands

jonase47/ccpr

Command

Writes the minimal production code that makes the existing tests green. No over-engineering.

jonase47/ccpr

Command

Writes unit tests for a feature BEFORE production code exists. Tests must fail.

jonase47/ccpr

Command

Improves code quality without changing behavior. All tests must continue to pass.

jonase47/ccpr

Command

Implements a feature in the TDD cycle: Red → Green → Refactor. Each phase is its own sub-skill with a focused agent call.

jonase47/ccpr

Command

Collects small clean-up TODOs accumulated during the sprint (from /p5-review, /p5-acceptance, /p5-bugfix, TODO/FIXME comments) that do not justify a full story but make the next sprint easier. Triages each item into polish-now, backlog, handover, or drop. Optionally executes polish-now items directly (TDD mini-cycle…

jonase47/ccpr

Command

Checks code for quality, clean code, logic errors and test coverage. Delivers review findings with severity level.

jonase47/ccpr

Command

Checks code against the security checklist. Focus on OWASP Top 10, injection, auth and data handling.

jonase47/ccpr

Command

Runs ONE final code review over the entire sprint at sprint end, with a stronger model, to catch issues that single-story reviews structurally cannot see: cross-story interactions, the schema/data model as a whole, conformance to ADRs and Constitution Inviolables, and consistency with prior lessons/instincts.

jonase47/ccpr

Command

Conducts a structured code review: first code quality, then security. Each dimension is its own sub-skill.

jonase47/ccpr

Command

Checks full keyboard operability: tab order, focus indicator, Enter/Space, Escape, focus trap.

jonase47/ccpr

Command

Checks screen reader compatibility: semantic HTML, ARIA attributes, alt texts, live regions.

jonase47/ccpr

Command

Checks colour contrast (WCAG AA), colour-independence of information presentation, and dark mode conformance.

jonase47/ccpr

Command

Systematically checks the application for accessibility. Each A11y dimension is a separate sub-skill.

jonase47/ccpr

Command

Compares the auth implementation against the requirements in SECURITY.md: JWT, sessions, RBAC, password hashing.

jonase47/ccpr

Command

Checks security headers, CORS, DB access, secrets management, and server configuration.

jonase47/ccpr

Command

Checks all dependencies for known vulnerabilities (CVEs), outdated packages, and maintenance status.

jonase47/ccpr

Command

Compares the implementation against the DSGVO initial assessment: data subject rights, data minimisation, deletion deadlines, data processing agreements.

jonase47/ccpr

Command

Checks source code for injection vulnerabilities, insecure cryptography, secrets in code, and insecure error handling.

jonase47/ccpr

Command

Conducts a defensive security audit. Each audit area is a separate sub-skill.

jonase47/ccpr

Command

Fixes bugs and vulnerabilities found during the QA phase (functional tests, exploratory tests, accessibility check, security audit, pentest). Each fix is secured by a regression test.

jonase47/ccpr

Command

Conducts unstructured, experience-based tests that automated tests and defined test cases do not cover. The goal is to find unexpected behaviours, usability issues, and hidden bugs that remain invisible in structured testing.

jonase47/ccpr

Command

Tests critical user journeys end-to-end – from start to the expected final result.

jonase47/ccpr

Command

Tests the interaction between system components: API against DB, middleware chains, external services against mocks.

jonase47/ccpr

Command

Ensures that existing functionality has not been broken by new changes.