audit
01Command
Full security audit of the project or a specific area. Runs threat modeling, code audit, dependency scan, and produces a prioritized findings report.
Gated pipeline orchestration for Claude Code and Codex CLI: 9 specialist agents, 15 multi-agent workflows, skills, and a release-zip system. Multi-vendor — same skills work in both clients.
Command
Full security audit of the project or a specific area. Runs threat modeling, code audit, dependency scan, and produces a prioritized findings report.
Command
Database change workflow: design → migration → review → test. Handles schema changes with zero-downtime safety.
Command
Full deployment preparation: pre-flight checks, security scan, dependency audit, changelog, and deployment readiness gate.
Command
Generate or update project documentation: API docs, README, ADRs, runbooks, and architecture docs. Verifies everything against actual code.
Command
End-to-end feature development: spec → design → implement → review → test → docs. Pass a feature description and the orchestrator handles everything.
Command
Bug investigation and fix workflow: investigate → diagnose → fix → review → regression test. Handles the full lifecycle from symptom to verified fix.
Command
Full project kickoff from an idea. Orchestrates pm → architect → dba → devops to produce specs, architecture, schema, and project scaffold.
Command
Strategic advisor: analyzes full project state and recommends the most impactful next steps. Use when you're unsure what to work on next.
Command
Project orientation: understand a codebase's architecture, conventions, tech stack, and current state. Use when entering a new project or returning after a break.
Command
Architecture planning for a feature or system change. Use /kickoff for new projects, /feature for full end-to-end development.
Command
Safe refactoring workflow: detect smells → plan → characterization tests → refactor → verify. Ensures refactors don't break existing behavior.
Command
Cut a release: version bump, changelog generation, tag creation, and deployment preparation. Handles the full release lifecycle.
Command
Comprehensive multi-agent code review: parallel reviewer + security audit on all changes, with actionable fix list and quality gate.
Command
Iterative issue-by-issue development: plan → implement → self-review loop → fix → PR to default branch. Works through all open issues one by one until each has a clean PR.
Command
Comprehensive test strategy and implementation: analyzes codebase, identifies coverage gaps, writes tests, and validates quality with mutation testing.
Command
Repository tidy-up: revalidate docs against the real repo and prune cruft, with git as the safety net — one reviewable commit, recoverable removals, never an irreversible delete. Hygiene only; code smells go to /refactor.