Use when you need to read a running React Native app's console output — confirm a log fired, watch console.warn/error, or verify runtime behavior — without opening the DevTools GUI. Reads logs from Metro's CDP endpoint; bounded by default. Read-only with respect to project source. Runs the bundled rn-console.mjs…
Use when planning a React Native upgrade or asking "is my app ready for the New Architecture?" — audits which dependencies and app-local native modules block enabling the New Architecture. Read-only; reports and interprets, changes nothing. Wraps the rn-newarch-ready CLI.
Evidence-led startup and SMB transition-control audit workflow for products, repositories, teams, vendors, continuity, value, cost, security, delivery, and architecture. Use when the active agent should onboard or resume a Whats.Going.On. audit, run one approved audit reviewer, report status, synthesize reports, draft…
Multi-model review arena — several AI models audit the code, cross-critique each other until they converge, then a judge verifies against real code and a scoreboard names a winner. Runs as a Workflow (visible in /workflows).
Run one of THIS project's agents on ANOTHER AI model (codex / grok) as a LIVE, STEERABLE background agent — watch it work underneath, and type to it while it runs to steer the running turn. Scope from plain words (git diff / method / path), no flags.
Security-audit an AI agent's OWN framework code for classic appsec vulnerabilities the LLM can't defend — path traversal, command injection, SSRF, fail-open security controls, missing/late auth, unsafe deserialization — especially at the untrusted-input boundaries (channels, file/media handlers, config & skill…
The Craftsman standard for driving fixes against an existing craft-audit workspace — "fix the findings", "fix SEC-003", "work through the audit", "start the climb". An ACTION skill, not a domain: it picks findings off the master tracker's climb sequence, re-verifies each is still real, gets the user's approval, and…
The Craftsman standard for linting and static quality gates — ESLint version policy, resolved-rule extraction, typed TypeScript linting, React/Next/a11y/security rule hardening, zero-warning CI gates, pre-commit alignment, and migration from weak default configs to an enterprise-grade lint setup. Use this WHENEVER the…
Expert US tax, accounting, entity, and state-filing guidance for individuals, partnerships, S corporations, C corporations, disregarded LLCs, and multi-entity portfolios. Use for estimates, return workpapers, basis and carryforwards, tax planning and deductions (including accountable plans, home office, QBI, QSBS…
Use when the user asks to audit this repo, run the engineering audit, run a practice audit, or check the codebase against the engineering-audit rules pack. Drives the engineering-audit MCP server's tools through a full audit run and produces a self-contained HTML report.
Run a project-start interview against the live engineering rules pack, decide which engineering domains apply, put the highest-consequence questions first, and record terminology, decisions, risks, and build gates. Use when a user explicitly asks for an Engineering Grill before building or substantially redesigning a…
Use when initializing, auditing, refactoring, securing, documenting, testing, planning, or preparing PR workflows for a software repository with CodeAudit project detection and skill routing.
Use when an AI coding agent needs to inspect a repository, choose the right workflow, audit code/docs/tests/skills, improve Python or TypeScript projects, plan issues or PRs, or use the CodeAudit MCP server.
Targeted multi-domain codebase audit. Use when auditing a user flow end to end, investigating issues that span several domains (auth, data, API, UI), or running a structured find-then-fix cycle over a named area. Produces a validated findings set and a SPEC handoff for implementation. Not for reviewing a single file…