levnikolaevich

Checks application security boundaries: secrets, injection, XSS, input validation, and sensitive env defaults. Use when auditing exploitable code paths.

Configures Swagger/OpenAPI documentation for backend APIs. Use when adding interactive API docs to a project.

Generates GitHub Actions CI workflow configuration. Use when adding continuous integration to a project.

Commits and pushes all changes (staged, unstaged, untracked) to remote. Use when you need a quick push of everything at once.

Checks blocking IO in async, unnecessary allocations, sync sleep, string concat in loops, redundant copies. Use when auditing runtime performance.

Executes implementation tasks through Todo, In Progress, To Review. Use when task needs coding with KISS/YAGNI. Not for test tasks.

Detects tests proving platform behavior instead of local product behavior. Use when auditing product-behavior focus.

Executes optimization hypotheses with keep/discard testing loop. Use when applying validated performance improvements.

Performs manual testing of Story AC via executable bash scripts in tests/manual/. Use when Story implementation needs hands-on AC verification.

Modernizes codebase via OSS replacement and bundle optimization. Use when acting on audit findings to reduce custom code.

Creates AGENTS.md canonical and CLAUDE.md @AGENTS.md stub; audits token budget, cache safety, import-pattern compliance. Use when instruction files need alignment.

Checks session scope mismatch, missing cleanup, pool config, error path leaks, resource holding. Use when auditing resource lifecycle.