tinh2

Analyze project dependencies for health, security, and bloat — audit outdated, deprecated, vulnerable, duplicate, heavy, and unused packages across npm, pip, cargo, go mod, and more. Produce a dependency health score, CVE inventory, license compatibility matrix, bundle size impact assessment, and a prioritized update plan with migration paths.

Analyzes mobile app binary size -- asset audit for unused images and font subsetting, code stripping with ProGuard and tree-shaking, on-demand resources, dynamic feature modules, and app thinning strategies. USE THIS SKILL WHEN: - Your app's download size is too large or growing unexpectedly - Someone asks "why is our app so big?" or "how do we reduce app size?" - You need to audit assets (images,

Multi-pass editor that removes AI-writing tells from drafted content — eliminates filler phrases, balances sentence length, restores opinion and voice, and strips em-dash overuse so posts sound human and opinionated rather than ChatGPT-generic. Use when the user wants to humanize AI-generated marketing copy, blog posts, landing pages, or social content.

Learn effective AI prompting through practice -- good vs bad prompts, context management, the STAR framework, and advanced techniques

Audit an assisted living or elder care platform for resident safety and operational quality. Evaluates vital sign monitoring, fall detection and prevention, medication administration (eMAR) safety, staff scheduling with continuity of care, ADL tracking and functional decline detection, family communication portals, and care plan optimization. Use when building or reviewing senior living software,

Generate and maintain a multi-channel product feed across Google Merchant Center, Meta Catalog (Instagram + Facebook Shops), TikTok Shop, Pinterest Catalogs, Bing Shopping, and Snapchat Catalogs from a single product source of truth (Shopify, BigCommerce, WooCommerce, custom DB). Enforces 2026 platform requirements: Google's new 500×500 image minimum (warnings Apr 14 2026, enforcement Jan 31 2027)

Assess supply chain risk exposure and resilience posture. Analyzes supplier dependency mapping (Tier 1/2/3), geographic concentration risk, single-source vulnerability, disruption scenario modeling (pandemic, trade war, port closure), Monte Carlo simulation, financial health monitoring (Altman Z-score), early warning systems, compliance tracking (UFLPA, conflict minerals, sanctions), ESG supply ch

GDPR and CCPA/CPRA privacy compliance audit for codebases. Inventories PII fields (email, phone, SSN, IP, device ID, geolocation, biometrics, behavioral data), maps data collection points (forms, APIs, cookies, analytics, error tracking), audits consent mechanisms (cookie banners, opt-in, pre-checked boxes, consent withdrawal), verifies data subject rights implementation (right to access, erasure,

Chains /mvp → /backend-spec — analyzes an app from video/screenshots/description, then generates implementation stories from the analysis.

Scan all repos for failing or stuck GitHub Actions workflows, diagnose issues, and fix them. Use when: 'fix ci', 'ci is broken', 'github actions failing', 'unblock ci', 'clear ci', 'workflows stuck', 'fix all builds', 'ci health check'.

Audit a pharmaceutical regulatory submission system -- evaluate eCTD backbone assembly and XML validation, CTD module completeness (Modules 1-5), FDA ESG and EMA CESP gateway integration, document authoring and publishing workflows, ICH M4/M8/E3 guideline compliance, pre-submission validation rules, 21 CFR Part 11 audit trails, and post-submission lifecycle tracking. Covers IND, NDA, BLA, ANDA, MA

Game-specific security review covering cheat prevention, exploit surfaces, and server authority. Audits client-side authority vulnerabilities (damage, health, currency, cooldown, movement speed), memory manipulation risks (value scanning, anti-debug, DLL injection), network security (packet tampering, replay attacks, speed hacking, MITM, DDoS resilience), save file integrity (encryption, checksums