Segurança

Run a complete mobile app pre-launch verification — chains performance audit, QA testing, OWASP mobile security review, App Store and Play Store compliance checks, and store listing optimization into a single launch-ready report. Use before submitting to TestFlight, App Store, or Google Play.

Manage dotforge v3 behavior governance — view status, toggle behaviors, adjust strictness. Use when the user asks about active behaviors, wants to disable one for the current session, or adjust escalation thresholds.

Audit and harden encryption across the full stack. Checks data-at-rest encryption (database TDE, field-level AES-256-GCM, file storage SSE, backup encryption), data-in-transit security (TLS 1.2+, HSTS, certificate pinning, mTLS, WebSocket WSS), key management (KMS, envelope encryption, key rotation, key separation), password hashing (argon2id, bcrypt, scrypt, PBKDF2 work factors, salt uniqueness,

Analyze past Claude Code sessions to extract patterns, metrics, and recommendations.

Audit an existing repo against a profile and offer to fix what's drifted. TRIGGER when the user says "retrofit this repo", "fix this repo's hygiene", "bring this repo into compliance", "remediate drift", "fix what's drifted", "make this repo match the profile", "my repo is half set up, finish it", "I already have some hooks but they're incomplete", "fill in the gaps", "upgrade this repo to nyann s

Use when comparing multiple approaches, when a decision has security or architecture implications, when root cause analysis is needed, or when thinking needs structure. Provides 24 reasoning methods (Tree of Thoughts, Pre-mortem, Red Team, 5 Whys, ADR). Auto-loaded by plan, forge, and review commands for eligible sections. Keywords: structured reasoning, trade-off, decision, compare approaches, ri

O onboarding Brownfield audita artefatos de projeto existentes para conformidade com o formato do template, classificando lacunas por impacto e gerando um plano de migração numerado. Ele é usado ao ingressar em projetos em andamento ou atualizar templates, verificando se os artefatos existentes funcionarão com o template.

Revisa sistematicamente o código-fonte em busca de problemas de qualidade, desempenho, segurança e estilo. Use esta skill quando o usuário enviar código para revisão, solicitar feedback ou uma auditoria de código, quiser identificar bugs/vulnerabilidades ou pedir uma revisão de mudanças recentes.

Use when reviewing a Kotlin/Spring Boot pull request, systematic checklist covering architecture, idioms, testing, security, and observability

Analisa automaticamente o estado do projeto, detecta a fase, identifica lacunas e recomenda os próximos passos com base nos artefatos existentes. Use esta skill quando o usuário perguntar onde estamos no desenvolvimento, em que fase estamos ou solicitar uma auditoria completa do projeto.

Analyze project dependencies for supply chain risks. Checks maintainer count, commit frequency, CVE history, abandonment signals, bus factor, and security policy presence for each direct dependency. Supports npm, pip, cargo, go mod, and composer. Use when: "supply chain audit", "dependency risk", "check dependencies", "maintainer risk", "abandoned packages", "dependency health", "package security"

Um executor de trabalho em segundo plano de disparo contínuo para o Claude Code. Ele permite enfileirar tarefas reais, acompanhar metas de longo prazo e ativar rotações de auditoria por projeto, executando em uma cadência configurável e persistindo a saída de cada execução.