Segurança

Run risky or destructive operations inside ephemeral Docker containers for isolation. Use when executing untrusted scripts, destructive Ansible playbooks, or operations that could damage the host.

Ongoing maintenance for your assembled expert team. Add expertise, audit for bloat, restructure messy setups, or upgrade older projects. Auto-detects severity — targeted addition, health check, or full restructure. Use gigo:maintain, /maintain, or when gigo:blueprint or gigo:snap detect gaps.

GDPR and German DSGVO compliance automation. Scans codebases for privacy risks, generates DPIA documentation, tracks data subject rights requests. Use for GDPR compliance assessments, privacy audits, data protection planning, DPIA generation, and data subject rights management.

ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits. Three decisions: (1) Where are the gaps against Clauses 4-10 and what do we close first? (2) What goes in the AI risk register and which Annex A controls treat each risk? (3) What's the 12-month internal audit plan that satisfies Clause 9.2? Use when preparing for certification, scoping internal

Custom auth security audit (bcryptjs + sessions, no OAuth/external provider). Use when: "auth-audit", "auth check", "auth security", "login audit", "session audit", "password audit".

Autonomous audit runner (separate sessions, no context limit). Use when: "audit-runner", "autonomous audit", "audit automatically".

Review NEAN code for compliance with standards, NFRs, and security policy.

Toggle GitHub repo between private and public with security hardening, contribution lockdown, and pre-flight safety checks.

Security audit for AI agent skills before installation. Scans SKILL.md files, hooks, scripts, and MCP configs for prompt injection, data exfiltration, credential theft, and malicious automation patterns. Use when installing a new skill, reviewing a skills repo, or auditing existing installed skills. Trigger phrases: "verify this skill", "is this skill safe", "audit skill", "check before installing

/cs:soc2-audit-prep <scope> — SOC 2 Type II readiness 6-question forcing interrogation. Observation-period focused. Use before Type II observation begins, mid-period checkpoint, or pre-field-test month-10 readiness.

Autonomous work execution across all Swarm projects. Reads last session summary, picks highest-priority work, executes it, then loops to the next item. Only stops when blocked on the operator or nothing remains. Trigger on: "what's the status", "project status", "what needs work", "prioritize", "what's next", "plan work", "coordinate", "which projects", "phase status", "roadmap", "backlog", "sessi

Use when preparing a codebase for first-time public/open-source release. Full lifecycle from audit through documentation, hardening, and final review.