code-review
When a PR needs more than a thumbs-up — review checklists, defect categories, severity classification.
10 skills in this category.
When a PR needs more than a thumbs-up — review checklists, defect categories, severity classification.
When unit tests pass but the system doesn't work — tests across component boundaries with Docker containers.
When you suspect tests pass but don't actually catch bugs — verifies test quality by injecting faults.
When the app is slow but you don't know where — bottleneck identification, complexity analysis, caching review.
Master workflow for thorough PR review. Orchestrates code-review + security-review + performance-review in parallel, aggregates verdict, applies pr-management, audits. No implementation logic.
When security can't be an afterthought — OWASP Top 10 scan, vulnerability detection, secret scanning.
When you need a testing philosophy, not just tests — defines the pyramid, coverage targets, and conventions.
When you're unsure what to test next — coverage analysis, test type selection, boundary condition identification.
When you need metrics without false-failing the build — separates collection (Pass 1) from gating (Pass 2).
When a function needs proof it works — generates unit tests for Jest, JUnit, Go Test, PyTest.