code-review
When a PR needs more than a thumbs-up — review checklists, defect categories, severity classification.
40-quality — Quality
10 skills in this category.
integration-testing
When unit tests pass but the system doesn't work — tests across component boundaries with Docker containers.
mutation-testing
When you suspect tests pass but don't actually catch bugs — verifies test quality by injecting faults.
performance-review
When the app is slow but you don't know where — bottleneck identification, complexity analysis, caching review.
pr-review-flow
Master workflow for thorough PR review. Orchestrates code-review + security-review + performance-review in parallel, aggregates verdict, applies pr-management, audits. No implementation logic.
security-review
When security can't be an afterthought — OWASP Top 10 scan, vulnerability detection, secret scanning.
test-strategy
When you need a testing philosophy, not just tests — defines the pyramid, coverage targets, and conventions.
testing-strategy
When you're unsure what to test next — coverage analysis, test type selection, boundary condition identification.
two-pass-analysis
When you need metrics without false-failing the build — separates collection (Pass 1) from gating (Pass 2).
unit-testing
When a function needs proof it works — generates unit tests for Jest, JUnit, Go Test, PyTest.