artifact-management
Artifact repositories with Nexus, Artifactory, and container registries for build artifact storage
Artifact repositories with Nexus, Artifactory, and container registries for build artifact storage
Create stacked pull requests for GitHub repositories. Use when breaking large features into sequential, dependent PRs with conventional commit titles. Triggers on requests to create stacked PRs, split work into multiple PRs, or organize changes into a PR series.
Hidden quality gate that runs before showing "Done!" to user - ensures all tests pass, build succeeds, and requirements met before claiming completion
Final verification after implementation is complete. Use when all tasks are done to verify against spec, run full tests, update roadmap, and generate final report.
Automatically process open GitHub bug reports by spawning subagents that use the frontend-debug skill to fix each issue in isolated branches. This skill should be used when the user wants to systematically address multiple GitHub Issues without context pollution in the main session. Ideal for batch bug-fixing workflows.
Use when about to claim work is complete or fixed - requires running verification commands and confirming output before making any success claims
Perform code reviews using OpenAI Codex CLI to identify bugs, security vulnerabilities, performance issues, and code quality problems. Use when the user asks to review code, check for issues, security audit, or before committing. Requires Codex CLI installed.
Rev - Senior Full-Stack Code Reviewer with 12+ years experience in Java/Kotlin and TypeScript/React. Use when reviewing code quality, checking security vulnerabilities, validating style compliance, running static analysis tools, or ensuring test coverage. Also responds to 'Rev' or /rev command.
Automate Git workflow with conventional commits, setup GitHub Actions CI/CD, configure Husky hooks, manage PR automation, and handle semantic releases
Designs comprehensive integration testing strategies including API testing, database testing, microservices testing, end-to-end testing, and test automation frameworks. Produces test plans, test cases, test data strategies, and CI/CD integration. Use when designing test strategies, writing integration tests, setting up test automation, testing APIs, testing microservices, or when users mention integration testing, API testing, E2E testing, test automation, or quality assurance.
META ORCHESTRATOR for complete implementation workflow - design, test, lint, refactor, review, commit. Use for any code change that should result in a commit (features, bug fixes, refactors). Ensures clean code with tests, linting passes, and design validation.
AI-powered enterprise web application testing orchestrator with Context7 integration, intelligent test generation, visual regression testing, cross-browser coordination, and automated QA workflows for modern web applications
Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.
Brownfield Upgrade - Upgrade all dependencies and modernize the application while maintaining spec-driven control. Runs after Gear 6 for brownfield projects with modernize flag enabled. Updates deps, fixes breaking changes, improves test coverage, updates specs to match changes.
Container image validation with Skaffold test and verify stages. Covers container-structure-tests for image hygiene, custom tests for security scanning, and post-deployment verification. Use when configuring pre-deploy tests, security scans, or integration tests in Skaffold pipelines.
Use after creating PR - monitor CI pipeline, resolve failures cyclically until green or issue is identified as unresolvable
Looks up OWASP DevSecOps Guideline phases, security tools, and pipeline checks. Returns tool configurations, CWE mappings, and integration patterns for CI/CD security. Use when user asks about "DevSecOps", "SAST", "DAST", "SCA", "container security", "IaC security", "secret detection", "gitleaks", "semgrep", "trivy", "pipeline security", "シークレット検出", "静的解析", "動的解析", "コンテナセキュリティ", "セキュリティゲート".
Investigate deployment failures, analyze task logs, and troubleshoot Octopus Deploy issues
Enterprise comprehensive code review automation with AI-powered quality analysis, TRUST 5 enforcement, multi-language support, Context7 integration, security scanning, performance analysis, test coverage validation, and automated review feedback generation