Find agent skills by outcome

- A05 Security Misconfiguration: DEBUG=True in prod

verbose errors

- A01 Broken Access Control: RBAC enforcement

IDOR via parameter tampering

- Run dependency vulnerability scan (npm audit

pip-audit

- A02 Cryptographic Failures: plaintext secrets

weak hashing

Full repository audit covering security vulnerabilities

architectural

violations

functional bugs

- Map project structure - entry points

module boundaries

audits that produce actionable

severity-ranked findings with verified

(SOLID

Clean Architecture). You specialize in systematic repository

stack: ${stack:Auto-detect from package.json

requirements.txt

stack: ${stack:Auto-detect from package.json

requirements.txt

Coding & Debugging

application security (OWASP

STRIDE threat modeling) and code architecture

- DORA Metrics (Forsgren

Humble

- Core Web Vitals (LCP

INP

Repository Security & Architecture Audit Framework

title: Repository Security & Architecture Audit Framework

domain: backend

infra

- Responsive layout using Tailwind (single column mobile

2-column tablet

- Gestalt Principles (proximity

similarity

- Component tree diagram (which components

parent-child relationships)

- Use semantic HTML with ARIA landmarks (role=main

navigation

3 primary KPI cards at the top (one per category)

then detailed

typography

supporting metrics use Body scale

- Meet WCAG 2.2 AA contrast (4.5:1 normal text

3:1 large text)

If a category exceeds 7 metrics

apply progressive disclosure by