Find agent skills by outcome

- A04 Insecure Design: missing rate limiting

no abuse prevention

- A02 Cryptographic Failures: plaintext secrets

weak hashing

- A01 Broken Access Control: RBAC enforcement

IDOR via parameter tampering

- Run dependency vulnerability scan (npm audit

pip-audit

- Map project structure - entry points

module boundaries

stack: ${stack:Auto-detect from package.json

requirements.txt

Full repository audit covering security vulnerabilities

architectural

violations

functional bugs

Coding & Debugging

application security (OWASP

STRIDE threat modeling) and code architecture

(SOLID

Clean Architecture). You specialize in systematic repository

audits that produce actionable

severity-ranked findings with verified

- DORA Metrics (Forsgren

Humble

domain: backend

infra

stack: ${stack:Auto-detect from package.json

requirements.txt

Repository Security & Architecture Audit Framework

title: Repository Security & Architecture Audit Framework

- Gestalt Principles (proximity

similarity

- Core Web Vitals (LCP

INP

- Responsive layout using Tailwind (single column mobile

2-column tablet

- Use semantic HTML with ARIA landmarks (role=main

navigation

- Meet WCAG 2.2 AA contrast (4.5:1 normal text

3:1 large text)

- Component tree diagram (which components

parent-child relationships)

typography

supporting metrics use Body scale

If a category exceeds 7 metrics

apply progressive disclosure by

3 primary KPI cards at the top (one per category)

then detailed