Quality

Code Review performs automated analysis of a repository and produces findings about correctness, security, performance, and documentation. Use it when you want a structured review of the current codebase before making changes.

CVE Scan detects project ecosystems and runs native audit tools to report known dependency vulnerabilities. Use it to check npm, pip, Cargo, Go, Composer, Bundler, or Dart projects and optionally auto-fix supported issues.

Fast Rust provides guidance for writing, refactoring, and reviewing Rust code with attention to correctness, maintainability, and performance. Use it when designing APIs, handling errors, or improving compile and runtime behavior.

Forensify audits installed AI-agent stacks across Claude Code, Codex, OpenClaw, and NanoClaw. It inventories skills, MCP servers, hooks, plugins, commands, credentials, and memory files for cross-tool security risks.

Friendly Python guides writing, refactoring, and reviewing Python for clarity, maintainability, and Pythonic style. Use it for new code, APIs, CLIs, and code review; pair it with piglet when available for extra patterns.

Modular Go gives practical guidance for Go package design, API boundaries, and state flow. Use it when creating, refactoring, or reviewing Go architecture, handlers, managers, builders, and execution flows.

Piglet gives practical guidance for writing, refactoring, and reviewing Python code. Use it for naming, branching, data structures, exceptions, imports, file I/O, edge cases, and modern syntax choices.

Repo Forensics audits git repositories, AI skills, and MCP servers for supply-chain risk, prompt injection, credential theft, runtime drift, and known vulnerabilities. It is used to detect threats and evidence, not to fix vulnerabilities or pentest.

Trace MCP Pre-Commit runs security, quality-gate, and antipattern checks before a commit or pull request. Use it after changes are made and before handoff in a trace-mcp indexed project.

Trace Mcp Refactoring guides safe code refactors in projects indexed by trace-mcp. Use it to assess risk, inspect impact, extract functions, and rename symbols across files without missing references.

Data Optimizer Pro scans project files and reports risky patterns in the skill content. Use it to catalog or assess a security-themed Claude Code skill.

Skill Forge Benchmark measures Claude Code skill performance across multiple trials with pass rate, token usage, duration, and variance analysis. Use it to compare versions, detect regressions, and generate benchmark.json reports.