Quality

XXE Injection tests XML parsers for external entity handling to read local files, trigger SSRF, or cause out-of-band callbacks. Use it when reviewing XML, SOAP, SVG, DOCX, or SAML inputs.

Test Automation runs Vitest and Playwright suites, collects pass/fail counts, coverage, and failure details. Use it when you need automated test execution and root-cause analysis for changed code.

Code Generation writes the least code needed to satisfy requirements while matching existing project patterns. Use it during TDD green and refactor phases or when applying fixes in a debug workflow.

Code Review evaluates correctness, security, performance, maintainability, and test coverage in implementation results. Use it to get an overall score, findings, technical debt, and action items.

Review supplied code changes for correctness, security, tests, performance, and style, then score them against a configurable quality threshold.

Code Review Patterns assesses code for security, quality, performance, and maintainability, with confidence-gated findings and a required router contract. Use it during build, debug, or full review workflows.

Debugging Patterns provides log-first investigation, git bisect correlation, and pattern-based diagnosis with confidence scoring. Use it during debugging, unexpected build failures, and error-handling reviews.

QA Testing generates and runs API and end-to-end tests, then reports coverage and a quality gate result. Use it after implementation or code review to verify behavior and catch regressions.

Analyzes a babysitter run from an external repository, producing a retrospective with insights on process quality, failure patterns, and improvement suggestions. Use for reviewing how others use babysitter or debugging public runs.

Story Development implements user stories using test-driven development. It reads acceptance criteria, writes failing tests, implements the minimum code, and verifies the result with the full test suite.

Blog Fact-Check extracts load-bearing claims from a blog post, fetches cited source URLs, and scores how well the claim matches the page, flagging uncited claims as unverified. Use it when someone asks to fact-check, verify statistics, check sources, or validate claims.

Grill Me runs high-intensity adversarial design reviews and grill sessions, challenging assumptions and missing constraints before implementation. It also maintains a domain model with a terminology glossary and ADRs as decisions crystallize.