Reviews working-tree changes, then drafts a Conventional Commits title/body and states the semantic-release version bump a single such commit would imply. Also notes which defensive-code categories were touched. Use when the user wants to commit recent work, prepare a Conventional Commits message, or asks for semantic-release / semver-consistent messaging before git commit.
2888d agoReviewMountCreate a free account to mount
Security review requiring judgment about exploitability: injection and input handling, authentication and session management, authorization, secret storage and cryptography, and Agentic AI risks, against OWASP Top 10:2025 and ASVS 5.0. Use when user says 'review for security', 'is this secure', 'review this endpoint for injection', 'check for SQL injection or XSS', 'review auth/authorization', 'how are we storing secrets', 'check how we store secrets in this service', 'is this crypto correct', or when writing cryptography, session management, or AI agent code. Judges reachability and impact in this codebase; /clouddrove:appsec owns the deterministic checks a tool can answer (lockfile CVEs, missing headers, wildcard CORS).
Use before implementing a significant feature or change when requirements are ambiguous, underspecified, or likely to have multiple reasonable interpretations, or when a requirement arrives pre-formed as an issue, audit finding, or review comment whose claim needs checking — covers verifying the premise before acting, structured discovery, one question at a time, edge-case probing, and writing a brief requirements summary before coding starts.
Move an existing agent - a prompt-stuffed assistant, a legacy chatbot, a pile of custom instructions, a hand-rolled Python agent - onto a portable skills-based harness without carrying its rot forward. Use when a system prompt has grown past what anyone can review, when someone wants to break a monolithic agent into skills, when moving off Power Virtual Agents or a bespoke framework, when the same behaviour has to run in GitHub Copilot, Claude Code, Cursor and Codex, or when a migration has produced skill files that nothing ever reaches for.
Use when asked to port, migrate, or add equivalent agent instructions, skills, or custom sub-agents for a different coding tool than the one already configured — e.g. \"add Cursor support from our CLAUDE.md\", \"we're switching from Cursor to Codex, port our rules\", \"make this work for Copilot too\", \"port our review subagent to Codex\". Covers both agentharness-linked projects (use the real generators, don't hand-write) and plain projects with hand-authored config (port by hand, same principles).
Write, review, or debug confidential Solidity on Zama FHEVM — encrypted types and operations, ACL, public decryption, ERC-7984 confidential tokens, @fhevm/solidity, @openzeppelin/confidential-contracts, and Hardhat or Foundry setup. Also covers HCU cost and design of auctions, escrow, swaps and batchers. Load zama-protocol first; use zama-typescript for client code.
review comments |
| `qa-testing-feature` | QA test features using Playwright |
| `reviewing-local-changes` | Codereview for quality, security, best practices, and product/API alignment |
| `simplifying-local-changes` | Simplify and refine code
Steady4 mentions in 2 weeks
No other project uses it yet
46k11d agoReviewMountCreate a free account to mount
third person** in descriptions (e.g., "Validates code changes" not "I validate code changes")
- **Keep file references one level deep** from SKILL.md
- **Use sentence casing** for titles and headers - Capitalize only
Steady4 mentions in 2 weeks
No other project uses it yet
46k11d agoReviewMountCreate a free account to mount
template
3. Create PR titled `[spec] Feature name` (keep in Draft until ready for review)
## Spec Guidelines
### Problem First, Solution Second
Never start with what you want to build. Start
Steady4 mentions in 2 weeks
No other project uses it yet
46k11d agoReviewMountCreate a free account to mount
documentation
- Use [react-ui/](mdc:packages/react-ui) for pre-built components
### Set Up Development Environment
- Review [package.json](mdc:package.json) for workspace setup
- Use scripts in [scripts/](mdc:scripts)
- Check [utilities
Steady3 mentions in 2 weeks
No other project uses it yet
39k16d agoReviewMountCreate a free account to mount