The library

contracts:audit-variants · Security audit: find and classify variants of a known vulnerability pattern across the entire repo, separating confirmed/probable/false-positive.

harness · Prevent infinite loops and unwanted file changes in autonomous Claude Code sessions via iteration caps, timeouts, protected paths, and required checks.

review-the-review · Secondary review gate: catch sycophancy, false positives, and missed issues in bot reviews; converge on approve/request-changes/defer via up to 10 rounds.

func-commit-message · Commit message generation: analyzes staged changes and drafts a message following conventional commit format, seven rules, and imperative mood.

optimize · CI performance tuning: measure baseline, identify bottleneck steps, detect common issues (concurrency, caching, runner size), recommend Blacksmith optimizations.

ddd · Multi-phase development workflow: start with requirements, move through specs/plan/implementation/documentation, with explicit approval gates between phases.

dev · Quick local dev startup: orchestrates Docker middleware, FastAPI backend, dual Vue frontends (admin + web) on unified Nginx gateway.

git · Enforced git workflow: branch names (type/scope-description), commits (conventional format), avoids destructive ops, detects and prevents secret commits.

registry-audit · Read-only component registry verification: checks registry/filesystem alignment, schema validity, dependency validity, and circularity.

fix-btc-e2e-p5 · Native SegWit single-sig BTC test repair: targets bech32 addresses, wpkh descriptors, Pattern 5 workflows.

release-checklist · Structured release process: pre-release validation, tests/security/docs verification, staging tests, production deployment, post-deploy monitoring, rollback plan.

vibe-check · Pre-commit quality check when AI agents have contributed code

perf · Full-stack mobile perf audit when you need to find unbounded queries and memory leaks simultaneously

release · Multi-file version synchronization when human approval before commit is required

git-pr-description · Structuring PR descriptions when coverage of every commit is non-negotiable

install-domain · Bulk-deploying skill packages across multiple agent projects

install-bundle · Quick onboarding of new projects with a comprehensive skill set

evolve · Continuous code quality improvement when you need structured feedback on engineering patterns

pre-commit · Preventing common mistakes from reaching version control

security-review · Pre-release security scanning when compliance and threat coverage matter

release-check · Preventing incomplete releases through automated safety checks

coverage-diff · Preventing coverage regressions when test quality gates are enforced

watchlogs · Debugging LSP editor integration when client-side requests (completions, hover) behave unexpectedly.

OPSX: Apply · Executing spec-driven implementation with fluid artifact refinement and enforced task tracking.

create-issue · Creating GitHub issues programmatically without leaving the CLI or entering the web UI.

scout_plan_build_v2 · Full-cycle agile feature delivery: requirements → architecture → Confluence docs → Jira tasks → implementation → metrics.

sh-worktree · Isolating feature branches with automatic setup and baseline test verification to prevent cross-branch contamination.

phase2-implement · Implementing autotuned kernel baselines from validated specifications before Phase 3 algorithmic exploration.

run · Domain-specific command workflow.

spec-check · Domain-specific command workflow.

instinct-import · Bulk-importing team or project instincts from shared sources while detecting and reconciling duplicates.

tweak · Making small, well-understood changes (≤5 files, ≤3 tasks) without the overhead of full discovery and planning.

check · Verifying code quality with automated lint, type-check, and test validation before committing or merging.

pr_desc · Auto-generating comprehensive PR descriptions that summarize commit history and affected components.

gitsync · Safely staging, committing, and pushing verified changes with automated testing.

cleanup · Finding orphaned files and duplicates with high confidence verification before deletion.

er-review-patterns · Specialized code reviews focused on specific patterns or security requirements.

research · Gathering authoritative API docs and identifying pitfalls with citations.

security · Running OWASP Top 10, headers, and rate limiting audits in single command.

commit-main · Safely staging, committing, and pushing verified changes with automated testing.

new-component · Creating boilerplate quickly with project conventions pre-applied.

wiki-decision · Recording technical decisions in structured wiki format.

api · Generating Hono API routes with validation, error handling, and wiring.

maestro:health · Validating workflow integrity and command surface completeness.

wait-for-ci · Polling CI/CD checks with readable progress until completion or timeout.

refresh-context · Updating context files from git history without manual edits.

prepare-release · Preparing versioned releases with changelog, tag, and archive generation.

gsd:set-profile · Setting up or switching operational profiles without losing configuration.

review · Specialized code reviews focused on specific patterns or security requirements.

health · Validating workflow integrity and command surface completeness.