FlorianBruniaux/claude-code-ultimate-guide

security-audit

Comprehensive security audit with scored posture assessment

security-check

Quick configuration security check against known threats database

update-threat-db

Delegate threat-intelligence research and updates to AgentSec, then validate the guide and landing mirrors.

self-assessment

Interactive skill assessment with personalized learning path generation

self-assessment

Interactive skill assessment with personalized learning path generation

voice-refine

Transform verbose voice input into structured, token-efficient Claude prompts. Use when cleaning up voice memos, dictation output, or speech-to-text transcriptions that contain filler words, repetitions, and unstructured thoughts.

sandbox-status

Display native sandbox status, configuration, and recent violations

sandbox-unblock

Diagnostic protocol to run before reporting a sandbox blocker or asking for a configuration change. Eight checks that eliminate false positives, then a report template the person holding the settings can act on. On one measured day, six of eight reported…

eval-hooks

Audit Claude Code hooks defined in settings.json files for validity, performance safety, and correctness. Resolves each command against the filesystem, checks exit-code strategy for blocking hooks, flags missing timeouts, and reviews interactive vs async…

autoresearch

Autonomous improvement loop: scan codebase metrics, scaffold experiment files, run agent-driven iterations until metric improves

canary

Post-deploy monitoring: watch production after a deploy and alert on regressions

investigate

Systematic root-cause debugging: find the cause before writing any fix

plan-pipeline-ceo-review

Strategic product gate: challenge the brief, find the 10-star product hiding inside the request, before writing any code

plan-pipeline-eng-review

Engineering architecture gate: lock architecture, diagrams, edge cases, and test matrix before writing implementation code

plan-pipeline

Orchestrates the complete planning pipeline: product direction (ceo-review) -> architecture (eng-review) -> implementation plan (start) -> validation (validate) -> execution (execute). Run stages individually or let the orchestrator coordinate the full flow.

qa

Systematic QA testing of a web application: diff-aware, tiered, with fix-and-verify loop

git-worktree-clean

Clean up stale git worktrees with merged branch detection and disk usage report

git-worktree-remove

Safely remove a git worktree with branch cleanup and safety checks

git-worktree

Create isolated git worktrees for feature development without switching branches

git-worktree-status

Check status of background verification tasks running in a git worktree

review-pr

Perform a comprehensive code review of a pull request

scaffold

Interactive coach that asks 4-5 questions to determine whether you need an agent, command, skill, hook, or rule, then generates a ready-to-use template. Usage: /scaffold (no arguments needed, starts the coaching session)

session-save

Save the current session state (decisions, modified files, current status, and next steps) to a handoff file for later resume.

eval-agents

Audit Claude Code agents defined in .claude/agents/ for description specificity, model tier appropriateness, tools scoping, and system prompt quality. Detects dispatch ambiguity between agents, flags over-permissive tool grants, and checks for…

catchup

Restore context after /clear by summarizing recent work and project state

ccboard

Launch and navigate the ccboard TUI/Web dashboard for Claude Code. Use when monitoring token usage, tracking costs, browsing sessions, or checking MCP server status across projects.

check-cache-bugs

Audit Claude Code setup for cache bugs (CC#40524): sentinel, --resume/--continue, attribution header + ArkNill B3/B4/B5

ci-all

Full CI pipeline: run local tests, type check, push branch, and return the pipeline URL. The only command you need before opening a PR.

ci-pipeline

Push current branch and return the pipeline tracking URL (GitLab or GitHub Actions)

ci-status

Show current pipeline status for the active branch (GitLab CI or GitHub Actions)

ci-tests

Run the test suite for the current repo, auto-detecting Python (pytest/uv), Node (vitest/pnpm), or Rust (cargo test)

commit

Generate a conventional commit message for staged changes

cyber-defense-team

Orchestrate a 4-agent cyber defense pipeline to analyze log files for threats. Use when investigating security logs, detecting anomalies in access patterns, classifying breach severity, or generating incident reports from nginx/auth/syslog files.

design-patterns

Detect, suggest, and evaluate GoF design patterns in TypeScript/JavaScript codebases. Use when refactoring code, applying singleton/factory/observer/strategy patterns, reviewing pattern quality, or finding stack-native alternatives for React, Angular, NestJS,…

diagnose

Interactive troubleshooting assistant for Claude Code issues

eval-rules

Audit .claude/rules/ files for structural correctness, glob validity, and real-world usefulness. Resolves each paths: pattern against actual project files, then asks the user whether each rule is still relevant and useful. Can update rules in-place based on…

eval-skills

Audit all skills in the current project for frontmatter completeness, effort level appropriateness, allowed-tools scoping, and content quality. Produces a scored report with effort-level recommendations for each skill. Use when onboarding to a new project,…

explain

Explain code, concepts, or system behavior with adjustable depth levels

generate-tests

Generate comprehensive tests for specified code

git-ai-archaeology

Analyze AI config evolution in a git repo. Use when mapping AI adoption history, finding when configs were first introduced, charting commit velocity by month, or identifying maturity phases in a project's AI tooling.