microsoft/powerplatform-build-tools

security-alerts

Fetch all open security alerts from S360/ADO, Dependabot, and npm audit, apply all fixes, verify, commit, and create a PR.

create-pr

Stage, commit, push, and create GitHub PRs for the current branch — always main, then automatically cherry-picks to release/stable.

pac-cli-update

Bump PAC CLI binary version and/or cli-wrapper npm package. Always produces two PRs — main and release/stable.

architecture

Architecture map, layer responsibilities, key files, auth types, and debug runbook by symptom.

debug-agent

Diagnose a pipeline failure or customer issue end-to-end. Accepts a log path, error text, ADO work item ID, or GitHub issue URL.

fix-dependencies

Fix all vulnerabilities on the current branch using npm audit. Local branch only — no ADO/GitHub queries.

knowledge-sync

Sync ADO work items and ICM incidents to the persistent knowledge log. Invoked automatically by /review, /workitem, and /pac-cli-update when knowledge is stale.

review

Autonomous PR review — reads diff, cross-references knowledge base, posts inline comments, and leaves an overall verdict.

workitem

Read an ADO or GitHub work item, research similar past PRs, implement the fix, and leave the branch ready for /create-pr.