Miosa-osa/OSA

penetration-testing

Full-scope penetration testing — reconnaissance, vulnerability discovery, exploitation, post-exploitation, and reporting against authorized targets. Covers network, web app, API, and host pentesting.

diagnosing-bugs

Diagnose broken, failing, incorrect, flaky, or unexpectedly slow software. Use whenever a user reports a bug, regression, crash, hang, visual defect, or unexplained behavior, even if they ask directly for a fix.

frontend-quality

Build, debug, review, or polish user interfaces with responsive layout, accessibility, and pixel-level visual verification. Use for frontend components, browser UI, terminal UI, resize defects, visual regressions, and interaction problems.

implementation

Implement a requested feature or change completely in an existing codebase. Use for multi-file coding tasks, specifications, acceptance criteria, and requests to build or modify behavior rather than merely explain it.

security-audit

Review code, configuration, permissions, authentication, data handling, and dependencies for exploitable security weaknesses. Use for security reviews, threat analysis, trust boundaries, secrets, authorization, sandboxing, and dangerous command handling.

skill-authoring

Create or improve reusable OSA skills with progressive disclosure, precise selection descriptions, supporting resources, and realistic evaluations. Use when users ask to create, package, test, optimize, or maintain a skill or skill library.

test-driven-development

Build features and bug fixes test first using a strict red, green, refactor loop. Use for TDD requests, regression tests, behavior changes with clear acceptance criteria, and risky logic that benefits from executable specification.

merge-reconciler

Recover the work a fleet wave dropped when two parallel nodes edited the same file — read each claimant's version out of its worktree, reconcile them into one correct file, and re-run the authoritative gate instead of re-running the wave.

fleet-orchestration

Decompose a large task into DISJOINT file-owned workstreams, fan out isolated full-power peers, collect structured reports, run ONE authoritative gate, and commit when green — the collision-free, self-verifying multi-agent flow. Ultra-gated.

code-review

Analyze pull requests and diffs for bugs, security vulnerabilities, performance issues, style violations, and test coverage gaps — producing structured, actionable feedback

content-writer

Draft blog posts, social media content, email campaigns, and marketing copy

customer-support

Triage incoming support tickets, draft responses, detect customer sentiment, suggest knowledge base articles, and track resolution metrics

daily-briefing

Generate a morning business briefing with weather, calendar, news, and task priorities

email-assistant

Triage inbox, flag urgent emails, summarize threads, and draft replies

meeting-prep

Research attendees, prepare talking points, and summarize previous interactions before meetings

research-assistant

Conduct deep, multi-source research on technologies, companies, markets, and topics — synthesizing findings into structured reports with citations and actionable insights

sales-pipeline

Monitor sales pipeline, track deals, send follow-up reminders, and forecast revenue