Focus-L-AIci

Map an unfamiliar repository into a usable working model by documenting stack, structure, architecture, integrations, testing, and known concerns.

Review .NET and C# changes for maintainability, correctness, dependency injection hygiene, async behavior, logging, configuration, and testability.

Review an agent system against the OWASP Agentic Security Initiative Top 10 so prompt injection, tool abuse, escalation, and audit gaps are found early.

Plan or review CodeQL scanning so security analysis, workflow triggers, language coverage, and SARIF reporting fit the real repository structure.

Build cleaner dashboard layouts with consistent cards, panels, and grid structure. Use when requests mention "split this card", "use more width", "make cards uniform", "panel layout", or "dashboard grid".

Choose charts, tables, KPI treatments, and visual emphasis that make dashboard data readable at a glance. Use when requests mention "chart choice", "KPI cards", "make the data clearer", "analytics dashboard", or "show trends better".

Add responsive filters, controls, and drill-down paths so dashboards stay simple at first glance but deeper on demand. Use when requests mention "filters", "drill down", "responsive dashboard", "too much detail", or "users need control".

Design dashboards around the user's top takeaways, reading flow, and highest-signal metrics. Use when requests mention "dashboard layout", "visual hierarchy", "too much going on", "what should go first", or "make the dashboard clearer".

Apply policy controls, trust boundaries, threat detection, and audit logging so agent workflows stay safe and reviewable in production.

Create a durable architecture blueprint that explains system boundaries, component responsibilities, data flow, and cross-cutting patterns from the actual code.

Use duplicate detection, canonical resolution, merge, and governance queues so durable knowledge stays clean instead of drifting.

Add Azure Application Insights observability so the web platform emits useful health, error, and usage telemetry with a clear deployment path.

Trace missing CSS and JS quickly by verifying launch root, asset paths, MIME types, and browser-visible GET responses.

Set up or review secret scanning and push protection so exposed credentials are caught early and remediation stays operationally clear.

Tune SQL queries and indexing strategy by focusing on query shape, predicate selectivity, join behavior, pagination, and real execution costs.

Structure planning, implementation, QA, and DevOps handoffs so larger AI-assisted projects keep context, accountability, and clear execution lanes.

OWASP Top 10 for Web Applications (2025) vulnerability knowledge base for identifying, assessing, and remediating security risks in web application environments - Brought to you by microsoft/hve-core.

Plan a .NET framework or package upgrade in a staged way so target frameworks, package drift, build changes, and validation order stay manageable.

Build a practical threat model by mapping architecture, trust boundaries, attack surfaces, and prioritized risks before security work fragments into isolated findings.

Check async C# code for deadlock risks, blocking calls, weak cancellation flow, unnecessary allocations, and exception-handling mistakes.

Inspect a C# area for design-pattern fit, separation of concerns, testability, and over-engineering without blindly adding abstractions.

Review Entity Framework Core usage for query shape, tracking behavior, relationship mapping, migration safety, and common performance traps.

Follow the Grey Canary endpoint removal workflow carefully so uninstall, recovery, and final cleanup stay aligned with prior decisions.

Use Microsoft wing knowledge, Entra memories, and governance signals to review identity and mailbox integration work consistently.

Review SQL for injection risk, weak permissions, brittle schema decisions, unreadable query shape, and maintainability problems before performance tuning.

Inspect a live page for layout, spacing, responsive, and accessibility issues, then trace the fixes back to the real source files.

Exercise Focus the way an agent uses it: bootstrap, discovery, retrieval, governance, and duplicate-safe save flows.

Review code and configuration like a security researcher by tracing dangerous inputs, auth boundaries, dependency risk, secret exposure, and exploitable sinks.

Secure by Design principles knowledge base for assessing adherence to security-first design, development, and deployment practices across the software lifecycle - Brought to you by microsoft/hve-core.

Exercise a running web app like a user would so navigation, forms, console errors, screenshots, and regressions are checked in one pass.

Remember the local rules that usually matter first: content root, database target override, locked DLLs, and restart/test sequencing.

Approach web changes with explicit attention to standards, accessibility, HTTP behavior, security, performance, and browser-visible outcomes.

Use Focus as the first step for coding, debugging, and operations instead of starting from guesses or a cold code search.