flow

Abuse prevention - rate limiting, moderation, bad actors. Use when fighting abuse.

Account security - MFA, sessions, recovery. Use when protecting user accounts.

Admin panel - RBAC, config, admin tools. Use when building admin UI.

Application security - OWASP, validation, secrets. Use when securing the app.

Authentication patterns - sign-in, SSO, passkeys, sessions. Use when implementing auth flows.

Billing - Stripe, webhooks, subscriptions. Use when implementing payments.

Code quality - patterns, testing, maintainability. Use for code review.

Competitive analysis - market research, feature gaps. Use when exploring what competitors do.

Data architecture - models, relationships. Use when designing data structures.

Data modeling - entities, relationships, schemas. Use when designing data structures.

Database - schema, indexes, migrations. Use when working with databases.

Use when the user asks to ship, publish, push, open a PR, merge, release, deploy, fix CI, address review feedback, or drive work end-to-end instead of stopping at a local diff or opened PR.

Delivery - CI/CD, testing, releases. Use when improving pipelines.

Deployments - rollback, feature flags, ops tooling. Use when shipping to production.

Feature discovery - competitive analysis. Use when exploring features.

Use when a task introduces or changes a non-trivial feature, architecture decision, public API, data model, migration, AI workflow, operational behavior, or cross-agent plan. Creates the smallest useful durable spec, ADR, executable contract, or validation plan before broad implementation.

Growth - onboarding, activation, retention. Use for growth features.

Internationalization - localization, translations. Use when adding languages.

Financial ledger - transactions, audit trails. Use when tracking money.

Observability - logging, metrics, tracing. Use when adding monitoring.

Operations - deployment, rollback, feature flags. Use for ops tooling.

Performance - Core Web Vitals, bundle size. Use when optimizing speed.

Pricing strategy - tiers, feature gating. Use when designing pricing.

Privacy and data protection - GDPR, CCPA, consent. Use when handling user data.

Use when the user asks for a review, audit, second pass, release readiness check, architecture review, security review, performance review, a11y review, naming review, or independent quality gate before merge or deployment.

Use when creating, reviewing, migrating, or refactoring agent prompts, AGENTS.md files, Claude/Cursor/Windsurf rules, Codex skills, standards, instruction hierarchies, MEP prompts, or reusable agent workflows.

PWA - service workers, offline support. Use when building PWA features.

Referral systems - referral programs, viral loops. Use for referrals.

Application security - OWASP, validation, secrets. Use when securing the app.

SEO - meta tags, structured data. Use when optimizing for search.

Find all problems in the project - design, code, UX - and open issues

Deep dive into project history, direction, and implementation details

Challenge your work - is it truly state-of-the-art?

Clean technical debt, refactor, optimize, and simplify codebase

Continue incomplete work - find gaps, finish features, fix what's broken

Browser-based audit for business logic and product correctness

Is this project truly State of the Art?

Research-driven strategic ideation - directions, competitors, monetization, traffic

Proactively discover and implement improvements

Initialize project docs - create PRODUCT.md and ARCHITECTURE.md