FlorianBruniaux

Comprehensive security audit with scored posture assessment

Quick configuration security check against known threats database

Interactive troubleshooting assistant for Claude Code issues

Git-history archaeology of a repository's AI coding harness (Copilot, Claude Code, Codex, Cursor, MCP, skills, agents, hooks). Use to date when each AI config appeared, trace how it spread, churned or was abandoned across modules, measure AI-assisted commits…

Audit custom subagent definitions for Claude Code (.claude/agents/*.md) and Codex (.codex/agents/*.toml): loadability against the native schema, description overlap, model tier, tool scope, and headless-safe instructions. Use when onboarding to a project with…

Audit a project or library of skills for metadata, trigger boundaries, workflow completion criteria, local resource closure, instruction economy, tool scope, effort, and routing evidence. Use before shipping skills, after importing a skill collection, or when…

Diagnostic protocol to run before reporting a sandbox blocker or asking for a configuration change. Eleven checks that eliminate false positives, then a report template the person holding the settings can act on. On one measured day, six of eight reported…

Update the Claude Code Ultimate Guide's CLI release tracking and optionally bump the guide version. Use for 'mets à jour le suivi des releases Claude Code dans le guide', 'synchronise la dernière version CLI avec le landing', or the update-infos-release…

Autonomous improvement loop: scan codebase metrics, scaffold experiment files, run agent-driven iterations until metric improves

Audit Claude Code agents defined in .claude/agents/ for description specificity, model tier appropriateness, tools scoping, and system prompt quality. Detects dispatch ambiguity between agents, flags over-permissive tool grants, and checks for…

Audit Claude Code hooks defined in settings.json files for validity, performance safety, and correctness. Resolves each command against the filesystem, checks exit-code strategy for blocking hooks, flags missing timeouts, and reviews interactive vs async…

Analyzes your codebase and asks 3 targeted questions to recommend the right AI-assisted development methodology stack

Analyzes the current project to surface high-value Routines use cases across the three trigger types (schedule, API, GitHub events). Usage: /routines-discover

Codebase health audit scoring 7 categories with progression plan

Audit Claude Code setup for cache bugs (CC#40524): sentinel, --resume/--continue, attribution header + ArkNill B3/B4/B5

Interactive troubleshooting assistant for Claude Code issues

Diagnose a Google Search traffic decline with dated property totals, query and page changes, and explicit evidence limits. Use for a sudden or sustained click decline, a page that lost traffic, or a suspected algorithm update. Déclenché aussi par « chute de…

Assess evidence limits for Google AI Overview exposure and investigate descriptive CTR changes without attributing lost clicks to AI. Use for AI Overview impact, SGE cannibalization, or declining CTR despite stable rankings. Aussi déclenché par "les AI…

Inspect Google URL indexing states for a bounded sample, with raw coverage and fetch evidence. Use for pages not indexed, crawl or robots blocks, unknown URL status, and canonical mismatches. Déclencheurs français : page non indexée, découverte non indexée,…

Audit submitted sitemap status and compare sitemap URLs with Search Analytics visibility. Use for sitemap fetch errors, stale downloads, submitted URL counts, or URLs with no search data. For actual indexing status, inspect selected URLs separately.…

Import and paginate local SiteOne crawl exports as versioned site-owned snapshots, reconcile exact URLs with supplied GSC page rows, and explain coverage and cleanup.

Review one public page with fetched heading, link, technical, content and schema checks plus optional provider context. Use for audit on-page, audit complet de cette URL or an all-in-one page check.

Audit a selected local Apache common or combined access log for SEO crawl requests, HTTP errors, declared Googlebot/Bingbot and explicit time coverage. Use for crawl logs, server access logs or log-file SEO analysis. Aussi pour « logs de crawl », « logs…

Review same-query Google Search pages for evidence of harmful intent competition before considering consolidation. Use for keyword cannibalization, competing pages or an unexpected ranking URL. Déclenché aussi par « cannibalisation », « mes pages se font…

How to choose and configure data sources for MapLibre GL JS — rendering your own data without tiles, hosted tile services, serverless PMTiles, self-hosted tile servers, tile schemas, glyphs, and sprites.

Guides and best practices for working with Neon Serverless Postgres. Covers setup, connection methods, branching, autoscaling, scale-to-zero, read replicas, connection pooling, Neon Auth, and the Neon CLI, MCP server, REST API, TypeScript SDK, and Python SDK.…

| Production-tested setup for Tailwind CSS v4 with shadcn/ui, Vite, and React. Use when: initializing React projects with Tailwind v4, setting up shadcn/ui, implementing dark mode, debugging CSS variable issues, fixing theme switching, migrating from Tailwind…

Vercel Runtime Cache API guidance — ephemeral per-region key-value cache with tag-based invalidation. Shared across Functions, Routing Middleware, and Builds. Use when implementing caching strategies beyond framework-level caching.

Audit and improve web accessibility following WCAG 2.1 guidelines. Use when asked to "improve accessibility", "a11y audit", "WCAG compliance", "screen reader support", "keyboard navigation", or "make accessible".

Apply modern web development best practices for security, compatibility, and code quality. Use when asked to "apply best practices", "security audit", "modernize code", "code quality review", or "check for vulnerabilities".

Optimize Core Web Vitals (LCP, INP, CLS) for better page experience and search ranking. Use when asked to "improve Core Web Vitals", "fix LCP", "reduce CLS", "optimize INP", "page experience optimization", or "fix layout shifts".

Orchestrate a 4-agent cyber defense pipeline to analyze log files for threats. Use when investigating security logs, detecting anomalies in access patterns, classifying breach severity, or generating incident reports from nginx/auth/syslog files.

Fixture skill duplicated across project and global scope.

Clean portable fixture skill.

Native Codex fixture skill.

Clean portable Codex fixture skill.

Legacy Codex fixture skill kept for migration coverage.

Global native Codex duplicate fixture.

Global Claude duplicate fixture.

Portable demonstration skill.

Build terminal UIs in Rust with Ratatui. Use when creating TUI applications, immediate-mode rendering, high-performance terminal interfaces, or production Rust CLIs.

Expert Rust idiomatique pour développement CLI/système. Ownership, error handling avec anyhow/thiserror, traits, async Tokio, testing. Utiliser pour coder, reviewer ou refactorer du Rust.

Analyze Rust codebase for design patterns, idioms, and anti-patterns. Provides detection, suggestion, and evaluation modes for Rust code quality. Keywords: rust, patterns, analysis, idioms, anti-patterns, code-quality

Security audit toolkit for the ccboard project (Rust/Leptos/Axum stack). Use when auditing authentication flows, API endpoints, WASM security, or reviewing Rust code for unsafe usage and memory safety issues.

Optimize web performance for faster loading and better user experience. Use when asked to "speed up my site", "optimize performance", "reduce load time", "fix slow loading", "improve page speed", or "performance audit".

Expert senior en architecture backend pour accompagner le développement (conception, implémentation, review, refactoring). Architecture hexagonale, DDD, SOLID, clean code, tests. Utiliser pour concevoir de nouvelles features, développer du code, reviewer,…

Store a fix, pattern, or context note in Brain knowledge base (~/.ccboard/insights.db). Use when you want to remember a fix, pattern, decision, or context note across sessions.

Simplifie et raffine le code pour clarté, cohérence et maintenabilité. AUTO-SUGGEST: Activer quand détection de code complexe (imbrication >3, fonctions >50 lignes, ternaires imbriqués, DRY violations).

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when the user explicitly asks for Flow Lean, lean or less verbose output, action-first responses, expansion of a compressed Flow Lean answer, or Flow Lean recap and skills-footer controls.

Use when turning a GitHub profile analysis into an actionable score. Produces a /100 grade weighted by the author's detected objective, a green/orange/red signal table, ready-to-paste corrective prompts, and a shareable score card. Triggers on "note ce…

Use when evaluating the quality of a GitHub README, judging whether it reads as human-written or AI-generated, and producing concrete fixes. Triggers on requests like "eval this README", "is this readme AI-generated", "review my repo readme".

Use when analyzing a GitHub profile through the lens of its author's objective (build a flagship, raise funds, get hired, run a business). Reads repos, pinned items, contribution timeline and commits, then produces a structured profile sheet. Triggers on…

Use when turning a GitHub/LinkedIn analysis into a concrete next-step plan, branching on the user's goal. Two tracks, getting hired and spreading a project. Triggers on "et maintenant je fais quoi", "what next", "je cherche du taf", "je veux diffuser mon…

Use when improving the findability of a GitHub profile and its repos. Generates keyword-rich repo descriptions and topics, optimizes the profile bio for search, and proposes cross-platform linking. Triggers on "améliore mes keywords", "make my repo findable",…

Use when analyzing a LinkedIn profile that the user provides themselves (screenshots and pasted text), and cross-checking it with their GitHub. Never scrapes LinkedIn. Triggers on "analyse mon LinkedIn", "is my linkedin aligned with my github", "review my…

Agent Router session handoff: prepare an autonomous task transfer or resume one by revalidating revision, owned changes, evidence and current authority.

Contract tests and fixtures for Agent Router: reproduce failures, define negative cases and verify externally observable JSON and hook behavior.

Agent Router routing contracts and invariants: assess deterministic selection, constraints, trust and JSON compatibility.

Agent Router host adapter development: define capability evidence, provenance and host protocol contracts for an explicitly scoped adapter issue.

Permissions and snapshot security in Agent Router: inspect authority, stale evidence, subprocess and filesystem boundaries, and advisory sidecars.

Rust quality gate for Agent Router: run formatting, warnings-denied Clippy, workspace tests and generated harness parity.

Build or resume a source-backed YouTube research session that checks the local yt-insights corpus first, asks before discovery and acquisition, grows the corpus only with explicit approval, reassesses coverage, and optionally exports a dossier. Use for…

Export an existing yt-insights video transcript as Markdown, plain text, or VTT for article research and source archives. Use for exporte ce transcript, prepare la matiere de cette video, or save this video as Markdown. Do not use to search or download…

Acquire a YouTube video, playlist, channel, or transcript into the local yt-insights corpus. Use for requests such as recuperer une video, ajouter une chaine, download a transcript, or ingest a YouTube playlist. Do not use for code changes to a video player,…

Search and compare the local yt-insights YouTube corpus with source-backed passages, timestamps, channels, and video metadata. Use for trouve dans mon corpus, cherche cette citation, compare ces chaines, or find the source video. Do not use to download videos…

Export a verified BibTeX, Markdown or CSL-JSON citation from a paper already stored in Paper Insights. Use when preparing sources for an article. Do not infer missing metadata or acquire a missing paper.

Preview and ingest papers from supported sources into the local Paper Insights corpus. Use for adding an arXiv paper or collecting a query. Do not use for read-only corpus research, citation-only exports or watchlists, which are not operational yet.

Search and compare the local Paper Insights corpus with source-backed metadata and passages. Use for finding papers, prior work, authors or evidence already indexed. Use paper-citation for a standalone citation export and paper-ingest for corpus mutation.

Sync Codex Cowork releases from local CHANGELOG to guide YAML + landing TypeScript

Product watch — trouve les features Codex desktop non documentées, génère des entrées CHANGELOG