swapniltamse

Detects files that always change together, exposing hidden coupling that inflates Lead Time for Change and makes every PR bigger than it needs to be.

Generates a deployment-specific checklist before any code ships, covering rollout, monitoring, communication, and rollback. Directly reduces Change Failure Rate and Mean Time to Restore.

Requires a feature flag for any user-facing change, giving teams an instant kill switch without a deployment.

Identifies flaky tests in the affected test suite before shipping, because flaky tests kill Deployment Frequency by making CI untrustworthy.

Blocks shipping code where test coverage for changed files drops below threshold, and flags untested paths that directly raise Change Failure Rate.

Detects breaking changes to public APIs, interfaces, and exported symbols, and blocks shipping without a migration path.

Audits any new dependency before it enters the codebase, covering license, maintenance health, CVEs, and bundle impact.

Hard gate for database migrations. Enforces reversibility, lock analysis, and dual-write strategy before any schema change ships.

Full pre-ship security review that runs all ten OWASP Top 10 checks in sequence. Use before any significant feature ships to production.

Checks for server-side request forgery risk before any code that makes outbound HTTP requests based on user-supplied URLs or parameters is written or modified.

Requires structured security event logging before any authentication, authorization, or sensitive data access code ships.

Checks deserialization safety, CI/CD pipeline integrity, and dependency integrity before any code that deserializes objects or executes pipeline scripts is written or modified.

Enforces secure authentication patterns before any login, session, token, or credential management code is written or modified.

Checks CVE status, license compatibility, and maintenance health of any new dependency before it enters the codebase.

Checks for insecure default settings, exposed debug endpoints, permissive CORS, open cloud storage, and missing security headers before any configuration or deployment code ships.

Requires a threat model before any new user-facing feature, authentication flow, or data handling system is designed or modified.

One More Prompt fatigue skill. Fires culturally-native wellbeing reminders in the user's language when working too late. Escalates across 3 time tiers with movie quote parodies. Logs to Obsidian. Use when invoked manually or triggered by hook.

Use when about to ask Claude to write a commit message, summarize a diff, rename a variable, write a SQL query, or run any operation a developer could do directly. Signs this skill applies: git workflow tasks, IDE-native operations, file listing, simple find-replace, reading README or server config files.