Security checklist for C#/.NET backend (ASP.NET Core, EF Core, Event Sourcing). Covers secrets management, input validation, SQL injection, authentication, authorization, rate limiting, security headers, sensitive data handling, Problem Details (RFC 7807), and event sourcing security. Invoked via /dev-security (unified entry point) — not directly.

2026-03-23

dev-tdd-backend

Analistas de garantia de qualidade de software e testadores

Test-driven development workflow for C#/.NET using xUnit, NSubstitute, and event sourcing (EventSourcing). Covers aggregate testing, specification testing, projection testing, and proper test isolation. Invoked via /dev-tdd (unified entry point) — not directly.

2026-03-23

dev-verification-backend

Analistas de garantia de qualidade de software e testadores

Post-change verification for C#/.NET backend code — build, Roslyn analyzers, dotnet format, xUnit tests with coverage, NuGet vulnerability scan, and diff review. Invoked via /dev-verify (unified entry point) — not directly.

2026-03-23

meta-skill-catalog

Desenvolvedores de software

Maintains the skill catalog (catalog.json) with metadata about all installed skills. Use when adding, removing, or auditing skills. Invoke with /meta-skill-catalog to see current inventory, check for issues, or rebuild the catalog from disk.

2026-03-23