Raishin/vanguard-frontier-agentic

kotlin-android-architecture

Use this skill to statically review Android app architecture correctness: ViewModel lifecycle and scoping across configuration changes, SavedStateHandle persistence across process death, lifecycle-aware Flow collection…

原文语言：英语

kotlin-android-security-privacy

Use this skill to statically review an Android app's security and privacy posture against OWASP MASVS: exported components and intent surfaces, deep-link/App Links validation, WebView exposure, cleartext traffic and network-security-config, local storage and…

原文语言：英语

kotlin-library-api-abi-governance

Use this skill to statically review Kotlin library public-API evolution and binary/source compatibility for libraries consumed by both Kotlin and Java: binary-compatibility-validator .api snapshots and apiCheck gating, Explicit API mode,…

原文语言：英语

kotlin-maestro

Use this skill to classify a Kotlin, JVM-Kotlin, Android, or Kotlin Multiplatform task and route it to the narrowest static-review specialist on the Kotlin board, or to gate a production-mutation request to a named human owner. Routing and classification only…

原文语言：英语

kotlin-test-architecture

Use this skill to statically review Kotlin/coroutine/Compose/Android/KMP test architecture and determinism: `runTest` and virtual-time usage, `StandardTestDispatcher` vs `UnconfinedTestDispatcher` choice and advance-call discipline,…

原文语言：英语

kotlin-android-performance-reliability

Use this skill to statically review measured Android runtime performance and reliability evidence: cold/warm startup via StartupTimingMetric and CompilationMode, frame jank via FrameTimingMetric/JankStats against the 60fps budget, Baseline Profile coverage,…

原文语言：英语

kotlin-backend-production-readiness

Use this skill to statically review production readiness for Ktor servers and the Kotlin-on-Spring coroutine surface: server lifecycle/monitoring events, Netty/CIO graceful-shutdown configuration, StatusPages typed exception mapping, DI/AutoCloseable resource…

原文语言：英语

kotlin-compose-ui-quality-accessibility

Use this skill to statically review Jetpack Compose UI correctness and accessibility: recomposition stability (@Stable/@Immutable, unstable parameters cascading recomposition), correct side-effect API usage with required cleanup, remember/derivedStateOf for…

原文语言：英语

kotlin-coroutines-flow-reliability

Use this skill to statically review Kotlin coroutine and Flow reliability — structured concurrency and cancellation cooperation, dispatcher selection and blocking-call confinement, cold Flow vs hot StateFlow/SharedFlow semantics and backpressure, and context…

原文语言：英语

kotlin-estate-modernization-governor

Use this skill to statically review Java-to-Kotlin migration strategy and mixed-codebase governance: strangler-fig / module-by-module vs file-by-file sequencing, the mixed Java/Kotlin interop boundary and its platform-type null-safety debt, reversibility of…

原文语言：英语

kotlin-gradle-build-engineering

Use this skill to statically review Gradle build-graph quality and CI throughput for Kotlin/KMP projects: configuration-cache compatibility (no execution-time Project access), build-cache correctness (@CacheableTask annotation completeness and…

原文语言：英语

kotlin-kmp-boundary-interop

Use this skill to statically review Kotlin Multiplatform source-set architecture, expect/actual design and pairing completeness, platform-API-leakage prevention, cross-target dependency compatibility, Swift/Objective-C interop (suspend-to-async, @Throws,…

原文语言：英语

kotlin-kmp-portfolio-decision

Use this skill to decide whether a product should adopt Kotlin Multiplatform at all, and how much to share, by weighing org topology and team ownership, product-roadmap alignment, platform-differentiation risk, skills/hiring constraints, lifecycle/maintenance…

原文语言：英语

kotlin-language-api-correctness

Use this skill to statically review Kotlin language-level correctness: nullability and Java-interop platform types, inline functions with reified type parameters past JVM erasure, @JvmInline value-class boxing behavior, statically-dispatched extension…

原文语言：英语

kotlin-serialization-wire-contract

Use this skill to statically review kotlinx.serialization wire-contract safety and schema evolution: encodeDefaults/explicitNulls defaults and @EncodeDefault overrides, strict-decode ignoreUnknownKeys behavior, sealed-class closed polymorphism and…

原文语言：英语

kotlin-supply-chain-release-integrity

Use this skill to statically review Kotlin/Gradle dependency trust and release integrity: whether `gradle/verification-metadata.xml` enforces checksum/signature verification in strict mode, whether dependency locking pins transitive versions for reproducible…

原文语言：英语

java-jdk-lifecycle-and-upgrade

Use this skill when statically reviewing a Java estate's JDK lifecycle and upgrade posture — identifying the JDK vendor and version, mapping them to support and license boundaries, finding language/API upgrade blockers, and prescribing a phased,…

原文语言：英语

java-concurrency-and-virtual-thread

Use this skill when statically reviewing Java concurrency and Project Loom virtual-thread adoption for correctness and safety at scale — pooling or capping virtual threads, a virtual-thread migration that strips a bound on a limited downstream resource…

原文语言：英语

java-container-and-kubernetes-readiness

Use this skill when statically reviewing whether a JVM is correctly sized and configured for the container it runs in — UseContainerSupport and cgroup v1/v2 detection, -XX:MaxRAMPercentage or a fixed -Xmx sized to leave off-heap headroom (metaspace, thread…

原文语言：英语

java-database-migration-safety

Use this skill when statically reviewing a Flyway or Liquibase schema-migration PR for rolling or blue-green deploy safety — immutable applied-migration discipline (checksum/history-table drift on an edited already-applied migration), expand-contract phasing…

原文语言：英语

java-framework-production-readiness

Use this skill when statically reviewing a Spring Boot, Quarkus, or Micronaut service for production readiness — externalized configuration, health/readiness/liveness endpoint wiring, graceful shutdown, jakarta namespace correctness plus the framework's JDK…

原文语言：英语

java-jvm-performance-and-gc

Use this skill when statically reviewing a proposed JVM garbage-collector or performance change — collector selection (G1, ZGC/Generational ZGC, Shenandoah, Parallel), allocation-pressure source patterns, heap-sizing/GC-flag configuration, and OOM/memory-leak…

原文语言：英语

java-kafka-reliability

Use this skill when statically reviewing a Kafka producer/consumer pipeline for whether it actually delivers the delivery semantics it claims — idempotent-producer-vs-exactly-once conflation, transactional read-process-write wiring (transactional.id,…

原文语言：英语

java-maestro

Java Maestro routing skill. Classify the user's Java/JVM task, select the narrowest static-review specialist from the Java board (or the smallest team, max 4), and dispatch. Trigger when a user brings a Java, JVM, Spring, Jakarta EE, JDK-upgrade,…

原文语言：英语

java-resilience-pattern

Use this skill when statically reviewing resilience4j + Spring composition on a Java code path: decorator/aspect order between @Retry, @CircuitBreaker, @RateLimiter, @TimeLimiter, and @Bulkhead; retry safety on non-idempotent write paths (idempotency/dedup…

原文语言：英语

java-spring-security

Use this skill when statically reviewing a Spring Security 6 service's authorization and endpoint-exposure posture — multiple SecurityFilterChain beans and securityMatcher disjointness/ordering, authorizeHttpRequests matcher sequencing (first-match-wins,…

原文语言：英语

java-test-architecture

Use this skill when statically reviewing a JVM test suite's architecture for soundness and non-flakiness: JUnit 5 lifecycle and isolation (shared mutable static state, test-instance lifecycle, order dependence, time/locale/timezone dependence, and unguarded…

原文语言：英语

revenue-critical-journey-integrity-review

Use this skill to review the cross-tier seams of revenue-critical journeys — checkout, payment submission, account creation, and login — for idempotency of money-moving and account-creating requests, server-side re-validation of client-enforced rules, webhook…

原文语言：英语

php-runtime-eol-opcache-fpm-review

Use this skill to review PHP runtime upgrade readiness — whether the target or running PHP version is past php.net's published four-year support window (active support, then security-only, then EOL) — and to review production OPcache (enable,…

原文语言：英语

wordpress-rest-block-security-review

Use this skill to review WordPress plugin, theme, REST API, and block-editor code for missing or overly permissive REST permission_callback registration, unescaped dynamic block render_callback output, missing input validation/sanitization or output escaping,…

原文语言：英语

java-deserialization-and-parser-security

Use this skill when statically reviewing the JVM's untrusted-deserialization and data-parsing surface for remote-code-execution and injection risk — Java native ObjectInputStream gadget chains (and the ObjectInputFilter/JEP 290 control), SnakeYAML bare…

原文语言：英语

java-jpa-hibernate-performance

Use this skill when statically reviewing JPA/Hibernate data access for fetch-strategy correctness and reliability — N+1 exposure, JOIN FETCH vs @EntityGraph vs @BatchSize vs DTO projection, LazyInitializationException and open-in-view misuse, pagination…

原文语言：英语

composer-audit-supply-chain-review

Use this skill to review PHP Composer dependency supply-chain posture — whether composer audit is wired into CI with a failing exit-code gate on security advisories, whether config.policy.advisories.audit and config.policy.abandoned settings are configured to…

原文语言：英语

php-maestro

Route PHP-board governance tasks to the narrowest specialist or a genuinely multi-domain parallel team from the PHP catalog. Use when you do not already know which PHP specialist handles the task. Not for direct PHP answers or specialist review; Maestro…

原文语言：英语

php-session-upload-deserialization-review

Use this skill to statically review PHP code for object-injection risk from unserialize() on untrusted input, session fixation/hijacking from missing session_regenerate_id() or weak session cookie hardening, and unsafe file-upload handling that trusts the…

原文语言：英语

gcp-firebase-developer

Build, configure, and operate Firebase-powered web and mobile applications — covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building…

原文语言：英语

gcp-gke-platform-operator

Operate GKE clusters (Standard and Autopilot), manage node pools, configure Workload Identity, enforce Binary Authorization, plan node pool upgrades, and review cluster security posture.

原文语言：英语

salesforce-agentforce-stdm-observer-skill

Queries Salesforce Telemetry & Data Management (STDM) and Data Cloud for live Agentforce session traces, faithfulness scores, answer relevance scores, action invocation telemetry, and quality metrics under T1 least-privilege scope (api + refresh_token +…

原文语言：英语

salesforce-apex-log-analyzer-skill

Retrieves and analyzes Apex debug logs from a connected Salesforce org to identify governor-limit hits, SOQL N+1 patterns, unhandled exceptions, and async job failures. T1 read-only runtime — retrieves logs only, never executes code or mutates data. TRIGGER…

原文语言：英语

salesforce-apex-test-runner-skill

Executes Apex tests against a connected SANDBOX org via sf apex run test, parses results and coverage delta, identifies failures with stack traces, and suggests fixes. T1 read-only runtime (sandbox-only). Production org targets are HARD REFUSED before any API…

原文语言：英语