Productivity
project-planning
Converts a specification into a phased, dependency-ordered implementation plan. Use after specification is complete and before execution begins
Productivity
task-planning
Generates phased, dependency-ordered implementation tasks from specifications. Use after spec is complete and before starting implementation
Productivity
plugin-review
Review plugin quality with tiered checks and dependency scoping. Use for PR and pre-release audits
Security
supply-chain-advisory
Audits dependency supply chains for bad versions, lockfile drift, and artifact integrity
Documentation
dependency-graph
Generates a Mermaid dependency graph showing import relationships between modules
Research
opensrc
Fetch dependency source code to give AI agents deeper implementation context. Use when the agent needs to understand how a library works internally, read source code for a package,…
Security
dependa-audit
Supply-chain audit of a Dependabot PR. For every dependency the PR bumps, diff the current vs target version (install hooks, new deps, publisher/provenance, network endpoints, code…
DevOps
gen-dependency-updater
Generates Dependabot or Renovate configuration files (`.github/dependabot.yml` or `renovate.json`) with sensible defaults: weekly cadence, minor+patch grouping, and a 5-PR open lim…
Productivity
review-milestone
Independent milestone review that inspects all linked issues, validates body templates, acceptance criteria grounding, dependency graphs, overlaps, gaps, and labels against the mil…
Security
soup-inventory
Maintains a SOUP register for third-party software dependencies. Scans lockfiles to identify candidates, enriches with risk classification and verification references, validates ag…
Productivity
pm-scaffold
Scaffold a complete work package with phases, tasks, and dependencies based on a feature description or linked issue. Analyzes the codebase to produce realistic target files and im…
Automation
upgrade-pack-generator
Generate repo-local dependency upgrade packs under .agents/plans/upgrade/topic-slug/ with a playbook, trigger prompt, operator mode, and canonical manifest. Use when researching an…
Engineering
build-systems-and-dependencies
Reference for build system design (task vs. artifact models, module granularity) and dependency management theory (semantic versioning constraints, diamond dependencies, live-at-he…
DevOps
greenbatch
Updates a repo's npm and Maven dependencies in risk-tiered batches on a dedicated branch, runs the repo's build and test gates to verify each batch, bisects failures to revert only…
Security
guardiao
Reviews code security, architecture, incidents, and third-party dependencies to identify real vulnerabilities, exploitable weaknesses, supply-chain risk, and safe mitigations. Use …
Engineering
global-tech-stack
Apply project-specific technology choices including frameworks, languages, databases, testing tools, and third-party services. Use when making technology decisions, adding dependen…
Engineering
legacy-dependency-breaking
Breaks dependencies in legacy classes or methods that resist testing due to heavy constructors, singletons, statics, or global state. Selects the right technique—Sprout Method, Wra…
DevOps
sharpen
Autonomous Dependabot — auto-discover outdated packages, audit overrides, apply migrations for major bumps, resolve conflicts, run quality gate. Trigger when the user clicks the st…
DevOps
Copilot Instructions for Fuse-Inventory
Key entities in Fuse-Inventory: - **Environments**: Top-level groupings (dev, test, live) - **Applications**: Codebases or hosted products - **Instances**: An application deployed …
Productivity
spec-to-work-items
Decomposes confirmed specifications or implementation plans into independently executable, verifiable vertical work items with dependencies, safe parallelism, tests, risks, and rol…
Business
pmo-release-train-engineer
Coordinates SAFe Agile Release Trains: facilitates PI planning, manages cross-team dependencies and risks, escalates program impediments, and synthesizes release readiness. Compose…
Engineering
product-lifecycle-architect
Coordinates multi-domain product programs spanning design, commerce, distribution, SDKs, marketing, support, and operations; ideal when the core artifact is the cross-team dependen…
Engineering
kit-cli-navigator
Run focused `kit` CLI commands for file trees, symbols, search, semantic discovery, dependency analysis, and exports to build high-signal repository context. Useful for exploring u…
Productivity
clex-plan
Converts an idea and repository context into a PRD epic with dependency-ordered, agent-ready child issues. Each issue meets the "dumb issue" contract: single concern, enumerated fi…
Security
supply-chain-security-scanner
Scans dependencies and container images for vulnerabilities across npm, PyPI, Maven, Go, Cargo, and more. Generates SPDX/CycloneDX SBOMs, validates license compliance, verifies SLS…
Security
project-audit-council
Comprehensive repository audit covering code quality, security vulnerabilities, secrets, dependencies, architecture, APIs, frontend, database, DevOps readiness, tests, and build he…
Engineering
relux:effect-edit
Edit an existing effect declaration—its expect set, expose surface, dependency graph, body, or cleanup—while preserving caller compatibility and deduplication. Handles adding/remov…
Security
supply-chain-attack-recon
Performs external reconnaissance of software supply-chain attack surfaces including package squatting, dependency confusion, GitHub Actions exposure, registry leaks, and CI/CD conf…
Engineering
fix-cyclic-deps
Detects and resolves cyclic module dependencies during UI5 modernization. Auto-fixes 2-node cycles by converting the lesser-used edge to lazy sap.ui.require(); uses hub-based refac…
Security
auditing-npm-dependencies
Scans a Node.js project's npm dependency tree for known CVEs, normalizing npm audit output (v1/v2) into the shared penetration-tester schema. Detects direct and transitive issues, …
DevOps
create-graph-ci-script
Configures graphify to extract code dependency graphs for Monolynx. Detects CI systems, generates .graphifyignore and a minimal sync script, adds non-blocking CI step, and supports…
Security
awesome-dependency-audit
Read-only audit of third-party dependencies covering lockfile hygiene, typosquatting, dependency confusion, install scripts, maintenance signals, license conflicts, and reachable C…
Security
typosquat-check
Detect typosquatting and malicious packages among installed dependencies or single packages. Cross-checks AI-malware intelligence, name similarity to popular packages, and maintain…
Security
loom-security-scan
Lightweight security checks for secrets, dependencies, container images, and common vulnerabilities. Suitable for pre-commit and CI scans using Semgrep, Trivy, gitleaks, cargo audi…
Engineering
arn-code-review-plan
Validates structured project plans for completeness, correctness, and pattern compliance before execution, checking document quality, dependency consistency, and codebase reference…
Engineering
jar-analysis
Analyzes Java JAR, WAR, EAR, AAR, and Spring Boot fat-jars by listing contents, extracting files, reading configs, and decompiling classes. Use for inspecting dependencies, embedde…
Automation
ship-epic-gh
Coordinates GitHub epics by parsing a parent issue's sub-issues task list, builds dependency graphs from `blocks`/`blocked-by` labels, and launches parallel `/loop` jobs to ship re…
Productivity
phasing
Breaks settled scope into an ordered sequence of phases sized for single specs, modeled as a dependency graph so parallel work emerges from technical reality. Writes the plan to do…
Security
warm
Evaluates every dependency a branch introduces across client/server and all languages against the WARM criteria (Worth it, Alive, Right-sized, Maintained securely). Scans manifests…
DevOps
devs:deps-core
Expertise in auditing and managing dependencies across Python, TypeScript, JavaScript, and Rust ecosystems. Handles vulnerability scanning, outdated package detection, lockfile ana…
Engineering
kb-codeindex
Scans source files for `# implements:` annotations and cross-module imports, then generates `library/_code-index.md` and `library/_dependency-edges.md` as a durable project index. …
Productivity
plan-generation
Generates a workspace-level plan by grouping projects into buckets and deriving a suggested layout from epics, sizes, and cross-project dependencies when the existing timeline is m…
Automation
routine-scheduler
Define and manage scheduled routines that execute tasks on recurring cadences, with cadence selection, execution guardrails, and self-contained prompts. Includes examples for unatt…
Security
checking-license-compliance
Scans project dependencies for license compliance against allow/deny/review policies. Parses SPDX identifiers from npm, Python METADATA, PKG-INFO, and pyproject.toml; flags copylef…
Productivity
roadmap-placer
Places approved features on the product roadmap with timing, sequencing rationale, and dependency mapping. Use for scheduling by quarter, re-sequencing items, resolving initiative …
Engineering
decomposing-work
Breaks large engineering work into parallelizable, sequenced tasks by generating dependency graphs, critical paths, walking skeletons, and interface contracts. Ideal for decomposin…
Engineering
hv-refactor
Run a full architectural refactor cycle — explores the codebase for friction, categorizes dependencies, designs competing approaches for structural changes, then executes fixes. Us…
Engineering
kitty
Maps codebase structure via tree-sitter parsing and graph storage for dependency analysis, impact assessment, semantic search, and relationship exploration. Use for structural ques…
Security
tracing-transitive-vulnerabilities
Maps project dependency trees (npm/Python) to trace vulnerable transitive packages back to direct dependencies, revealing highest-impact upgrades, unreachable CVEs requiring overri…
Productivity
hv-rm
Remove a captured backlog item and clean up its dependencies — strips the TODO entry, removes Related cross-references, deletes the detail file, removes any linked plan, and refuse…
Security
python-deps-pinning
Audits Python dependency files to reveal what percentage of the tree has pinned versions a vulnerability scanner can actually evaluate, lists unpinned entries per file, and outputs…
Engineering
dependency-version-selection
Resolves and migrates runtimes, frameworks, SDKs, and libraries by querying authoritative release sources. Use for project creation, dependency upgrades, lock graph regeneration, o…
Productivity
rig-plan
Transforms written specs or PRDs into a reviewed backlog by decomposing work into epics, sprints, or tickets with dependencies and labels, then materializes them on the tracker for…
Engineering
shred-plan
Stress-tests implementation plans by verifying every codebase claim against evidence, surfacing unverified assumptions, hidden dependencies, missing failure modes, scope leaks, and…
Productivity
parallel-plan
Generates detailed parallel implementation plans by running analysis and validation stages, then synthesizing dependency-aware tasks into parallel-plan.md. Use after shared-context…
Security
uv-supply-chain-hardening
Switches Python Docker builds from pip to uv, pins all dependencies with hashes, and enforces a release-age gate to block newly published packages. Strengthens supply-chain securit…
Engineering
coregraph
Prioritize the coregraph CLI for structural code analysis: locate symbol definitions, callers, dependencies, and cross-file relations; assess change impact, detect dead code or inc…
Productivity
bagimlilik-haritasi
Produces a dependency map and execution order document for any sprint or milestone. Invoke with the milestone name (e.g. "Sprint 3"); see docs/bagimlilik-harita-rehberi.md for guid…
Engineering
full-app-review
Conducts a non-mutating end-to-end audit of an app or repo covering architecture, runtime flows, frontend, tests, security, observability, dependencies, deployment, and dead code t…
DevOps
dep-sweep
Batches Dependabot, Renovate, and npm-bot PRs by risk level, auto-merges safe updates into release, and surfaces only risky ones for review. Groups by devDeps/patch/minor/major/loc…
Showing the top 60 of 1,037. See the full list →