Skills

Find feature flags nobody has flipped in months and the code each one still holds hostage.

List the screens with no offline story, and what each should show when the network is gone.

Check drag and swipe handlers for 1:1 tracking, velocity on release, and interruptibility mid-flight.

Trace untrusted input to where it's used and check the boundary that should have stopped it.

Check every mutation for a server-side ownership check, not just a hidden button.

Find credentials in source, history, logs and error messages, and say how to rotate each.

Find the imports responsible for a bundle's weight and the smaller thing each one could be.

Find ARIA that lies: roles that don't match behaviour, labels that duplicate visible text, and live regions nobody announces.

Restructure a long query into CTEs that each say one thing, without changing the plan.

Check what happens when each call fails — swallowed errors, empty catches, and retries with no ceiling.

Write the characterisation tests that let a refactor start, before touching the code.

Replace `any` and unchecked casts with types that make the invalid states unrepresentable.

Read a module and its tests, then list the behaviours nothing covers — ranked by what breaking would cost.

Check a reference for undocumented parameters, stale examples, and return values nobody described.

List every environment variable a service reads, which are required, and which have silent defaults.

Find writes that should be atomic and aren't — multi-step mutations with no transaction around them.

Check a database migration for locks that block writes, missing backfills, and changes that can't be rolled back.

Review a component's props for boolean traps, prop drilling, and states that should be one union instead of four flags.

Find hardcoded pixel margins and paddings that sit off a design system's spacing scale, and suggest the nearest token.