Prepare Safe Commit
Inspect, validate, and prepare a safe Git commit from the staged diff. Use when Codex is asked to commit changes, review staged files before committing, write an evidence-backed commit message, or verify a proposed commit against canonical and repository-specific machine-readable guardrails.
Security Audit Lite
Perform a practical security review focused on auth, secrets, insecure defaults, injection risks, trust boundaries, privilege escalation, token handling, and sensitive data exposure. Use when a user asks for a lightweight security audit, AppSec review, or auth or secret-handling review.
Ruleset Governance
Design, review, and apply lightweight GitHub rulesets for branch and tag protection, required checks, signed commits, force-push blocking, file restrictions, and single-developer bypass policy. Use when asked to harden merge rules, protect main, or standardize rulesets across repositories.
Test Gap Finder
Identify missing or weak tests by mapping changed or risky code to absent unit, integration, contract, and UI coverage. Use when a user asks to review test coverage, find testing gaps, or prepare release confidence.
Code Review
Review code changes for correctness, regressions, security, test gaps, and operational risk. Use when reviewing a local diff, pull request, recently merged change, or requested implementation before release.
Release Readiness
Review whether a repository is ready to ship by checking versioning, changelog, feature flags, migrations, rollout safety, smoke-test coverage, and operational readiness. Use when a user asks for release readiness, ship checks, or launch gating.
Github Actions Hardening
Review and harden GitHub Actions workflows for supply-chain risk, token permissions, secret handling, script injection, OIDC, reusable workflow access, and CI governance. Use when asked to audit CI/CD security, fix workflow risk, or standardize Actions across repositories.
Docs Sync
Compare repository behavior and structure against README, AGENTS, architecture docs, setup docs, and operational docs to find and repair documentation drift. Use when a user asks to update docs, audit docs against code, or improve onboarding docs.
Commit Message Enforcer
Standardize, review, and enforce enterprise-grade commit messages using Conventional Commits, scoped types, breaking-change footers, and clear history hygiene. Use when asked to harden commit messaging, review commit history, configure commitlint, or prepare clean commits.