Forge Ship
Enforce a fail-closed release gate across project checks, findings, generated assets, packages, licenses, and installation. Use for a candidate release or deployment.
Forge Seo
Conditionally inspect public web content for crawlability, canonicalization, metadata, structured data, and rendering. Use for public indexable web routes.
Forge Notifications
Inspect email, SMS, push, and in-app notifications for authorization, preferences, retries, privacy, and deliverability. Use for transactional, security, lifecycle, or marketing messages.
Forge Cache
First decide whether caching is justified, then audit keys, invalidation, consistency, privacy, and failure behavior. Use for detected caches, cdns, memoization, or a measured proposal to add caching.
Forge Scale
Assess growth limits, contention, partitioning, quotas, backpressure, and cost against explicit demand scenarios. Use for expected growth, load concentration, or capacity incidents.
Forge Queries
Find correctness, injection, overfetching, N+1, pagination, locking, and index-use risks in data access. Use for database, search, analytics, and remote query code.
Forge Frontend
Inspect rendering, state, network, hydration, browser security, and bundle behavior in frontend applications. Use for browser applications.
Forge Supply Chain
Inspect dependencies, build integrity, provenance, releases, licenses, actions, and secret exposure across the delivery chain. Use for any project consuming or publishing software artifacts.
Forge Docs
Verify that user, contributor, architecture, operations, security, and release documentation is accurate and executable. Use for every maintained or distributed project.
Forge Storage
Inspect object naming, access control, encryption, lifecycle, consistency, integrity, and recovery. Use for object stores, file systems, blob databases, and cdn-backed assets.
Forge All
Discover the project, select applicable modules, run safe independent checks, merge evidence, and prioritize remediation. Use for repository-wide audits.
Forge Analytics
Audit event semantics, consent, data quality, identity, privacy, delivery, and decision usefulness. Use for product, marketing, operational, or experimentation analytics.
Forge Realtime
Inspect WebSocket, SSE, subscription, and presence flows for authorization, lifecycle, ordering, abuse, and recovery. Use for websockets, sse, subscriptions, live presence, or collaborative state.
Forge Offline
Audit local persistence, queued actions, synchronization, conflicts, revocation, privacy, and recovery under intermittent connectivity. Use for offline-capable web, mobile, or desktop applications.
Forge Discover
Build an evidence-backed application profile and architecture map before any specialized audit begins. Use for every repository audit.
Forge Auth
Inspect identity proofing, credentials, sessions, recovery, federation, and reauthentication controls. Use for applications identifying users, services, or administrators.
Forge Ai
Audit model boundaries, prompt injection, tool authority, data handling, output validation, evaluation, fallback, and cost. Use for llm, embedding, classifier, agent, retrieval, or generative-media features.
Forge Authorization
Verify deny-by-default function, object, role, tenant, and administrative authorization on every path. Use for any private, role-gated, owned, tenant, or administrative resource.
Forge Testing
Evaluate whether tests provide reliable risk-based evidence across units, boundaries, workflows, and failure modes. Use for executable software.
Forge Security
Perform a threat-informed audit of trust boundaries, injection, secrets, browser controls, dependencies, and abuse cases. Use for every production-bound application.
Forge Api
Audit API contracts, boundary validation, authorization, consistency, pagination, errors, and idempotency. Use for http, graphql, rpc, or event-consumed application interfaces.
Forge Observability
Verify that logs, metrics, traces, events, alerts, and dashboards answer concrete operational questions safely. Use for long-running or production services.
Forge Requirements
Trace business rules and acceptance criteria to executable behavior, including adverse and recovery paths. Use for feature work.
Forge Recovery
Verify recoverability of data and service against explicit RPO, RTO, corruption, deletion, and regional scenarios. Use for durable production data or stateful critical services.
Forge Architecture
Evaluate system boundaries, dependency direction, failure domains, and the fitness of the current topology. Use for multi-component applications.
Forge Code
Find correctness, maintainability, type-safety, error-handling, and dead-code risks in changed and critical paths. Use for source changes.
Forge Accessibility
Audit conformance with WCAG 2.2 AA using automated evidence plus keyboard and assistive-technology reasoning. Use for any user or operator interface.
Forge Ui
Inspect rendered interfaces for responsive behavior, hierarchy, state clarity, consistency, and visual defects. Use for web, mobile, or desktop interfaces.
Forge Infrastructure
Audit infrastructure as code, network and identity boundaries, encryption, state, drift, and least privilege. Use for cloud, container, orchestration, network, or infrastructure-as-code configuration.
Forge Performance
Measure and improve user- and system-visible latency, throughput, resource use, and stability without guessing. Use for performance-sensitive workflows.
Forge Payments
Audit money movement, pricing, entitlements, provider events, reconciliation, idempotency, and sensitive data boundaries. Use for payments, billing, subscriptions, refunds, credits, invoices, or financial ledgers.
Forge Database
Inspect schema integrity, migrations, constraints, tenancy, lifecycle, recovery, and production-safe evolution. Use for applications with a database or durable structured store.
Forge Ux
Evaluate real task flows for clarity, feedback, recovery, accessibility, and avoidance of user harm. Use for interactive products.
Forge Reliability
Audit timeouts, retries, overload, dependencies, degradation, consistency, and operational objectives. Use for services and critical workflows with availability or durability expectations.
Forge Integrations
Audit outbound and inbound integrations for authentication, validation, failure isolation, drift, and replay safety. Use for third-party apis, webhooks, sdks, and service-to-service calls.
Forge I18n
Find locale, translation, formatting, expansion, fallback, and bidirectional-layout defects. Use for localized or locale-sensitive products.
Forge Cost
Tie resource and vendor cost to workloads, ownership, unit economics, budgets, and safe optimization choices. Use for paid infrastructure, apis, ai, storage, messaging, or observability.
Forge Privacy
Inspect personal-data inventory, purpose, minimization, consent, retention, access, deletion, export, and logging. Use for applications processing personal, device, behavioral, or sensitive data.
Forge Jobs
Inspect queued and scheduled work for durability, idempotency, retries, poison messages, and operability. Use for queues, workers, cron, scheduled functions, and outbox consumers.
Fullstack Forge
A Claude skill from thethunderbolt/fullstack-forge-skill.
Forge Uploads
Audit the complete upload, processing, storage, delivery, and deletion pipeline against hostile files. Use for direct or presigned uploads.
Forge Deployment
Inspect build promotion, configuration, migrations, rollout, rollback, health, and environment parity. Use for deployable applications and services.
Forge Tenancy
Verify tenant context propagation and isolation across data, cache, files, jobs, search, analytics, and administration. Use for shared applications serving distinct organizations or customer partitions.