agent-skill▌

Security-audit skill that combines application security, infrastructure review, CI/CD checks, supply-chain scanning, LLM security, OWASP framing, and STRIDE analysis.

Developer-experience audit that actually runs onboarding and documentation flows, measures time-to-happy-path, and compares reality against planning assumptions.

Debugging workflow with an explicit rule: no fixes until the root cause is understood. The flow is investigate, analyze, hypothesize, then implement.

Code-review pass focused on the actual diff, aimed at risks that often survive CI such as SQL safety, trust boundaries, and structural regressions.

Live-site visual QA plus fixes. It looks for spacing, hierarchy, AI slop, consistency, and interaction issues and can iterate with before/after verification.

Converts an approved mockup or design direction into production-oriented HTML/CSS with computed layout and framework-aware output expectations.

Design system creation workflow that researches comparable products, proposes an aesthetic system, and writes `DESIGN.md` as the canonical design source of truth.

Lets users tune how often gstack asks certain planning questions and inspect the psychographic/developer profile inferred from prior interactions.

Interactive design-plan review that scores design quality, identifies unresolved UX issues, and improves the plan before anyone ships UI.

Founder-mode review that asks what product is really being built, not just what feature was requested. Supports scope expansion, selective expansion, hold-scope, and scope-reduction modes.