Grilling session that challenges your plan against the existing domain model, sharpens terminology, and updates documentation (CONTEXT.md, ADRs) inline as decisions crystallise. Use when user wants to stress-test a plan against their project's language and documented decisions.

Extracts an SMV (NuSMV/nuXmv) finite-state model from code or state-machine descriptions, for CTL/LTL model checking of reactive systems. Use when verifying hardware-adjacent or embedded logic, when the state space is naturally finite and small, or when CTL branching-time properties are needed.

Scans source code for security vulnerabilities by applying Project CodeGuard rules — injection, unsafe deserialization, XSS, path traversal, broken access control. Use when performing a security audit, when reviewing a PR that touches request handlers or database queries, when the user asks for a vulnerability scan, or when wiring security checks into CI.

Matches code against Project CodeGuard's catalog of known-dangerous patterns — banned C functions, weak crypto primitives, hardcoded credentials, deprecated APIs. Use when grepping for low-hanging security fruit, when enforcing a ban-list in CI, or when the user asks to check for known-bad patterns.

This skill embodies the principles of "Clean Code" by Robert C. Martin (Uncle Bob). Use it to transform "code that works" into "code that is clean."

This skill should be used when the user says "batch implement", "implement all", "batch execution", "implement all features", "parallel implement", "implement in parallel", "arness batch implement", "arn-code-batch-implement", "run batch implementation", "implement everything", "launch batch workers", or wants to spawn parallel worktree-isolated background agents to implement multiple pending features simultaneously. Each worker runs as a full independent session with all tools. This skill requires pending plans in .arness/plans/ — run arn-code-batch-planning first if none exist.

To access Anthropic's official brand identity and style resources, use this skill.

Guides the creation of detailed agile feature documentation from an existing epic. Use when the user wants to split an epic into feature files, derive features with scope and acceptance criteria, or plan feature documentation for stakeholders or engineering. This should trigger for requests such as Create features from an epic; Split epic into features; Feature files from epic; Derive features from epic. Part of cursor-rules-java project

Create professional research posters in LaTeX using beamerposter, tikzposter, or baposter. Support for conference presentations, academic posters, and scientific communication. Includes layout design, color schemes, multi-column formats, figure integration, and poster-specific best practices for visual communication.

**UTILITY SKILL** — Python diagram generation: WAF/cost/compliance charts (matplotlib), architecture diagrams (diagrams lib), ERDs, swimlanes, timelines, wireframes (graphviz). WHEN: 'WAF bar chart', 'cost donut chart', 'compliance gap chart', 'Python architecture diagram', 'ERD diagram', 'swimlane', 'UI wireframe'. DO NOT USE FOR: Draw.io architecture diagrams (drawio), inline Mermaid (mermaid).

Search and monitor social media using X/Twitter (via Grok) and Reddit APIs. USE FOR: - Searching X/Twitter posts by keywords or hashtags - Finding X/Twitter users by criteria - Getting a user's recent posts - Searching Reddit posts and discussions - Getting comments from Reddit threads - Social media monitoring and research TRIGGERS: - "twitter", "X", "tweets", "posts on X" - "reddit", "subreddit", "reddit discussion" - "what are people saying", "social media", "sentiment" - "trending", "viral", "popular posts" - "user's posts", "timeline", "recent activity" Use `npx agentcash fetch` for Grok (X) and Reddit endpoints. All endpoints are $0.02 per call. IMPORTANT: Use exact endpoint paths from the Quick Reference table below.

Search for people and properties using Whitepages APIs via x402. USE FOR: - Finding people by name and location - Address lookups and verification - Property owner information - Background research (with legitimate purpose) TRIGGERS: - "find person", "lookup person", "who lives at" - "property owner", "property search", "address lookup" - "person at address", "contact info for" IMPORTANT: These endpoints contain personal information. Use responsibly and only for legitimate purposes. See rules/privacy.md for guidance. Use `npx agentcash fetch` for Whitepages endpoints. Both endpoints are $0.44 per call.

Search Google News and Google Shopping using Serper APIs via x402. USE FOR: - Finding recent news articles on a topic - Current events and breaking news - Product searches and price comparisons - Shopping research and product discovery - Industry news monitoring TRIGGERS: - "news about", "latest news", "recent articles" - "current events", "breaking", "headlines" - "shopping", "buy", "price", "product search" - "compare prices", "where to buy", "deals on" Use `npx agentcash fetch` for Serper endpoints. Both endpoints are $0.04 per call.

Use browser-use to perform Google searches, open results, and extract key information from live pages. Use when the user asks to "search Google", "look this up on Google", or needs current web results via a real browser session (often to avoid bot blocks).

Google Workflow: Today's meetings + open tasks as a standup summary.

Gmail: Send, read, and manage email.

Creates product strategies using Crossing the Chasm, Playing to Win, and strategic canvas frameworks. Use when defining where to play and how to win, choosing beachhead markets, or connecting tactics to strategy.

Defines right metrics using North Star framework, AARRR, and leading vs lagging indicators. Use when choosing metrics, instrumenting products, creating dashboards, or distinguishing vanity metrics from actionable ones.

Google Workflow: Weekly summary: this week's meetings + unread email count.