Technical SEO audit and implementation: structured data (JSON-LD), meta tags, Open Graph/Twitter Cards, XML sitemap, robots.txt, Core Web Vitals optimization, crawl budget management, and canonical URL strategy.

STRIDE threat modeling, attack surface mapping, and threat tree generation. Trigger: "threat model", "STRIDE analysis", "attack surface", "threat assessment".

OWASP vulnerability patterns, secret detection, and authentication/authorization analysis. Trigger: "security scan", "OWASP check", "secret detection", "auth analysis".

Regulatory and standards compliance assessment — GDPR, SOX, PCI-DSS, HIPAA, ISO 27001 patterns in code. Use when user asks to "assess compliance".

Analyzes build vs buy decisions, licensing models, TCO calculations, and value capture strategies. Trigger: "build or buy", "licensing analysis", "TCO", "commercial model".

Cyclomatic complexity, coupling, cohesion, and size metrics measurement. Trigger: "measure complexity", "code metrics", "coupling analysis", "cohesion".

Threat modeling, zero trust design, identity architecture, encryption strategy, and compliance mapping for software systems. Trigger: "security architecture", "threat model", "zero trust", "identity", "encryption", "compliance", "OWASP".

Provides industry context, regulatory landscape analysis, competitive benchmarks, and sector-specific technology trends. Trigger: "industry context", "sector analysis", "regulatory landscape", "benchmarks".

Plan and execute database schema migrations with up/down scripts, zero-downtime DDL patterns, seed data management, rollback procedures, and ORM vs raw SQL decision framework. Covers Postgres, MySQL, and SQLite.

Tree of Thought evaluation, multi-dimensional weighted scoring, trade-off analysis, and decision matrix generation for technical decisions. Trigger: "scenario analysis", "trade-off", "decision matrix", "weighted scoring", "tree of thought", "compare options".

Horizontal/vertical scaling analysis, stateless/stateful assessment, and capacity planning. Trigger: "assess scalability", "can this scale", "scaling strategy", "capacity planning".

Generate Supabase project with auth, RLS policies, edge functions, type generation. Use when user asks to "scaffold a Supabase project".

Generate production-ready React project with TypeScript, Tailwind, testing, CI/CD. Use when user asks to "scaffold a React app".

Generate Next.js 15 App Router project with auth, database, API routes. Use when user asks to "scaffold a Next.js app".

Scaffold a production monorepo: Nx vs Turborepo decision, workspace structure, shared packages, CI matrix builds, versioning strategy (fixed vs. independent), and dependency graph visualization.

Scaffold a production-ready Firebase project: Firestore data modeling, Security Rules, Cloud Functions v2, emulator suite, hosting config, and CI/CD. Covers auth flows, subcollection design, and multi-environment strategy.

Scaffold a production-parity Docker development environment: multi-service Compose, volume mounts, networking, health checks, dev containers, and secrets management. Eliminates "works on my machine" at the infrastructure layer.

Generate REST API with Express/Fastify, OpenAPI spec, validation, tests. Use when user asks to "scaffold a REST API".

Generate Angular 18+ project with Signals, standalone components, SSR, testing. Use when user asks to "scaffold an Angular app".

Systematic root cause tracing from symptoms through causal chains to actual causes. Trigger: "root cause analysis", "why is this failing", "trace the cause", "5 whys".