Automatically fixes mechanical issues found during plugin validation, including JSON formatting, missing shebangs, file permissions, hook types, frontmatter gaps, and settings.json defaults. ALWAYS asks for confirmation before modifying any files. Trigger: fix issues, auto-fix, fix common problems, repair plugin.

Generates a comprehensive QA report in Markdown combining findings from all validation and audit skills, with executive summary, categorized findings, and prioritized recommendations. Trigger: generate QA report, full report, plugin report, qa summary.

Validates plugin.json completeness, field correctness, and consistency with actual plugin contents. Triggers: validate manifest, check plugin.json, manifest audit.

Validates cross-reference integrity across all plugin components. Detects broken references, orphaned skills, missing aliases, and settings.json inconsistencies. Triggers: validate cross-refs, check references, dependency audit, orphan detection.

Performs a comprehensive security audit on a Claude Code plugin, detecting leaked secrets, unsafe paths, shell injection risks, sensitive files, and insecure scripts. Trigger: audit security, security scan, check for secrets, find vulnerabilities.

Produces a compact executive scorecard grading a plugin across 7 quality dimensions with a letter grade, numeric score, and top 3 priority actions. Trigger: generate scorecard, qa scorecard, plugin grade, executive summary.

Brainstorm individual plugin components (skill, agent, command, hook) for existing or planned plugins. Trigger: ideate component, brainstorm skill, new agent idea, component concept, add skill to plugin.

Audits all SKILL.md files in a plugin against a 6-criteria excellence rubric, producing per-skill scores, plugin averages, and actionable improvement recommendations. Trigger: audit content quality, score skills, check skill quality, content rubric.

Validates frontmatter and body structure of all skills, agents, and commands in a plugin. Triggers: validate components, check frontmatter, component audit, skill validation.

Generate plugin architecture plan with agent roles, skill-movement mapping, hook strategy, and command routing. Trigger: plan architecture, design plugin structure, architect plugin, plugin architecture, plan plugin layout.

Report a bug against an existing feature — creates a structured bugs.md record, generates fix tasks in tasks.md, and optionally imports from or creates GitHub issues. Use when fixing a bug, reporting a defect, importing a GitHub issue into the workflow, or triaging an error without running the full specification process.

Create or update a CONSTITUTION.md that defines project governance — establishes coding standards, quality gates, TDD policy, review requirements, and non-negotiable development principles with versioned amendment tracking. Use when defining project rules, setting up coding standards, establishing quality gates, configuring TDD requirements, or creating non-negotiable development principles.

Generate a technical design document from a feature spec — selects frameworks, defines data models, produces API contracts, and creates a dependency-ordered implementation strategy. Use when planning how to build a feature, writing a technical design doc, choosing libraries, defining database schemas, or setting up Tessl tiles for runtime library knowledge.

Effort inductors analysis, scope driver identification, team composition planning, and risk-adjusted timeline estimation. Trigger: "cost estimation", "effort estimation", "scope drivers", "team composition", "timeline", "sizing".

Designs proof-of-concept roadmaps with sprint breakdowns, prerequisites, gates, team composition, budget, and risk registers. Trigger: "PoC plan", "proof of concept", "sprint breakdown".

Severity times likelihood risk matrix generation with mitigation priorities. Trigger: "score risks", "risk matrix", "risk assessment", "severity analysis".

Design and implement production-grade CSS architecture: design token systems, CSS Layers (@layer), @scope, container queries, Tailwind v4 config, dark mode strategy, component scoping. Use when user asks to "design CSS architecture", "set up design tokens", "organize styles", or "configure Tailwind".

Identifies, assesses, and manages technical and project risks with mitigation strategies, monitoring plans, and contingency protocols. Trigger: "risk analysis", "risk register", "mitigation plan".

Data pipeline architecture, ingestion patterns, orchestration design, data quality frameworks, and lineage tracking. Trigger: "data engineering", "data pipeline", "ingestion", "ETL", "ELT", "data quality", "lineage".

Designs RPO/RTO targets, failover procedures, backup strategies, and tabletop exercises for disaster recovery. Trigger: "disaster recovery", "DR plan", "RPO RTO", "failover", "backup strategy", "business continuity".