THE CRITICAL SKILL -- validates hooks.json structure, event names, and type-event compatibility. Detects prompt/agent hooks on events lacking ToolUseContext. Triggers: validate hooks, check hooks.json, hooks audit, hook safety check.

Validates plugin.json completeness, field correctness, and consistency with actual plugin contents. Triggers: validate manifest, check plugin.json, manifest audit.

Validates plugin directory layout against the official Claude Code plugin spec. Triggers: validate structure, check layout, directory audit, plugin skeleton check.

Create or update a CONSTITUTION.md that defines project governance — establishes coding standards, quality gates, TDD policy, review requirements, and non-negotiable development principles with versioned amendment tracking. Use when defining project rules, setting up coding standards, establishing quality gates, configuring TDD requirements, or creating non-negotiable development principles.

Create a feature specification from a natural language description — generates user stories with Given/When/Then scenarios, functional requirements (FR-XXX), success criteria, and a quality checklist. Use when starting a new feature, writing a PRD, defining user stories, capturing acceptance criteria, or documenting requirements for a product idea.

Generate a technical design document from a feature spec — selects frameworks, defines data models, produces API contracts, and creates a dependency-ordered implementation strategy. Use when planning how to build a feature, writing a technical design doc, choosing libraries, defining database schemas, or setting up Tessl tiles for runtime library knowledge.

Generate Gherkin .feature files from requirements before implementation — produces executable BDD scenarios with traceability tags, computes assertion integrity hashes, and locks acceptance criteria for test-driven development. Use when writing tests first, doing TDD, creating test cases from a spec, locking acceptance criteria, or setting up red-green-refactor with hash-verified assertions.

Validate cross-artifact consistency — checks that every spec requirement traces to tasks, plan tech stack matches task file paths, and constitution principles are satisfied across all artifacts. Use when running a consistency check, verifying requirements traceability, detecting conflicts between design docs, or auditing alignment before implementation begins.

Report a bug against an existing feature — creates a structured bugs.md record, generates fix tasks in tasks.md, and optionally imports from or creates GitHub issues. Use when fixing a bug, reporting a defect, importing a GitHub issue into the workflow, or triaging an error without running the full specification process.

Event catalog design, schema registry management, eventual consistency patterns, saga orchestration, and CQRS implementation. Trigger: "event architecture", "event-driven", "event catalog", "schema registry", "saga", "CQRS", "eventual consistency".

Designs event-driven architectures using event sourcing, CQRS, and message broker selection. Trigger: "event-driven architecture", "event sourcing", "CQRS", "message broker", "pub/sub design".

Tags every claim with [HECHO]/[INFERENCIA]/[SUPUESTO] evidence classification for zero-hallucination output. Trigger: "classify evidence", "tag claims", "evidence levels", "zero hallucination", "fact check output".

OWASP vulnerability patterns, secret detection, and authentication/authorization analysis. Trigger: "security scan", "OWASP check", "secret detection", "auth analysis".

Applies a 10-point quality rubric to every artifact with iterative refinement until excellence criteria are met. Trigger: "excellence check", "quality rubric", "review artifact", "quality loop", "refine output".

Crafts technical business cases with ROI justification, value pillars, and executive-ready framing. Trigger: "executive summary", "business case", "pitch the solution", "ROI".

Generates specific file create/modify/delete plans with impact analysis and dependency tracking. Trigger: "plan file changes", "what files need to change", "impact analysis for changes".

Threat modeling, zero trust design, identity architecture, encryption strategy, and compliance mapping for software systems. Trigger: "security architecture", "threat model", "zero trust", "identity", "encryption", "compliance", "OWASP".

Discover, evaluate, and install agent skills from the open ecosystem (skills.sh, GitHub, local plugins). Searches across Skills CLI, skills.sh leaderboard, and local plugin catalogs to recommend the best match. Trigger: find a skill, how do I do X, is there a skill for, can you do X, extend capabilities, search skills, install skill, discover skill, skill marketplace, skills.sh.

Maps business processes, data flows, and integration points into visual sequence diagrams and dependency graphs. Trigger: "map the flow", "show me how data moves", "integration diagram".

Provides industry context, regulatory landscape analysis, competitive benchmarks, and sector-specific technology trends. Trigger: "industry context", "sector analysis", "regulatory landscape", "benchmarks".