Review real software repositories for likely security issues using the local OWASP Top 10:2025 category set, official OWASP-mapped CWE lists, and canonical MITRE CWE records. Use when auditing source code, configuration, IaC, pipelines, dependencies, auth flows, crypto, logging, or error handling, and when the goal is evidence-based findings mapped to both CWE and OWASP 2025 with confidence levels and coverage gaps.

This skill should be used when the user says "use cases teams", "arn use cases teams", "team use cases", "debate use cases", "collaborative use cases", "use cases with debate", "team-based use case review", "use case debate", "review use cases as a team", or wants to create structured use case documents through expert debate where product strategist and UX specialist review and discuss each other's findings before revising, producing a use-cases/ directory with individual Cockburn fully-dressed use case files and a README index.

This skill should be used when the user says "discover", "product discovery", "arn discover", "help me define this product", "what should I build", "product concept", "define the product", "let's figure out what to build", "vision for this project", "shape this idea", "new project idea", "brainstorm this product", "starting from scratch", or wants to explore and structure a greenfield product idea through guided conversation. Produces a product-concept.md document capturing the product vision, core experience, target users, trust model, platforms, and scope boundaries.

This skill should be used when the user says "manage secrets", "arn infra secrets", "infra secrets", "secrets management", "set up secrets", "configure secrets", "audit secrets", "secrets audit", "rotate secrets", "secret storage", "vault setup", "key management", "credential management", "secrets scan", "check for exposed secrets", "secrets provider", "arn-infra-secrets", "set up secret manager", "configure secret injection", "environment variables", "env vars", "secure env vars", or wants to set up, configure, audit, or manage secrets and credential storage for their infrastructure deployment.

This skill should be used when the user says "save infra plan", "save infrastructure plan", "structure infra plan", "create infra project", "finalize infra plan", "arn infra save plan", "infra save plan", "save change plan", "structure infrastructure plan", "finalize infrastructure plan", "arn-infra-save-plan", or wants to convert a PLAN_PREVIEW_INFRA_*.md into a structured project directory with infrastructure-specific templates, report templates, and progress tracking.

This skill should be used when the user says "infra pipeline", "arn infra pipeline", "create CI/CD pipeline", "set up deployment pipeline", "generate pipeline", "infra CI/CD", "deployment pipeline", "setup cicd", "generate github actions", "generate gitlab ci", "generate bitbucket pipeline", "infrastructure pipeline", "pipeline setup", "create deployment workflow", "cicd for infrastructure", "infra deployment pipeline", "set up infrastructure CI/CD", "arn-infra-pipeline", or wants to generate infrastructure-specific CI/CD pipelines with SOC 2 alignment, OIDC authentication, and environment-aware deployment stages.

This skill should be used when the user says "cleanup", "infra cleanup", "arn infra cleanup", "clean up resources", "destroy expired resources", "check ttl", "check expired", "ttl cleanup", "remove old deployments", "destroy dev environment", "tear down", "teardown infra", "destroy resources", "cleanup ephemeral", "check for expired resources", "clean up infra", "resource cleanup", "destroy old resources", "prune resources", "delete expired deployments", "decommission", or wants to check for and destroy expired ephemeral infrastructure resources. This skill also supports periodic monitoring via `/loop 6h /arn-infra-cleanup` for session-duration TTL enforcement.

This skill should be used when the user says "planning", "arness planning", "plan a feature", "start planning", "I want to build", "new feature", "plan something", "what should I build", "pick an issue", "plan a bug fix", "I have an idea", "spec and plan", "plan from scratch", "plan this", "feature planning", "bug planning", "plan this issue", "arn-planning", or wants to go from an idea, issue, or bug report through to a complete implementation plan ready for execution. Handles severity-aware scope routing across three ceremony tiers (swift, standard, thorough), routing between feature specs, bug specs, and quick implementations, and produces a reviewed plan ready for execution. Chains to arn-implementing at completion.

This skill should be used when the user says "review implementation", "review the project", "check implementation", "quality review", "validate implementation", "implementation review", or wants a post-execution quality gate to verify that the implementation follows the project's stored code and testing patterns and matches the plan. Reports issues as ERRORS, WARNINGS, INFO with a verdict. Do NOT use this for reviewing PRs (use arn-code-review-pr) or validating plans (use arn-code-review-plan).

This skill should be used when the user says "execute plan with teams", "run plan teams", "execute with agent teams", "team execution", "execute plan with agent teams instead of subagents", "teams mode", "agent teams mode", "execute with teams", or wants to execute a structured project plan using Claude Code's experimental Agent Teams feature. Creates a team of executor, reviewer, and architect teammates that collaborate on task implementation with built-in quality gates. Requires the experimental Agent Teams feature to be enabled. For standard subagent-based execution, use arn-code-execute-plan instead.

Drafts customer support responses, troubleshoots reported issues, writes FAQ and knowledge base entries, handles complaint and escalation workflows, and composes follow-up or refund communications. Use when the user asks about responding to customer complaints, writing help desk replies, handling refund or billing disputes, drafting ticket responses, creating support documentation, or managing escalation to specialists. Covers email, chat, phone, and social media channels with consistent tone, SLA awareness, and CSAT-driven quality standards.

Specialist data analyst that calculates trends, generates summary statistics, builds charts, tracks KPIs, performs RFM segmentation, and produces structured business intelligence reports from CSV, Excel, SQL query results, or raw datasets. Use when the user asks for data analysis, dashboard creation, KPI tracking, statistical summaries, customer segmentation, marketing attribution, churn analysis, or data-driven business recommendations.

Monitors Excel spreadsheets (.xlsx/.xls) and extracts key sales metrics (MTD, YTD, Year End) to generate internal live reports. Use when the user needs to parse sales reports, track revenue figures, pull MTD/YTD data from a spreadsheet, build a sales dashboard, or automate extraction of sales performance data from Excel files into a database.

Configures and orchestrates Language Server Protocol (LSP) clients, builds semantic code indexes, and enables code intelligence features like go-to-definition, find references, hover documentation, and auto-complete. Use when you need to set up or debug language servers (e.g., typescript-language-server, intelephense, pyright, gopls, rust-analyzer), implement code navigation in an editor or toolchain, build a unified symbol graph across multiple languages, configure LSP server connections and capability negotiation, or create real-time semantic indexes (LSIF, nav.index.jsonl) for large codebases.

Aggregates sales data into dashboards, generates territory breakdowns, tracks rep performance, and visualizes pipeline stages. Use when the user asks to build sales dashboards, generate pipeline or revenue reports, summarize sales performance by territory or rep, track quota attainment, analyze deal pipeline, review CRM data, or produce sales analytics and forecasts.

Creates browser-based AR/VR/XR experiences using the WebXR Device API, builds 3D scenes with Three.js, A-Frame, and Babylon.js, implements hand tracking, raycasting, hit testing, spatial anchors, and controller input, and applies performance optimizations like LOD, occlusion culling, and shader tuning for headsets and mobile AR. Use when the user asks about WebXR, virtual reality, augmented reality, immersive 3D web apps, VR headsets, spatial computing, or mentions frameworks like Three.js, A-Frame, Babylon.js, or file formats like .glb or .gltf.

Designs and implements immersive cockpit interfaces for XR environments, including 3D control panels, HUDs, dashboards, and spatial input systems using A-Frame or Three.js. Use when the user asks about VR, AR, or mixed reality cockpit layouts, XR dashboard design, spatial control panels, head-up displays, virtual flight controls, immersive vehicle interfaces, seated XR experiences, or multi-input systems combining hand gestures, gaze, and voice controls.

Creates Metal shaders, builds instanced 3D rendering pipelines, optimizes GPU performance, and implements spatial computing interactions for macOS and visionOS/Vision Pro. Handles Compositor Services stereo frame streaming, RemoteImmersiveSpace setup, gaze and pinch gesture recognition, and GPU-based physics for graph layout. Use when the user asks about Metal shaders, .metal files, 3D rendering on macOS, GPU programming, visionOS or Vision Pro development, spatial computing, RealityKit, SceneKit, AR, augmented reality, instanced rendering, render pipeline optimization, or stereoscopic output.

Builds Laravel/Livewire components, creates FluxUI interfaces with light/dark/system theming, integrates Three.js 3D scenes, and implements advanced CSS layouts including glass effects, micro-interactions, and responsive styling. Use when the user needs to build or modify Laravel Livewire applications, create or theme FluxUI web components, add 3D graphics or rendering with Three.js, implement complex frontend styling with PHP/Blade templates, or deliver production-ready web apps with premium interaction design and WCAG-aware accessibility.

Creates strategic project plans, allocates team resources across concurrent projects, tracks milestones and portfolio ROI, and generates executive status reports and quarterly portfolio reviews for creative studios. Use when the user asks about planning a project portfolio, scheduling or assigning team resources, managing multiple concurrent projects, tracking deadlines and budgets, preparing stakeholder or board-level reports, coordinating cross-team work, or optimizing creative studio operations.