svens-claude-plugins

Frame A/B tests with falsifiable hypothesis, variants, pre-committed primary/secondary/guardrail metrics, MDE, sample size (formula shown), duration spanning a weekly cycle, peek policy, pre-committed decision rule, validity risks with mitigations, and ethics review. Mermaid diagrams with optional PNG export.

1 skill

Write, audit, or split acceptance criteria for a user story. Given/When/Then (Gherkin) default + rule-based + mixed formats. Systematic coverage (happy path + negative + edge + boundary + a11y + optional performance/security/data/integration). INVEST at story + AC level. SPIDR split (Spike / Path / Interface / Data / Rule) when story too big. Scenario outlines for parametric data. Mermaid coverage pie + split diagrams with optional PNG export.

1 skill

Define accessibility requirements against WCAG 2.2 AA (default), AAA, EN 301 549, EAA, Section 508, ADA. Produces per-feature Given/When/Then criteria, assistive-technology support matrix per platform, combined automated + manual + AT + user-testing plan, and remediation priority for existing products. Not a conformance audit. Mermaid diagrams with optional PNG export.

1 skill

Write, review, supersede, or index Architecture Decision Records. Michael Nygard format (default) + Y-statement alternative. Immutable once accepted — supersession chain preserves old ADRs. Status lifecycle (Proposed / Accepted / Deprecated / Superseded). ADR log with chronological index + supersession chains visible. Review mode flags stale ADRs + missing consequences. Integrates with traceability-matrix. Mermaid timeline with optional PNG export.

1 skill

Bottom-up thematic clustering of unstructured items (research notes, interview quotes, brainstorm ideas, feedback) using the KJ method. Discovers emergent themes with evidence traceability, identifies patterns/tensions/gaps, flags outliers, and prioritizes clusters by signal strength. Mermaid diagrams with optional PNG export.

1 skill

Algorithm design pre-implementation: problem + inputs/outputs + constraints, ≥2 candidate approaches compared on time+space+stability+in-place+parallelism, chosen approach with loop/data/global invariants, language-neutral pseudocode, correctness argument (invariant / induction / preservation / reduction), edge-case catalog, worst/avg/space complexity, numerical + concurrency concerns, property-based + boundary + performance + fuzz tests, parallelization + out-of-core + streaming variants.

1 skill

Machine-readable API contract in OpenAPI 3.1 (REST), AsyncAPI 3.0 (events), GraphQL SDL, or Protobuf 3 (gRPC). Skeleton + operations + reusable components + RFC 7807 Problem envelope + security schemes + examples per operation. Contract-first. Lint rules per format (Spectral / Redocly / graphql-schema-linter / buf lint + breaking).

1 skill

Design an API by selecting style (REST / GraphQL / gRPC / WebSocket / SSE / tRPC / hybrid) against consumer profile + caching + real-time + typing + browser-reachability + team expertise. Per style: resource modeling / schema / RPC surface, pagination (cursor / offset / keyset), filtering + sorting + sparse fields, RFC 7807 error taxonomy, cross-cutting (auth + idempotency + ETag). Hands off versioning / rate-limit / webhook / contract to companion skills.

1 skill

API versioning strategy per style — REST (URL path / header / media-type / evolutionary date-pinned), GraphQL (@deprecated + additive schema), gRPC (package versioning + buf breaking), events (hand-off to event-schema). Breaking vs non-breaking taxonomy. Deprecation lifecycle (announced → deprecated → sunset → removed) with RFC 8594 Deprecation + Sunset headers, parallel windows per consumer type (public 12–24mo / partner 6–12mo / internal 1–3mo), multi-channel communication.

1 skill

Select architectural pattern (monolith / modular monolith / microservices / event-driven / serverless / CQRS / service-based / space-based) based on team size + scale + latency + consistency + change frequency. Monolith-first bias. Evaluates against decision factors. Supports hybrid combinations per subsystem. Evolution roadmap with concrete triggers. Mermaid diagrams with optional PNG export.

1 skill

ATAM-inspired structured trade-off analysis. Prioritizes quality attributes, identifies classic trade-off dimensions (CAP / PACELC / latency-vs-throughput / consistency-vs-availability / cost-vs-performance / coupling-vs-cohesion / etc.), scores options per attribute, runs sensitivity analysis identifying priority swaps that flip recommendation. Output frames as 'recommendation X, gaining Y, at cost Z' — not single-winner reduction. Surfaces non-obvious patterns (second-order, team-level, time-horizon). Mermaid diagrams with optional PNG export.

1 skill

Inventory and analyze attack surface across 9 categories (network-facing / APIs / auth / client-side / supply chain / physical / human-social / side channels / admin-debug). Per element: exposure + auth + protocol + data sensitivity + CVEs + monitoring. Ranks reductions (remove > restrict > monitor > harden > patch) by risk-per-effort. Mermaid diagrams with optional PNG export.

1 skill

Authentication strategy per user population. Selects mechanism (password / MFA / SSO OIDC-SAML-OAuth2 / passwordless WebAuthn-passkey-magic-link / mTLS / API keys / JWT / session cookie). Covers lifecycle (registration → recovery → rotation → revocation). Maps threats to mitigations. Mermaid diagrams with optional PNG export.

1 skill

Authorization model (RBAC / ABAC / ReBAC Zanzibar-style / PBAC). Per resource × action × subject: allowed conditions. PDP / PEP / PAP / PIP architecture with central-vs-distributed trade-off. Common patterns: tenant isolation, delegation, break-glass with audit, GDPR purpose-based access. Mermaid diagrams with optional PNG export.

1 skill

Capture, compare, release, and roll back named baselines of a requirements / artifact set. Released baselines immutable with content hashes. Diff classifies changes as backward-compatible / breaking / editorial. Evidence bundle per released baseline. Append-only audit trail. Supports ISO 13485 / IEC 62304 / FDA / aerospace / automotive retention requirements. Mermaid diagrams with optional PNG export.

1 skill

Brainstorming and brainwriting skill applying classic rules, 6-3-5, reverse brainstorming, SCAMPER, round-robin, nominal group technique, silent brainstorming, crazy 8s, and HMW. Autonomous, facilitation, or documentation mode. Affinity clustering, multi-criteria evaluation, and Mermaid diagrams with optional PNG export.

1 skill

Structured build vs buy (vs hybrid / open-source / rent / non-consumption) analysis for a capability. Evaluates 7 criteria (strategic fit, TCO, time to value, control, risk, switching cost, opportunity cost) with weighted scoring tied to strategic importance. Produces scored decision matrix, TCO breakdown with ranges, recommendation with trade-off and risk, and reversal conditions. Mermaid diagrams with optional PNG export.

1 skill

Generate, update, review, delete, and transform business cases in four formats (one-pager, lean canvas, short-form, full)

1 skill

Model business processes using BPMN 2.0 conventions. Produces structured specs with events / activities / gateways / flows / pools-and-lanes / data-objects / annotations. Three modes: as-is / to-be / gap. Per activity: lane / type / I-O / SLA / exceptions. Per gateway: type / condition / branches. Exception handling with trigger / handler / compensation. Mermaid swimlane flowchart + optional BPMN XML emission.

1 skill

Change impact across seven dimensions (stakeholder / systems / process / data / training / compliance / financial). Classification frames (ADKAR / Prosci 7-step / Kotter 8-step / lightweight). Magnitude × reach matrix. Reversibility (reversible / mostly / hard / one-way) + urgency with 2x scrutiny rule for irreversible. Risk register with mitigations + owners. Sequencing + dependencies. Go/no-go inputs checklist (not the decision itself).

1 skill

CI/CD pipeline source → build → test → security → artifact → deploy → verify → notify. Tool selection, quality gates (unit / integration / E2E / SAST / SCA / container / license), artifact signing + SLSA provenance, deployment strategies (rolling / blue-green / canary / progressive / feature flags). OIDC federation.

1 skill

Structural UML diagrams via Mermaid — classes / interfaces / enums with visibility, stereotypes (aggregate-root / value-object / port / adapter), relationships correctly distinguished (inheritance --|>, implementation ..|>, composition *--, aggregation o--, association --, dependency ..>), multiplicities, package / module views via graph subgraphs with layer + bounded-context rules. One purpose per diagram. Trivial members omitted.

1 skill

Cloud architecture for AWS / Azure / GCP / multi-cloud applying Well-Architected pillars. Compute paradigm, regions + AZ, network topology, identity, storage, managed services, landing zone foundation, cost optimization.

1 skill

Task-based cognitive walkthrough. Simulates a novice user through a specific task; per step answers the four CW questions (goal match / action visibility / action-effect link / progress feedback). 'No' answers become findings with severity and recommendations. Task-completion prediction + multi-persona variants. Mermaid diagrams with optional PNG export.

1 skill

Stakeholder communication plan. Matrix (who / what / when / how / owner) per audience (exec / leadership / team / customer-facing / external customers / partners / regulators / legal). Tailored style per audience. Reporting cadence (daily/weekly/biweekly/monthly/quarterly). Structured templates (RAG + highlights + risks + asks). Dashboards focused (5–8 metrics). Named escalation routes with SLAs. Bidirectional feedback loops with close-the-loop. Crisis / incident comms (speed > polish, single source, IC, post-mortem).

1 skill

Autonomous web research that produces a sales/outreach-ready HTML company brief. Identifies people via website, news, blogs, conference talks, podcasts, GitHub, Scholar/arXiv, patents, SEC filings, Crunchbase, and trade press. Public sources only, every claim cited with source URL. Output is a single self-contained HTML file with a function-grouped person-card grid (Leadership / GTM / Engineering / Product / Other), recent-activity timeline, and grounded outreach hooks. No private contact data, no login-gated platforms.

1 skill

Autonomous competitive analysis using SWOT, Porter's Five Forces, TOWS matrix, and strategic positioning. Researches competitors via web, produces Mermaid diagrams with optional PNG export.

1 skill

Review-ready design document for a single component (service / module / library): purpose + context + bounded responsibilities, public interface before internals, collaborators (direction + protocol), data + state machine, errors mapped to external codes, concurrency + ordering, observability hooks, NFR targets (latency / throughput / availability) with strategy, security, config, tests, trade-offs + rejected alternatives, open questions. Hands off to contract / schema / error-strategy / config skills.

1 skill

Generate low-fidelity concept sketches for a design challenge as structured concept briefs, storyboard panels, low-fi wireflows (Mermaid), key touchpoint specs, and annotations. Produces 2-4 variants side-by-side with comparison table. Autonomous, comparison, and elaboration modes. Mermaid diagrams with optional PNG export.

1 skill

High-level conceptual data model — business entities + relationships in domain language, no technology or normalization. First of three modeling layers (conceptual → logical → physical). Mermaid ERD with optional PNG export.

1 skill

Service configuration — key catalog per category (infra / business tunables / feature flags) with type + default + validation + scope + reload, precedence (flags > env > remote > file > defaults), per-category source (env / vault+KMS / remote-config / flag service), start-up schema validation fail-fast, secrets never in repo via External Secrets Operator + workload identity + rotation + audit, hot-reload only where safe, config drift fingerprint + alerts, feature-flag categories (release/ops/experiment/permission/big) with owner + removal plan + quarterly cleanup.

1 skill

Inventory + audit existing content for a site / product. Per item: metadata (URL, type, last-updated, author, tags, word count, media, links, traffic), 5 quality dimensions (accuracy / freshness / completeness / relevance / findability), gap analysis vs user needs, recommended action (keep / update / merge / rewrite / archive / delete / migrate / cannot-assess) + effort. Prioritization across 4 buckets. Markdown + CSV export. Mermaid diagrams with optional PNG export.

1 skill

Produce system context diagram — highest-level view with system as single box, external entities (person / user-group / software-system / organization) around it, labeled data + interaction flows, and explicit in-scope / out-of-scope. Supports C4 Level 1 (default), classic context diagram, DFD Level 0 styles. Mermaid flowchart with optional PNG export.

1 skill

Map controls against frameworks (ISO 27001, SOC 2, NIST CSF, NIST 800-53, CIS v8, PCI-DSS v4, HIPAA Security Rule, NIS2, ISO 27701, ISO 42001). Produces control inventory, mapping matrix, coverage counts, gap analysis with recommended controls and effort, maturity scoring, and cross-framework consolidation flagging high-leverage controls. Not a certified audit. Mermaid diagrams with optional PNG export.

1 skill

Autonomous cost-benefit analysis with NPV, BCR, IRR, payback period, and break-even calculations. Multi-alternative comparison, sensitivity analysis with scenarios, intangible monetization, and risk assessment. Mermaid diagrams with optional PNG export.

1 skill

Cost estimation using three-point (PERT), analogous, parametric, and bottom-up techniques with optimistic / most-likely / pessimistic ranges. Produces category breakdown, risk-based contingency (10-40%), confidence labeling, and sensitivity analysis on top 3 cost drivers. Mermaid diagrams for cost breakdown, range, and sensitivity with optional PNG export.

1 skill

Compute multi-dimensional coverage (Req→Test / Goal→E2E / Risk→Control / NFR→Implementation / Regulatory→Control / Abuse-case→Control). Detects false coverage (tests without assertions, trivial assertions, mocked system-under-test), identifies duplicated coverage, computes risk-weighted %, and produces prioritized gap-analysis actions. Mermaid diagrams with optional PNG export.

1 skill

Autonomous customer segmentation with multi-dimensional profiling, MASDA validation, targeting matrix, positioning map, and activation roadmap. Mermaid diagrams with optional PNG export.

1 skill

Select DB class + product using DB-specific criteria. 12 classes: relational / document / wide-column / key-value / graph / time-series / search / vector / cache / analytical / ledger / NewSQL. Embraces polyglot persistence.

1 skill

Structured catalog of data entities and attributes. Per entity: source of truth, owner, sensitivity, retention, volume. Per attribute: type (string / integer / decimal / boolean / date / timestamp / enum / reference / json / array), format, nullable, constraints, source, mandatory PII classification (none / identifier / quasi-identifier / sensitive / health / financial / biometric / children's / Art-9), masking rule, validation rules. Typed relationships with cardinality + FK + cascade. Governance + versioning. Mermaid ERD with optional PNG export. Markdown + CSV export.

1 skill

Privacy-focused data flow diagramming. Maps entities, flows, data categories, GDPR legal basis, retention, and cross-border transfers. Flags high-risk conditions (special-category, children's data, international transfers, automated decisions), produces a RoPA-style register, and identifies DPIA needs. Not legal advice. Mermaid diagrams with optional PNG export.

1 skill

Data governance: stewardship (owner / steward / custodian / consumer), 6-dimension quality SLAs (accuracy / completeness / timeliness / consistency / validity / uniqueness), classification-driven access + purpose-based, lifecycle (retention / archival / destruction), lineage + metadata catalog, change + issue management, GDPR / CCPA / HIPAA / SOX alignment.

1 skill

Data migration plan across 5 strategies (big-bang / phased / parallel-run / strangler-fig / CDC-plus-switchover) and 8 phases (source → target → mapping → execution → cutover → validation → rollback → post-migration). Pitfalls catalog. Reconciliation mandatory.

1 skill

Domain-Driven Design strategic patterns. Identifies subdomains (core / supporting / generic) with investment strategy, bounded contexts with ubiquitous language glossary per context (cross-context term differences surfaced), and typed context-map relationships (Evans' 9 patterns: shared kernel / customer-supplier / conformist / ACL / open host / published language / separate ways / BBM / partnership). Conway's Law alignment check. Mermaid context map + subdomain investment quadrant with optional PNG export.

1 skill

Express complex business rules as decision tables. Limited-entry (Y/N) / extended-entry (valued) / mixed. Per rule: condition values → actions. Verifies completeness (all combinations covered or impossible), consistency (no overlapping rules with different outcomes), redundancy (no duplicates). Explicit default / otherwise rule. Optional DMN XML emission with hit policy (UNIQUE / FIRST / PRIORITY / ANY / COLLECT). Mermaid diagrams with optional PNG export.

1 skill

Definition of Ready (short enforceable pre-commit gate) + Definition of Done at three levels (story / sprint / release). DoR: value + AC + deps + designs + NFRs + data + size + blockers. Story-DoD: merge + CI + SAST + tests + observability + PO accept. Sprint-DoD: retro + demo + notes. Release-DoD: regression + perf + security + a11y + i18n + migration + runbooks + on-call + rollback + compliance. Team-vs-org layering. Waiver protocol with expiry. Living doc with quarterly review. Anti-patterns flagged.

1 skill

Demo + showcase planning. Purpose-first framing (discovery / feedback / alignment / sales / celebration / training). Audience-adapted narrative arc (hook / context / demo 60% / insights / ask / Q&A time-boxed). Demo script per segment with fallback. Failure recovery break-glass paths (pre-recorded backups, reset scripts). Rehearsal cadence (content review T-1w, dry-runs T-3d + T-1d, check T-30min). Structured feedback capture (scribe + survey + 1-week close-the-loop). Accessibility (captions + screen readers + post-session content).

1 skill

DI planning — constructor injection default, setter/param/ambient where justified, one composition root at main/Program.cs/app.module.ts/bootstrap, lifetimes per dep (singleton / scoped-per-request / transient / per-tenant / per-conversation) with thread-safety rules, framework choice (manual for Go/Rust, Spring for Java, NestJS for TS, FastAPI Depends for Python, built-in DI for .NET), ports + adapters with deterministic ports (Clock / RNG / IdGen / HttpClient), lifecycle hooks, circular-dep prevention via seam extraction.

1 skill

Map dependencies between components, teams, deliverables, systems, or tasks. Every edge carries direction and type (hard-blocking / soft-blocking / enabling / data). Detects cycles with classification, surfaces hubs/sources/sinks, identifies single points of failure with blast radius, and computes critical path when durations are supplied. Mermaid flowchart and Gantt diagrams with optional PNG export.

1 skill

DR per service: RPO + RTO tiered by criticality, strategy from backup+restore (cheap, slow) through pilot-light / warm-standby / hot-standby to multi-region active-active (expensive, zero-downtime). Backup policy (3-2-1 + immutability). Failover runbooks + drills (tabletop / partial / full / surprise). Compliance (DORA / HIPAA / SOC 2 / ISO 22301).

1 skill

Generate comprehensive project documentation through interactive dialog with templates

1 command

Docs strategy audience-first (end-users / API consumers / operators / maintainers / newcomers / leadership / regulators) with Diátaxis framework (tutorials / how-to / reference / explanation — distinct, not mixed). IA + findability + versioning. Docs-as-code with CI-tested links + code samples. Review + maintenance (owner + cadence + staleness alerts + twice-yearly prune). Accessibility + localization. Metrics (traffic + helpfulness + zero-result searches + staleness + support-deflection). Legal / compliance docs separated.

1 skill

Docs tooling selection. Categories: static generators (Docusaurus / MkDocs Material / Astro Starlight / Nextra / VitePress / Hugo / Sphinx), dev portals (Backstage TechDocs / Port / Cortex), wikis (Confluence / Notion / Outline / GitBook), API ref (Redoc / Scalar / Stoplight / Swagger UI / Mintlify / ReadMe), LMS. Weighted criteria (docs-as-code fit / versioning / search / l10n / UX / publishing / theming / plugins / perf / cost / exit). Per-audience recommendation. Lock-in + exit analyzed.

1 skill

Empathy mapping for a persona or user segment across 6 quadrants (Dave Gray) or classic 4-quadrant (XPLANE). Synthesis mode extracts from research; autonomous mode infers with labeled assumptions. Surfaces tensions, evidence gaps, 3-5 synthesized insights, and top pain/gain highlights. Mermaid diagrams with optional PNG export.

1 skill

Encryption strategy across all data states (at-rest / in-transit / in-use / E2E). Per category: algorithm + key length + key management + rotation. Key hierarchy HSM → KMS → KEKs → envelope-DEKs → data. TLS 1.3 config, crypto agility, post-quantum readiness. Regulatory alignment (FIPS / PCI / GDPR / HIPAA). Mermaid diagrams with optional PNG export.

1 skill

Environment strategy: per-env purpose + data + access + isolation + prod-parity + refresh + teardown. Ephemeral per-PR preview environments. Data strategy (synthetic / anonymized / never-raw-prod). Cost management via tagging + auto-stop + ephemeral lifecycle.

1 skill

End-to-end error handling design: stable taxonomy (validation / permission / network / third-party / server / data / rate-limit / capacity / compliance / safety), per-error message spec (plain-language / next action / technical code), prevention strategy, recovery flows, a11y, observability handoff, and i18n. Mermaid diagrams with optional PNG export.

1 skill

Event schemas with CloudEvents 1.0 envelope + JSON Schema / Avro / Protobuf payload. Past-tense reverse-DNS naming, fact vs delta + domain vs integration classification, partition-key + ordering + idempotency-key, schema-registry compatibility mode (backward / forward / full / none), additive evolution + parallel-topic / upcasting for breaking changes, PII marking + GDPR crypto-erasure.

1 skill

Event sourcing + CQRS design (independent, often combined). ES: events-as-facts per aggregate stream, event store selection, schema versioning + upcasting, snapshotting, replay, temporal queries. CQRS: command vs query separation, eventual-consistency projections. GDPR via crypto-erasure / redaction / separation / retention.

1 skill

Matt Wynne example-mapping for pre-dev story refinement. 25-30 min four-card workshop: yellow (story), blue (rules), green (concrete examples), red (questions). Ready-or-not verdict (READY / MARGINAL / NOT READY) with rationale. Post-session actions for reds. Draft acceptance criteria feed into acceptance-criteria-writing. Facilitation + documentation modes. Mermaid diagrams with optional PNG export.

1 skill

Autonomous financial forecasting with revenue, expense, cash flow, P&L projections, and unit economics. Multiple methods (driver-based, bottom-up, top-down). Scenario modeling and sensitivity analysis with Mermaid diagrams and optional PNG export.

1 skill

Failure Mode and Effects Analysis (PFMEA / DFMEA). Per function: modes, effects, causes, controls, S/O/D scores (1-10 anchored), RPN, and AIAG-VDA Action Priority. Recommends actions targeting Severity/Occurrence/Detection with expected post-action scores and re-score delta. Mermaid diagrams with optional PNG export.

1 skill

Generate production-ready front-end code from complete user stories with best practice enforcement

1 skill

Generate functional specifications from business case and personas through interactive dialogue

1 command

Generate a simulation-ready fictional present-day person profile. Combines a narrative layer (demographics, work, family, social life, health, personality, beliefs, motivations, hobbies) with an explicit behavioral layer (decision style, behavioral thresholds, scenario response, stress response, trust model, social influence, value-behavior tensions, action readiness, adaptability, routine dependency, priority logic, certainty markers, stable vs. dynamic traits, triggers, inhibitors, information processing style, likely first response, recovery pattern) plus hour-by-hour weekday and weekend. Works fully autonomously or accepts any subset of constraints.

1 skill

Apply Gestalt principles (proximity / similarity / closure / continuity / common fate / figure-ground / common region / connectedness) as a design or audit checklist. Per principle: verdict (applied-well / at-risk / violation / insufficient-detail), evidence, impact, concrete recommendation, and before/after. Cross-checks under contrast, zoom, motion, color-blind, SR. Mermaid diagrams with optional PNG export.

1 skill

Streamlined git commit and push with auto-generated commit messages

1 command

Decompose strategic goals into measurable operational sub-goals. Four methods: goal-tree / GQM / i-star / means-ends. Per goal: level, parent, contribution type (necessary / sufficient / contributing), success criteria, owner (required at ops), horizon, measure, dependencies, risks. Surfaces conflicts with resolution notes. SMART check at operational leaves. Feeds okr-definition + metric-definition. Mermaid diagrams with optional PNG export.

1 skill

Autonomous go-to-market strategy with ICP/personas, positioning and messaging, pricing/packaging, channel strategy (PLG/SLG/hybrid), 90-day launch plan, rollout waves, and success metrics. Mermaid diagrams with optional PNG export.

1 skill

Evaluate a UI against Nielsen's 10 usability heuristics (or Norman / Shneiderman / mobile / a11y / conversational / custom sets). Per finding: location, heuristic violated, Nielsen severity (0-4), evidence, impact, concrete recommendation, effort. Supports single-evaluator autonomous mode + multi-evaluator aggregation. Mermaid diagrams with optional PNG export.

1 skill

Transform a problem, pain point, insight, or research finding into 'How might we...' questions for ideation. Deconstructs input, applies multiple HMW lenses, produces 3-6 variants with scope and wording checks, recommends a best variant, and optionally breaks broad HMWs into sub-HMWs. Mermaid diagram with optional PNG export.

1 skill

Infrastructure as Code plan: tool (Terraform / OpenTofu / Pulumi / CDK / Bicep), layered modules, remote state with locking, environment separation (workspaces / directories / accounts), CI/CD OIDC integration, policy-as-code (OPA / Checkov / tfsec), drift detection.

1 skill

Analyze the impact of a proposed change across a traceability graph. Names affected artifacts (no 'many'), classifies blast radius (local / cross-team / external / enterprise), scores change-level risk per factor (reversibility / detection / blast / schedule / compliance), estimates effort per team, proposes phased rollout with gates and rollback, plans communication per audience, and surfaces residual uncertainties for discovery. Mermaid diagrams with optional PNG export.

1 skill

Autonomous industry benchmarking comparing performance against P25/P50/P75 and best-in-class. Gap analysis, composite scorecards, maturity assessment, and improvement roadmaps with Mermaid diagrams and optional PNG export.

1 skill

Autonomous influence diagramming mapping relationships, influence flows, and power dynamics between stakeholders. Produces influence matrices, centrality analysis, coalition detection, and strategic recommendations with Mermaid diagrams and optional PNG export.

1 skill

Detects when an assistant response contains structured or relational data (process, relational, hierarchical, time-series, comparative, key-value, numeric/proportion, set/categorical) and renders it inline using a fixed catalog of CLI-friendly forms (ASCII flowcharts, tree views, ER-style diagrams, Gantt bars, side-by-side cards, two-column tables, horizontal bars, cluster cards). Operates by default — anticipates the right visual form so the user does not have to ask 'can you make this visual?'. No Mermaid, no LaTeX, no color conventions — purely structural.

1 skill

Select integration pattern between services: sync request-response, async queue / pub-sub / streaming, saga orchestration vs choreography, transactional outbox, CDC, polling, webhook, async RPC. Anti-pattern checks (dual-write → outbox, 2PC → saga, sync chains, retry without idempotency, no DLQ). Idempotency + DLQ + circuit breaker mandatory for async.

1 skill

Specify an internal code-level interface (module API / library / port) — signatures with preconditions + postconditions + invariants + error taxonomy (category + recovery) + time/space complexity + concurrency + idempotency + lifetime/ownership + stability label (stable/experimental/deprecated/internal). Mandatory examples: happy + edge + failure. Testability + alternative designs. Distinct from api-contract-specification (network APIs).

1 skill

Refactor JavaScript logic: code splitting, design patterns, ES6+ modernization

1 command

Jobs-to-be-Done analysis for a product, feature, market, or segment. Produces formal main job statement, related/emotional/social jobs, Ulwick desired outcome statements, forces-of-progress analysis, competitive alternatives including non-consumption, and underserved-outcome opportunity signals. Synthesis or autonomous mode. Mermaid diagrams with optional PNG export.

1 skill

Transform user stories (from user-story-generator) and user journeys (from user-journey-management) into a central kanban.md file at the project root. Analyzes dependencies and proposes a numerical priority ordering when missing. The kanban.md is the single source of truth for development status with TODO / DOING / DONE sections, manually editable by moving stories between sections. On a re-run the skill iteratively reconciles changes (new / removed / status conflicts / dependency changes) with the user. On request, renders three projections from the data via inline-presentation - progress percentage (P-7 bar), kanban board (P-8 cluster cards), and dependency flowchart (P-1 ASCII). Stops on circular dependencies and asks the user to fix the source. All stories start in TODO on first run.

1 skill

Orchestreert een 5-sporen pipeline (probleem → markt → MVP-spec → prototype → GTM) die één opportunity uit /ontdek-kansen omvormt tot een launch-klare solution-map, gevolgd door een verplichte Fase 6 die de solution-map publiceert als VitePress sub-site via kans-vitepress-documentation. Roept ~20 bestaande skills aan met Go/No-Go-gates tussen sporen. Nederlandse marktfocus.

1 skill

Scaffoldt of her-aligneert een VitePress sub-site voor een solution binnen de kans-uitwerken-hub-structuur. Ondersteunt mode met of zonder wireframe-embed. Idempotent — theme/config-bestanden worden her-aligneert naar het huidige patroon; solution-content (01-probleem/, 02-markt/, ...) wordt nooit aangeraakt. Wired ook automatisch het hub-niveau bij: srcExclude, nav-dropdown, SUB_SITES-theme-set en landing-features.

1 skill

Open-source + third-party license compatibility analysis. Inventory via Syft / licensee / pip-licenses / go-licenses / cargo-deny / nuget-license, SPDX identifiers, 10-class classification (permissive / weak copyleft / strong copyleft / network copyleft / source-available / CC / public-domain / proprietary / dual / unknown), compatibility matrix vs distribution model (SaaS / on-prem / SDK / mobile / model weights), AGPL+SSPL distinguished from GPL, attribution + NOTICE obligations, patent grants, AI model/data licenses, risk rating Block/Review/Obligation/Clear, remediation options. Not legal advice.

1 skill

Component logging + tracing — structured JSON log schema (timestamp RFC 3339, level, service, env, version, trace_id, span_id, tenant_id, error), OpenTelemetry spans + attributes (HTTP/DB/messaging/rpc/exception semantic conventions) + events + links, W3C Trace Context propagation (traceparent + tracestate + baggage) over HTTP/gRPC/async headers, OTLP export to collector (avoid vendor lock-in), head+tail sampling (100% errors + slow, 1-10% happy), log↔trace linking, PII redaction fail-closed, retention tiers (hot 24-72h / warm 30d / cold 90d-7y).

1 skill

Logical data model — normalized + detailed but technology-agnostic. Generic types, primary + foreign + natural keys, constraints, referential integrity cascade. 3NF default. M:N via junction entities. Mermaid ERD with optional PNG export.

1 skill

Define CI-checkable maintainability criteria: complexity caps, test coverage per layer with critical paths named, documentation requirements, modularity rules, review gates, non-zero refactoring budget, dependency policy with SLAs, deprecation playbook, and legacy tolerance with drawdown schedule. Mermaid diagrams with optional PNG export.

1 skill

Autonomous TAM/SAM/SOM market sizing with top-down and bottom-up triangulation. Researches market data via web, produces growth projections, segmentation breakdowns, and Mermaid diagrams with optional PNG export.

1 skill

MDM for reusable entities (customer / product / vendor / location / employee). Architecture (registry / consolidation / coexistence / centralized), matching rules (deterministic + probabilistic thresholds), survivorship per attribute, integration (hub-spoke / federated / CDC), stewardship with SLA.

1 skill

Indi Young-style mental model diagramming. Captures user thinking / doing / feeling in a problem domain, grouped into 4-10 vertical 'towers' = task spaces. Per tower: think / do / feel / guiding-principles rows with evidence or `[Assumed]`. Optional feature alignment under towers surfaces opportunity gaps (towers without features) and misalignments (features without towers). Distinct from empathy-mapping (individual) and jtbd-analysis (formal job). Mermaid diagrams with optional PNG export.

1 skill

Select a message broker (Kafka / RabbitMQ / NATS+JetStream / SQS+SNS / Pub/Sub / Service Bus / Redis Streams / Pulsar / Kinesis) on throughput + ordering + delivery guarantee + replay + fan-out + durability + ops burden + cloud fit + cost + ecosystem. Per broker: strengths / weaknesses / delivery semantics. Hybrid splits per workload class. Managed vs self-hosted explicit.

1 skill

Design a coherent metric system: one user-value North Star, 3-5 decomposing input drivers, leading vs lagging per driver with time lag, guardrails with tolerances, counter-metrics per leading metric, and per-metric operational definitions (formula, source, population, exclusions, owner, cadence). Measurement readiness flags instrumentation gaps. Mermaid metric tree with optional PNG export.

1 skill

Design micro-interactions with Dan Saffer's trigger / rules / feedback / loops-and-modes model. Per interaction: multiple triggers with a11y equivalents, rules (input / state / side effects / timing / concurrency), multi-channel feedback per state, and modes with required entry / indicator / exit. Mermaid diagrams with optional PNG export.

1 skill

Generate a hierarchical mind map around a central topic with 5-8 main branches and configurable depth. Autonomous, transformation, or expansion mode. Classic, concept-map, and tree styles. Produces Mermaid mindmap diagrams with optional PNG export, a synced nested outline, and a per-branch keyword index.

1 skill

Plan mitigations for a set of risks. Response per risk (avoid / reduce / transfer / accept), concrete actions with owner / effort / cost / expected residual, cost-benefit check, roadmap (quick wins / structural / long-term), acceptance & transfer registers, and decision register feeding risk-register. Mermaid diagrams with optional PNG export.

1 skill

Monte Carlo simulation for cost / schedule / outcome uncertainty. Accepts input variables with distributions (triangular, PERT, uniform, normal, log-normal, discrete), runs 10k iterations, and produces P10-P95 percentiles, probability of meeting a threshold, sensitivity tornado, and contingency recommendation. Mermaid diagrams with optional PNG export.

1 skill

Model navigation for a site / app. Selects pattern (hub-spoke / hierarchical / flat / faceted / sequential / hybrid). Designs primary / secondary / utility / contextual / footer areas with per-item spec (destination / position / visibility / active-state). State behavior per item type. Mobile treated as first-class. Accessibility baked in (landmarks / aria-current / keyboard / target / contrast). Mermaid diagrams with optional PNG export.

1 skill

Multi-agent NCSC ICT-beveiligingsrichtlijnen audit met technische en stakeholder rapporten

1 command

Network design for cloud / hybrid. Non-overlapping CIDR plan, VPC structure, subnet tiering (public / private / data per AZ), routing (IGW / NAT / TGW), hub-spoke topology, DNS strategy, private endpoints for managed services, load balancers (L4 / L7 / global), CDN, hybrid (VPN / Direct Connect), service mesh.

1 skill

Performance + security test plan. Perf: types (load/stress/soak/spike/scalability/volume/capacity), workload modeling from analytics, SLO-aligned thresholds, baseline + trend, tools (k6/Gatling/Locust/JMeter), isolated prod-like env, chaos. Sec: SAST + SCA + secret + container + IaC in CI; DAST nightly; IAST + fuzzing + pentest + red team; AuthN/Z tests; threat-model coverage check; vuln SLAs by severity; bug bounty; compliance-aligned (SOC2/PCI/HIPAA/GDPR/ISO27001). Not a certified audit.

1 skill

Observability across 3 pillars (metrics / logs / traces) + events + profiles. OpenTelemetry default. Tool selection (Datadog / Prometheus+Grafana / Honeycomb / Splunk). Structured logging, metric cardinality discipline, distributed tracing with W3C Trace Context + sampling, SLO-burn alerting (not symptoms), dashboards per audience.

1 skill

Autonomous OKR definition with cascading/alignment across company, team, and individual levels. Committed vs aspirational classification, 0-1.0 scoring, CFR companion framework, and 20-mistake quality validation. Mermaid diagrams with optional PNG export.

1 skill

Onboarding plan pre-day-1 through month-3. Distinct roles (manager ≠ buddy ≠ mentor). Graduated first contributions (doc → small bug → feature → independent story → shipped feature). Knowledge scope (technical / product / process / domain). 30/60/90 check-ins + reverse-onboarding doc. DEI + accessibility deliberate. Metrics (time-to-first-PR, 6/12mo retention). Produces reusable template + per-hire plan.

1 skill

Orchestreert een pipeline van skills (trend-analysis, competitive-analysis, jtbd-analysis, hmw-framing, technische-haalbaarheid, opportunity-scoring) om per interessegebied een gerangschikte lijst van softwareproduct-kansen op te leveren. Nederlandse marktfocus, twee strategische lenzen (goedkopere her-implementatie + niet-beeldscherm-interfaces).

1 skill

Autonomous opportunity scoring using Ulwick's Opportunity Score (importance vs satisfaction), Teresa Torres' Opportunity-Solution Tree, and multi-criteria weighted scoring. JTBD-framed outcomes with priority landscapes. Mermaid diagrams with optional PNG export.

1 skill

Multi-agent OWASP Top 10 security audit with technical and stakeholder reports

1 command

Define performance budgets (latency percentiles, throughput, payload sizes, Core Web Vitals) with per-component allocations that sum, measurement plan (RUM/synthetic/CI/load test), violation policy (warn/block/rollback/page), degradation strategy, and device/network/geography segmentation. Mermaid diagrams with optional PNG export.

1 skill

Compose Dutch-context personas on-demand from external trait pools and pre-authored coupled archetype bundles. Combines 12 coupled-trait families with independent trait pools (hobbies, media, tech, attitudes, diet, social style, daily routine, domain-roles) to produce plausible NL personas at runtime. Callable by other skills via the Skill tool.

1 skill

Create detailed user personas through interactive dialogue for user story development

1 command

Map a person's personal values through an adaptive, energy-preserving interview combining Personal Values Card Sort, Critical Incident Technique, Laddering, and Schwartz PVQ. Calibrates language to the user (children ~8+ to adults). Produces a markdown profile with core values shortlist, narrative profile, and resumable session metadata.

1 skill

Create user personas through interactive dialogue from a business case or guided questioning, with iterative review

1 skill

Autonomous digital footprint audit for a named person. Surfaces every publicly findable item across self-published channels (own socials, blogs, code, video, audio), third-party publications (news, interviews, conference talks, papers, patents, court/KvK filings, Wikipedia, mentions, image search, Wayback Machine), and leaked-but-public sources (breach databases, pastebins — meta only, no payload). Output is a single self-contained HTML brief with origin badges (self/third/leaked) and removal difficulty per item, plus a prioritized takedown action list so the subject can request removal. Public sources only. Refuses dossiers on minors without consent or adversarial research requests.

1 skill

Physical data model — vendor-specific (Postgres / MySQL / MongoDB / DynamoDB / Cassandra / BigQuery / Snowflake) with platform types, indexes (B-tree / hash / GIN / GiST / composite / covering / partial), partitioning (range / list / hash), sharding, de-normalization, constraint enforcement, DDL output.

1 skill

Facilitate a planning-poker estimation session with anti-anchoring protocol (silent card selection → reveal → outlier discussion driven by extremes → re-vote → converge or park). Fibonacci default cards, reference-story calibration, timeboxed per item, per-item outcome log, session-level summary with follow-ups. Facilitation + documentation modes. Surfaces common anti-patterns. Mermaid diagrams with optional PNG export.

1 skill

Gary Klein pre-mortem. Stipulate failure at a horizon and retrospectively identify why. Elicits 10-20 failure modes across categories, clusters and scores Impact × Likelihood, produces preventive actions with leading indicators, and exports risks to risk-register / fmea / mitigation-strategy-planning. Autonomous mode + facilitator guide. Mermaid diagrams with optional PNG export.

1 skill

Autonomous prioritization with RICE, ICE, Value vs Effort, Kano, and Weighted Scoring frameworks. Cross-framework comparison, conflict resolution, and Now/Next/Later bucket assignment. Mermaid diagrams with optional PNG export.

1 skill

Autonomous problem-solution fit analysis using Lean Startup PSF, Customer Forces Canvas, DVF assessment, Riskiest Assumption Testing, and Evidence Quality Ladder. Fit scorecards, validation experiment designs, and pivot/persevere recommendations. Mermaid diagrams with optional PNG export.

1 skill

Plan layered information architecture: L1 primary / L2 secondary / L3 on-demand / L4 power-user. Classifies content items, assigns reveal mechanisms with trigger + exit + focus, ensures discoverability for hidden content, differentiates per user segment, and validates against Nielsen / Norman heuristics. Mermaid diagrams with optional PNG export.

1 skill

Enforceable quality gates per pipeline stage (pre-commit / CI on PR / code review / security review / design review / build+sign+SBOM / staging / canary / prod / post-release) with per-gate spec (purpose, trigger, objective criteria, fail-closed behavior, automation, named reviewer, timeouts, waiver with expiry, evidence for audit). Risk-profile-aware tightening. Waiver process + volume review. Metrics (pass rate / time-in-gate / waivers / escapes / flakes). Distinct from DoR/DoD (gates are machinery; DoR/DoD are commitments).

1 skill

Autonomous RACI matrix creation with variant support (RASCI, RACI-VS, DACI, RAPID). Validates against 15 anti-patterns, produces workload analysis, governance health scoring, and communication plan skeleton. Mermaid diagrams with optional PNG export.

1 skill

Responsibility / decision-rights matrices. RACI (Responsible / Accountable / Consulted / Informed — exactly one A per row) for ongoing activities. RAPID (Recommend / Agree / Perform / Input / Decide — one D + sparing A) for consequential decisions. DACI for lighter single-decision. Anti-patterns (multiple As, all-Cs paralysis, same-person R+A bottleneck, generic rows, wrong-framework-for-question). Quarterly review + owner + version. Not a staffing plan.

1 skill

Plan a rapid prototype to validate one specific assumption. Classifies the assumption (desirability / feasibility / viability / usability / technical / data), selects the cheapest technique (paper, wireflow, Wizard of Oz, concierge, landing-page, spike, pretotype), declares what will and will NOT be proven, pre-commits success / kill criteria, fixes a timebox, sequences follow-on work, and flags validity risks. Mermaid diagrams with optional PNG export.

1 skill

Rate-limiting + throttling + backpressure strategy. Algorithm (token bucket / leaky / sliding window / GCRA / concurrency), layered scope (global > per-tenant > per-user > per-IP > per-endpoint), enforcement (CDN → gateway → service → data), IETF RateLimit-* + Retry-After + RFC 7807 body, tier + quota model, circuit breaker + bulkhead + adaptive concurrency, Redis / Envoy / gateway-native storage.

1 skill

Generate a comprehensive README.md by analyzing the codebase and validating findings with the user. Detects monorepos and generates root + sub-package README's.

1 skill

Map the regulatory landscape for a product/service/business across jurisdictions. Inventories regulations by domain (privacy, security, sectoral, payments, AI, consumer, accessibility, ESG, tax, export-control), assesses applicability and severity, surfaces overlaps and conflicts, flags upcoming changes, and scores net risk. Not legal advice. Mermaid diagrams with optional PNG export.

1 skill

Release planning with Gantt + critical-path analysis. Cadence selection (continuous / weekly / monthly / release-train / milestone / hybrid) with trade-offs. WBS-to-release allocation (smallest-release-that-makes-sense; dependencies respected; risk front-loaded). Critical path named with slack per off-CP package. Explicit buffers (project 15-30% CP / feeding 10-20% / per-package contingency 30-50% on high-risk). External dependencies + constraints + freeze windows. SemVer vs CalVer. Freezes + dress rehearsals + post-release monitoring calendar.

1 skill

Produce RFI (discover, 2w response) / RFP (solution+pricing, 4-8w) / RFQ (commodity quote, 1-2w) solicitation documents. Standard sections with numbered requirement IDs, disclosed scoring rubric with weights, fair Q&A process (consolidated to all bidders), realistic 8-12w RFP timeline, T&C section flagged legal-review-required, vendor-diversity considerations. Produces draft solicitation + internal process memo (evaluation committee / scoring runbook / issuance-risk / legal checklist).

1 skill

Classic qualitative likelihood × impact risk matrix with 5×5 (or 3×3) grid, anchored scales, risk-appetite-adjusted thresholds, and explicit response recommendation (avoid / reduce / transfer / accept) per risk. Mermaid heat map with optional PNG export.

1 skill

Persistent risk register. Stable IDs, inherent + residual scoring, controls, response strategy, review cadence, history, and multiple views (top risks, by owner, by category, overdue, recently changed). Ingests from risk-matrix, fmea, monte-carlo-simulation, pre-mortem. Markdown + CSV export. Mermaid diagrams with optional PNG export.

1 skill

Autonomous ROI modeling with 6 variants (basic, annualized, risk-adjusted, expected, multi-period, intangibles). Industry-specific models (IT TCO, Marketing ROAS/CAC/CLV, Training Phillips, Product R&D). Scenario modeling and sensitivity analysis with Mermaid diagrams and optional PNG export.

1 skill

Model scalability for a service across multiple growth scenarios. Identifies the dominant bottleneck per scenario (CPU/memory/DB/cache/queue/network/external API), proposes scaling strategies targeting that specific bottleneck, produces a capacity plan with readiness, a cost model with cost-per-unit-of-load, and risks at scale. Mermaid diagrams with optional PNG export.

1 skill

Scope statement — purpose, SMART objectives with success criteria, deliverables with acceptance, explicit in-scope, explicit out-of-scope (highest-leverage section preventing creep arguments), assumptions with confirm-by dates, constraints (budget / time / people / regulatory / technical), boundaries (organizational / geographic / temporal / technical / segments), stakeholders + approval authority, scope-change protocol, coverage check with WBS, open questions. Distinct from business case / WBS / stakeholder map.

1 skill

Secrets management: vault selection (Vault / AWS-Secrets-Manager / GCP / Azure Key Vault / Doppler / 1Password / Infisical), per-type lifecycle (DB creds dynamic, cloud credentials via OIDC federation, API keys rotated, certs via ACME, JWT keys scheduled), injection patterns ranked (sidecar > file > env), environment separation, CI/CD OIDC federation, break-glass procedure. Mermaid diagrams with optional PNG export.

1 skill

Classify data and functional assets by sensitivity, score CIA impact, derive per-tier required controls (authn/authz/encryption/logging/retention/review/masking/monitoring), write functional security requirements with test-how + failure-mode, generate abuse cases, and map requirements to framework control IDs. Not a security audit. Mermaid diagrams with optional PNG export.

1 skill

UML sequence diagrams via Mermaid — participants ordered by call direction, sync (->>) vs async (-)) vs return (-->>) messages, fragments (alt/opt/loop/par/critical) over duplicated diagrams, activation bars sparingly, notes for timing/SLA/assumptions, creation/destruction for dynamic participants. One flow per diagram. Shared sub-flows extracted. PNG export via diagram-rendering mixin.

1 skill

Design a hierarchical site map with stable IDs, page types (entry / hub / detail / list / funnel / utility / legal / error), URL patterns, access levels, and nav placement. Surfaces orphans, near-duplicate pages, depth violations, and dead ends. Modes: autonomous / inventory / audit. Mermaid diagrams with optional PNG export.

1 skill

Create, update, rename, and delete skills with structured interview process and shared foundation compliance

1 skill

Define customer-facing Service Level Agreements: per-tier availability, performance commitments, support response times by severity, remedy schedule (credits with claim procedure), explicit exclusions, measurement methodology, and reporting cadence. Distinguishes SLA (external) from SLO (internal, tighter). Not legal advice. Mermaid diagrams with optional PNG export.

1 skill

Define internal SRE-style Service Level Objectives and Indicators per user-journey (availability, latency, correctness, freshness, durability, throughput). Sets SLO tighter than any SLA with buffer, error budget (time + events), fast + slow burn-rate alerts, and policy wiring budget state to concrete actions. Mermaid diagrams with optional PNG export.

1 skill

Statically assess a codebase against the ISO/IEC 25010:2023 product quality model (9 characteristics, ~40 sub-characteristics) using ISO/IEC 25023 measures. Produces a scored Markdown report + JSON scorecard with file:line evidence, severity-rated findings, and Mermaid radar/bar diagrams.

1 skill

Autonomous stakeholder mapping using Power/Interest Grid, Salience Model, Engagement Assessment, and Onion Diagram. Produces stakeholder registers, engagement strategies, and communication plans with Mermaid diagrams and optional PNG export.

1 skill

Domain-entity state machine modeling. Distinct from UI state-transition-mapping: this is the business lifecycle of entities (Order / User / Subscription / Document / Claim). Per state: invariants + allowed/disallowed ops + entry/exit effects. Per transition: trigger + guard + effect + rollback + idempotency. Flat / hierarchical (sub-states) / parallel (orthogonal regions). Transition matrix + explicit invalid transitions + side-effect catalog. Mermaid stateDiagram-v2 with optional PNG export.

1 skill

Map UI state machines for a component / screen / flow. Exhaustive states (idle / loading / success / error / empty / partial / stale / offline / disabled), typed transitions with triggers / guards / actions / rollback, invalid-state detection, deadlock prevention, and a11y per state. Mermaid diagrams with optional PNG export.

1 skill

Jeff Patton story mapping. Horizontal backbone of user activities (4-10), vertical sub-stories / tasks prioritized top-to-bottom, horizontal release slices with walking skeleton first then thickening releases. Reveals narrative gaps, over-detail, orphan stories, broken walking skeleton. Optional persona / platform / risk / dependency annotations. Feeds user-story-generator and planning-poker-protocol. Mermaid diagrams with optional PNG export.

1 skill

Story-point methodology — what points mean (complexity × uncertainty × effort), Fibonacci-progression rationale, team-specific reference-story calibration, velocity-based forecasting as range (mean / min / max / std), anti-pattern surfacing (hours-to-points, velocity-as-productivity, cross-team comparison, inflation). Four modes: estimate / calibrate / forecast / audit. Distinct from planning-poker-protocol (this is the criteria). Mermaid diagrams with optional PNG export.

1 skill

Split oversized user stories using SPIDR (Spike / Path / Interface / Data / Rule) or Richard Lawrence's 9-pattern catalog. Vertical value-slicing with V-test gating (reject horizontal technical slices). Post-split INVEST check per sub-story. Recommended order (walking skeleton → risk-reducing → value → quick wins → edges). Flags when NOT to split. Mermaid diagrams with optional PNG export.

1 skill

Post-launch support + rollback planning. Support: L1/L2/L3 tiers + coverage (business/24x5/24x7) + humane on-call rotation + severity × SLA (S1 <15min/<4h; S2 <1bd/<5bd; S3/S4) + hypercare window with DRI + runbook-per-alert. Rollback: path per deployment model (feature flag/canary/blue-green/rolling/big-bang) + automated + manual triggers + rehearsal MTTR measurement + comms within 5 min + blameless RCA. Non-reversible changes flagged with compensating controls.

1 skill

Design survey questionnaires with sampling plans, bias review, and analysis plans. Export to Qualtrics (QSF), XLSForm, SurveyJS, or CSV. Analyzes provided results with NPS/CSAT/CES/SUS scoring. Mermaid diagrams with optional PNG export.

1 skill

C4 Level 2 + Level 3 system decomposition. Per container: technology, purpose, responsibilities, APIs exposed + consumed, data stores, deployment, scaling, tenant model, ownership. Per container relationship: protocol + purpose + synchronicity + failure mode + rate. L3 scopes to one container with typed components (controller / service / repository / adapter). Avoids L4 code details. Mermaid diagrams with optional PNG export.

1 skill

System-level error strategy — 8-class taxonomy (programmer / validation / domain / transient / resource-exhaustion / poison / external-contract / unknown) with per-class strategy (fail-fast / 4xx / retry+budget / shed-load / DLQ / circuit-break / pin+escalate / fail-safe). Retry budgets with deadline propagation, breaker states + thresholds, timeout cascade rule, idempotency patterns, propagation + translation at layer boundaries (no stack leaks), DLQ per source, SLO-burn alerts, user-vs-operator messages, runbook coupling.

1 skill

Design a controlled vocabulary / taxonomy. Supports hierarchical / flat / faceted / polyhierarchical structures. Per term: scope note + exclusions + BT/NT/RT/UF/USE relationships + usage rules + examples + status + version. Governance declared (owner / change process / deprecation / versioning). Usability validation (findability / coverage / balance / depth / breadth). Mermaid diagrams with optional PNG export.

1 skill

Team topology via Team Topologies — four types only (stream-aligned / platform / enabling / complicated-subsystem) with three interaction modes (collaboration / X-as-a-Service / facilitating). Cognitive-load assessment per stream team (intrinsic / extraneous / germane). Domain-aligned boundaries (DDD hand-off). Team API per team (purpose + services + contact + SLO + intake + interaction modes). Reverse-Conway when needed. Anti-patterns flagged (platform ticket-desk, permanent enabling, feature-team-over-contexts).

1 skill

Interactive agent for collecting and refining technical specifications through guided dialogue

1 command

Autonome technische haalbaarheidstoets per kandidaat-oplossing (HMW-statement). Identificeert benodigde technologieën, beoordeelt maturity (proven/emerging/experimental), schat complexiteit (1-5) en blockers in, en levert verdict (🟢/🟡/🔴) met ruwe oplossingsrichting. Doet zelf web-research naar tech-maturity. Nederlandse marktfocus.

1 skill

Evaluate ≥3 technology options (frameworks / DBs / languages / SaaS / libraries) using a weighted scoring matrix. 10 default criteria (fit / maturity / community / TCO / learning curve / integration / licensing / vendor risk / performance / security) + context-specific additions. Per-cell score + rationale + confidence + source. Sensitivity analysis varying top-2 weights ±20%. Recommendation with runner-up + trade-off + risk + reversal conditions. Mermaid diagrams with optional PNG export.

1 skill

Automation + regression strategy. ROI-driven candidate selection, pyramid discipline (~70/15/8/5/2 for unit/component/integration/contract/E2E) with ice-cream-cone anti-pattern flagged, framework + tooling per level (one-per-level rule), shared fixtures + page objects, flakiness policy (detect/quarantine/root-cause/30-day age-out), CI integration (shard+parallel, timeouts, matrix, PR <10min), regression strategies (full/nightly/impact-based TIA/smoke+full/prod canary), contract testing with Pact, visual + a11y automation.

1 skill

Test data strategy — synthetic (factories/faker/constraints) vs masked (redact/tokenize/pseudonymize/generalize/noise/synthesis) vs curated subset vs golden datasets vs third-party sandbox. Core rule: never raw prod PII in lower envs. Per-env matrix + masking per PII class (direct/quasi-id/regulated-PCI-SSN) + re-identification risk analysis (k-anonymity / l-diversity). Lifecycle (generate/seed/reset/refresh). Deterministic seeds for perf. Governance + 0-PII-incident target. Not legal advice.

1 skill

Test strategy + plan. Measurable objectives linked to business drivers, distinct test levels (unit / component / contract / integration / system-E2E / UAT / exploratory / NFR hand-off), environment matrix, objective entry/exit per level, risk-based prioritization (probability × impact driving depth), tools per level, whole-team governance, requirement → test case → result traceability, cadence + schedule + UAT, defect management (severity × priority + triage cadence + SLAs + RCA categories), metrics dashboards.

1 skill

Autonomous theme-based product roadmapping with Now/Next/Later, time-horizon, and swimlane formats. Strategic themes, initiative mapping, audience-specific views (executive, team, customer), and dependency analysis. Mermaid diagrams with optional PNG export.

1 skill

Evaluate a third-party API across 11 dimensions — functional coverage, contract stability, reliability (SLA + status page + MTTR), security (SOC2 / ISO27001 / PCI / HIPAA / GDPR DPA), rate limits, pricing at forecast, data residency, support + docs, lock-in, exit strategy, operational fit. Weighted scoring vs alternatives including build-in-house. Risk register + PoC plan. Not legal advice.

1 skill

STRIDE (default) or PASTA threat modeling. Decomposes system, identifies trust boundaries, enumerates threats per element systematically (Spoofing / Tampering / Repudiation / Information-disclosure / DoS / Elevation-of-privilege), scores likelihood × impact, maps to mitigations. Optional attack trees. Residual risk accounting. Mermaid diagrams with optional PNG export.

1 skill

Timeline estimation using three-point (PERT), analogous, parametric, and velocity-based techniques with O/M/P date ranges. Integrates with dependency-mapping for critical-path timelines, translates working days to calendar dates respecting holidays and freezes, recommends buffer, defines milestones with entry criteria, and assesses deadline probability when a deadline is supplied. Mermaid Gantt and range diagrams with optional PNG export.

1 skill

Build a requirements traceability matrix linking goals → requirements → stories → tests → deployed artifacts with stable IDs, controlled link types (implements / verifies / validates / satisfies / mitigates / decided-by), forward + backward views, per-direction coverage with explicit orphan lists, change-impact helpers, regulatory overlay, and Markdown + CSV exports. Mermaid diagrams with optional PNG export.

1 skill

Training + adoption planning. Learning-needs analysis per audience with ADKAR gaps. Content mix (docs / videos / workshops / office hours / in-product tours / learning paths / certification / peer coaching / sandbox / cheat sheets) 2–4 per audience. Staged rollout (champions → power users → all → admins → reinforcement). Change-champion network. Reinforcement 3+ months post-launch. Adoption metrics on behavior (activation / retention / task success / support trend) not attendance.

1 skill

Autonomous trend analysis with PESTEL scans, trend classification (megatrend/trend/fad), impact assessment, weak signals, scenario sketches, and Mermaid diagrams with optional PNG export.

1 skill

Refactor TypeScript logic: code splitting, type improvements, design patterns

1 command

Write formal UML-style use cases (Cockburn conventions). Brief / casual / fully-dressed formats. Per UC: primary actor + supporting actors, stakeholders & interests, preconditions, postconditions, trigger, numbered main success scenario, alternate flows indexed to steps, exception flows, special requirements, frequency, priority. Cockburn level (summary / user-goal / subfunction). UML use-case diagram. Mermaid with optional PNG export.

1 skill

Diagram user flows at the UI-task level. Per step: actor, action, input, system response, pre/postconditions, errors, transitions. Distinguishes happy path / edge cases / error paths with recovery / abandonment. All decisions have explicit branches. Instrumentation events named. Mermaid diagrams with optional PNG export.

1 skill

Generate INVEST-compliant user stories from functional specifications and personas with Gherkin acceptance criteria

1 command

Autonomous Value Proposition Canvas using Strategyzer's framework. Customer Profiles (jobs, pains, gains), Value Maps (products, pain relievers, gain creators), fit assessment with scoring, and multi-segment support. Mermaid diagrams with optional PNG export.

1 skill

Weighted vendor evaluation across capability / reliability / security+compliance / TCO at forecast / commercial terms / implementation / viability / support / data residency+GDPR / exit-strategy+lock-in. Scoring 1-5 with evidence per score; unknowns marked [unknown]. 3-year TCO including integration + operate + change + exit + hidden costs. SLA expressed as our requirements. Multi-dimensional vendor risk (financial / operational / concentration / fourth-party / key-person). Exit-strategy per vendor. Not legal advice.

1 skill

Autonomous vision statement crafting using Golden Circle, Moore's Positioning, Working Backwards (PR/FAQ), and Product Vision Board. Multi-level alignment, quality scoring, and anti-vision positioning. Mermaid diagrams with optional PNG export.

1 skill

Vue 3/Nuxt 3 development skill with TDD workflow and an ISO/IEC 25010:2023 QA gate (9 characteristics, ~40 sub-characteristics). Produces JSON reports for agent handoff.

1 skill

Refactor Vue 3 script logic: composables extraction, code splitting, Vue patterns

1 command

Refactor Vue 3 SFCs for readability: reorder sections, organize script, improve naming

1 command

Webhook design (outbound / inbound / both). Event catalog + request envelope with HMAC-SHA256 signature + timestamp + versioned prefix, retry with exponential backoff + jitter + ceiling + DLQ, replay + redelivery endpoint, subscription-management CRUD + test + secret rotation, receiver idempotency guidance, versioning with parallel window + RFC 8594 sunset, per-endpoint rate limiting, observability.

1 skill

Scaffold a runnable Vue 3 + Vite + TypeScript wireframe app using the @for-the-people-initiative/wireframe-kit design system v1.0.1+ (hand-drawn Rough.js components, monochrome). Boilerplate copied verbatim; one PascalCase.Page.vue per screen wrapped in the platform-appropriate device frame (PhoneFrame / TabletFrame / DesktopFrame / DeviceFrame), auto-discovered via import.meta.glob. Click-through wired via router.push on CTAs / tabs / back / row actions (from flow spec or conversational elicitation); Demo controls on Home for unreachable entry points; screen-picker fallback nav. Plain generic placeholder copy by default (bracketed opt-in). No Lorem Ipsum, no real images. Floating elements get background: var(--wf-surface). Mid-fi only — defers colour/typography to visual design and hi-fi to prototyping.

1 skill

WBS from scope + deliverables. Enforces 100% rule, mutually exclusive siblings, deliverable-oriented nodes, 8/80-hour sizing, depth-by-need (3–5 levels). Decomposition axes (deliverable / phase / responsibility / hybrid) consistent within branches. WBS dictionary per node (description, deliverable, acceptance, size, deps, risks). Milestones distinct from work. Intra-WBS dependencies + coverage matrix. Anti-patterns flagged.

1 skill

Research a backend codebase end-to-end, propose an approval-gated documentation plan, then generate developer- and LLM-agent-oriented documentation in a consistent house style. Auto-detects language, framework, API surface, data layer, background processing, auth, config, observability, build/deploy, and tests with path:line evidence. A single README lives in the backend root linking into a documentation/ tree; generated docs use UPPERCASE filenames. Existing docs are archived under documentation/archive, never blindly overwritten. Nothing is written before the user approves the plan.

1 skill

Research a frontend codebase end-to-end, propose an approval-gated documentation plan, then generate developer- and LLM-agent-oriented documentation in a consistent house style. Auto-detects framework, routing, state, styling, API, build/deploy, and tests with path:line evidence. Adapts the structure to the techniques actually found. A single README lives in the frontend root; generated docs use UPPERCASE filenames under documentation/. Existing docs are archived under documentation/archive, never blindly overwritten. Nothing is written before the user approves the plan.

1 skill

Interactively explore a user's idea through structured questioning until all dimensions are covered

1 skill

Zero-trust architecture per NIST SP 800-207 / BeyondCorp. Never-trust-always-verify. Identity-centric + device-centric + context-aware access. PEP at every boundary. Micro-segmentation. Continuous verification. Migration roadmap from perimeter to ZT. ZTNA / SASE / service mesh / BeyondCorp patterns. Mermaid diagrams with optional PNG export.

1 skill

Tracks Claude Code sessions and agent processes in the Agent Meeting Room system