Work with Cloudflare through wrangler, the cf CLI, cloudflared and the REST API inside the project's account, zones and name prefixes: writes to another project's Workers, buckets, tunnels or zones are refused, and credentials stay out of command lines and the transcript.
1 skill · hooks
Work with Linode inside the project's tag boundary: resources are created with the project tag, and writes to another project's resources are refused.
1 skill · hooks
Reach 1Password secrets behind a Touch ID gate on every use, and keep secret values out of the model transcript.
1 skill · hooks
Adversarial review with two independent Claude reviewers, Opus 5.5 and Sonnet 5.5 at effort high: run the reviewers, confirm each ran on its model and effort, reproduce every finding before trusting it, and turn attack inputs into tests. Includes a script that tells a quiet sub-agent from a hung one.
1 skill · 1 agent
Run Google's Antigravity CLI (agy) headless as a second-opinion code reviewer, refuse to trust its exit code, and report every finding to the user verbatim before touching any code.
1 skill
Run OpenAI's Codex CLI non-interactively as a second opinion, and report every finding it returns to the user verbatim before touching any code.
1 skill