code-necromancer

The api-architect skill is an expert API designer for creating and refining REST, GraphQL, and gRPC architectures, including OpenAPI specs and security flows. Use it for tasks like endpoint design, versioning, and schema generation. It defers database, frontend, and deployment concerns to other specialized skills.

This skill provides a systematic framework for understanding, resurrecting, and modernizing legacy codebases. It is designed for scenarios like inheriting undocumented repos or reviving dormant projects, guiding you through archaeology, resurrection, and rejuvenation phases. Use it when you encounter terms like "legacy code" or "technical debt," but not for greenfield projects.

The refactoring-surgeon skill specializes in improving code quality through behavior-preserving refactoring techniques like extracting methods/classes and applying SOLID/DRY principles. It activates on code smells, technical debt, and legacy code cleanup, requiring existing tests as a safety net. Use it specifically for refactoring tasks, not for new features, bug fixes, or performance optimization.

The security-auditor skill performs static code security analysis including dependency vulnerability scanning, secret detection, and SAST checks for OWASP top risks. Use it for codebase security reviews, pre-penetration testing audits, and identifying issues like exposed credentials or vulnerable libraries. It focuses on source code analysis, not runtime infrastructure or compliance certification processes.