🔍代码审查 / GitHub MCP 推荐

Audit business processes for automation opportunities with ROI analysis. TRIGGERS - Use when user needs help with automation-audit related tasks.

Mobile game development principles.

Mobile game development principles.

Analyze git repositories to build a security ownership topology (people-to-file), compute bus factor and sensitive-code ownership, and export CSV/JSON for graph databases and visualization. Trigger only when the user explicitly wants a security-oriented ownership or bus-factor analysis grounded in git history (for example: orphaned sensitive code, security maintainers, CODEOWNERS reality checks for risk, sensitive hotspots, or ownership clusters). Do not trigger for general maintainer lists or non-security ownership questions.

Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work.

Perform language and framework specific security best-practice reviews and suggest improvements. Trigger only when the user explicitly requests security best practices guidance, a security review/report, or secure-by-default coding help. Trigger only for supported languages (python, javascript/typescript, go). Do not trigger for general code review, debugging, or non-security tasks.

Deploy applications and websites to Vercel. Use when the user requests deployment actions like "deploy my app", "deploy and give me the link", "push this live", or "create a preview deployment".

Deploy web projects to Netlify using the Netlify CLI (`npx netlify`). Use when the user asks to deploy, host, publish, or link a site/repo on Netlify, including preview and production deploys.

Deploy applications and infrastructure to Cloudflare using Workers, Pages, and related platform services. Use when the user asks to deploy, host, publish, or set up a project on Cloudflare.

Deploy applications to Render by analyzing codebases, generating render.yaml Blueprints, and providing Dashboard deeplinks. Use when the user wants to deploy, host, publish, or set up their application on Render's cloud platform.

Comprehensive security scanning and vulnerability detection. Includes input validation, path traversal prevention, CVE detection, and secure coding pattern enforcement. Use when: authentication implementation, authorization logic, payment processing, user data handling, API endpoint creation, file upload handling, database queries, external API integration. Skip when: read-only operations on public data, internal development tooling, static documentation, styling changes.

Agent skill for performance-benchmarker - invoke with $agent-performance-benchmarker

Agent skill for orchestrator-task - invoke with $agent-orchestrator-task

Agent skill for load-balancer - invoke with $agent-load-balancer

Agent skill for raft-manager - invoke with $agent-raft-manager

Agent skill for multi-repo-swarm - invoke with $agent-multi-repo-swarm

Agent skill for migration-plan - invoke with $agent-migration-plan

Agent skill for v3-performance-engineer - invoke with $agent-v3-performance-engineer

Agent skill for mesh-coordinator - invoke with $agent-mesh-coordinator

Agent skill for code-review-swarm - invoke with $agent-code-review-swarm

Agent skill for goal-planner - invoke with $agent-goal-planner

Agent skill for agent - invoke with $agent-agent

Agent skill for crdt-synchronizer - invoke with $agent-crdt-synchronizer

Agent skill for memory-coordinator - invoke with $agent-memory-coordinator

Agent skill for tdd-london-swarm - invoke with $agent-tdd-london-swarm

Agent skill for swarm-memory-manager - invoke with $agent-swarm-memory-manager

Agent skill for matrix-optimizer - invoke with $agent-matrix-optimizer

Agent skill for adaptive-coordinator - invoke with $agent-adaptive-coordinator

Agent skill for hierarchical-coordinator - invoke with $agent-hierarchical-coordinator

Agent skill for sandbox - invoke with $agent-sandbox

Agent skill for workflow - invoke with $agent-workflow

Agent skill for workflow-automation - invoke with $agent-workflow-automation

Agent skill for worker-specialist - invoke with $agent-worker-specialist

Agent skill for v3-security-architect - invoke with $agent-v3-security-architect

Agent skill for v3-queen-coordinator - invoke with $agent-v3-queen-coordinator

Agent skill for v3-memory-specialist - invoke with $agent-v3-memory-specialist

Agent skill for v3-integration-architect - invoke with $agent-v3-integration-architect

Agent skill for user-tools - invoke with $agent-user-tools

Agent skill for test-long-runner - invoke with $agent-test-long-runner

Agent skill for sync-coordinator - invoke with $agent-sync-coordinator

Agent skill for swarm-pr - invoke with $agent-swarm-pr

Agent skill for spec-mobile-react-native - invoke with $agent-spec-mobile-react-native

Agent skill for sparc-coordinator - invoke with $agent-sparc-coordinator

Agent skill for sona-learning-optimizer - invoke with $agent-sona-learning-optimizer

Agent skill for security-manager - invoke with $agent-security-manager

Agent skill for scout-explorer - invoke with $agent-scout-explorer