spm1001/review
skills/review/SKILL.md
Code review alias. Invokes titans (three-lens review).
$ install --global
skillsauthnpx skillsauth add spm1001/trousse reviewInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 9:35 PM1.8s1 file scanned
SKILL.md
- name:
- review
- description:
- Code review alias. Invokes titans (three-lens review).
/review
This is an alias. Immediately invoke the titans skill.
Related Skills
spm1001/tamis
tools
VerifiedTrustedCommunity
Inspects which ad, martech, analytics, and affiliate tags fire on any website and identifies each by vendor — tag names collide, so it confirms identity, not just labels. Drives a clean headless Chrome that bypasses ControlD DNS filtering and uBlock via DoH, captures the full network with cookies accepted, then groups every host by vendor and flags the unknowns for hand identification. Use when asked 'what tags fire on this site', 'is there a Meta, GA4, or Lantern tag here', 'audit this site for tracking', 'reverse engineer the martech', 'accept all cookies and show what loads', 'which vendors does this site use'. Triggers on 'tag explorer', 'tag scan', 'tamis'. For page reading or browser automation use passe; tamis is the tag-identification layer on top. (user)
2SKILL.mdUpdated Jun 13, 2026
spm1001/github-cleanup
tools
VerifiedTrustedCommunity
Orchestrates cross-machine repo hygiene + GitHub account cleanup via an audit→approve→execute process that prevents accidental deletion. FIRST sweeps every git repo across machines (local + ssh) for uncommitted/unpushed work and true ahead/behind drift, THEN audits GitHub-side — Dependabot alerts traced to unused-direct vs transitive deps, stale forks, orphaned secrets, failing workflows, plugin version-bump gaps. Triggers on 'clean up GitHub', 'audit my repos', 'uncommitted or unpushed changes', 'are my repos in sync', 'push discipline', 'Dependabot trouble', 'unused deps', 'stale forks', 'dependency audit'. Requires gh CLI (+ ssh for remote hosts). (user)
2SKILL.mdUpdated Apr 17, 2026
spm1001/toise
development
VerifiedTrustedCommunity
Deep clean and structural health check for Claude-maintained codebases. INVOKE BEFORE adding significant complexity, WHEN inheriting an unfamiliar repo, or when something feels off and you can't name it. Three agents — Cracks (architecture), Dustballs (convention drift), Goofs (correctness) — examine in parallel, then synthesise into an honest assessment. Triggers on 'toise', 'deep clean', 'health check', 'should I be worried', 'check this codebase', 'is the architecture sound'. (user)
1SKILL.mdUpdated Apr 17, 2026
spm1001/titans
development
VerifiedTrustedCommunity
Three-lens code review using parallel subagents: Epimetheus (hindsight — bugs, debt, fragility), Metis (craft — clarity, idiom, fit-for-purpose), Prometheus (foresight — vision, extensibility, future-Claude). Triggers on /titans, /review, 'review this code', 'what did I miss', 'before I ship this'. Use after completing substantial work, before /close. (user)
1SKILL.mdUpdated Apr 17, 2026