Every skill, one page.

Fix the "it works on my machine" problem before you touch the code.

Turn a .env into a safe .env.example you can commit. Keeps every key, strips every value, preserves comments and order, and flags the secret-looking keys.

Generate Conventional Commit messages from your staged git diff.

Turn a company URL or name into a B2B lead profile.

Generate a ready-to-use LICENSE file for your repo. Pick from MIT, Apache-2.0, GPL-3.0, MPL-2.0, BSD-2-Clause, BSD-3-Clause, or The Unlicense, fill in your name and year, and get the canonical text.

Align messy Markdown tables so the source is readable, or build a clean table from pasted CSV. Changes spacing only, never the cell content.

Turn a lead profile and a trigger event into a cold email worth sending.

Turn a messy CRM CSV export into a clean sales pipeline report.

Generate a README from your actual repo, not a hallucinated guess.

Check your robots.txt and sitemap.xml for the mistakes that quietly block crawlers, and never touch the live site.

List every TODO, FIXME, HACK, XXX, BUG, and OPTIMIZE comment in your codebase with file, line, and tag, grouped with counts. A clean tech-debt inventory instead of scrolling grep output.

Penetration-test your coding agent's guardrails before you ship.

Scaffold and audit secure MCP servers with input schemas, confirmation gates, and safety-first tool definitions.

Stop your agent from claiming done before it is proven.

Find the model-version coupling that breaks when you move to a new model: hardcoded names, renamed parameters, token-limit assumptions, response-format and tool-schema coupling, and hardcoded cost constants.

Before an agent acts on a plan, verify that the things it named actually exist.

Scan a SKILL.md package for prompt injection and secret exfiltration before you install or publish an agent skill. Most malicious instructions hide in the natural-language prose, not the code.

Drive a browser from your agent without the token bloat.

Inventory every LLM model and provider your code depends on, the AI bill of materials, and flag the concentration risk. When a model can be pulled offline overnight, you cannot manage a risk you cannot see.

Lint your AGENTS.md, the cross-tool standard for agent instructions, for the problems that make a coding agent misbehave. Also works on CLAUDE.md and .cursorrules.

Flag the destructive operations in a shell command or script before anyone runs it.

Find the LLM calls that break when a model blocks a response or falls back to another model.

Find the code that quietly runs up your LLM bill.

Generate an llms.txt for your site and validate an existing one against the spec. llms.txt is the emerging standard for telling models and agents which parts of your site to read.

Pull the real commitments out of a meeting transcript, with owners, and separate firm action items from tentative let-us-revisit ones. It never invents an owner.

Find the LLM integration code that will not survive a provider being pulled or going down. This is about the model disappearing, not the model declining a request.

Generate the model and vendor risk register a security lead asks for the morning after a model gets switched off. Built from your real dependencies, focused on availability and continuity.

Scan your OpenClaw config for the settings that quietly hand your agent too much power.

Lint a prompt template for the issues that cause injection and flaky output. It detects problems; it does not write prompts.

Audit Agensi skill packages for marketplace readiness, formatting compliance, and safety pre-checks.

Lint the function-calling tool definitions your agent exposes, so it picks the right tool instead of the wrong one or none.

Diagnose why Stripe Checkout, the Billing Portal, or your webhooks are not working.

Vet dependency changes for supply-chain risk before you install, commit, or release.

Audit Supabase for the row-level-security mistakes that quietly expose data.

Scan your schemas, seed data, config, and logs for personal data before it leaks.

Check an AI-built app for work that looks finished but is not.

Audit a Helm chart for insecure defaults before you deploy to Kubernetes.

Check your app for the security mistakes that leak data before you launch, explained in plain English. Built for the non-technical founder shipping an AI-built app, every finding tells you what is wrong, why it matters, and how to fix it.

Check your app, site, and ad copy for the AI disclosures US regulators and ad platforms now expect.

Audit your SPF, DKIM, and DMARC records for the misconfigurations that get mail rejected or sent to spam. Paste a DNS zone file or dig output.

Catch the dangerous migration before it locks or wrecks your production database.

Map any repo into an interactive D3 dependency graph plus a Markdown onboarding guide.

Generate a complete 30/60/90 day product launch plan.

Audit and harden GitHub Actions workflows against overbroad permissions, secrets exposure, and supply-chain risks.

Save a coding agent's working state before it hits the context limit, then resume on any model. New in v2.0: Recovery Mode rebuilds a handoff from a transcript and your repo even when a session was cut off with nothing saved.

Lint an exported n8n workflow before it ships.

Turn messy PRDs, Notion docs, and user stories into a structured implementation plan.

Generate runnable accessibility regression tests, not just a findings report.

Audit your dbt project for the test and documentation gaps that let bad data ship.

Diagnose why your Docker Compose stack will not come up.

Find the unit tests that pass without testing anything. Coverage numbers lie when the tests are tautological, and AI test generators produce exactly that.

Figure out why your Vercel build or deploy failed without scrolling the whole log.

Run real Playwright E2E tests on your web app.

Map the blast radius of a code change before you run the whole suite.

Catch documentation that drifted from your code: functions, CLI flags, and env vars named in your docs that are gone from the source.

Check ad copy for the editorial issues that get Google and Meta ads disapproved, before you submit.

Find where knowledge is dangerously concentrated in a codebase. From your git history it flags the files only one person has ever touched and the authors who own too much, and estimates the truck factor.

Debug failing GitHub Actions without scrolling 10,000 log lines.

Audit a JavaScript or TypeScript frontend for missing translations and hardcoded UI strings before you ship a new locale.

Lint an OpenAPI spec and diff two versions to catch breaking API changes before they reach consumers.

Audit your frontend build against a performance budget and catch size regressions before you ship.

Turn git history into clean release notes.

Generate a personalized before-you-ship checklist for your app, with the things you have already done pre-checked. Pick your app type and it tailors the list and scans your repo for what is in place.

Generate a shareable stat card for any repo, with an honest health grade: language mix, size, whether tests, docs, and a license are present, and an A-to-F grade.

Turn a messy task description into a clean, conventional git branch name.

Find and remove commented-out dead code across 8 languages (JS, TS, Python, Java, Go, Rust, HTML, CSS) while preserving TODOs, FIXMEs, license headers, disabled tests, and real documentation.

Save, name, list, and restore git stashes without losing track of what is in them.

Generate a complete pull request description from your staged changes, commits, and branch diff.

Run structural QA on your translation files across locales: placeholder mismatches, untranslated strings, length overflow, terminology drift, and missing keys. It checks form, not meaning, so you do not need to speak the language.

Audit a draft against your own voice spec and flag every line that breaks your house style. You define the rules once; it enforces them everywhere.

Scan a draft for the tells that make writing read as AI-generated, so you can revise them in your own voice before publishing.

Hold your bios, footers, and profiles to one brand spec, so the misspelled name and the stale tagline never ship.

Check supplied HTML for missing share metadata, relative image URLs, SVG portability risk, and a common image-dimension preset. Local and read-only.

Check a desired handle against every platform's username rules and find the form that works everywhere. X caps at 15, YouTube and TikTok reject periods, and you usually find out one platform at a time.

Humanize AI writing without changing the facts.

Flag the hidden and look-alike characters lurking in a handle or brand string: the spoofing tricks and display bugs you cannot catch by reading.

Flag every em-dash and AI transition cliche in a draft and get a plain replacement suggestion for each.

Check the exact decoded QR payload for incomplete URLs, listed shorteners, unsafe schemes, narrow format problems, and explicit credential-like fields.

Catch typos, homophones, and near-miss misspellings across code, docs, and markdown, in a commit, your staged changes, a file, or a whole directory.

Qualify and score a whole lead list with BANT or MEDDIC, automatically.

Batch-enrich a lead-list CSV.

Handle any B2B sales objection with a framework-backed response.

Turn a CRM export or live HubSpot/Salesforce/Pipedrive sync into an executive-ready pipeline report.

Set up and book meetings end to end.

Generate personalized multi-step cold email sequences from a lead CSV.

Pull the real pain points out of your customer feedback so you build what people actually want. Paste a dump of comments, reviews, forum threads, or support tickets and get a ranked, themed list of what hurts, with the quotes behind each one.

Turn deal details into a branded, client-ready deal room.

Run a 10,000-iteration Monte Carlo forecast on your pipeline CSV to get P50/P70/P90 revenue confidence intervals, an ASCII distribution histogram, and what-if scenarios for slipped deal dates.

Turn CRM exports into sales rep scorecards.

Turn an account's contact list into a champion map.

Turn a raw account CSV into balanced sales territories.

Bulk-create Gumroad products from a CSV.

Audit any URL for technical SEO, Core Web Vitals, on-page issues, and content gaps against up to three competitors, then get a ranked, ready-to-hand-off action plan.

Generate three distinct GPT Image 2 cover options with brand colors, storefront sizes, and no partial output sets.

Check a brand deal or sponsorship contract for the clauses that quietly cost creators.

Check an invoice or estimate before you send it.

Bulk-update cover images and thumbnails across your Gumroad catalog from a CSV or a folder of files named by permalink.

Turn a raw meeting transcript (.vtt, .srt, .txt, or pasted) into clean markdown meeting minutes.