code-quality-enforcer
Expert on code quality audit — cyclomatic complexity, SOLID principles, DRY, method/class size, nesting depth, magic numbers, dead code, naming quality, performance smells, and maintainability. Use when auditing a pull request, enforcing quality gates, or deciding whether a change is ready to ship. Designed to be zero-tolerance: any violation becomes a Blocker that triggers a re-do.
Repository SourceNeeds Review
security-auditor
Application security expertise for PHP REST APIs — OWASP Top 10, JWT, OAuth 2.1, CORS, secrets management, SQL injection, XSS, CSRF, input sanitization, file upload safety, security headers, and dependency auditing. Use when auditing code, reviewing authentication/authorization, handling user input, or checking compliance with OWASP ASVS for the php-api-builder library.
Repository SourceNeeds Review
diagrams-expert
Expert on diagrams-as-code for developer documentation. Use when the docs need a flowchart, sequence diagram, ER diagram, state machine, class diagram, or architecture diagram (C4). Primary tool is Mermaid (renders natively in GitHub, Markdown, and most viewers); PlantUML covered in references for advanced cases. Use whenever a doc task mentions "diagram", "flow", "architecture", "entity relationship", "sequence", "state", or when explaining a process visually.
Repository SourceNeeds Review
mysql-expert
Expert on relational database design and usage for PHP APIs — especially MySQL 8+, with awareness of PostgreSQL and SQLite differences. Use when designing schemas, choosing column types, adding indexes, writing migrations, writing PDO queries, handling transactions, or debugging slow queries. Covers normalization, index design, charset/collation, JSON columns, and cross-driver portability for the php-api-builder library.
Repository SourceNeeds Review