Skill: Security & Architecture Checklist

Activation Contract

Activate this skill when the user needs to:

• Audit a codebase for technical debt, security risks, or architecture health
• Detect the tech stack: frameworks, languages, dependencies, versions
• Identify the software architecture: DDD, MVC, Hexagonal, Monolith, Microservices, Serverless, or ad-hoc
• Find pain points: code smells, high complexity, tight coupling, dead code
• Generate a markdown report with pros/cons tables per checklist area
• Compare current state against best practices and provide actionable recommendations

Do not activate for trivial single-file projects or when only linting/formatting is needed.

Hard Rules