first-fluke/oma-security
Security scans, source review, and verified remediation
Evaluate system boundaries and architectural tradeoffs. Use for architecture decisions, design reviews, and ADRs.
Diagnose a reproducible failure, fix its cause, and verify the regression. Use for crashes, incorrect behavior, and failing tests.
Review changes for correctness, security, accessibility, and performance. Use for scoped quality reviews or verification plans; bug fixes use oma-debug.
Restructure existing code while preserving observable behavior. Use for targeted technical debt or hotspot work with characterization tests.
Manage Git branches, merges, conflicts, commits, and release baselines. Use for repository history and change-management operations.
Scan application source, agent skills, and MCP components; run penetration tests against scoped web test deployments, validate findings, and configure scan gates. Use oma-qa for broad quality reviews and domain skills for remediation.