security-review
FreeOWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection.
The English summary is being prepared. Showing the original description.
OWASP secure design review for code and architecture. Checks input validation, authentication, authorization, data protection.
The English summary is being prepared. Showing the original description.
Audit whether the theories/methodologies a project claims to implement are faithfully operationalized — or name-dropped, partially built, distorted, or over-claimed. Source-grounds the load-bearing theories; tags the rest provisional. Run periodically alongside /framework-health.
The English summary is being prepared. Showing the original description.
First-run setup for the Mycelium plugin. Creates project-state directories (.claude/canvas, .claude/diamonds, .claude/memory, .claude/harness) and minimal starter files in the user's project. Optionally provisions opencode runtime support (a starter scaffold) when opencode is detected or requested. Idempotent — re-running on an initialized project is a no-op. Run this once after installing the Mycelium plugin and before invoking other skills.
The English summary is being prepared. Showing the original description.
Use to evaluate a service or feature against Downe's 15 principles of good services.
The English summary is being prepared. Showing the original description.
Derive this project's own integration conventions from what the code already does, draft them as a wiring contract, and hold new work to it. Closes the built-but-not-wired gap at L3 (walking skeleton) — a mechanism that ships and is never called reads green in every other check.
The English summary is being prepared. Showing the original description.
Assess team structure against Skelton's Team Topologies. Evaluate cognitive load, interaction modes, and Conway's Law alignment.
The English summary is being prepared. Showing the original description.
Evaluate user-facing interfaces against Nielsen's 10 Usability Heuristics. Complements /mycelium:service-check (Downe = service-level quality, Nielsen = interface-level quality).
The English summary is being prepared. Showing the original description.
Explainability (XAI) audit for products containing AI components. Five-stage tier-scaled check: risk classification, stakeholder×question matrix, fidelity audit, system card, recourse path. Honest about what was validated functionally vs what needs user testing.
The English summary is being prepared. Showing the original description.
Guide for conducting Torres-style story-based interviews with the people whose experience you're researching, with bias mitigation and a JTBD lens.
The English summary is being prepared. Showing the original description.
One command from "plugin installed" to "running brief on your idea." Combines /mycelium:setup (project-state initialization) and /mycelium:interview (10-minute discovery brief) into a single flow. Run this immediately after installing the Mycelium plugin — it's the recommended entry point for first-time users.
The English summary is being prepared. Showing the original description.
Create or update a Wardley Map of how any domain delivers value. Maps the needs it serves, the capabilities involved, how each is evolving (genesis to commodity), and strategic plays. Applies to any domain, not only software.
The English summary is being prepared. Showing the original description.
Use to conduct STRIDE threat modeling for a system or feature design.
The English summary is being prepared. Showing the original description.
Map the needs of the people you're building or exploring for, independently of solutions, using Allen's User Needs Mapping methodology. Identifies underserved needs that feed into the Opportunity Solution Tree.
The English summary is being prepared. Showing the original description.
Draft a short, honest account of where using Mycelium was confusing or slow, for the user to edit and choose whether to send. Reports experience; never prescribes fixes. Based on Hoskins's friction logging.
The English summary is being prepared. Showing the original description.
Parallel agent orchestration for OST exploration. Fan-out multiple solution explorations, fan-in results to compare and select winners.
The English summary is being prepared. Showing the original description.
Print your own north-star row from your own record, and nothing else. Reads .claude/harness/decision-log.md, the canvas and the hook logs in this project; prints one line (decisions before the first source file, of which citing outside evidence, kills before code, sessions). Sends nothing anywhere. Opt-in; paste the line where you like or not at all.
The English summary is being prepared. Showing the original description.
Run eval scenarios to benchmark Mycelium effectiveness. Execute tasks using reflexion loop, validate against success criteria, record metrics.
The English summary is being prepared. Showing the original description.
Render `.claude/diamonds/active.yml` as the decisions each diamond has recorded, in order, grouped by mode (discovery, delivery). Read-only. Default format Mermaid stateDiagram-v2, drawn by a script. Recommended at the end of `/mycelium:diamond-assess` so every assessment closes with a visual state-of-play. See `${CLAUDE_PLUGIN_ROOT}/engine/render-conventions.md` for shared render fleet conventions.
The English summary is being prepared. Showing the original description.
Synchronize canvas state across team sessions via git. Ensures all team members see the same product knowledge.
The English summary is being prepared. Showing the original description.
GIST planning workflow. Structure goals into ideas, steps, and tasks using Gilad's evidence-guided framework.
The English summary is being prepared. Showing the original description.
Smoke-test skill that confirms the Mycelium plugin loaded correctly. Returns a deterministic marker string for plugin-shape validation. Not for end-user invocation in normal use.
The English summary is being prepared. Showing the original description.
Use to build or update an Opportunity Solution Tree from research data. Never from brainstorming.
The English summary is being prepared. Showing the original description.
Use before starting delivery work. Pre-implementation validation checklist to ensure readiness.
The English summary is being prepared. Showing the original description.
Systematically challenge current assumptions before major decisions. Counters confirmation bias, groupthink, and overconfidence.
The English summary is being prepared. Showing the original description.
Is this your account? Link GitHub to bring it onto your creator page (Japanese)