스킬 찾기

Run an opt-in deep codebase audit with persisted findings. Confirm cost before dispatch; filing and telemetry need separate approval.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The sanctioned task-board mutator — add a queued task, start one (flips to in-progress and stamps the date, minting a dotted ID on pick-up), or mark an in-progress task done. The only blessed write to open-tasks.md.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Run Claude Code INSIDE a ca-sandbox box (`--with-claude`). Routed to when the user wants an agent loop running against an isolated, ephemeral sandbox rather than the host. Authenticates via an env-injected CLAUDE_CODE_OAUTH_TOKEN with no host bind of ~/.claude; the image pins the CLI and disables the autoupdater; HOME is backed by a named volume so the .claude state persists across restart. Five gated phases — posture, image, token, run, teardown. The hard default is offline or Anthropic-domains-only egress, and the token volume is NEVER co-mounted with an untrusted-code run; both are enforced, not advised.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Verify the active host install, package, command ownership, enforcement, wrapper self-test, and active-dispatch coverage gap. Read-only.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Watch a PR's CI to completion — diagnose on red, notify and offer the merge on green. Never auto-merges.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Run an autonomous sprint from maintained specs and plans, with truthful verification and no duplicate artifact approval ceremonies.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Threat-model a sensitive design with STRIDE on request. Read-only analysis of threats, controls, and implementation constraints.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Exploratory spike on a throwaway branch — answer a named question with disposable code. Never merges; exits to a findings note or /ca-feature.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Daily repo hygiene — review the day's repo state, then perform the cleanups under per-action confirmation. Fast-forward only, never destructive without a yes.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Show the project's current state at a glance — stage, open tasks, open questions, overrides since the last checkpoint, current branch. Read-only.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The lifecycle gate for a local Codespace-equivalent sandbox. Routed to when the user invokes /ca-sandbox:sandbox to pull an untrusted repo into an ephemeral, host-FS-isolated Docker container, or any of the interaction commands (/ca-sandbox:sandbox-shell, /ca-sandbox:sandbox-exec, /ca-sandbox:sandbox-cp, /ca-sandbox:sandbox-destroy) against an existing box. Five gated phases — pre-flight, clone+build, isolated run, interact, teardown. The load-bearing invariant is structural: untrusted code in the box can never reach the host filesystem (no bind mount, no docker socket, never --privileged, cap-drop ALL, non-root, read-only root). Network defaults to offline; egress out is host-initiated only. Every object is labeled ca.sandbox=1 and torn down on exit.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Trim transcript clutter to extend session lifetime — analyze, prune a copy, or toggle the after-each-turn service. Dry-run by default; gains land at resume/compaction, not the current turn.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Inspect ADR health read-only; optionally select one ADR with --adr N.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Vet a new or changed third-party dependency for license, provenance, and supply-chain risk before any install runs.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Record user-decided ADRs or inspect their health read-only. Preserve attribution and acceptance evidence.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Turn the selected specification into a maintained implementation plan with clear outcomes, useful tasks, dependencies, and verification steps. Drafting uses the existing authorization and does not require artifact approval codes, reviewer receipts, or a frozen implementation script.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Sanctioned, logged bypass of a gate or hard rule — one audit line, then proceed.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

OPTIONAL per-task isolation for autonomous parallel work. Routed to only on explicit opt-in by subagent-driven-development or dispatching-parallel-agents, so parallel units mutate files without colliding. Stands up one worktree per unit, works it in isolation, then integrates each unit back onto the caller's working branch for the caller's single commit-gate + finishing-a-development-branch exit. Never on the default path; it does not bypass a gate or finish per unit.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

The banned-primitive gate. Routed to when changed code hashes, signs, encrypts, derives keys, generates security-relevant randomness, configures TLS, or imports a crypto library. Rejects broken primitives, disabled TLS verification, and home-rolled crypto; the approved-primitive list lives in security-controls.md. The auth-crypto-reviewer agent is dispatched as the reviewer.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Read-only 3-metric governance glance — override rate, small-lane rate, sprint low-confidence ratio — each with a trend arrow vs. the prior 20-commit window.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Opt this repo into codeArbiter — scaffold the root-level .codearbiter/ state store.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Verify authorized feature, fix, and refactor work with scoped obligations, regression-first fixes, behavioral checks, characterization baselines, coverage, and lint.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Fix a confirmed bug: a failing regression test first, then a minimal fix, then the rest of the tdd gates.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.

Build an authorized feature from a maintained specification, testable criteria and useful plan, without duplicating user approval.

한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.