AISkills402 API: JSONL Repair

Flaky Test Review — Reviews ONE test file for the five causes that make a test pass on one run and fail on the next, and lists only those, one line each with a fixed code, the test, why it flips and the fix - or exactly No findings. It catches a fixed sleep used to wait for background work, an expectation tied to today's date or the current time, tests that share state and only pass in one order,

Survey Question Bias Check — Checks a numbered list of survey questions, with their answer options, and reports only the questions whose wording would bias the answers, one line per problem with a fixed code, the question number, why it biases and a neutral rewrite - or exactly No findings. It catches a leading stem that signals the hoped-for answer, two questions fused into one, a loaded word tha

Retry Backoff Review — Reviews ONE piece of retry code, or a written retry design for an agent or a service client, and lists only the five mistakes that turn a failure into an outage or a double write, one line each with a fixed code, the place, why it hurts and the fix - or exactly No findings. It catches waits that grow without a random part, a loop with no limit on tries or on total time, a PO

CSP Header Review — Reviews ONE Content-Security-Policy header, with any note pasted beside it, and lists only the gaps that let injected script run or let the page be framed, one line each with a fixed code, the directive, why it hurts and the fix - or exactly No findings. It catches unsafe-eval or unsafe-inline in the script directive, a star, a data source or a bare scheme as a script source, a

Cookie Attributes Review — Reviews the Set-Cookie headers of a response, or the code that sets them, and lists only the attribute mistakes that expose a login cookie, one line each with a fixed code, the cookie, why it hurts and the fix - or exactly No findings. It catches a session cookie sent without Secure, a session cookie that script can read because HttpOnly is missing, SameSite=None without

OAuth Redirect Flow Review — Reviews ONE OAuth 2.0 or OpenID Connect sign-in flow written in code for the four mistakes that let an attacker steal a login or a token, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches a state value that is never compared or not tied to the user's session, a browser or mobile client tha

PostgreSQL Migration Lock Review — Reviews ONE PostgreSQL migration file for the four statements that lock or rewrite a table that is already in use, and lists only those, one line each with a fixed code, the statement, why it hurts and the fix - or exactly No findings. It catches CREATE INDEX without CONCURRENTLY on an existing table, a not-null or constraint check run in one blocking step, a col

JWT Verification Review — Reviews ONE piece of code that verifies JSON Web Tokens for the five mistakes that let a forged or stale token in, and lists only those, one line each with a fixed code, the function, why it hurts and the fix - or exactly No findings. It catches an algorithm taken from the token header or no fixed algorithm list, an expiry check switched off, neither audience nor issuer c

Terraform Plan Risk Review — Reviews the text of ONE terraform plan for the four changes that can lose data or open a door, and lists only those, one line each with a fixed code, the resource, why it hurts and the fix - or exactly No findings. It catches a database, bucket or disk that the plan destroys or replaces, an ingress rule open to the whole internet on a port other than web, encryption sw

Kubernetes Manifest Review — Reviews ONE Kubernetes Pod or Deployment manifest for the five settings that most often make a workload unsafe or unpredictable, and lists only those, one line each with a fixed code, the container or volume, why it hurts and the fix - or exactly No findings. It catches a container that is privileged or may run as root, an image with no tag or the latest tag, a contain

Public-Domain Romance Books: 50 With Checked Links — Data catalog, not an instruction skill: 50 romance novels from Project Gutenberg, each with title, author, Gutenberg number, download count and an EPUB address that answered on 2026-10-28. Rights are the United States only. Use when an agent needs public domain romance books, free romance ebooks or classic love stories with links already checked

Public-Domain Science Fiction Books: 50 With Checked Links — Data catalog, not an instruction skill: 50 science fiction books from Project Gutenberg, each with title, author, Gutenberg number, download count and an EPUB address that answered on 2026-10-28. Rights are the United States only. Use when an agent needs public domain science fiction, free sci-fi ebooks or classic space adventure books w

Public-Domain Mystery Books: 50 With Checked Links — Data catalog, not an instruction skill: 50 crime and detective books from Project Gutenberg, each with title, author, Gutenberg number, download count and an EPUB address that answered on 2026-10-28. Rights are the United States only. Use when an agent needs public domain detective books, free mystery ebooks or classic crime novels with links al

Public-Domain Adventure Books: 50 With Checked Links — Data catalog, not an instruction skill: 50 adventure books from Project Gutenberg, each with title, author, Gutenberg number, download count and an EPUB address that answered on 2026-10-28. Rights are the United States only. Use when an agent needs public domain adventure books, free adventure ebooks or classic sea and jungle stories with link

Public-Domain Horror Books: 41 With Checked Links — Data catalog, not an instruction skill: 41 horror and gothic books from Project Gutenberg, each with title, author, Gutenberg number, download count and an EPUB address that answered on 2026-10-28. Rights are the United States only. Use when an agent needs public domain horror books, free gothic ebooks or classic ghost stories with links already

UI Worst-Case Data — Turns the props of a UI component (a TypeScript type or a list of props) into strict JSON test data that stresses how it displays, and nothing else. Per prop it picks the worst values for the type, a string that is empty, one word of eighty characters with no space, on two lines, an emoji joined with a zero-width joiner, right-to-left letters or HTML-looking text, numbers at z

Carousel Slides From Text — Turns a source text (an article, a post, meeting notes) into the text of a carousel for LinkedIn or Instagram as strict JSON, one object with a headline and a body per slide, and nothing else. It follows the slide count you ask for (or a stated default of 5), keeps every headline to 8 words and every body to 30, makes the first slide a hook with no call to action and th

CSS Motion Review — Reviews pasted CSS, Tailwind classes or JSX styles for the motion mistakes that hurt real visitors, and lists only those, one line each with a fixed code, the place, why it matters and the fix - or exactly No findings. It catches movement that starts by itself, runs longer than five seconds and has no pause control, which fails WCAG 2.2.2 at Level A, large scaling or panning mo

Form Input UX Review — Reviews the HTML or JSX of one form for four input mistakes that frustrate people while they type, and lists only those, one line each with a fixed code, the field, why it hurts the user and the fix - or exactly No findings. It catches paste blocked on a password field, a field that holds a code, a ZIP code or a card number set to type number, or an email address or phone nu

Secret Handling Review — Reviews pasted application code, scripts and config for the four ways a secret leaks from the code that uses it, and lists only those, one line each with a fixed code, the place, who can then read the secret and the fix - or exactly No findings. It catches a secret value written to a log or printed (the key itself, an object or environment dump that contains it), a secret

React Performance Review — Reviews pasted React and Next.js App Router code for five performance mistakes that pass every test and then make pages slow, and lists only those, one line each with a fixed code, the place, why it costs time and the fix - or exactly No findings. It catches independent awaits written one after another so the page waits for their sum, an effect that copies something deri

Remotion Code Review — Reviews pasted Remotion code (React video compositions) for the five mistakes that make a render differ from the preview or come out with missing frames, and lists only those, one line each with a fixed code, the place, why it breaks the render and the fix - or exactly No findings. It catches motion that is not driven by the frame number (CSS transitions and keyframes, timer