peer-review-prep

Traxxall author-side delivery skill set. Pull/analyze ADO work items into structured intake briefs (flagging Requires-Specification when under-specified), author implementation specs with blind-QA-ready acceptance criteria, draft/create PBIs and child dev Tasks with compliant users/{short}/{WI#}-… branches, and outline UnitTests.Core/TransactionScope dev tests — all under Traxxall conventions (branch/PR rules incl. VS403660, PBI/Bug/Task model, area Traxxall Solution, AI tags, dual-framework legacy vs modern, egress-safe dev.azure.com auth). Drafts by default; creates ADO items only on explicit go. Never authors QA tests (separate traxxall-delivery-qa plugin) and never runs destructive test projects.

A 'Memory and a Mirror' agentic harness for long-running unattended coding sessions: a prunable structured learnings file read at session start, a proof-discipline gate that blocks 'done' claims without fresh cited evidence, and a fresh-context reviewer subagent that returns only a gap list against spec. Chains into one plan -> act -> prove -> review -> remember loop via /mirror-loop. Model-agnostic by construction.

Traxxall blind, adversarial QA skill set — deliberately isolated from implementation. From the acceptance criteria + the running TEST app ONLY (never the diff, PR, product source, or dev-side tests), authors adversarial Playwright suites covering happy/edge/negative/abuse/cross-module cases with role/text locators, deterministic waits (no hard sleeps), storageState auth, and trace/screenshot/video on failure; records PASS/FAIL/ERROR for the PH QA / Ready-to-Test flow. Refuses any leaked implementation context (isolation gate). Targets TEST only, never prod.

Reviews a target repository and produces two grounded board-review deliverables: a self-contained JSSI-branded interactive HTML viewer (16 diagram tabs, built by editing a copy of the approved reference template verbatim) and docs/architecture/index.md (narrative plus two strictly separate tables — Findings for code-level gaps, Open Decisions for architecture choices needing a human ruling). Supports a silent/autonomous generation mode and a distinct post-complete interview mode that walks a reviewer through Open Decisions one row at a time.

71-skill bug-hunting & external red-team bundle for Claude Code — 48 hunt-* web/vuln-class + framework skills, enterprise platform attack chains (M365/Entra, Okta, SharePoint, vCenter, SSL-VPN, APK), recon/OSINT, reporting & validation gates, and Burp MCP integration. Skills auto-load by topic; 15 slash commands included.