Software Development AI agent skills

13,359 skills in the archive. Read a skill’s instructions or open its original repository.

• Cloudbase Mcp

  by @TencentCloudBase

  CloudBase MCP reference. Use when connecting local or remote MCP, calling tools from the shell with mcporter, reading tool schemas, choosing the domestic or international endpoint, setting site, region, cloud mode, or plugin…

• Github Actions

  by @BagelHole

  Build, test, and deploy applications using GitHub Actions workflows. Create CI/CD pipelines, configure runners, manage secrets, and automate software delivery. Use when working with GitHub repositories, automating builds,…

• Docker Management

  by @BagelHole

  Build, optimize, and troubleshoot Docker containers and images. Create efficient Dockerfiles, manage container lifecycle, configure networking and volumes, and debug container issues. Use when working with Docker,…

• Feature Flags

  by @BagelHole

  Implement feature flags for progressive feature rollout using LaunchDarkly, Unleash, or custom solutions. Control feature visibility, perform A/B testing, and enable trunk-based development. Use when implementing gradual…

• Git Workflow

  by @BagelHole

  Implement Git branching strategies, PR workflows, and release management patterns. Configure GitFlow, trunk-based development, or GitHub Flow for team collaboration. Use when establishing version control workflows or improving…

• New Relic

  by @BagelHole

  Configure New Relic observability platform for infrastructure and application monitoring. Set up APM agents, create dashboards, configure alerts, and implement distributed tracing. Use when implementing full-stack observability…

• Devcontainers Nix

  by @BagelHole

  Create reproducible development environments with Dev Containers, Nix flakes, and Devbox for consistent toolchains across teams. Use when onboarding developers, standardizing build environments, or eliminating "works on my…

• Semantic Versioning

  by @BagelHole

  Automate versioning and changelog generation using semantic versioning principles. Configure release automation, version bumping, and changelog tools. Use when implementing version management or automating release processes.

• Agent Evals

  by @BagelHole

  Build automated evaluation suites for AI agents using golden datasets, rubrics, and regression gates. Use when shipping agent features, validating prompt changes, or gating deployments on quality.

• Pci Dss Compliance

  by @BagelHole

  Implement PCI DSS requirements for payment card data. Configure cardholder data environment and security controls. Use when processing payment cards.

• Soc2 Compliance

  by @BagelHole

  Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.

• Azure Functions

  by @BagelHole

  Build serverless applications on Azure Functions. Configure triggers, bindings, and deployment. Use when implementing serverless workloads on Azure.

• Gcp Cloud Functions

  by @BagelHole

  Deploy serverless functions on Google Cloud Functions. Configure triggers and manage deployments. Use when implementing serverless workloads on GCP.

• Rag Observability Evals

  by @BagelHole

  Monitor and evaluate RAG systems with retrieval quality metrics, groundedness checks, hallucination detection, and continuous regression testing.

• Model Registry Governance

  by @BagelHole

  Establish model registry standards, governance controls, metadata schemas, approvals, and lifecycle policies for enterprise AI deployments.

• Planetscale

  by @BagelHole

  Operate MySQL-compatible databases on PlanetScale with branching workflows, safe migrations, and production rollouts.

• Cloudflare Workers

  by @BagelHole

  Build and deploy edge functions with Cloudflare Workers and Wrangler. Use for APIs, cron jobs, and edge middleware.

• Mongodb

  by @BagelHole

  Administer MongoDB databases. Configure replica sets, sharding, and backups. Use when managing MongoDB deployments.

• Agent Observability

  by @BagelHole

  Instrument AI agents with tracing, token metrics, latency, and cost visibility. Use for reliability and debugging.

• Cloudflare Pages

  by @BagelHole

  Deploy static sites and full-stack apps on Cloudflare Pages with previews, functions, and custom domains.

• Api Generating

  by @huangjia2019

  Generate API endpoint code and documentation from specifications. Use when the user wants to create new API endpoints, generate route handlers, scaffold REST APIs, or produce OpenAPI/Swagger specs from code.

• Api Documenting

  by @huangjia2019

  Generate API documentation from code. Use when the user wants to document APIs, create API reference, generate endpoint documentation, or needs help with OpenAPI/Swagger specs.

• Financial Analyzing

  by @huangjia2019

  Analyze financial data, calculate financial ratios, and generate analysis reports. Use when the user asks about revenue, costs, profits, margins, ROI, financial metrics, or needs financial analysis of a company or project.

• React 最佳实践

  by @huangjia2019

  React 组件设计模式、Hooks 使用指南、性能优化技巧

• Api Generating

  by @huangjia2019

  Generate API endpoint documentation from Express route files. Use when the user asks to generate, update, or review API docs for Express.js routes.

• Codebase Visualizer

  by @huangjia2019

  Generate an interactive tree visualization of your codebase. Use when exploring a new repo or understanding project structure.

• Route Scanning

  by @huangjia2019

  Scan Express.js source files to discover all API route definitions.

• Manimgl Best Practices

  by @adithya-s-k

  Trigger when: (1) User mentions "manimgl" or "ManimGL" or "3b1b manim", (2) Code contains `from manimlib import *`, (3) User runs `manimgl` CLI commands, (4) Working with InteractiveScene, self.frame, self.embed(),…

• Bd To Br Migration

  by @Dicklesworthstone

  Migrate docs from bd (beads) to br (beads_rust). Use when updating AGENTS.md, converting bd commands, "bd sync" → "br sync --flush-only", or beads migration.

• Br

  by @Dicklesworthstone

  Official skill for beads_rust (`br`), a local-first, dependency-aware issue tracker for AI agents. Use when creating issues, triaging backlogs, managing dependencies, finding ready work, updating status, or syncing to git via…

• Antivibe

  by @mohi-devhub

  Code learning and audit framework. Analyze any codebase — new, legacy, or AI-generated — and produce educational explanations or architectural audits. Use when the user wants to understand WHAT and WHY behind any code, not just…

• Libtv Skill

  by @libtv-labs

  agent-im 会话技能 - 通过 liblib.tv 的 AI 能力生成和编辑图片/视频。覆盖场景包括：生成（文生图、文生视频、图生视频、做动画、画一个xxx、来段xxx）、编辑修改（把xxx换成yyy、去掉xxx、加上xxx、改成xxx、调整xxx、局部修改、改镜头）、风格转换（风格迁移、转绘、换风格）、视频续写延长、复刻视频/TVC/宣传片、短剧/短漫剧生成、音乐MV生成、产品广告/展示片制作、分镜/故事板设计、教育视频/短视频制作。当用户提到…

• Native Subtitle Quote Image

  by @chengyi-ai

  将本地视频或用户有权处理的在线视频，经过来源获取、文字稿定位、选题选句、精确取帧、紧凑裁切、拼图和逐张质检，制作成 3:4 或保留画面原比例的视频字幕长图。支持两种明确分开的输出：保留画面内已烧录字幕的原生字幕模式，以及把已审核的时间点与台词绘制到真实视频帧上的脚本字幕模式。用户要求原生字幕截图、字幕帧拼图、YouTube 金句长图、台词截图、不重绘字幕、自定义中文台词，或调整主图比例、字幕区域、台词间隔和美感时使用。

• Cloudbase Agent

  by @TencentCloudBase

  Build and deploy AI agents with CloudBase Agent SDK (TypeScript & Python). Implements the AG-UI protocol for streaming agent-UI communication. Use when deploying agent servers, using LangGraph/LangChain/CrewAI adapters, building…

• Cloudbase Cli

  by @TencentCloudBase

  CloudBase CLI (tcb, 云开发CLI, Tencent CloudBase命令行) resource management skill. Use when deploying cloud functions, CloudRun, storage, NoSQL/MySQL, static hosting, permissions, CORS/domains via tcb; for CI/CD and batch ops; when…

• Cloudbase Code Review

  by @TencentCloudBase

  Code review and validation for CloudBase projects. After writing code for Web / miniprogram / CloudRun / cloud-function projects, call this skill to check for known pitfalls — auth guard misuse, missing database tables, RLS…

• Postgresql Development Cloudbase

  by @TencentCloudBase

  Use when building, debugging, or evaluating CloudBase PostgreSQL / CloudBase PG / PG mode apps, including Postgres schema setup, queryPgDatabase/managePgDatabase, JS SDK v3 app.rdb() CRUD/RPC, PG HTTP API fallback, RLS-style…

• Cloud Functions

  by @TencentCloudBase

  CloudBase function runtime guide for building, deploying, and debugging your own Event Functions or HTTP Functions. This skill should be used when users need application runtime code on CloudBase, not when they are merely…

• Cloudbase Wechat Integration

  by @TencentCloudBase

  CloudBase WeChat integration guide for Mini Program WeChat Pay, Mini Program virtual payment (虚拟支付, wx.requestVirtualPayment), Official Account JSAPI Pay, Native QR-code Pay, Official Account OAuth, openid handling, payment…

• Cloudbase Document Database Web Sdk

  by @TencentCloudBase

  Use CloudBase document database Web SDK only for confirmed NoSQL collection work. Query, create, update, and delete document data; if the task mentions PostgreSQL / CloudBase PG / app.rdb(), route to postgresql-development…

• Miniprogram Development

  by @TencentCloudBase

  WeChat Mini Program development skill for building, debugging, previewing, testing, publishing, and optimizing mini program projects (小程序开发、调试、预览、发布). Covers project structure and config (`project.config.json`, `appid`,…

• Cloudbase Document Database In Wechat Miniprogram

  by @TencentCloudBase

  Use CloudBase document database WeChat MiniProgram SDK to query, create, update, and delete data. Supports complex queries, pagination, aggregation, and geolocation queries.

• Cloudbase Platform

  by @TencentCloudBase

  CloudBase platform overview and routing guide. This skill should be used when users need high-level capability selection, platform concepts, console navigation, or cross-platform best practices before choosing a more specific…

• Cloudbase Declarative Deploy

  by @TencentCloudBase

  CloudBase declarative deployment from a cloudbaserc config (声明式部署, 配置式部署, cloudbaserc 部署) through the deployBuild / deployPlan / deployApply MCP tools. Use when deploying database, functions, app, hosting, or gateway resources…

• Cloud Api Operations

  by @TencentCloudBase

  Operate Tencent Cloud control-plane resources (monitoring/alarms, CLB, CAM roles, COS, MySQL, SCF) via cloud APIs when no dedicated MCP tool covers the task. Use when a task needs control-plane operations beyond CloudBase's own…

• Ai Model Nodejs

  by @TencentCloudBase

  Use this skill for Node.js backend AI via @cloudbase/node-sdk (>=3.16.0) — cloud functions, CloudRun, Express/Koa/NestJS, serverless APIs, scheduled jobs, LLM proxies, agent orchestration. The only SDK supporting image…

• Cloudrun Development

  by @TencentCloudBase

  CloudBase Run backend development rules (Function mode/Container mode). Use this skill when deploying backend services that require long connections, multi-language support, custom environments, AI agent development, or…

• Auth Tool Cloudbase

  by @TencentCloudBase

  CloudBase auth provider configuration and login-readiness guide. This skill should be used when users need to inspect, enable, disable, or configure auth providers, publishable-key prerequisites, login methods, SMS/email sender…

• Web Development

  by @TencentCloudBase

  Use when users need to implement, integrate, debug, build, deploy, or validate a Web frontend after the product direction is already clear, especially for React, Vue, Vite, browser flows, or CloudBase Web integration.

• Http Api Cloudbase

  by @TencentCloudBase

  CloudBase official HTTP API client guide. This skill should be used when backends, scripts, or non-SDK clients must call CloudBase platform APIs over raw HTTP instead of using a platform SDK or MCP management tool.

• Auth Wechat Miniprogram

  by @TencentCloudBase

  CloudBase WeChat Mini Program native authentication guide. This skill should be used when users need mini program identity handling, OPENID/UNIONID access, or `wx.cloud` auth behavior in projects where login is native and…

• Cloudbase Sites Runtime

  by @TencentCloudBase

  Use when the user wants to develop, run, preview, save, deploy, or roll back a CloudBase Web app in this conversation as a Lovable/Codex-Sites-like vibe- coding session — i.e. any request that maps to "spin up a React+Vite…

• Ai Model Wechat

  by @TencentCloudBase

  Use this skill for WeChat Mini Program AI via wx.cloud.extend.AI (小程序, wx.cloud apps). Covers generateText and streamText with callbacks (onText, onEvent, onFinish); streamText needs a data wrapper, generateText returns the raw…

• Ai Model Web

  by @TencentCloudBase

  Use this skill when a browser/Web app (React, Vue, Next, Nuxt, static sites, SPAs, dashboards, AI chat UI, 页面, 前端, 网页) needs AI models via @cloudbase/js-sdk. Default routing for Web/frontend AI — call directly from the browser,…

• Relational Database Web Cloudbase

  by @TencentCloudBase

  [Deprecated] Use when building frontend Web apps that talk to CloudBase Relational Database via @cloudbase/js-sdk – provides the canonical init pattern so you can then use Supabase-style queries from the browser. New…

• Web Development

  by @TencentCloudBase

  Use when implementing a CloudBase Web frontend (React/Vue/Vite) after the product direction is clear — SDK init, static hosting, browser verification.

• Cloud Storage Web

  by @TencentCloudBase

  Complete guide for CloudBase cloud storage using Web SDK (@cloudbase/js-sdk) - upload, download, temporary URLs, file management, and best practices.

• Auth Web

  by @TencentCloudBase

  Use when adding CloudBase Web authentication after providers have been checked with auth-tool / queryAppAuth.

• Cloud Functions

  by @TencentCloudBase

  Use when creating, updating, invoking, or debugging CloudBase cloud functions from DeepSeek Harness.

• Speech

  by @dp-archive

  Use when the user asks for text-to-speech narration or voiceover, accessibility reads, audio prompts, or batch speech generation via the OpenAI Audio API; run the bundled CLI (`scripts/text_to_speech.py`) with built-in voices…

• Sora

  by @dp-archive

  Use when the user asks to generate, remix, poll, list, download, or delete Sora videos via OpenAI’s video API using the bundled CLI (`scripts/sora.py`), including requests like “generate AI video,” “Sora,” “video remix,”…

• Imagegen

  by @dp-archive

  Use when the user asks to generate or edit images via the OpenAI Image API (for example: generate image, edit/inpaint/mask, background removal or replacement, transparent background, product shots, concept art, covers, or batch…

• Planning With Files

  by @dp-archive

  Implements Manus-style file-based planning for complex tasks. Creates task_plan.md, findings.md, and progress.md. Use when starting complex multi-step tasks, research projects, or any task requiring >5 tool calls. Now with…

• Skill Finder

  by @dp-archive

  Helps users discover and install agent skills from the open skills ecosystem (skills.sh). Use when users ask 'how do I do X', 'find a skill for X', 'is there a skill that can...', want to search for tools/templates/workflows, or…

• Code To Diagram

  by @dp-archive

  Generate architecture diagrams, ER diagrams, sequence diagrams, flowcharts, and class diagrams from codebases using Mermaid.js. Use when users ask to visualize code structure, draw architecture diagrams, create ER diagrams from…

• Trace Qa

  by @dp-archive

  Analyze and answer questions about agent execution traces. Use this skill when the user asks about a trace, wants to debug a failed agent run, understand what an agent did, analyze token usage or efficiency, or asks "what…

• Pdb Database

  by @dp-archive

  Access RCSB PDB for 3D protein/nucleic acid structures. Search by text/sequence/structure, download coordinates (PDB/mmCIF), retrieve metadata, for structural biology and drug discovery.

• Gemini Imagegen

  by @dp-archive

  Generate and edit images using Google Gemini's native image generation models (Nano Banana / Nano Banana Pro). Supports text-to-image, image editing with reference images, multi-image composition, and character consistency. Use…

• Markdown To Storyboard

  by @dp-archive

  Convert markdown content into a structured storyboard CSV for slide decks, video scripts, or any sequential visual media. Use when the user wants to plan a presentation, break down an article into slides, create a shot list, or…

• Twitter Algorithm Optimizer

  by @dp-archive

  Analyze and optimize tweets for maximum reach using Twitter's open-source algorithm insights. Rewrite and edit user tweets to improve engagement and visibility based on how the recommendation system ranks content.

• Clawsec Nanoclaw

  by @prompt-security

  Use when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot

• Clawsec Scanner

  by @prompt-security

  Automated vulnerability scanner for agent platforms. Performs dependency scanning (npm audit, pip-audit), multi-database CVE lookup (OSV, NVD, GitHub Advisory), SAST analysis (Semgrep, Bandit), and agent-specific static hook…

• Soul Guardian

  by @prompt-security

  Drift detection + baseline integrity guard for agent workspace files with automatic alerting support

• Picoclaw Self Pen Testing

  by @prompt-security

  Picoclaw-only local posture-review skill focused on read-only findings and safe operator remediation guidance.

• Claw Release

  by @prompt-security

  Release automation for Claw skills and website. Guides through version bumping, tagging, and release verification.

• Session Viewer

  by @openclaw

  Render Codex, Claude Code, OpenClaw, or Pi session JSONL transcripts as a searchable, shareable single-file HTML viewer.

• Behavior Validator

  by @openclaw

  Source-blind user behavior validation against a prewritten contract for apps, CLIs, APIs, and generated artifacts.

• Team Handoff

  by @openclaw

  Hand local work to a shared OpenClaw Gateway: start a worktree session there as yourself in one request, seeded with a handoff, and get the session URL back.

• Readme Standard

  by @openclaw

  House README standard: structure, badge row, tone, per-archetype templates, and verification gates for steipete/openclaw repos.

• Handoff

  by @openclaw

  Clipboard-ready handoff prompt for another agent to investigate or continue a task.

• Crowi Design

  by @crowi

  設計アイデアを RFC か spec に落とすワークフロー。新機能 / 記法 / アーキの設計を 「調査 → 設計 → 敵対的レビュー → ドキュメント化」で詰めたいとき。重い調査・設計・ レビュー・執筆を subagent (Workflow) に散らして main を軽く保ち、ユーザーとの収束だけ 対話ゲートに残す。crowi-feature (実装) の設計版。 キーワード: 設計, design, rfc, spec, 設計レビュー, 調査,…

• Crowi Qa

  by @crowi

  実機ブラウザでの有限探索 QA skill (Bounded DevTools Charter Runner)。クリティカル フロー表 (`.claude/agents/feature-planner.md:84-90`) を 9 チャーターに展開し、 操作数/リトライ/時間の上限つきで chrome-devtools MCP (優先) / claude-in-chrome (フォールバック) を駆動する。`packages/e2e` (決定的回帰)…

• Crowi Pr Received

  by @crowi

  外部から GitHub PR が来たときの triage → 分類 → 対応判断 → (承認後の)応答/取り込みを 定型化する skill。他人のコードは checkout もスクリプト実行もせず gh 経由の remote diff だけで triage を完結させ、merge / close / comment などの外向き操作は必ず sotarok の 承認を経る。supply chain 攻撃(lockfile poisoning /…

• Swiftui Backports

  by @shaps80

  Find SwiftUIBackports replacements for SwiftUI APIs unavailable on a project deployment target. Use for Swift/SwiftUI compiler availability errors, old iOS/tvOS/watchOS/macOS targets, or when implementing SwiftUI app features…

• Crowi Orchestrate

  by @crowi

  main セッションで /loop から 1 tick ごとに呼ぶ前提のオーケストレーション skill。 (A) ready for merge になった worktree を裏取りして integrate-worktree で取り込む、 (B) specs/ を groom して着手 ready / 不足要素 / 削除候補を報告する、 (C) main に直接積まれた作業が意味のある塊になったら code-review をかける、 (D)…

• Crowi Dev Ports

  by @crowi

  並行 worktree の dev ポート割当・dev portal (:4300)・reverse proxy・tailscale serve・DB isolation の仕組みと運用。`pnpm dev` のポートが読めない / 実機 (iPhone 等) から確認したい / collab や presence が繋がらない / worktree ごとに DB を分けたい / migrate apply が worktree…

• Crowi Complete Feature

  by @crowi

  worktree での実装 + QA + 修正が全部終わったと自分で判断したときに worktree セッションで起動する。客観ゲート (clean / commit あり / type-check / test / lint / openapi) を走らせ、全部 green のときだけ tasks/{id}.json を READY_TO_INTEGRATE にする (spec を切らず gw start から直接 fix した等で task…

• Crowi Review

  by @crowi

  Codex を敵対的レビュアーに使い、指定スコープ (worktree 差分 / main 直作業範囲 / エリア) を review → 報告 (+ main clean なら低リスクだけその場修正) する単発レビュー skill。findings は事前の全件検証をせず unverified タグ付きで報告し、修正を適用する ものだけ着手時に実コードで裏取りする (verification-on-action)。PR/merge の自動化は しない…

• Crowi Release

  by @crowi

  リリースの指揮 skill。pre-flight(changeset / 未統合 worktree / CI 状態 / Version PR)→ Go/No-Go 材料の提示 →(ユーザー承認後の)Version PR merge → タグ後の成果物検証 (npm / Docker / GitHub Release / team wiki の記録)。merge / tag / publish は常にユーザー承認後。 検証は成果物に対して…

• Crowi Docs Refresh

  by @crowi

  直近の main の変更(integrate 済み feature・fix)を踏まえて apps/crowi-site/ の ドキュメント(content/docs/{ja,en})を更新し、既存ページに陳腐化した記述が ないかを実コード照合で調査・修正する定期メンテ skill。integrate が数本たまった とき・release pre-flight の前・「ドキュメント古くない?」と言われたときに回す。 キーワード: docs,…

• Crowi Kickoff

  by @crowi

  承認済み spec から worktree 実装開始までを 1 コマンド化。ready 判定 → gw start (hook が tmux window + claude セッションを自動起動) → queue 初期化 → その window に 実装指示を send-keys で投入。main worktree で実行する。not ready な spec は欠落を 列挙して中止する。 キーワード: kickoff, 着手, 実装開始,…

• Crowi Changesets

  by @crowi

  changeset を追加するかどうかの判断基準・bump level (patch/minor/major) の選び方・ 対象パッケージの選び方・コマンド。feature や fix を commit する直前、 「これ changeset いる?」と迷ったとき、リリースノートに載る文面を書くときに読む。 キーワード: changeset, リリースノート, changelog, bump, patch, minor, major, pnpm…

• Crowi Fix

  by @crowi

  バグ報告・小修正のための軽量ワークフロー。spec 不要。再現(失敗するテスト)を先に作り、 systematic-debugging で根本原因を特定してから直す。ゲート(type-check / test / lint)→ codex 1 パスレビュー → commit。設計判断が要る規模なら crowi-design / crowi-feature へ誘導。 キーワード: fix, バグ, 修正, bug, 不具合, repro, 直して, 壊れてる

• Crowi Handoff

  by @crowi

  セッションを終える・中断する・引き継ぐときに、作業状態を定型 HANDOFF ドキュメント + memory ポインタ + agmsg 通知として残す。worktree / main どちらでも動く。 完了済みの worktree では handoff ではなく /crowi-complete-feature を先に促す。 キーワード: handoff, 引き継ぎ, 中断, セッション終了, 退避, 後で続き

• Integrate Worktree

  by @crowi

  完了した並行 worktree の作業を main に取り込み、worktree を close、その後 simplify で 統合後のコードを整える一連のワークフロー。複数エージェントが gw worktree で並行作業して いる時に、ひとつ終わったブランチを main に合流させる時に使う。 キーワード: worktree, merge, integrate, gw end, 統合, 取り込み

• Crowi Release Discord Nits

  by @crowi

  リリース後、CI が Discord に自動投稿する告知に添える一言コメント(カテゴリ別・ 1 行ずつの簡潔な箇条書き)を、CHANGELOG 差分から生成する skill。投稿はしない (テキスト生成まで — 貼り付けは人間が行う)。 キーワード: discord, リリース告知, 一言コメント, release notes, changelog

• Visual Acceptance

  by @huiliyi37

  UI/视觉改动交付前的终验方法论——多主题截图矩阵复现、像素真值判据链、CSS 层叠陷阱、布局漂移审查、before/after 存证。当视觉改动需要验收（而非实现）时使用：交付前最后一环，回答「看得见的部分真的对吗」。

• Agent Harness Testing

  by @huiliyi37

  在任意项目中执行开发任务时的测试方法论——包括测试能力探测、RED→GREEN 纪律、探针管理、环境模拟、测试策略选择。当面对 bugfix、功能开发、重构等需要验证的代码改动时使用。

• Vulnhunt

  by @capitalone

  Scan a codebase for exploitable security defects. Enumerates every user-controllable input, traces each forward to dangerous sinks, proves exploitability with executable tests, and proposes validated fixes.

• Vulnhunt Fix Verify

  by @capitalone

  Verify that specific findings from a prior /vulnhunt scan have been correctly addressed in a supplied code checkout. Read-only over the target repo; produces a per-finding verdict JSON.