Dan Stefaniuk
Community@stefaniuk
Dan Stefaniuk maintains 49 engineering skills spanning spec-driven development, security auditing, testing discipline, and repository documentation for software teams.
Agent Skills by Dan Stefaniuk
Showing 49 vetted skills indexed across 2 GitHub repositories.
stefaniukplaywright-cli
Automate browser interactions and Playwright test workflows through a command-line interface.
stefaniukspeckit-checklist
Generate requirements-quality checklists for spec-kit feature specifications.
stefaniuksystem-documentation
Establish, sync, audit, and review repository documentation across Diátaxis modes and governance artefacts.
stefaniukusing-git-worktrees
Creates isolated git worktree workspaces with native tool detection and baseline test verification.
stefaniukvirtual-think-tank
Runs a structured multi-phase debate panel to frame decisions and draft ADRs.
stefaniuktest-driven-development
Enforces red-green-refactor test-driven development for features, bugfixes, and refactoring.
stefaniuksystematic-debugging
Diagnose bugs through a four-phase root cause investigation process before proposing fixes.
stefaniukincremental-implementation
Implements multi-file code changes in thin, tested vertical slices.
stefaniukapi-and-interface-design
Designs stable REST APIs, TypeScript interfaces, and module contracts with consistent error and idempotency semantics.
stefaniuksemgrep
Runs Semgrep security scans with language detection, parallel ruleset execution, and merged SARIF output.
stefaniukspeckit-constitution
Creates or updates the project constitution from interactive or provided principle inputs.
stefaniukproperty-based-testing
Writes, reviews, and debugs property-based tests across Hypothesis, fast-check, proptest, and Echidna.
stefaniukdispatching-parallel-agents
Dispatch concurrent subagents to fix independent test failures across separate problem domains.
stefaniukspeckit-implement
Executes implementation plans by processing tasks defined in tasks.md with TDD.
stefaniukcode-review
Runs structured Spec Kit reviews of documentation, code, and tests against constitution rules.
stefaniukspeckit-converge
Assess codebase against spec, plan, and tasks, then append remaining work to tasks.md.
stefaniukci-cd-and-automation
Configures CI/CD pipelines with quality gates, deployment strategies, and rollback workflows.
stefaniukarchitecture-docs
Generate evidence-based architecture documentation from repository maps through C4 models and infrastructure diagrams.
stefaniukspeckit-taskstoissues
Convert spec-kit tasks into dependency-ordered GitHub issues with deduplication.
stefaniukexecuting-plans
Executes written implementation plans task by task with verification checkpoints and review gates.
stefaniukfinishing-a-development-branch
Guides merging, pushing, or preserving a completed development branch with worktree cleanup.
stefaniukspeckit-clarify
Identifies underspecified areas in feature specs and encodes clarification answers back into the spec.
stefaniukgha-security-review
Reviews GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.
stefaniukskill-scanner
Scan agent skills for prompt injection, malicious code, and excessive permissions.
Frequently Asked Questions About Dan Stefaniuk
FAQPage SchemaWhat tasks can I accomplish with Dan Stefaniuk's skill collection?▼
You can run spec-driven feature development with Spec Kit commands, perform security audits via Semgrep, GitHub Actions review, and supply-chain dependency analysis, scaffold Django and FastAPI projects, generate architecture documentation and C4 diagrams, and enforce TDD, property-based testing, and mutation testing practices.
Who should use these skills?▼
Software engineers, security reviewers, and technical leads benefit most. The collection targets developers practicing spec-driven development, auditors checking CI/CD pipelines and dependency trees for supply-chain risk, and teams maintaining repository documentation, ADRs, and disciplined code review processes.
What prerequisites do these skills require?▼
Spec Kit skills require a project with a .specify/ directory. browser-testing-with-devtools needs the chrome-devtools MCP server configured. playwright-cli requires npx/npm access. Semgrep scanning uses scripts/run-scans.sh, and enforcement-audit supports python, typescript, go, docker, rust, terraform, reactjs, and tauri stacks.
Are these skills open source and what do they cost?▼
Most documented skills, including system-documentation, architecture-docs, virtual-think-tank, code-review, spec-consolidation, and enforcement-audit, carry MIT licenses at no cost. The mcp-builder skill references separate terms in its LICENSE.txt file, so review that file before redistribution.
How do the security auditing skills work in practice?▼
The semgrep skill detects languages, selects rulesets, requests explicit approval, then batches scans into SARIF output. gha-security-review inspects .github/workflows/ for exploitation paths with PoC scenarios, while supply-chain-risk-auditor checks lockfile trees, abandoned upstreams, and install-time script execution.