Assess security, cost and coupling

Run the output-only assessment skills on a diff or the whole codebase.

Goal: get a security, cost or coupling verdict without changing any file.

Prerequisites

  • pair skills installed

Steps

  1. Security
    • In your assistant: /pair-capability-assess-security $mode: review on a PR, or $mode: audit for a one-shot OWASP scan.
  2. Cost
    • In your assistant: /pair-capability-assess-cost gives a chromatic cost class for a change.
  3. Coupling
    • In your assistant: /pair-capability-assess-coupling $scope: diff for a PR, or $scope: full for an audit.
  4. Act on the findings
    • Promote tolerable ones to tech debt; fix critical ones before merge. The review runs the same three assessments and shows each as a one-line verdict.

Verify

  • Reports for audits land in .pair/working/reports/.

On this page