This Skill is built on practical expertise in AI file-workflow governance, source authority classification, copy-first editing, prompt-injection resistance, private-to-external dataflow review, and publish/delete/send boundary checks. It helps AI agents decide what can be read, copied, edited, deleted, zipped, or sent while keeping originals protected and untrusted file, web, or tool content from becoming instructions.
From a local ISSUE file to a verified, committed deliverable — with a fresh-subagent acceptance gate that catches wrong screenshots and leaked logic.
Before you write code, kill the causes of rework. A phase-gate skill that runs a pre-implementation diagnosis (clarify requirements, success criteria, non-goals, hidden risks) and sets up the dev environment (toolchain check, repo init, dependency/secret/config templates, DB/API contract, folder layout). Each gate must pass before moving on. Delivers a diagnosis report, a stack-selection doc, and a ready-to-build foundation to hand off to implementation.
Built around the part everyone gets wrong: when a key leaks you rotate it first — it's compromised the second it hits a remote, and bots scan public pushes within seconds. Scans staged changes, the working tree, and git history for provider key shapes, private keys, committed .env/credential files, and hardcoded creds — tuned for signal over noise so placeholders and $ENV refs don't cry wolf — then walks rotate → purge-from-history → move-to-env → add-a-pre-commit-hook, in the right order.
DBA-grade migration safety: expand-contract plans, lock-behavior analysis, batched backfills, forward+rollback and integrity checks (Postgres/MySQL · Prisma/Rails/Django)