Claude commands

Turn one screen recording of a bug into an evidence-backed GitHub issue draft (quote, frames, OCR identifiers, wall-clock; silent recordings work too).

Turn a recorded product demo into a prioritized backlog with timestamped evidence.

Generate unit tests for Python, JavaScript/TypeScript, and React code with mocks, edge cases, and coverage gap analysis

Initialize a design system with tokens

Review existing UI for issues and improvements

Guided component creation with proper patterns

Audit UI code for WCAG compliance

Generate async standup notes from git commits, Jira tickets, and Obsidian notes

Resolve a GitHub issue from triage and root cause analysis through test-driven implementation and a pull request

Refactor code while keeping all tests green in TDD refactor phase

Write comprehensive failing tests following TDD red phase principles

Implement minimal code to make failing tests pass in TDD green phase

Execute a comprehensive TDD workflow with strict red-green-refactor discipline

Scaffold a Rust project (binary, library, workspace, or Axum web API) with Cargo, testing, and dev tooling

Generate comprehensive market opportunity analysis with TAM/SAM/SOM calculations

Create detailed 3-5 year financial model with revenue, costs, cash flow, and scenarios

Generate comprehensive investor-ready business case document with market, solution, financials, and strategy

Master pipeline entry point. Routes requirements from a story file through scan → orchestrate → architect → implement → review → QA → playwright stages. Use /ship stories/foo.md to start, /ship status to check progress, /ship resume to continue.

Initialises the ShipMate pipeline in the current project. Creates the stories folder, sets up the pipeline state directory, and runs the initial codebase scan to generate project-doc.md and AGENTS.md.

Static Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks

Orchestrate comprehensive security hardening with defense-in-depth strategy across all application layers

Scan dependencies for vulnerabilities and generate supply chain security evidence

Review software compliance controls, regulatory requirements, and audit readiness

List the review actions that the review-governance policy blocked in this session. protect-mcp 0.7.4 writes no receipt for a denied call, so the list comes from the session, not from ./review-receipts/.