Tanav Poswal

Build, review, or refactor backend systems using production-grade engineering defaults. Use this skill whenever the user asks for backend APIs, services, controllers, repositories, database access, queues, caching, auth, observability, scaling, idempotency, or "best practices" for server-side systems, even if they do not explicitly ask for architecture help.

Use a Code Mode workflow backed by ScriptC for multi-step computation, data transformation, API-shaped tasks, and repeatable terminal automation. Trigger whenever the user asks for “code mode”, asks you to write and run TypeScript with scriptc, or a task is substantially easier to solve by generating a short program, executing it, and inspecting its structured output. Do not use it for ordinary one-file edits, simple shell commands, or code that the user only wants written rather than executed.

Defensive and authorized penetration testing guidance: recon, mapping, traffic analysis, credential auditing, web app scanning, and basic forensics. Use when the user asks for pentesting workflows, vulnerability assessment, recon/scanning, security audits, or learning common tools in an authorized lab. Refuse illegal/unauthorized hacking and avoid instructions that enable wrongdoing.

Create small CLIs and scripts that use Charmbracelet Gum TUI components (choose, input, confirm, spin, style) with solid shell practices and non-interactive fallbacks.

Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.