Treebird Oss Skills

Treebird Public Skills

Public [Claude Code](https://claude.com/claude-code) skills from the Treebird flock.

Three families: skills that drive *another* coding CLI from inside Claude Code, skills that audit a repo or review it with deliberately cold eyes, and one that grills you before you write a hook.

Cross-model — drive another coding CLI

Plugin	Command	What it does
skill-codex	/codex	Delegate a task to the Codex CLI — model selection, sandbox modes, contract-driven dispatch, and the hang modes that bite in headless runs
skill-clodex	/clodex	Two-model adversarial review under a negotiated contract — each verifies the other's claims, then the fixes split by disjoint file set and land in one build
skill-opencode	/opencode	Dispatch builds and refactors to the opencode CLI across its cloud models, then review what comes back instead of accepting it

Audit — review any repo, no ecosystem dependencies

These four detect the DB, ORM, and language from the repo itself. They assume no shared knowledge tree, no training pipeline, and no particular provider. Run together they're a full sweep of a TS/Node app: **privacy-review** (what leaks) → **ts-review** (trust-boundary code) → **sql-review** (DB/RLS in the migrations) → **rls-audit** (DB/RLS as actually deployed) → **node-review** (supply chain).

`sql-review` reads what the migrations *say*; `rls-audit` proves what the running project *does*. Neither substitutes for the other.

Plugin	Command	What it does
skill-rls-audit	/rls-audit	Audit a deployed Supabase project for multi-tenant RLS leaks — and demonstrate isolation with a two-tenant black-box matrix rather than inspecting it
skill-privacy-review	/privacy-review	A fearless privacy inventory of an app holding sensitive user data — hunt the gap between the privacy you promise and what the code enforces
skill-sql-review	/sql-review	SQL migrati