Banana Pancakes
Official@bpcakes · Czech Republic
Banana Pancakes provides code review, refactoring, and privacy/E2EE security audit skills spanning Rust, TypeScript/React, Swift, and Ruby on Rails.
Agent Skills by Banana Pancakes
Showing 40 vetted skills indexed across 1 GitHub repositories.
comprehensive-review
Merge independent Claude, Codex, and Cursor reviews of Git diffs into one consolidated report.
review-fix-loop
Runs bounded review, repair, and validation loops with a persisted controller.
swift-simplify
Simplifies Swift and iOS code while preserving behavior and concurrency contracts.
fowler-ruby-rails-refactoring
Assess Ruby and Rails code for refactoring opportunities and produce behavior-preserving Fowler-style transformation plans.
client-encryption-boundary-audit
Audit whether client plaintext is encrypted before upload, persistence, logs, or telemetry.
vulnerability-disclosure-and-retest-manager
Manage privacy-audit finding remediation, disclosure drafting, retest planning, and audit closure.
telemetry-crash-logs-support-leakage-audit
Audit logs, telemetry, crash reports, and support tools for sensitive data leakage.
crypto-implementation-static-review
Statically review encryption code for primitive, randomness, KDF, envelope, and plaintext-handling defects.
network-payload-zero-knowledge-test
Scan HAR captures for sentinel values that leak plaintext against zero-knowledge claims.
server-decryptability-and-plaintext-path-audit
Audit backend code and artifacts for server-side plaintext exposure and decryption paths.
metadata-leakage-inventory
Inventory observable metadata and assess linkability, inference, and privacy-claim conflicts.
privacy-claims-field-classifier
Classify observed data fields against privacy and encryption claims in an evidence-backed field matrix.
crypto-architecture-review
Review E2EE and zero-knowledge crypto architecture, key hierarchies, recovery flows, and server influence.
threat-model-and-dataflow-builder
Builds audit-grade threat models and data-flow inventories using STRIDE and LINDDUN.
audit-intake-and-evidence-map
Plans privacy, zero-knowledge, and E2EE audits by scoping claims and mapping evidence into a manifest.
audit-common
Normalizes evidence, severity, redaction, and finding schemas across privacy audit workflows.
cursor-implement-exec-plan
Delegates a checked-in ExecPlan to Cursor Agent with Composer 2.5 for implementation.
write-exec-plan
Writes self-contained executable implementation plans with milestones, validation steps, and decision logs.
improve-exec-plan
Reviews and revises an existing ExecPlan against verified repository code evidence.
typescript-simplify
Simplifies TypeScript and React code for clarity while preserving behavior within the requested scope.
react-test-quality-review
Review React tests for behavioral coverage, assertion strength, mocking, and regression confidence.
typescript-react-dup-unifier
Detects near-duplicate TypeScript/React abstractions and recommends evidence-based unification decisions.
react-state-data-flow-review
Reviews React state ownership and data flow for drift, invalid async states, and cache inconsistencies.
react-render-performance-review
Review React render costs, context invalidation, keys, and memoization for performance issues.
Frequently Asked Questions About Banana Pancakes
FAQPage SchemaWhat tasks can I accomplish with Banana Pancakes' skills?▼
You can run multi-model code reviews of Git diffs, execute bounded review-and-fix loops, simplify Swift/TypeScript/Rust code, produce Fowler-style refactoring plans, and conduct privacy audits covering E2EE claims, metadata leakage, telemetry redaction, and crypto architecture.
Who are these skills designed for?▼
They target software engineers and security reviewers working in Rust, TypeScript/React, Swift/iOS, or Ruby on Rails codebases, plus privacy auditors validating zero-knowledge and end-to-end-encryption claims against real network captures, logs, and server code paths.
How do the privacy and encryption audit skills work in practice?▼
Start with audit-intake-and-evidence-map to scope the engagement, then apply specialized skills: classify fields against privacy claims, test HAR captures for plaintext leakage, statically review crypto implementations, and manage disclosure, retesting, and audit closure.
What are the runtime prerequisites and dependencies?▼
Skills operate on repository artifacts you supply, such as diffs, source files, and HAR captures. The TypeScript/React abstraction scanner optionally uses Node.js 18+ with a bundled dependency-free scanner; no network access is required for that component.
Do these skills make code changes automatically?▼
Only when scoped. Simplification and reorganization skills preserve behavior within the requested edit scope, review-fix-loop performs bounded persisted repairs, and assessment skills like abstraction-police or dup-unifier produce analysis and plans rather than routine implementation.