Ian Murphy
@backspace-shmackspaceTechnical leader. 20+ years in software and security engineering. Building tools for AI agent workflows. Writing at bksp.ca.
Most Used Tags
Published Resources
audit
Deep security and performance scan with structured reporting.
receiving-code-review
Use when receiving code review feedback, before implementing suggestions, especially if feedback seems unclear or technically questionable - requires technical rigor and verification, not performative agreement or blind implementation
verification-before-completion
Use when about to claim work is complete, before committing or creating PRs - requires fresh verification evidence before any completion claim. Triggers on phrases like "done", "finished", "ready to commit", "all tests pass", "looks good", "should work", "I think that's it".
secure-review
Conduct deep semantic security reviews of code changes with advanced analysis techniques.
Claude Devkit
Comprehensive development toolkit for Claude Code, featuring skills, agents, and templates.
ship
Execute an approved plan using unattended implementation and validation with worktree isolation.
compliance-check
Validate codebase against code-level compliance signals for regulatory frameworks (FedRAMP, FIPS, OWASP, SOC 2). Scoped to source code analysis only — not a compliance certification.
sync
Synchronize CLAUDE.md and README with recent code changes.
retro
Mine review artifacts for recurring patterns and write project learnings.
threat-model-gate
Integrate threat modeling into your security-sensitive feature planning.
secrets-scan
Detect secrets in code with a pre-commit scanning tool that requires no external dependencies.
dependency-audit
Conduct comprehensive supply chain security audits using real CLI vulnerability scanners.
architect
Create technical blueprints for new features efficiently.