Security & Auditing Skills

ALWAYS use this skill when the user mentions PKA, personal knowledge, repo map, knowledge base setup, replacing Obsidian/Notion/Tana/Heptabase, organizing notes and files into a unified system, adding roles to their AI team, project lifecycle management, transitioning or archiving projects, restoring archived projects, checking which projects are stale or winding down, bootstrapping any kind of personal knowledge assistant, OR setting up Obsidian coexistence / a hybrid monorepo (root .git + child repos at knowledge/ and projects/ coordinated via .meta). Triggers also include: "bootstrap obsidian", "bootstrap vault", "MOC stubs", "frontmatter retrofit", "bootstrap git", "initialize the hybrid repo", "set up the meta monorepo", "bootstrap all", "bootstrap everything". This skill handles first-run setup (scanning folders, inferring structure, writing CLAUDE.md, creating SQLite indexes, defining roles) AND ongoing management (updating the repo map, adding team roles, transitioning completed projects to a knowledge archive, checking project activity) AND the additive Obsidian / hybrid-monorepo bootstraps (idempotent, user-triggered, never auto-run). Use it even if the user doesn't say "PKA" explicitly — if they want to unify scattered notes, set up AI-powered file organization, or manage workspace lifecycle, this is the right skill.

ALWAYS use this skill when the user wants a dashboard, browser interface, or visual view of their knowledge base, notes, projects, or PKA system. Triggers on: building a dashboard, updating an existing dashboard, adding sections or views to a dashboard, visualizing data in a browser, creating a PKA interface, refreshing a stale dashboard, fixing dashboard search, changing dashboard theme or dark mode, adding kanban/timeline/card views, or any request to see knowledge or project data visually in HTML. Generates a single-file HTML dashboard (no server, no build step, double-click to open) with sections auto-generated from the Repo Map. Use this skill even if the user just says "build my dashboard", "update the dashboard", "show me my data in a browser", "add a view for X", or "the dashboard needs refreshing". Supports SQLite and markdown-only modes.

ALWAYS use this skill when the user wants to process, route, OCR, index, or organize documents in their knowledge system. Triggers on: processing an inbox or team-inbox, routing dropped files to the right folders, OCR on PDFs or scanned documents, re-indexing a knowledge base, setting up a scanner (ScanSnap, iPhone), organizing files into a folder structure, inventorying what's in an inbox, extracting text from PDFs, or any document ingestion task within a PKA or personal knowledge system. Use this skill even when the user just says "process my inbox", "what's in the inbox", "route these docs", "re-index", "OCR these", "set up my scanner", or drops files and asks what to do with them. Handles transcript detection (holds .vtt/.srt files for meeting processing instead of routing them). Also runs lint / health checks on the knowledge base (orphan files, broken links, stale wiki sources, contradiction candidates) — triggered by "run a health check", "lint my knowledge base", "what needs attention", or "check for broken links". Works standalone or with pka-bootstrap.

ALWAYS use this skill when the user mentions meetings, meeting notes, taking notes, transcripts, action items from meetings, or filing/routing meeting documentation. Triggers on: starting a meeting, taking notes during a meeting, 1-1s with anyone, reconciling notes against a transcript, filing or routing meeting notes to the right folder, processing a Zoom/Teams transcript, extracting action items from meetings, asking what action items they have, capturing meeting decisions, or any meeting-related documentation task. Use this even when the user just says "I'm in a meeting", "take notes", "file these notes", "I have a transcript", "what are my action items this week", or mentions a specific meeting like "1-1 with Aarav" or "SLT planning". Orchestrates thinkkit take-notes and resolve-against-transcript when available. Handles smart routing, attendee linking, and action item extraction. Works standalone for routing if thinkkit is not installed.

ALWAYS use this skill when the user is new to PKA, asks for a tour, walkthrough, tutorial, onboarding, or says they don't know how to use their PKA system. Triggers on: "I just installed PKA", "how do I use this", "what can I do with this", "walk me through PKA", "teach me how this works", "give me a tour", "I'm new here", "what are my options", "how do I find things", "show me the ropes", "help me get started", or any confusion about where to begin. Also use when a user asks how to do a specific PKA task for the first time (how to capture meetings, drop files, use the dashboard, transition a project) — the skill teaches the workflow with concrete examples rather than just executing. Adapts to the user's current PKA state: offers a full tour if bootstrapped, points to pka-bootstrap if not.

ALWAYS use this skill when the user mentions topic wikis, synthesis pages, knowledge synthesis, maintaining understanding on a topic, creating or updating a wiki page, ingesting a source into a wiki, or asking what they know about a topic that might have a synthesis page. Triggers on: "create a wiki on X", "ingest this into my X wiki", "add this source to the X wiki", "what wikis do I have", "update my thinking on X", "show me my topic wikis", "synthesize X into Y", "retire the X wiki", or similar wiki-maintenance requests. Also enhances "what do I know about X" queries when a wiki exists for X. Topic wikis are LLM-maintained synthesis pages that sit alongside authored notes — they cite moments, never replace them. Optional layer; users without wikis see no change in PKA behavior.