DevOps & Infra

ferroxlabs Bundle

Secrets management expertise covering HashiCorp Vault, AWS Secrets Manager, rotation strategies, zero-trust secrets architecture, envelope encryption, secret injection patterns, least-privilege access, and secrets lifecycle management. Use when the user asks about secrets manager, secrets manager best practices, or needs guidance on secrets manager implementation. Do NOT use when the user needs a different specialized skill or is asking about an unrelated technology domain.

paulasilvatech Skill

Performs database operations and health monitoring for Open Horizons platform data services. Use this skill when checking PostgreSQL health, validating connections, reviewing backup settings, monitoring database size or active sessions, checking migrations, or troubleshooting database behavior.

paulasilvatech Skill

Create a Spring Boot Kotlin project skeleton from Spring Initializr with Gradle Kotlin DSL, Java 21, WebFlux, reactive data dependencies, SpringDoc, ArchUnit, and local Redis/PostgreSQL/MongoDB Docker services. Use when asked to create or scaffold a Spring Boot Kotlin project.

paulasilvatech Bundle

Design and implement Arduino integration with Azure IoT Hub and IoT Edge, including secure provisioning, MQTT telemetry, gateway topologies, offline buffering, command handling, OTA configuration, and production guardrails. Use when connecting Arduino sensors or actuators to Azure IoT or edge gateways.

paulasilvatech Bundle

Provides a decision framework for production multi-agent and AI-native systems on GitHub and Azure AI Foundry. Use this skill when designing model routing, prompt caching, semantic caching, memory, context curation, RAG, tools, MCP, identity, guardrails, evaluation, observability, or cost controls.

paulasilvatech Bundle

Analyze Terraform plan JSON for AzureRM Provider Set-type attribute noise and separate order-only false-positive diffs from real Azure resource changes. Use when Application Gateway, Load Balancer, Firewall, Front Door, NSG, or other Azure resources show many changed elements after one add, remove, or reorder.

paulasilvatech Bundle

Assess Kubernetes workloads and cluster configuration for AKS Automatic compatibility, identify incompatibilities, generate fixes, and guide migration from AKS Standard to AKS Automatic. Use when the user wants to migrate to AKS Automatic, check AKS Automatic readiness, validate manifests for Automatic, assess a cluster for Automatic compatibility, fix a deployment for Automatic, or identify AKS Automatic migration blockers.

paulasilvatech Skill

Use when editing tracked Terraform modules, environments, providers, state contracts, or examples.

paulasilvatech Bundle

Creates, repairs, and runs scoped Terratest coverage for Open Horizons Terraform modules under tests/terraform. Use when adding module tests, testing validation failures, selecting static or plan coverage, or running an explicitly approved Azure integration test with safe cleanup.

paulasilvatech Skill

Use when editing tracked AKS, Kubernetes, Helm, Kustomize, or generated GitOps manifests.

paulasilvatech Skill

Use when editing Terraform that creates or changes Azure resource names, naming inputs, or required tags.

paulasilvatech Skill

Creates formal, AI-optimized specifications for existing GitHub Actions CI/CD workflows by extracting triggers, jobs, dependencies, contracts, quality gates, error paths, environments, governance, and change rules. Use this skill when asked to document a workflow, create a CI/CD workflow specification, summarize a GitHub Actions file for maintenance, or produce spec/spec-process-cicd-[workflow-name].md.

paulasilvatech Skill

Use when editing the tracked Backstage agent or MCP Docker Compose development stacks.

paulasilvatech Skill

Analyzes Azure IaC and current Azure cost or utilization evidence to identify, quantify, and prioritize savings. Use when reviewing Azure spend, right-sizing resources, reducing waste, or preparing evidence-based cost optimization issues.

paulasilvatech Skill

Design Azure API Management as the runtime AI gateway for model and tool traffic, including token-per-minute controls, token limits, quotas, multi-backend load-balanced backend pools, circuit breakers, semantic caching, token metrics, managed identity, and content safety. Use when fronting model deployments, enforcing token budgets, adding semantic cache, load balancing LLM endpoints, or governing tool API calls at runtime.

paulasilvatech Skill

Azure AI Foundry operations provisions workspaces, model deployments, RAG resources, operational settings, and resource checks. Use this skill when provisioning AI Foundry, deploying OpenAI models, configuring RAG, operating model endpoints, setting up AI workspaces, or checking Foundry resources.

paulasilvatech Skill

Defines SIFAP IaC and Azure safety for provider baselines, identity, state, networks, plans, and approvals. Use when editing infrastructure, Compose, or deployment configuration.

paulasilvatech Skill

Designs and provisions a Microsoft Entra agent user linked to an Agent ID identity, including parent validation, least-privilege permissions, optional manager, usage location, licensing, and verification. Use when an agent needs a user-shaped directory identity for collaboration workloads.

paulasilvatech Skill

Foundry agent blueprint maps agent designs to Azure AI Foundry Agent Service models, connections, tools, memory, evaluation, and tracing. Use this skill when designing Foundry agent runtimes, model catalog choices, Azure AI Search or Redis connections, Bing connections, OpenAPI tools, MCP tools, code interpreter, file search, threads, runs, or evaluation plans.

paulasilvatech Skill

Pipeline diagnostics analyzes GitHub Actions CI/CD failures and remediation patterns. Use this skill when diagnosing workflow failures, build errors, deploy failures, failed jobs or steps, logs triage, actions permissions, OIDC failures, dependency cache issues, and CI/CD debugging.

paulasilvatech Bundle

Validates and sets up local CLI tools and access needed before Open Horizons deployment. Use this skill when checking required tool availability, verifying minimum versions, preparing Azure login readiness, validating CI/CD runner prerequisites, or producing a prerequisite checklist.

paulasilvatech Skill

Assesses read-only Azure readiness for one Open Horizons deployment scope using current subscription, provider, quota, SKU, identity, network, and resource evidence. Use when needed before Terraform planning or deployment when Azure prerequisites may block the requested components.

paulasilvatech Skill

Performs an independent, read-only security review of one Open Horizons change or surface with severity-ranked, evidence-backed findings and verification criteria. Use when reviewing code, Terraform, Kubernetes, identity, workflows, Backstage, MAF agents, MCP tools, secrets, or policy review.

paulasilvatech Bundle

Configures GitHub Codespaces devcontainer environments for Backstage Golden Path templates. Use this skill when creating or validating devcontainer.json, Codespaces setup, Python FastAPI templates, Node app templates, Terraform templates, Java templates, AI/ML pipelines, data pipelines, container features, SDK pre-installation, or template mapping.

paulasilvatech Bundle

Implements and validates one bounded Open Horizons Terraform change in terraform/modules or an isolated terraform/environments root. Use when changing a module, environment root, provider constraint, backend declaration, import block, or state-aware Terraform contract without applying infrastructure.

paulasilvatech Bundle

Implements and validates one product-specific integration in the existing Open Horizons Backstage portal and agent services. Use when wiring routes, plugins, catalog entities, app configuration, AI Chat SSE behavior, runtime APIs, or Backstage Kubernetes manifests without provisioning Azure or deploying live workloads.

paulasilvatech Bundle

Instrument Azure-hosted web apps with Azure Application Insights telemetry by choosing auto-instrumentation or code instrumentation for ASP.NET Core, Node.js, or Python. Use when the user wants to enable telemetry, observe app health, create an App Insights resource, or wire instrumentation into a webapp.

paulasilvatech Bundle

Coordinates end-to-end Open Horizons platform deployment across prerequisites, Terraform, Kubernetes, GitOps, and verification. Use this skill when planning or executing full platform deployment, dry-run deployment, horizon enablement, deployment sequence, post-deploy verification, or deployment troubleshooting.

paulasilvatech Bundle

Validates Open Horizons architecture Markdown documents for required sections, required diagrams, Mermaid structure, explanation completeness, and repository copy conventions. Use this skill when reviewing or finishing an architecture document, checking {app}_Architecture.md, verifying Mermaid diagrams, or confirming the architecture Definition of Done.

paulasilvatech Bundle

Manage Azure cost by querying actual spend, forecasting future spending, and optimizing resources to reduce waste. Use when the user asks about Azure costs or bills, wants a cost breakdown, asks how much they are spending, wants to forecast spending, optimize or reduce spend, find orphaned resources, rightsize VMs, investigate a cost spike, or lower storage and AKS costs.

paulasilvatech Skill

Query and analyze data in Azure Data Explorer with KQL for log analytics, telemetry, and time series analysis. Use when the user writes KQL queries, queries a Kusto database or ADX cluster, analyzes log analytics data, works with time series or IoT telemetry, or performs anomaly detection.

paulasilvatech Bundle

Runs a three-layer verification pipeline for AI output by extracting verifiable claims, checking web sources, applying adversarial hallucination review, and producing inline or full verification reports. Use this skill when the user asks to "doublecheck", "verify that", "run full verification", "fact-check this", or keep factual claim verification active.

paulasilvatech Bundle

Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these.

paulasilvatech Bundle

Check and manage Azure quotas and usage across resource providers for deployment planning, capacity validation, and region selection. Use when the user asks to check quotas, service limits, or current usage, request a quota increase, resolve a quota exceeded error, validate capacity, confirm regional availability or provisioning limits, or find how many vCPUs are available in a subscription.

paulasilvatech Bundle

Route Azure virtual machine and scale set work, including size and image selection, pricing comparison, autoscale and orchestration modes, capacity reservation groups, and Essential Machine Management. Use when the user asks to create, provision, deploy, or spin up a VM, recommend a VM size or family, compare VM pricing, work with VMSS, scale sets, autoscale, burstable or GPU sizes, plan HPC, machine learning, or dev/test workloads, estimate compute cost, or reserve and guarantee capacity.

paulasilvatech Bundle

Prepare azd-based Azure projects for deployment: generates azure.yaml, infrastructure (Bicep/Terraform), and Dockerfiles for the Azure Developer CLI (azd) workflow. USE ONLY when the user explicitly wants to use azd as the deployment tool, or the project already has an azure.yaml file. DO NOT USE FOR: non-azd deployments, Python App Service code-only deploys (use python-appservice-deploy), or cross-cloud migration (use azure-cloud-migrate). WHEN: prepare app for azd, create azure.yaml, set up azd infrastructure, modernize app for Azure with azd, deploy with azd, function app, timer trigger, service bus trigger, event-driven function, managed identity, generate Bicep, generate Terraform, create and deploy to Azure.