DevOps & Infra

xalgord Skill

Establish SAML 2.0 identity federation between on-premises Active Directory and Azure AD (Microsoft Entra ID) for seamless cross-domain authentication and SSO to cloud applications.

xalgord Skill

Deploy SailPoint IdentityNow or IdentityIQ for identity governance and administration. Covers identity lifecycle management, access request workflows, certification campaigns, role mining, SOD policy

xalgord Skill

Deploy Cisco Duo multi-factor authentication across enterprise applications, VPN, RDP, and SSH access points. This skill covers Duo integration methods, adaptive authentication policies, device trust

xalgord Skill

Deploy and monitor Canary Tokens via the Thinkst Canary API for deception-based breach detection using web bug tokens, DNS tokens, document tokens, and AWS key tokens.

xalgord Skill

Configure Microsoft Entra ID (Azure AD) Conditional Access policies for zero trust access control. Covers signal-based policy design, device compliance requirements, risk-based authentication, named l

xalgord Skill

Implement Cloud Security Posture Management using AWS Security Hub, Azure Defender for Cloud, and open-source tools like Prowler and ScoutSuite for multi-cloud vulnerability detection.

xalgord Skill

Deploy CyberArk Secure Cloud Access to eliminate standing privileges in hybrid and multi-cloud environments using just-in-time access with time, entitlement, and approval controls.

xalgord Skill

Deploy Breach and Attack Simulation tools to continuously validate security control effectiveness by safely emulating real-world attack techniques across the kill chain.

xalgord Skill

Deploy and operate Greenbone/OpenVAS vulnerability management using the python-gvm library to create scan targets, execute vulnerability scans, and parse scan reports via GMP protocol.

xalgord Skill

Deploy FIDO2/WebAuthn passwordless authentication using security keys and platform authenticators. Covers WebAuthn API integration, FIDO2 server configuration, passkey enrollment, biometric authentica

xalgord Skill

Configure Microsoft Entra Privileged Identity Management to enforce just-in-time role activation, approval workflows, and access reviews for Azure AD privileged roles.

xalgord Skill

Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure. This skill covers vault architecture, session isolation, c

codyswanngt Skill

Use when ingesting Lisa repository, GitHub, Linear, document, or transcript knowledge into the in-repository wiki.

codyswanngt Bundle

Ship and verify code. Commits any pending changes, opens or updates the PR, handles the review loop, merges when green, monitors the deploy, and runs remote verification (health checks, Validation Journey replay, Sentry/log inspection) in the target environment. Folds in the legacy /ship alias.

codyswanngt Bundle

This skill should be used for any non-trivial request — features, bugs, stories, epics, spikes, or multi-step tasks. It accepts a ticket URL (Jira, Linear, GitHub), a file path containing a spec, or a plain-text prompt. It assembles an agent team, breaks the work into structured tasks, and manages the full lifecycle from research through implementation, code review, deploy, and empirical verification.

codyswanngt Bundle

This skill should be used to run a back-sync of an environment branch DOWN the deploy chain on demand — propagating merges (e.g. hotfixes) from a higher environment to every lower one. Given a source environment name or branch (e.g. `production`), it derives the source→target chain from `.lisa.config.json` `deploy.order` + `deploy.branches`, then for each downward hop creates a sync branch, merges, resolves conflicts, opens or updates a PR, and enables auto-merge. Runnable by a developer locally or by CI.

codyswanngt Skill

Deploy Expo frontend (EAS Update/Build) or serverless backend (Serverless Framework) to dev, staging, or production environments.

codyswanngt Bundle

Configure TestMu Kane CLI as an optional Lisa empirical-browser provider. Performs the exterior human approval gate for mandatory cloud uploads, verifies the pinned CLI version, provisions local/CI authentication, selects a Test Manager project/folder, runs a disposable synthetic check, and writes only non-secret policy identifiers to Lisa config.

codyswanngt Bundle

Optional Lisa-owned adapter for TestMu Kane CLI empirical browser runs. Enforces project opt-in, cloud-upload approval, non-production environment allow-lists, full-mutation rollout policy, pinned-version readiness, normalized outcomes, and durable Lisa evidence handling. Never replaces project-native Playwright, Cypress, or Maestro regression tests.

codyswanngt Skill

Manage the local development environment for Expo + serverless backend projects. Supports start, stop, restart, and status for the full stack or individual services.

codyswanngt Skill

Check application logs from local processes, browser console, React Native device logs, or remote AWS CloudWatch. Supports log tailing, filtering, and error searching across all platforms.

codyswanngt Bundle

Vendor-neutral access layer for secrets. Every skill and script that needs an API key MUST resolve it through this skill rather than reading a keychain, an .env file, or a provider CLI directly. Models two independent axes — the provider a secret lives in (Bitwarden, 1Password, AWS Secrets Manager, Doppler, Vault) and the surface the code runs on (local, GitHub Actions, Codex Cloud) — resolving environment first, then a materialized file where the surface has one, then the provider by exact key name. Enforces one store per secret, fails closed on duplicate names, reads usage metadata from the provider's own note field, and never writes. Rotating credentials route through the separate rotate-secret writer, and copying one into a second store (Bitwarden → GitHub Actions) routes through the separate sync-secret-to-ci propagator.

codyswanngt Bundle

Route one unit of work to a remote execution surface. Reads the executionEnv parameter (local by default, codex-cloud or claude-web today), verifies the environment is provisioned and bound to this repository, submits a thin skill invocation, records the task identifier to .lisa/remote-dispatch.json, and exits without polling. Routing only — the remote runs the identical skill from the identical repository. Composable and inline: other skills invoke it via the Skill tool rather than users calling it directly.

nevaberry Bundle

Helm

nevaberry Bundle

Microsoft Azure

nevaberry Bundle

Docker

nevaberry Bundle

Ansible Core

nevaberry Bundle

AWS CDK

nevaberry Bundle

AWS SDK

nevaberry Bundle

GitLab CI/CD

nevaberry Bundle

Terraform / OpenTofu

nevaberry Bundle

cloud-init

nevaberry Bundle

Kubernetes

npbuilds Skill

Route a research question to the evidence-acquisition skills — claim decomposition, source triangulation, funding/COI tracing, paywall strategy, and the generative agentic-researcher. Activate during spelunker Phases 2–3 (Decompose → Investigate) when a question needs to be broken into claims and each claim backed by independent sources. This director owns the "find and qualify the evidence" half of the research pipeline.

npbuilds Skill

Route qualified evidence to the synthesis-and-verification skills — confidence-tagged brief assembly, active counterfactual disconfirmation, and format translation. Activate during spelunker Phases 4–6 (Synthesize → Self-Check → Present) once evidence bundles exist and need to become an honest, gap-aware brief. This director owns the "reason from the evidence and stress-test the conclusion" half of the research pipeline.

npbuilds Bundle

The classical modes of persuasion — ethos, pathos, logos, and kairos. Use when the user is writing to persuade and needs to understand which appeal to deploy, when credibility matters more than emotion, or how to create genuine urgency without manipulation.