DevOps & Infra

pooriaarab Skill

Build and submit a Vercel integration (an OAuth integration + config UI + deploy-webhook handler under integrations/<name>/) and list it in the Vercel Marketplace. Use when creating a Vercel integration, wiring Vercel OAuth, handling a deploy-success event to trigger an external action, building the configuration UI, or fixing the Node/TS build. Covers the whole path plus the traps: a Vercel integration is an OAuth app plus a webhook/event handler (a deploy 'ready' event → an external action), the client secret + config live in the Vercel integration console, and deploy webhooks must be signature-verified before acting. Audience is developers — social-publishing fit is narrow; the useful hook is 'announce on successful deploy'. Sibling of the other integration skills (webflow-app, shopify-app). Triggers: 'build a Vercel integration', 'Vercel Marketplace', 'Vercel OAuth', 'deploy webhook', 'announce on deploy', 'Vercel integration console'.

pooriaarab Skill

Use when the user wants to organize Google Contacts (the cloud-side address book behind Gmail autocomplete) — dedupe, missing-field enrichment, contact group / starred curation, tagging-by-relationship. Distinct from the iCloud-side `org-contacts` skill: Google-only via the People API. Triggers: 'dedupe gmail contacts', 'contact groups in google'.

pooriaarab Skill

Run coding agents on a remote cloud VM instead of the laptop. Use on "run this in the cloud", "the laptop is overloaded", "offload the agent", "start a box", "cloud agent", or when a task drags in heavy worktrees, node_modules, or long builds. Covers the control-plane/execution split, verify-on-box, cost discipline, a GUI server on a box, and multi-harness routing.

pooriaarab Skill

Deploy a containerized web app to Cloudflare Workers (plus the container/Cloudchamber wrapper) with D1, R2, KV, Queues, and Durable Objects, then smoke-test the live URL. Use when shipping a full app bundle that exceeds the Worker 10MB limit, wiring Cloudflare storage/queue/DO adapters, or running a wrangler container deploy. Triggers: 'deploy to cloudflare', 'wrangler deploy', 'cloudflare workers container', 'Cloudchamber', 'D1/R2/Queues', 'wrangler.containers.jsonc'.

pooriaarab Skill

Build, test, deploy, and publish a Google Workspace add-on (an Apps Script + CardService add-on under integrations/google-workspace-addon/ that runs in the Docs/Sheets sidebars) and get it listed on the Google Workspace Marketplace. Use when creating a new Workspace add-on, writing CardService cards, calling an external API from Apps Script, deploying with clasp, configuring appsscript.json scopes, or figuring out why the OAuth consent screen or marketplace review bounces. Covers the whole path plus the traps that each cost a round-trip: there is no fetch in Apps Script (UrlFetchApp only, and it needs the script.external_request scope plus a urlFetchWhitelist entry or the call is refused), oauthScopes must match across manifest, consent screen, and code, homepage triggers return Cards but action handlers return ActionResponses, user keys belong in user properties not script properties, and the real submission wall is Google's OAuth verification (demo video, days-to-weeks), not the listing form. Sibling of the

pooriaarab Skill

Standardise branch names across repos onto main (staging) and release (production) without breaking a deploy. Covers the silent-dead-trigger defect class — a workflow branches: filter or a github.ref deploy gate that names a branch which does not exist never runs and never errors — how to sweep a whole org for it, the rename order that avoids a wrong-environment deploy, and the four blockers that make a rename unsafe. Triggers: 'rename a branch', 'standardize branch names', 'main vs master vs production', 'default branch', 'my workflow never runs', 'the deploy stopped firing', 'branches: filter'.

pooriaarab Skill

Buy a domain and host a static site on it entirely from the CLI/API: Cloudflare Registrar domain-check + registration, wrangler pages project/deploy, custom-domain attachment, and the DNS/cert gotchas (Pages not auto-creating records, .dev HSTS preload, stale local negative-DNS caches) that make a working site look broken for its first hour. Use when launching a product site end-to-end with at most one dashboard visit. Empirical, from the same session that shipped 7 npm packages.

pooriaarab Skill

Run user-like QA tests on a remote GCP VM via crabbox + agent-browser, capture WebM video as proof, pull artifacts back, post to PR. Headless Chrome inside a Linux VM — no desktop/VNC. Pairs with crabbox-worktree for the lease lifecycle and SA-key auth, and with [[multi-account-cli]] if you're swapping GCP projects. Use when wiring per-commit QA on a SaaS app where 'screenshots show it works' is the deliverable.

pooriaarab Skill

Use when buying and provisioning a Twilio phone number for a product — a memorable/vanity number, and wiring it to WhatsApp Cloud API, SMS, and voice. Covers the Twilio CLI (auth, searching available numbers, buying), scoring numbers for memorability (repeating/pattern digits, the '888 is least-scammy toll-free' rule, why vanity like 1-8XX-BRAND rarely exists in self-serve inventory), and the big trap: a brand-new TOLL-FREE number CANNOT send/receive SMS until its toll-free registration is approved (days), so WhatsApp/OTP verification codes silently never arrive — a local 10-digit number verifies far more reliably. Then: registering the number with WhatsApp Cloud API (the number gets consumed for WhatsApp; verify by SMS or VOICE), a ZERO-SERVER trick to auto-capture a spoken voice verification code via a Twilio Studio Flow, the Twilio toll-free registration intake form field-by-field (legal name vs DBA, non-US business registration number, opt-in proof + the consent language carriers require on your Terms/Pri

samarv Skill

A framework for converting self-serve product usage into high-value enterprise contracts. Use this when your self-serve revenue hits a ceiling, when you need to transition individual users to team-wide adoption, or when sales teams need higher-intent pipeline based on actual product behavior.

joogy06 Bundle

Use when automating infrastructure with Ansible — playbook development (tasks, handlers, variables, templates, conditionals, loops), role design (Galaxy structure, defaults, dependencies), inventory management (static/dynamic, groups, host_vars/group_vars), collections (ansible.builtin, community, custom), Ansible Vault (encryption), AWX/Ansible Automation Platform (job templates, workflows, RBAC, surveys), module development, testing (Molecule, ansible-lint), and performance tuning (forks, pipelining, async). Part of the automation-* skill family.

joogy06 Bundle

Use when installing, configuring, or developing with Jenkins CI/CD — server administration (installation on RHEL, systemd, reverse proxy, backup), security (RBAC, LDAP/AD, credentials management, script approval), declarative and scripted pipelines (Jenkinsfile), shared libraries, multibranch pipelines, agent management (SSH/JNLP/Docker/Kubernetes agents), plugin management, job DSL, Blue Ocean, Jenkins Configuration as Code (JCasC), and pipeline best practices. Part of the cicd-* skill family.

joogy06 Bundle

Use when designing, building, or managing data lakes — zone architecture (raw/cleansed/curated/consumption), data catalog and governance, file formats (Parquet/ORC/Avro/Delta Lake/Apache Iceberg), storage layout and partitioning, schema evolution, Spark/Trino/Presto query engines, data quality frameworks, lakehouse patterns, and cloud/on-prem storage (S3/ADLS/HDFS/MinIO). Part of the data-* skill family.

joogy06 Skill

Use when building Docker images in CI/CD pipelines — GitHub Actions Docker workflows, GitLab CI Docker builds, Jenkins Docker agents, multi-platform builds with buildx, registry authentication and push workflows, image tagging strategies (semver, git SHA, branch), layer cache optimization in CI, Docker-in-Docker vs socket mount vs daemonless builders (rootless BuildKit, Buildah; Kaniko is archived/legacy), automated image scanning in pipelines, and deployment patterns. Part of the docker-* skill family. OS-agnostic.

joogy06 Bundle

Use when configuring Single Sign-On (SSO) on Windows — Active Directory Federation Services (AD FS), Azure AD / Entra ID SSO, SAML 2.0, OAuth 2.0/OIDC, Kerberos delegation, Windows Integrated Authentication (WIA/SPNEGO), claims-based authentication, Web Application Proxy (WAP), conditional access policies, MFA integration, certificate-based auth, SSO troubleshooting, and hybrid identity (AD Connect). Part of the windows-* skill family.

joogy06 Skill

Use when administering IBM Cognos Analytics or using its APIs — installation and configuration, security (namespaces/roles/capabilities), content administration, report management, Framework Manager modeling, REST API (session/content/reports/dashboards), data source connections, scheduling and bursting, performance tuning, and Cognos on Cloud Pak for Data. Covers Cognos Analytics 12.x (11.2.x legacy — out of standard support 2026-04).

joogy06 Bundle

Use when working with Docker containers, Compose files, Dockerfiles, container networking, volume mounts, cross-platform issues (Windows/Linux/PowerShell quoting), package installation in containers, Centrify/AD user mapping, or container security. Covers build patterns, entrypoint scripts, stateless design, and production operations.

joogy06 Bundle

Use when checking tool availability (Codex, Antigravity CLI (agy), Copilot, gh, Docker), determining environment tier, reading cached inventory or session state, setting up missing tools, or when any skill needs to know what capabilities are available in the current environment.

joogy06 Skill

Use when interacting with Jira programmatically via REST API — API v2 and v3 endpoints, authentication (API tokens, OAuth, PAT), issue CRUD (search via JQL — /rest/api/3/search/jql on Cloud, /rest/api/2/search on Data Center), status category mapping, sprint/board queries (Agile API), comments, attachments, labels, pagination (nextPageToken cursor on Cloud, startAt + maxResults on Data Center), rate limiting, error handling, and webhooks. Works with both Jira Cloud and Data Center.

joogy06 Bundle

Use when designing what to emit (not how to deploy). Produces a signals map — SLIs, correlation IDs, span boundaries, alert classes, redaction rules, cardinality budget, ownership. Covers the four pillars (logging / metrics / tracing / alerting) unified under OTLP in 2026 with vendor-neutral schemas. Callable by forge or standalone. Trigger on: "what should we instrument?", "define our SLIs", "design our signals", "add logging", "set up monitoring", "add tracing", "set up alerts", "observability contract". NOT for deploying Prometheus / Grafana / ELK — that's ubuntu-monitoring / rhel-monitoring. NOT for SLO governance — that's delivery-manager. NOT for SPL / vendor queries — that's splunk-developer.

joogy06 Bundle

Use when building or using AI agents and agentic flows IN Visual Studio Code — agent mode, custom agents (.agent.md personas with their own tools/model/handoffs), MCP servers (.vscode/mcp.json), prompt files, custom instructions, hooks (guardrails), and the GitHub Copilot cloud/coding agent. Covers the file formats, setup, multi-agent handoff flows, and the SECURITY model (MCP trust, sandboxing, untrusted-server + prompt-injection risk). Current to 2026-06-24 against official VS Code + GitHub docs. Trigger on: "VS Code agent", "custom agent / .agent.md", "agent mode", "chat mode / chatmode", "MCP server in VS Code", "Copilot coding agent", "VS Code agentic flow / handoffs", "prompt file", "copilot-instructions".

joogy06 Bundle

Use when designing, building, or optimizing enterprise data warehouses — Kimball vs Inmon methodology, dimensional and normalized modeling, slowly changing dimensions, ETL/ELT pipeline design, partitioning and distribution strategies, materialized views, query optimization, data vault 2.0, warehouse platforms (PostgreSQL/Snowflake/Redshift/BigQuery/Synapse/DB2 Warehouse), and operational patterns (incremental loads, CDC, reconciliation). Part of the data-* skill family.

joogy06 Skill

Use when managing Docker storage — volumes (named, anonymous), bind mounts, tmpfs mounts, volume drivers, backup and restore strategies, storage drivers (overlay2), disk usage management, data-only containers, volume plugins, and storage performance tuning. Part of the docker-* skill family. OS-agnostic.

joogy06 Skill

Use when hardening Docker deployments — image scanning (Trivy, Scout, Snyk), rootless Docker, user namespaces, seccomp profiles, AppArmor/SELinux integration, image signing (Sigstore cosign, Notation — Docker Content Trust retired 2025), secrets management, read-only containers, Linux capability dropping, CIS Docker Benchmark, supply chain security, and runtime security monitoring. Part of the docker-* skill family. OS-agnostic.

joogy06 Bundle

Use when scanning a codebase for hardcoded secrets (API keys, tokens, passwords, PEM keys, AWS creds, JWTs) — wraps gitleaks (fast regex pre-commit), trufflehog (slower CI-time live-credential verification with --only-verified), and the in-house regex catalog at scripts/secrets-scan.sh as defense-in-depth. Use for pre-push hooks, CI gates, alf sweeps, the G_SECRETS_SCAN gate in _meta/gates.py, and ad-hoc audits. ALSO owns the host-wide secrets STORAGE standard (~/.secrets/<project>.env + loader + blocking pre-commit hook) — see references/storage-standard.md. Trigger on - secret scanning, secrets storage, where do I put credentials, .env handling, secrets management, hardcoded credentials, leaked tokens, PEM keys in repo, AWS keys in code, secret detection, gitleaks, trufflehog, secret-in-code, .env in git, credential audit, pre-push secrets.

joogy06 Bundle

Use when provisioning, configuring, or operating Google Cloud Workstations as a single-developer AI/dev environment with Claude Code, Antigravity CLI (agy), GitHub Copilot CLI, and supporting tooling. Covers cluster/config/workstation lifecycle, custom images, persistent home semantics, per-tool authentication strategies, networking, cost optimization, and security gotchas.

joogy06 Skill

Use when setting up and managing containers on RHEL 9 (and AlmaLinux/Rocky 9) — Podman (rootless and rootful), Docker CE installation, Buildah, Skopeo, container networking (podman network, macvlan), Quadlet systemd integration, pod management, Compose with podman-compose, private registry, SELinux container contexts, and security best practices. Part of the rhel-* skill family.

ericrisco Bundle

Use when working a spreadsheet programmatically — writing or repairing a formula, generating an .xlsx with Python including charts and conditional formats, driving Google Sheets from a script, building a read-transform-write pipeline, or writing an in-sheet macro or trigger. Covers formula errors, Sheets API quota, service-account permissions, and formulas that read back blank. NOT pure dedupe or normalisation with no sheet output (that is `data-cleaning`), NOT scraping a web table into rows (that is `data-scraper`), NOT multi-app event wiring (that is `automation-flows`).

ericrisco Bundle

Use when server-side code reads or writes Gmail, Drive, Calendar, or Sheets with a GCP service account and no human in the OAuth loop: picking the auth mode (app-owned vs domain-wide delegation vs keyless), scoping to least privilege, building the authed Node/Python client, staying under per-user quota, and debugging unauthorized_client / 403 / 429. NOT SMTP providers or deliverability (that is `email-connector`), NOT slot-finding and booking UX (that is `calendar-scheduling`).

ericrisco Bundle

Use when running LinkedIn social selling as a repeatable motion — Sales Navigator saved searches and trigger alerts, weekly request budgets, fixing a low acceptance rate, turning profile views and post engagers into warm threads, logging every touch. NOT the note or DM copy (that is `cold-outreach`), NOT the deal after a reply (that is `sales-pipeline`).

ericrisco Bundle

Use when wiring an app or agent to message customers over the WhatsApp Cloud API or a Telegram bot — order updates, OTP codes, reminders, alerts and broadcasts — or when debugging undelivered messages, 24-hour-window errors, rejected templates, webhook signature verification, or rate limits and their retry headers. NOT the reply content you send (that is `customer-support`).

ericrisco Bundle

Use when packaging or circulating the documents an investor reads outside the meeting — setting up or cleaning a data room, writing the one-pager or teaser that earns the first meeting, or drafting the recurring monthly investor update. NOT the slide narrative (that is `pitch-deck`), NOT the projection spreadsheet (that is `financial-model`), NOT round strategy and the investor pipeline (that is `fundraising`).

ericrisco Bundle

Use when calling open-weight LLMs on Together AI or Fireworks AI's OpenAI-compatible endpoints — `base_url` plus namespaced model id, the cheapest model that clears the bar, per-1M-token cost math, serverless vs batch vs dedicated. NOT renting GPUs to self-host weights (that is `runpod`), NOT running a model locally for free (that is `ollama`).

rweisssieker-xp Skill

Use when Power BI work needs PBIP, Git, deployment pipelines, semantic model versioning, Tabular Editor, DAX checks, regression tests, release gates, workspace promotion, or CI/CD governance.

rweisssieker-xp Skill

Use when Power BI insights should create or update downstream actions in systems such as Jira, Azure DevOps, Planner, Teams, CRM, ServiceNow, SAP workflows, maintenance orders, or task lists.

planifest Bundle

Define and align product design principles that teams can apply consistently across UX decisions. Use when product or UX direction is ambiguous and teams need explicit decision guardrails before detailed screens or components are produced; do not use for backend data-model or deployment pipeline decisions.