DevOps & Infra

unboundcompute Skill

Audit telemetry collectors and observability pipelines for trust they should not extend: a collector endpoint that ingests metrics, logs, or traces without authenticating the sender, a processor that executes or forwards based on attacker-controllable telemetry fields, a collector running with broad credentials whose exporters reach sensitive destinations, and an ingestion path where log or trace content becomes a command, a query, or a downstream request. Covers agents and gateway collectors for logs, metrics, and traces, where the pipeline reads data from many sources and acts on it. Use when a telemetry collector ingests from workloads or the network and forwards, transforms, or stores that data. The unauthenticated or attacker-shaped telemetry is the source, the collector processor or exporter is the sink, and the unauthenticated ingestion or the acted-upon field is the bug.

robium-ai Bundle

Deploy and debug headless robotics containers on Google Cloud Run.

robium-ai Bundle

Train, imitate, evaluate, and deploy robot policies with NVIDIA Isaac Lab.

robium-ai Bundle

Wire robotics modules with ROS 2 interfaces, Docker Compose, or non-ROS transports.

robium-ai Bundle

Set up reproducible robotics environments with uv, Docker, or GPU hosts.

quantumquirkxyz Skill

Design ML pipelines — data ingestion, preprocessing, training, evaluation, deployment, monitoring — with reproducibility, fairness, and version control.

inbharatai Skill

Design Azure architectures — AKS, Functions, Cosmos DB, Service Bus, and Azure AD integration patterns.

inbharatai Skill

Create docker-compose configurations — service definitions, networks, volumes, health checks, and environment management.

inbharatai Skill

Write Dockerfiles and docker-compose files — multi-stage builds, health checks, volumes, networks, and production configurations.

inbharatai Skill

Write Jenkins declarative and scripted pipelines — stages, parallel execution, credentials, and shared libraries.

inbharatai Skill

Write Terraform infrastructure-as-code — providers, modules, state management, and cloud resource definitions.

inbharatai Skill

Author Kubernetes manifests — Deployments, Services, Ingress, ConfigMaps, Secrets, HPA, and Helm charts.

inbharatai Skill

Create Helm charts — templates, values, helpers, hooks, tests, and OCI chart publishing.

m2ai-portfolio Bundle

Reference skill containing the canonical 10-event agent analytics schema. Defines event shapes (agent_run_started, task_completed, user_correction_submitted, approval_granted, approval_denied, tool_call_failed, memory_miss, run_completed, run_failed, run_aborted) with a shared agent_run_id field that joins every event for a run. Use when wiring observability into an agent pipeline, designing a logging sink, or asking "what events should my agent emit?"

m2ai-portfolio Skill

Create Claude Code skills from book/long-form prose. Reads a how-to chapter or draft, extracts the teachable procedure (SOP) from the writing, then converts that SOP into a production skill via skill-creator. The prose sibling of video-to-skill (same pipeline, text input instead of a screen recording). Use when the user says "book to skill", "chapter to skill", "extract skill from this chapter", "turn this how-to into a skill", "SOP from this writing", or wants a written procedure captured as a runnable skill.

m2ai-portfolio Bundle

Score any enterprise tool (Jira, Salesforce, Workday, Google Calendar, etc.) against a 5-test structural diagnostic to determine whether it qualifies as agent infrastructure (keep), wrappable (replace with MCP), or legacy (replace). Produces a per-tool verdict and a ranked stack table. Use when the user says "score my stack", "is Jira agent-ready", "agent infrastructure test", "which tools should I MCP-wrap", or wants to audit a tool portfolio for AI-agent compatibility.

m2ai-portfolio Bundle

Document and implement the pattern for capturing user corrections to agent output as structured events (user_correction_submitted). Use when building any agent-facing UI, CLI, or chat interface where you want corrections to flow into an evaluation or feedback pipeline rather than being silently discarded.

m2ai-portfolio Bundle

Self-healing build pipeline with Planner/Builder + Codex adversarial review. Planner writes a test contract, Builder implements until tests pass, Codex pressure-tests the implementation with a different reviewer persona each round (engineer / security / ops), Builder revises, repeat until Codex agrees or max rounds reached. File-based state survives session interrupts. Use when the user says "self-healing claudex", "claudex build", "PBJ with codex review", "two-vendor build loop", or wants Codex (not just Claude) as a second set of eyes on a build. Sibling to /self-healing-pipeline (which uses an all-Claude Judge); this one swaps the Judge for real second-vendor adversarial review.

mariourquia Bundle

Weekly review of every deal in the pipeline by stage (sourcing, loi_signed, psa_signed, ic_approved, debt_term_sheet, close, funded). Produces a stage-by-stage scorecard, flags stalled deals beyond the overlay-defined aging threshold, surfaces IC-prep load and debt-term-sheet variance, and quantifies retrade risk. Dealpath is the primary source; the workflow surfaces any `dp_completeness_ic_record` or `dp_handoff_lag` blocker from adapter dq rules before any roll-up claim is made.

mariourquia Bundle

Monthly executive rollup of pipeline state for the residential_multifamily subsystem. Aggregates Dealpath (deal pipeline), Procore (active development pipeline), and Intacct (capex commitment exposure) into a board-ready or IC-ready summary. Designed for the executive and IC audiences with per-metric confidence bands. Scope: dollars committed at each pipeline stage, expected close by month, IC docket forward 90 days, capex commitment exposure forward 12 months, debt market context band, capital deployment pace vs target, declined deal hit-rate, top-of-funnel sourcing health, JV partner concentration, geographic concentration, segment concentration. Every metric declares a confidence band. Decision severity `gated`: the pack is board-ready. Any final-marked external submission (board packet, IC advance read) is gated. The workflow never sends autonomously; composition of the formal submission bundle lives in `workflows/executive_operating_summary_generation`.

mariourquia Bundle

Weekly roll-up of the active development pipeline. Aggregates sites under contract, in entitlement, in design, in permitting, and in construction (by phase); tracks TCO/delivery target dates, baseline-vs-current schedule slip, baseline-vs-current cost slip, change-order trend, draw schedule status, contractor performance flags, lease-up readiness, and financing draw status. Groups by region and deal_lead. Flags critical-path slips beyond tolerance and escalates Dealpath/Procore/Intacct reconciliation blockers. Narrative-first with a KPI dashboard. Informational to recommendation severity: this pack produces a weekly tracker, not approvals. Gated actions (rebaseline, scope trim, contingency pull, change orders) remain in their own workflows (`schedule_risk_review`, `cost_to_complete_review`, `change_order_review`).

evolution-foundation Skill

Criar solicitação de mudança com análise de impacto e plano de rollback. Use quando propor mudança de sistema ou processo que precisa de aprovação, documentar risco e passos de rollback antes de um deploy, ou planejar comunicação com stakeholders para um rollout. Agente Atlas.

euwebertdefreitas Bundle

Expert in CI/CD

jacob-balslev Bundle

Managing the full lifecycle of sensitive credentials — API keys, database passwords, tokens, certificates, signing keys, and encryption keys — so they are never exposed in code, logs, images, or version history. Covers the secret lifecycle (generation, storage, distribution, use, rotation, revocation, audit), the cardinal rule of never hardcoding secrets, externalizing values out of source into a secrets manager or vault, encryption at rest and in transit, least-privilege scoping per consumer, short-lived dynamically-issued credentials over long-lived static ones, automated rotation and emergency revocation, workload identity (OIDC/SPIFFE) to eliminate standing credentials, environment-variable and .env pitfalls, secret scanning and leak detection in commits and CI, blast-radius containment when a secret leaks, and audit logging of secret access. Tool-agnostic across HashiCorp Vault, cloud secret managers, and KMS-backed stores.

jacob-balslev Bundle

Designing continuous integration and continuous delivery pipelines that turn every commit into a verified, releasable artifact and move it safely toward production. Covers the CI/CD distinction (integration vs delivery vs deployment), the pipeline as a staged graph of fast-to-slow gates, trunk-based integration and short-lived branches, build-once/promote-the-same-artifact discipline, hermetic and reproducible builds, dependency and layer caching for fast feedback, the test pyramid mapped onto pipeline stages, required status checks and branch protection, quality and security gates (lint, type-check, SAST, dependency/SCA scanning, license checks) as blocking vs advisory, artifact and container registries with immutable versioning and provenance, environment promotion (build → test → stage → prod), deployment strategies the pipeline triggers (blue-green, canary, rolling, feature-flag-gated), pipeline secrets and least-privilege CI credentials (OIDC over long-lived tokens), DORA delivery metrics (deployment fre

sam6dvpte34 Skill

Collect scraper data from AWS Marketplace. Use when the user wants to research or export scraper content.

tractorjuice Bundle

[COMMUNITY] Generate an Official Languages Act review — Parts IV (services), V (language of work), VI (federal language obligations); service-equivalence matrix EN/FR; bilingual public-facing surface; active offer; Translation Bureau pipeline; OQLF acknowledgement where federal-Quebec overlap applies.

tractorjuice Bundle

Create DevOps strategy with CI/CD pipelines, IaC, container orchestration, and developer experience

tractorjuice Bundle

Create FinOps strategy with cloud cost management, optimization, governance, and forecasting

tractorjuice Bundle

[COMMUNITY] Produce a mandatory cloud exit plan under Rijksbreed cloudbeleid clause 3.2 — planned exit and disruptive interruption scenarios, provider data destruction, and annual self-test

tractorjuice Bundle

[COMMUNITY] Assess compliance with ANSSI security recommendations — Guide d'hygiène informatique (42 measures) and cloud security recommendations

tractorjuice Bundle

[COMMUNITY] Assess compliance with French digital administration standards — RGI, RGAA, RGESN, RGS, and DINUM doctrine cloud de l'État

tractorjuice Bundle

[COMMUNITY] Assess Rijksbreed cloudbeleid compliance — materieel cloudgebruik determination, clause 5.2/4.5 eligibility, risk assessment, and governance obligations for Dutch central government cloud use

tractorjuice Bundle

[COMMUNITY] Generate an ITSG-33 Statement of Applicability with TBS Standard on Security Categorization — Protected A/B/C, Secret, Top Secret tailoring, control profile selection (PBMM / PBMM-Cloud / Secret-High), CMVP / FIPS 140-3 module validation, supply chain security, and continuous monitoring plan.

tractorjuice Bundle

Research AWS services and architecture patterns using AWS Knowledge MCP for authoritative guidance

tractorjuice Bundle

Research Google Cloud services and architecture patterns using Google Developer Knowledge MCP for authoritative guidance