DevOps & Infra

withcrux Bundle

Detect Local File Inclusion (LFI) and path traversal vulnerabilities in web applications that allow reading arbitrary files from the server. Covers manual payload testing, encoding bypasses, log poisoning for RCE, and PHP wrapper techniques in isolated Docker lab environments.

sdaxiji-beep Bundle

Use this skill for guarded release actions in this repo, including preview, upload, and cloud deploy. Always run validation first, require explicit confirmation, verify results, and record outputs.

sdaxiji-beep Bundle

Use this skill to execute JSON task specs in this repo through validate, write, deploy, and record stages using the existing script pipeline.

sdaxiji-beep Bundle

Use this skill for end-to-end WeChat DevTools workflow control in this repo, including bootstrap, environment doctor checks, natural-language project creation, generated project preview/guard/upload dry-run, validation gates (fast/full), and guarded deploy orchestration when no narrower WeChat skill applies.

emaduneme Skill

Build content strategies, editorial calendars, and social media plans for organizations, personal brands, and academic departments. Use this skill when the user asks to plan content, create a posting schedule, build an editorial calendar, develop a content strategy, organize social media posts, or plan a content pipeline. Also trigger when the user mentions content pillars, posting frequency, platform strategy, content mix, audience engagement planning, or newsletter scheduling. Handles multi-platform strategies across LinkedIn, X/Twitter, Instagram, TikTok, YouTube, newsletters, blogs, and podcasts. Outputs structured calendars as spreadsheets, markdown documents, or interactive artifacts.

sourav15mukherjee Skill

Analyze and optimize Dockerfiles for image size, layer caching, security, and build speed. Use when the user asks to optimize a Dockerfile, reduce image size, harden a container, improve build performance, or review Docker configuration. Produces scored analysis with before/after diffs.

soknoy12 Bundle

Senior Java and Spring Boot backend engineering for production-grade services and APIs. Use when Codex needs to design or implement backend features, REST APIs, persistence layers, Spring Security, database migrations, validation, exception handling, tests, Docker support, or solution architecture in Java 21+ with Spring Boot 3.x, especially for Maven, PostgreSQL, JPA, Flyway, OpenAPI, and enterprise backend conventions.

yog-sotho Skill

Docker and Docker Compose best practices for local development, container security, networking, volume strategies, and multi-service orchestration. Always activate when the user is writing a Dockerfile, setting up Docker Compose, troubleshooting container issues, designing multi-container architectures, reviewing images for security or size, managing secrets in containers, or migrating to a containerized workflow — even if they don't explicitly ask for "best practices".

yog-sotho Bundle

Deployment workflows, CI/CD pipelines, Docker containerization, health checks, rollback strategies, database migrations, and production readiness for web applications. Always activate when the user is setting up CI/CD, Dockerizing an application, planning a deployment strategy, implementing health checks, preparing a production release, configuring environments, or asking how to deploy, roll back, or migrate a database safely. Also activate proactively when spotting hardcoded secrets, missing health checks, or root-running containers.

tashangkd Bundle

DevOps/运维角色。关键词：部署/上线/CI-CD/服务器/Docker/nginx/SSL/域名/端口/监控/GitHub Actions。接收测试通过报告后执行部署，维护生产环境，监控AI调用成本。

yog-sotho Skill

Decision framework and implementation patterns for choosing between regex and LLM when parsing structured text. Always activate when the user is parsing repeating structured formats (quizzes, forms, invoices, tables, documents), deciding how to extract data from text, building a text processing pipeline, or asking about cost/accuracy tradeoffs in text extraction. Also activate when the user is about to send all their text to an LLM — they almost certainly don't need to.

yog-sotho Skill

Enforce cloud security best practices across AWS, Vercel, Railway, and Cloudflare deployments. Always activate this skill when the user is deploying to a cloud platform, writing or reviewing IaC (Terraform, CloudFormation, Pulumi), configuring IAM roles or policies, managing secrets, setting up CI/CD pipelines, configuring databases or storage, implementing logging/monitoring, or asking about cloud security — even if they don't explicitly mention security. When in doubt, activate. A missed security check is harder to fix than an unrequested one.

namds29 Skill

Designs NestJS applications for horizontal scalability and long-term maintainability. Use when architecting for high traffic, microservices decomposition, caching strategies, queue-based workloads, observability, or CI/CD pipeline design. Triggers on requests like "scale my NestJS app", "add Redis caching", "implement message queue", "set up health checks", "add observability", "prepare for microservices", "optimize performance", or "improve code maintainability". Covers stateless design, event-driven patterns, feature flags, database connection pooling, and structured logging.

tonyfadel23 Bundle

Build custom skill trees with advanced orchestration and emit valid SKILL.md files. Use when the user says "build a skill", "create a skill tree", "build my skill", "design a workflow", "create a pipeline", "skill tree builder", or wants to create an agentic workflow with sub-agents, gated checks, improvement loops, or multi-perspective analysis.

irfanlee1011 Bundle

Design, generate, review, refactor, validate, and deliver Dify Workflow/Chatflow/RAG Pipeline configurations from business requirements. Use when the user wants to create a new Dify app, convert business logic into Dify DSL YAML, review an existing Dify YAML/DSL, refactor a broken workflow, generate importable “Dify DSL YAML file”, or validate whether a workflow is directly importable through Dify Import DSL File.

efficience-it Skill

Génère ou audite un pipeline CI/CD pour projet PHP/Symfony. Supporte GitHub Actions et GitLab CI. Couvre tests, PHPStan, CS-Fixer, sécurité.

efficience-it Skill

Génère un environnement Docker pour projet PHP/Symfony. Produit un docker-compose.yml avec PHP-FPM, Nginx/Caddy, base de données, et services annexes.

clawpod-app Skill

Generate a weighted sales forecast with best/likely/worst scenarios, commit vs. upside breakdown, and gap analysis. Use when preparing a quarterly forecast call, assessing gap-to-quota from a pipeline CSV, deciding which deals to commit vs. call upside, or checking pipeline coverage against your number.

clawpod-app Skill

Structured debugging session — reproduce, isolate, diagnose, and fix. Trigger with an error message or stack trace, "this works in staging but not prod", "something broke after the deploy", or when behavior diverges from expected and the cause isn't obvious.

clawpod-app Skill

Monitor deployment status across all environments. Track build failures, report pipeline health, and alert on post-deploy anomalies. Trigger with "deploy status", "what deployed today", "build failures", or "pipeline health".

clawpod-app Skill

Analyze pipeline health — prioritize deals, flag risks, get a weekly action plan. Use when running a weekly pipeline review, deciding which deals to focus on this week, spotting stale or stuck opportunities, auditing for hygiene issues like bad close dates, or identifying single-threaded deals.

clawpod-app Skill

Audit infrastructure health and deployment practices using DORA metrics. Review deployment frequency, lead time, MTTR, and change failure rate. Trigger with "DORA metrics", "infrastructure audit", "deployment frequency", or "how healthy is our pipeline".

clawpod-app Skill

Pre-deployment verification checklist. Use when about to ship a release, deploying a change with database migrations or feature flags, verifying CI status and approvals before going to production, or documenting rollback triggers ahead of time.

zjli2013 Skill

Chooses block/tile dimensions, warp counts, pipeline stages, and L2-aware block grouping for GPU kernels (Triton/CUDA/HIP). Use when autotuning matmul-like kernels, tuning occupancy, or aligning tile geometry with M/N/K and NVIDIA vs AMD thread models.

chenxiaoyi0807 Bundle

Spring Cloud Alibaba 微服务架构规范

claw-works Bundle

Load this skill whenever the user wants to control, automate, or interact with a phone or mobile device. This includes: tapping, swiping, typing, taking screenshots, reading the screen, managing apps, running AI agent tasks on a phone, or any form of phone/mobile automation. Also load when the user mentions Mobilerun, Droidrun, or phone control. Requires a Mobilerun API key (prefixed dr_sk_) and a connected device.

claw-works Bundle

Homelab server management via homebutler CLI. Check system status, manage Docker containers, install self-hosted apps, Wake-on-LAN, port scanning, alerts, backup/restore, and multi-server SSH.

claw-works Bundle

Connect to 100+ APIs (Google Workspace, Microsoft 365, GitHub, Notion, Slack, Airtable, HubSpot, etc.) with managed OAuth. Use this skill when users want to interact with external services. Security: The MATON_API_KEY authenticates with Maton.ai but grants NO access to third-party services by itself. Each service requires explicit OAuth authorization by the user through Maton's connect flow. Access is strictly scoped to connections the user has authorized. Provided by Maton (https://maton.ai).

yuangjay Skill

Install software packages and verify they are runnable. Handles pip, npm/yarn, and Docker. Runs a quick smoke test immediately after install, then a full test suite. Triggers on: install, setup, configure dependencies, add package, get X working, install and test, make sure X runs, check if X is installed.

yuangjay Skill

Validated publish workflow for the Copilot skills repo. Use for syncing instructions, rebuilding the registry, running the full suite, and committing or pushing only after verification. Triggers on: validate skill repo, sync instructions, publish skills, commit skills, push skill repo, verify all tests, ci/cd.

claw-works Bundle

System resource monitoring. Detects actionable anomalies (memory pressure, runaway processes, disk pressure) and reports only when something needs attention. Optimized for few, high-signal alerts. Works on both Linux and macOS.

claw-works Bundle

Use when calling local AI on this Mac — text generation, embeddings, speech-to-text, OCR, or image understanding. LLM/VLM via oMLX gateway at localhost:8000/v1. Embedding/ASR/OCR via Python libraries (mlx-lm, mlx-vlm, mlx-audio). Works offline. Use instead of cloud APIs for privacy or low latency.

zht043 Bundle

本地项目部署到远程服务器，支持增量同步、部署钩子、回滚

claw-works Bundle

Primary skill for Calibre metadata edits over a running Content server. Use this for ID-based title/authors/series/series_index/tags/publisher/pubdate/languages updates and controlled apply after confirmation.

zht043 Bundle

DrivingSDK容器环境一键部署，含镜像管理、SSH配置、conda环境

uvroxx Bundle

Deploy and manage Midnight smart contracts to local or preview network. Use this skill when deploying contracts, starting local infrastructure, or connecting to testnet. Triggers on "deploy contract", "start local node", "setup standalone", "deploy to preview", or "midnight infrastructure".