DevOps & Infra

darthmolen Skill

Secrets hygiene for .NET development. Use when handling credentials, connection strings, API keys, or any secret value — especially when setting up local dev environments, configuring user-secrets, or bootstrapping Azure App Configuration + Key Vault access. Activates on any prompt mentioning secrets, credentials, connection strings, user-secrets, AZURE_CLIENT_SECRET, AZURE_CLIENT_ID, or AppConfig connection strings.

darthmolen Skill

Azure cloud infrastructure expert specializing in network design, identity integration, PowerShell automation with Az modules, and infrastructure-as-code patterns using Bicep.

darthmolen Skill

Use when a code-review meta-plan is ready and you want to drive the full review pipeline — pre-flight, seed slices, dispatch reviewers per slice, synthesize findings, and notify on completion; defensive and idempotent so repeated runs resume from where the last run stopped

darthmolen Bundle

Use when peeking, draining, snapshotting metrics on, enumerating, or otherwise inspecting/manipulating Azure Service Bus subscriptions, queues, or dead-letter sub-queues — including diagnosing DLQ accumulation, capturing parked messages for forensics before discard, draining stuck alert backlogs, comparing active/dlq counts across multiple subs, enumerating an entire namespace's topology, or clearing a subscription's ForwardTo (which the az CLI cannot do).

darthmolen Bundle

Use when turning extracted learning units into course definitions — deciding course boundaries, level, prerequisites, modules, labs, and assessments, and writing course.yaml. Fourth stage of the curriculum pipeline, after curriculum-extract.

darthmolen Bundle

Use when converting classified curriculum sources into traceable learning units — concepts, outcomes, procedures, constraints, failure modes, labs, and prerequisites, each tied to source evidence. Third stage of the curriculum pipeline, after curriculum-classify.

darthmolen Bundle

Use when sorting a curriculum source manifest into content domains and teachability — deciding which discovered files are eligible instructional source and what kind of content each holds. Second stage of the curriculum pipeline, after curriculum-discover.

darthmolen Bundle

Use when building a source manifest for curriculum generation — enumerating eligible files in a repository or wiki at a pinned revision, with hashes and change types. First stage of the curriculum pipeline. Triggers on "what source content exists for", "discover curriculum sources", or as step 1 of curriculum-orchestrate.

darthmolen Bundle

Use when rendering approved course definitions into artifacts — student guide, instructor guide, labs, and quiz — with provenance metadata. Fifth stage of the curriculum pipeline, after curriculum-govern approves the definition. Slide generation is not implemented.

qazuor Skill

CI/CD pipeline patterns for GitHub Actions. Use when setting up workflows, build caching, matrix builds, or deployment strategies.

qazuor Skill

Docker containerization patterns. Use when writing Dockerfiles, multi-stage builds, docker-compose, or container security hardening.

qazuor Skill

GitHub Actions CI/CD patterns. Use when creating workflows, matrix builds, caching strategies, or deployment pipelines.

abhattacherjee Bundle

Reviews and enriches story specifications with codebase-verified technical sub-tasks, architecture alignment checks, design simplification suggestions, and API test plans. Dynamically discovers project architecture at runtime. Use when: (1) a new story spec needs review before implementation, (2) a spec has high-level tasks but lacks implementation-ready detail, (3) need to verify spec assumptions against actual codebase, (4) a spec references API changes but has no test plan, (5) reviewing specs that reference data shapes or pipeline ordering, (6) spec subtasks mention add field X to object Y or call function at line N.

abhattacherjee Bundle

AI-driven screen recording and demo production pipeline for macOS. Records screen + cursor + window bounds, then uses AI vision to analyze the recording, create a zoom script targeting specific UI elements, generate voiceover narration, and produce a polished demo video. Use when: (1) creating product demo videos, (2) recording and polishing UI walkthroughs, (3) turning raw screen recordings into narrated presentations, (4) re-processing existing recordings with different zoom/voiceover.

layeddie Skill

GenStage, Broadway, and Flow for Elixir data pipelines

layeddie Bundle

Docker and Kubernetes deployment patterns for Elixir/Phoenix applications

masriyan Bundle

DevSecOps skill for securing CI/CD pipelines, infrastructure as code, containers, Kubernetes, cloud deployments, secrets handling, dependency management, SAST/DAST/SCA, release gates, supply-chain controls, SBOMs, policy-as-code, and secure SDLC workflows. Use for pipeline hardening, deployment risk reviews, security automation, and remediation planning.

masriyan Bundle

Digital forensics and incident response triage skill for disk, memory, network, cloud, and endpoint artifacts. Covers Volatility 3, Velociraptor, KAPE, Plaso, Autopsy, Chainsaw, Hayabusa, Zeek, Arkime, EVTX, AWS/Azure/GCP audit logs, and timeline reconstruction. Use to extract IOCs, build incident timelines, and produce defensible analyst reports.

masriyan Bundle

Authorized offensive security skill for ethical penetration testing, red-team planning, vulnerability validation, reconnaissance of owned assets, web/API/mobile/cloud assessment, report writing, remediation guidance, and lab-based security testing. Use only for systems the user owns or is authorized to test; focus on safe, scoped, legal assessment and defensive improvement.

masriyan Bundle

Kubernetes and container security skill for cluster hardening, RBAC review, admission control (OPA Gatekeeper, Kyverno), Pod Security Standards, network policies, secrets management, runtime defense (Falco, Tetragon), image supply chain (cosign, SLSA, in-toto), and CIS benchmark compliance. Use to assess and harden clusters you operate.

eriklieben Bundle

Orchestrates Aspire distributed applications using the Aspire CLI for running, debugging, and managing distributed apps. USE FOR: aspire start, aspire stop, start aspire app, aspire describe, list aspire integrations, debug aspire issues, view aspire logs, add aspire resource, aspire dashboard, update aspire apphost. DO NOT USE FOR: non-Aspire .NET apps (use dotnet CLI), container-only deployments (use docker/podman), Azure deployment after local testing (use azure-deploy skill). INVOKES: Aspire CLI commands (aspire start, aspire describe, aspire otel logs, aspire docs search, aspire add), bash. FOR SINGLE OPERATIONS: Use Aspire CLI commands directly for quick resource status or doc lookups.

zach-source Bundle

Local Kubernetes development with Tilt. Use when users need to create or modify Tiltfiles, debug multi-service applications, set up live updates, or work with the Tilt development workflow. Covers Tiltfile authoring, extensions, debugging, and integration with kubectl/Helm/Kustomize.

zach-source Skill

Infrastructure deployment verification workflow. Use when: (1) Pushing infrastructure/config changes, (2) Deploying to Kubernetes, (3) User says "deploy", "rollout", "verify deployment", (4) After committing Helm/K8s/Hydra/Kratos YAML changes, (5) Need to check deployment status.

zach-source Skill

AWS role assumption with Granted CLI. Use when assuming AWS profiles, switching accounts, opening AWS console, or authenticating to AWS. Triggers on: assume, granted, AWS profile, AWS role, AWS SSO, switch AWS account, AWS console, AWS authentication.

zach-source Skill

CI/CD pipeline monitoring and polling. Use PROACTIVELY when user pushes code, creates PR/MR, mentions "wait for CI", "check the build", "monitor pipeline", "watch workflow", or asks about build status. Launches background polling tasks that report back on completion.

zach-source Skill

Context recommendation system for reducing action uncertainty. Use PROACTIVELY when user mentions keywords like 'use this kubeconfig', 'our goal is', 'debug this', 'in production', 'deploy to', or when uncertainty about environment, cluster, namespace, or AWS profile drops below 80%.

clode-labs Skill

Development workflow protocol — branching, committing, project structure, and docker-compose conventions. Use when: (1) starting a new project or feature, (2) making commits, (3) setting up project structure with docker-compose, (4) completing a development task. NOT for: deployment, CI/CD pipeline configuration, or infrastructure changes.

clode-labs Skill

Generate or update aramb.toml configuration file by analyzing docker-compose files or codebase. Use this skill when you need to create project metadata, service configurations, or environment setup for aramb-orchestrated projects.

clode-labs Skill

Build and deploy applications using aramb-cli. Covers aramb-cli installation, deployment mode detection, env var/secret filling, service creation, local Docker builds, and deployment orchestration. Use for all deployment tasks. TOML generation is handled by the aramb-toml skill.

pedrohcgs Skill

Before and after changing anything shared — a function's return value, a signature, a schema, a label set, a config default, a constant, a file format — find every consumer and actually run them. Catches the change that looks purely additive but silently breaks a contract in a file you never opened. Use when editing shared code, adding a field/column/return element, renaming, changing units or defaults, or touching a pipeline that produces reported numbers.

pedrohcgs Skill

End-to-end R data analysis pipeline — exploration → cleaning → regression → publication-ready tables and figures. Use when user says "analyze this dataset", "run a regression on X", "explore this CSV", "full analysis workflow", "get me summary stats and a regression", or points at a `.csv`/`.rds`/`.dta` and asks for empirical results. Produces numbered R scripts in `scripts/R/` and outputs to `scripts/R/_outputs/`.

pedrohcgs Skill

Distill the current conversation into a structured note (decisions made, open questions, file pointers with line numbers, next 1–3 actions) and save to `quality_reports/session_logs/` before auto-compression. Differs from `/checkpoint` (explicit stop-point snapshot) and from auto-compaction (which truncates rather than distills). Use when context is approaching auto-compact threshold, when a long pipeline has accumulated many decisions, or when the user says "compress", "distil this session", "before we hit auto-compact", "structured handoff before context resets".

pedrohcgs Skill

End-to-end Stata replication pipeline — scaffolds numbered `.do` files in `scripts/stata/`, executes them via the `stata-mcp` MCP server, captures logs and outputs to `scripts/stata/_outputs/`, and produces publication-ready tables (esttab) and figures (graph export). Mirrors `/data-analysis` for R-first projects. Use when user says "stata replication", "set up Stata pipeline", "scaffold the .do files", "run Stata analysis", "AEA replication package in Stata", or when a project's analysis language is Stata not R.

armanzeroeight Bundle

Creates Ansible roles with proper structure, tasks, handlers, and variables. Use when creating Ansible roles, organizing automation tasks, or structuring configuration management.

armanzeroeight Skill

Analyze and optimize AWS costs with recommendations for Reserved Instances, right-sizing, and resource cleanup. Use when reducing AWS spending, analyzing costs, or optimizing cloud infrastructure expenses.

armanzeroeight Bundle

Configures Google Cloud Build pipelines with caching, parallel builds, and optimization. Use when setting up Cloud Build, optimizing build performance, or configuring CI/CD pipelines.