DevOps & Infra

tomevault-io Bundle

Operational traps for Terraform provisioners, multi-environment isolation, and zero-to-deployment reliability. Covers provisioner timing races, SSH connection conflicts, DNS record duplication, volume permissions, database bootstrap gaps, snapshot cross-contamination, Cloudflare credential format errors, hardcoded domains in Caddyfiles/compose, and init-data-only-on-first-boot pitfalls. Activate when writing null_resource provisioners, creating multi-environment Terraform setups, debugging containers that are Restarting/unhealthy after terraform apply, setting up fresh instances with cloud-init, or any IaC code that SSHs into remote hosts. Also activate when the user mentions terraform plan/apply errors, provisioner failures, infrastructure drift, TLS certificate errors, or Caddy/gateway configuration. Use when this capability is needed.

tomevault-io Bundle

Design or refine CI/CD workflows, quality gates, release flow, and safe AI-assisted pipeline authoring. Use when adding or changing build pipelines, release stages, IaC-driven environments, or deployment rollback policy. Use when this capability is needed.

tomevault-io Bundle

Work with this repo’s GitHub Actions CI and GHCR Docker image publishing workflow. Use when changing generation checks, tests, formatting, or when preparing a release and validating image tags. Use when this capability is needed.

tomevault-io Bundle

Use when creating GitHub Actions workflows - covers CI/CD, matrix testing, and release automation

tomevault-io Bundle

Give your OpenClaw agent a homelab. Use when managing Docker containers, installing marketplace apps, or any Docker-related tasks on behalf of the user. Scope-based API key permissions — agent can only do what the key allows. On Linux, Docker requires sudo — without root access, WAGMIOS is the only safe interface for agent homelab control. Supports multi-machine management — one agent can manage multiple WAGMIOS instances across different hosts, each with its own scoped key. Requires X-API-Key header on every request (user provides at runtime). Includes Docker installation check and startup validation. Use when this capability is needed.

tomevault-io Bundle

Generate CI/CD pipeline configurations for GitHub Actions, GitLab CI, CircleCI, or Jenkins. This skill should be used when users want to create CI/CD workflows, set up automated pipelines, generate deployment configurations, or add continuous integration to a project. Use when this capability is needed.

tomevault-io Bundle

Use the 'azure__documentation' tool to find the minimal role definition that matches the desired permissions the user wants to assign to an identity. If no built-in role matches the desired permissions, use the 'azure__extension_cli_generate' tool to create a custom role definition with the desired permissions. Then use the 'azure__extension_cli_generate' tool to generate the CLI commands needed to assign that role to the identity. Finally, use the 'azure__bicepschema' and 'azure__get_azure_bestpractices' tools to provide a Bicep code snippet for adding the role assignment. If user is asking about role necessary to set access, refer to Prerequisites for Granting Roles down below:

tomevault-io Bundle

Control CLAWDINATOR fleet lifecycle via the control API. Use for /fleet deploy or /fleet status. Use when this capability is needed.

tomevault-io Skill

End-to-end encrypted cloud memory for AI agents. 100GB free storage. Store memories, files, and secrets securely. Use when this capability is needed.

tomevault-io Bundle

Automate SPFx version releases - branch, update files, commit, open PR, then tag after merge Use when this capability is needed.

tomevault-io Bundle

Pre-deployment checklist Use when this capability is needed.

tomevault-io Bundle

AWS serverless and event-driven architecture expert based on Well-Architected Framework. Use when building serverless APIs, Lambda functions, REST APIs, microservices, or async workflows. Covers Lambda with TypeScript/Python, API Gateway (REST/HTTP), DynamoDB, Step Functions, EventBridge, SQS, SNS, and serverless patterns. Essential when user mentions serverless, Lambda, API Gateway, event-driven, async processing, queues, pub/sub, or wants to build scalable serverless applications with AWS best practices. Use when this capability is needed.

tomevault-io Bundle

Terraform CLI 安装与初始化技能。当用户本地未安装 Terraform 时自动完成安装，确保 terraform 命令可用并能执行 init/validate。不负责 Provider 凭证配置，凭证在实际使用时由 terraform-skill 引导。 Use when this capability is needed.

tomevault-io Bundle

Diagnose and fix ApraPipes CI/CD build failures across all platforms (Windows, Linux x64/ARM64, Jetson, macOS, Docker). Handles vcpkg dependencies, GitHub Actions workflows, self-hosted CUDA runners, and platform-specific issues. Use when builds fail or when modifying CI configuration. Use when this capability is needed.

tomevault-io Bundle

Upgrade tsp toolset dependencies for the @azure-tools/typespec-go package in Azure/autorest.go repo. Use when user wants to bump, update, or upgrade the TypeSpec toolset dependencies (e.g., @typespec/compiler, @typespec/http, @azure-tools/typespec-client-generator-core, @azure-tools/azure-http-specs), create a release PR, or publish a new version of typespec-go. Use when this capability is needed.

tomevault-io Bundle

Awesome AZD Template Submission

tomevault-io Bundle

Skill: ExTester UI E2E Tests for VS Code Logic Apps Extension

tomevault-io Bundle

Browser Use Cloud Reference

tomevault-io Bundle

Comprehensive Cloudflare platform skill covering Workers, Pages, storage (KV, D1, R2), AI (Workers AI, Vectorize, Agents SDK), networking (Tunnel, Spectrum), security (WAF, DDoS), and infrastructure-as-code (Terraform, Pulumi). Use for any Cloudflare development task. Use when this capability is needed.

tomevault-io Bundle

DevOps and Infrastructure expert with comprehensive knowledge of CI/CD pipelines, containerization, orchestration, infrastructure as code, monitoring, security, and performance optimization. Use PROACTIVELY for any DevOps, deployment, infrastructure, or operational issues. If a specialized expert is a better fit, I will recommend switching and stop. Use when this capability is needed.

tomevault-io Bundle

Guidelines for creating and managing Pull Requests in this repo Use when this capability is needed.

tomevault-io Bundle

Project health assessment process. Use when auditing project setup, evaluating technical debt, assessing codebase health, or reviewing project configuration. Also use when joining a new project, builds are slow or flaky, experiencing 'works on my machine' problems, security scans find issues, or dependencies are years out of date. Essential for dependency audits, CI/CD reviews, and project infrastructure evaluation. Use when this capability is needed.

tomevault-io Bundle

Generate optimized Docker images for Bun applications. Use when deploying to containers, minimizing image sizes, setting up CI/CD pipelines, or deploying to Kubernetes. Use when this capability is needed.

tomevault-io Bundle

Create and manage local virtual machines for testing. Handles create, clone, snapshot, revert, destroy, status. Uses virsh, virt-install, ssh, ansible. Use when setting up VMs, cloning VMs, or checking VM status. Use when this capability is needed.

tomevault-io Bundle

CNB 平台操作助手 - 帮助用户管理 CI/CD、代码仓库、流水线和查询文档 Use when this capability is needed.

tomevault-io Bundle

Azure CLI command-line interface. Use for Azure automation. Use when this capability is needed.

tomevault-io Bundle

Azure Cosmos DB multi-model database with global distribution. Use for Azure. Use when this capability is needed.

tomevault-io Bundle

Create changesets for package changes in pull requests. Invoke whenever any file under packages/* is modified — including bug fixes, new features, and even documentation or typo changes. Changesets are required before committing; without one, the release pipeline won't know what changed or how to version it. Also trigger when the user asks about versioning, what changeset to create, or whether a change needs a changeset. Use when this capability is needed.

tomevault-io Bundle

ETL Pipeline Builder

tomevault-io Bundle

Use when deploying or managing Kubernetes workloads. Invoke to create deployment manifests, configure pod security policies, set up service accounts, define network isolation rules, debug pod crashes, analyze resource limits, inspect container logs, or right-size workloads. Use for Helm charts, RBAC policies, NetworkPolicies, storage configuration, performance optimization, GitOps pipelines, and multi-cluster management.

tomevault-io Bundle

Terraform IaC patterns — module structure, state management, GitHub provider, and GitWeave-style org control. Use when this capability is needed.

tomevault-io Bundle

Containerizing Flox environments with Docker/Podman. Use for creating container images, OCI exports, multi-stage builds, and deployment workflows. Use when this capability is needed.

tomevault-io Bundle

Ansible Skill

tomevault-io Bundle

Configure and harden remote OpenClaw gateway connectivity for PortWorld across cloud providers. Use when OpenClaw runs on a VM/VPS/ECS host different from PortWorld, and the user wants the agent to perform end-to-end setup (exposure method, auth, reverse proxy/tunnel, PortWorld env wiring, and validation) with minimal manual steps. Use when this capability is needed.

tomevault-io Bundle

Make a cloud account compliant with a security or industry framework using Prowler Cloud. Use when this capability is needed.

tomevault-io Bundle

Transform raw disinformation research into production-ready detection heuristics for the VERDAD audio monitoring pipeline. Handles ingestion from Google Docs, raw notes, or even just a topic name — generates bilingual (Spanish/Arabic) heuristics, updates prompt files, and deploys to Supabase. Use this skill whenever the user mentions VERDAD heuristics, disinformation categories, detection prompts, or wants to add/update/modify any disinformation detection category. Triggers on phrases like "add a new category", "update heuristics", "new disinformation topic", "ingest this Google Doc", or any reference to categories 1-21+ in the VERDAD system. Even if the user just says something like "we need to detect X type of misinformation", this skill applies. Use when this capability is needed.