ashermahonin
- 47 skills
- 0 followers
- 7 hours ago last updated
- ▌ AI Pdlc · ashermahonin bundleOrganise uncertain product work into evidence-bearing phases from problem definition through post-release evaluation. Use for a new product, experiment, risky refactor, or feature whose value or feasibility is not yet established. Track hypotheses, prototypes, decisions, implementation readiness, applicable hardening, release evidence, and learning outcomes.
- ▌ QA Eval · ashermahonin bundlePlan and run verification gates for unit, integration, browser, contract, migration, security, performance, accessibility, smoke, acceptance, and eval scenarios. Use before merge or release, after implementation, when validation evidence is missing, when quality scenarios need proof, or when artifacts `32-test-strategy.md`, `33-evaluation-plan.md`, and release readiness notes must be produced.
- ▌ Pr Review · ashermahonin bundleReview pull requests or local diffs for correctness, regressions, missing tests, security, data safety, API compatibility, migration safety, performance risk, accessibility issues, operational hazards, and documentation drift. Use before merge, push, release, or whenever the user asks for code review, risk review, pre-landing review, or final check.
- ▌ UX Design · ashermahonin bundleDesign or review a web, mobile, desktop, game, CLI, voice, or conversational user experience. Use when a feature changes navigation, interaction, content, onboarding, or screen states. Produce information structure, flows, empty/loading/error/success behaviour, content guidance, accessibility requirements, design constraints, and testable acceptance criteria.
- ▌ Init Project · ashermahonin bundleInspect an existing repository, prepare an empty project, or map a migration before implementation begins. Use when an agent first enters an unfamiliar project or when a new project needs its stack, platform, test commands, documentation entrypoint, project memory, and next route established. Preserve existing agent configuration and do not scaffold a stack without confirmed intent.
- ▌ Tdd Workflow · ashermahonin bundleDefine changed behavior with a failing test, verify the failure reason, hand a bounded implementation contract to the code owner, then prove the fix with the affected suite and a boundary or failure case. Use for features, bug fixes, and behavior-preserving refactors where an automated test can provide useful regression evidence.
- ▌ Devops Router · ashermahonin bundleUse for broad DevOps, infrastructure, deployment, automation, operations, security, incident, cloud, Kubernetes, CI/CD, container, IaC, scripting, observability, or network/VPN requests that need safe routing before implementation.
- ▌ Decompose Work · ashermahonin bundleBreak approved product scope and architecture artifacts into epics, user stories, implementation tasks, dependency graph, critical path, ownership map, validation packs, merge order, and parallelization plan. Use after requirements and architecture are approved and before assigning implementation agents, opening parallel work, or writing artifacts `24-epics.md` through `29-agent-role-matrix.md`.
- ▌ Cicd Automation · ashermahonin bundleUse for CI/CD, pipeline automation, GitHub Actions, GitLab CI, Jenkins, Argo, Azure DevOps, build-test-scan-package-deploy flows, release orchestration, protected environments, approvals, and rollback.
- ▌ Perf And Memory · ashermahonin bundleReview or plan performance, memory, allocation, concurrency, caching, latency, throughput, profiling, benchmark, capacity, and language-runtime work. Use when a task mentions speed, memory, scale, load, p95/p99 latency, CPU, heap, allocations, async/concurrency, streaming, database query cost, caching, or artifacts `30-language-profiles.md` and performance-related quality scenarios.
- ▌ Research Domain · ashermahonin bundleResearch domain context, users, jobs-to-be-done, constraints, terminology, workflows, risks, and decision pressure before requirements or architecture. Use when creating a new product, entering an unfamiliar domain, validating product assumptions, preparing `05-domain-research.md`, or deciding what the system must respect before design or implementation begins.
- ▌ Analyze Codebase · ashermahonin bundleAnalyze an existing repository in read-only mode to reconstruct current behavior, architecture, dependency clusters, build and test health, hotspots, tech debt, ownership boundaries, integration points, and current-vs-target gaps. Use for existing-product improvement, migration planning, code archaeology, risky refactors, unfamiliar repositories, or artifacts `80-current-state-scan.md` through `85-migration-plan.md` before writing code.
- ▌ Cloud Operations · ashermahonin bundleUse for cloud architecture and operations across AWS, GCP, Azure, Cloudflare, DigitalOcean, Yandex Cloud, VK Cloud, Selectel, SberCloud, MTS Web Services, IAM, networking, HA/DR, managed services, migration, and cost/risk control.
- ▌ Compliance Legal · ashermahonin bundleDetermine which legal, regulatory, contractual, accessibility, platform, and open-source obligations apply to a product. Use when entering a market, processing regulated data, adding payments, children, healthcare, AI, new vendors, or a distribution platform. Produce an evidence-based applicability and gap record; flag interpretation that needs qualified counsel.
- ▌ Data Ml Pipeline · ashermahonin bundleDesign or review data, analytics, ML, embedding, vector-search, RAG, and model-lifecycle pipelines. Use when the product depends on sourced data, schemas, transformation, training, evaluation, deployment, lineage, drift detection, or retraining. Produce data contracts, reproducibility requirements, evaluation evidence, deployment controls, and monitoring ownership.
- ▌ Security Secrets · ashermahonin bundleUse for secret management, IAM and RBAC hardening, Vault, KMS, SOPS, Sealed Secrets, CI secrets, workload identity, supply chain security, scanning, SBOM, signing, policy gates, audit, access review, and rotation.
- ▌ I18N Localization · ashermahonin bundleDesign or review localization for a product that supports more than one language or region. Use before visible strings and layouts become difficult to change and before release. Cover source strings, message formats, plural rules, RTL and CJK layouts, glossary, translation workflow, locale-specific QA, accessibility, and distribution listings.
- ▌ Platform Detector · ashermahonin bundleIdentify the target and runtime platforms, distribution channels, and platform-specific quality constraints for a project. Use after initial project inspection when architecture, testing, accessibility, performance, store policy, or security checks depend on whether the product is web, mobile, desktop, server, game, embedded, CLI, library, or an agent system.
- ▌ Sdlc Orchestrator · ashermahonin bundleSelect and coordinate the smallest sufficient Agentic Skills route for broad software work. Use when a request spans product definition, architecture, implementation, validation, security, release, or several ownership areas. Do not activate for a familiar one-file change that already has clear acceptance criteria and validation.
- ▌ Intake Coordinator · ashermahonin bundleClarify and scope incoming product or engineering requests before research, architecture, or coding starts. Use when the request is broad, emotionally urgent, ambiguous, risky, multi-phase, missing success criteria, missing constraints, missing non-goals, or likely to create rework if the agent starts implementation too early.
- ▌ Release Management · ashermahonin bundlePrepare and control a software release across services, stores, registries, packages, or staged rollouts. Use when versioning, provenance, release notes, certification, deployment, monitoring, approval, or rollback must be coordinated. Combine only the quality, security, accessibility, localization, compliance, and operational checks that apply.
- ▌ Security Owasp LLM · ashermahonin bundleReview an LLM, RAG, embedding, fine-tuning, or model-routed feature against the current OWASP LLM risks. Use when untrusted content enters prompts or retrieval, model output affects another system, sensitive data is exposed to a provider, or cost and agency can grow. Produce a data-flow threat model, abuse-case evidence, controls, residual risk, and release recommendation.
- ▌ Security Owasp Web · ashermahonin bundleReview a web application, API, or mobile backend against the current OWASP Top 10. Use before release and after material changes to authentication, authorization, data flow, dependencies, integrations, cryptography, logging, or exception handling. Produce category status, concrete evidence, remediation ownership, residual risk, and a release recommendation.
- ▌ Accessibility Audit · ashermahonin bundleAudit a user-facing web, mobile, desktop, game, voice, or conversational surface against the accessibility requirements of its target platform. Use during design review and before release. Produce criterion-level evidence from automated and manual checks, assistive-technology results, unresolved barriers, remediation owners, and release impact.
- ▌ Architecture Review · ashermahonin bundleDesign or review software architecture using system context, container, component, runtime, deployment, data, API, integration, crosscutting concepts, and ADR artifacts. Use before large implementation, service-boundary changes, infrastructure changes, API or data contract changes, migrations, reliability work, security-sensitive design, or architecture artifacts `14-system-context.md` through `22-adr-index.md`.
- ▌ Container Platforms · ashermahonin bundleUse for Docker, BuildKit, Podman, Compose, OCI image builds, runtime behavior, registries, multi-stage Dockerfiles, image optimization, healthchecks, non-root execution, supply chain safety, and container troubleshooting.
- ▌ Engineering Quality · ashermahonin bundleReview the maintainability of production code and guide focused refactoring through clear names, cohesive modules, explicit dependencies, controlled side effects, actionable errors, readable tests, and small change sets. Use during implementation planning, code review, legacy cleanup, or a refactor where behavior must remain stable. Do not activate for formatting-only edits or as permission to rewrite unrelated code.
- ▌ User Journey Mapper · ashermahonin bundleMap user journeys, story maps, interaction flows, alternate paths, failure paths, release slices, and scenario-to-task links before decomposition. Use when a product workflow, UX flow, story map, persona path, acceptance scenario, or `09-user-story-map.md` and `10-user-journeys.md` artifact must be clarified before epics, stories, tasks, or parallel implementation are assigned.
- ▌ Competitive Analysis · ashermahonin bundleRun competitive, adjacent-market, or alternative-solution analysis for product planning. Use when the project needs competitor scan, substitute workflow analysis, feature matrix, pricing or packaging comparison, positioning, wedge selection, blind-spot discovery, opportunity mapping, or `06-competitor-analysis.md` before product scope is locked.
- ▌ Custom Skill Builder · ashermahonin bundleCreate or update a reusable Agent Skill in the open SKILL.md format. Use for project, team, domain, or tool workflows that need a precise trigger and repeatable procedure. Add references, scripts, assets, client metadata, or routing only when the skill needs them; do not create a new skill for a one-off instruction or a narrow variant already owned elsewhere.
- ▌ Cve Zero Day Scanner · ashermahonin bundleCheck project dependencies, base images, operating-system packages, infrastructure providers, plugins, and agent tools against current vulnerability and active-exploitation sources. Use before release, after dependency changes, during incident review, and on a schedule for long-lived services. Record source, timestamp, reachability, exploitability, mitigation, owner, and release impact.
- ▌ Hypothesis Validator · ashermahonin bundleConvert a design choice, architecture option, market assumption, or feature bet into a falsifiable hypothesis with a measurable kill criterion, the cheapest useful test to settle it, and a clear record of what was supported, disproved, or deferred. Use whenever the agent is tempted to commit to a stack, a pattern, a vendor, a model, a UX flow, or a scope without evidence, and as the core supporting skill for ai-pdlc and architecture-review.
- ▌ Network Vpn Security · ashermahonin bundleUse for VPC/VNet/subnet design, VPN, routing, DNS, firewall rules, ACLs, security groups, private endpoints, bastions, hybrid or multi-cloud connectivity, zero trust access, Kubernetes network policies, MTU, latency, and secure network troubleshooting.
- ▌ Requirements Quality · ashermahonin bundleConvert product scope into functional requirements, nonfunctional requirements, measurable quality scenarios, acceptance criteria, and traceable requirement links. Use before architecture or implementation when FR/NFR lists, reliability, security, observability, performance, maintainability, compatibility, accessibility, data-safety, or artifacts `11-functional-requirements.md` through `13-quality-scenarios.md` are needed.
- ▌ Scripting Automation · ashermahonin bundleUse for Bash, Python, PowerShell, operational tooling, CLI helpers, migration scripts, diagnostics, glue logic, safe automation, argument parsing, idempotency, dry-run modes, retries, timeouts, and error handling.
- ▌ Kubernetes Operations · ashermahonin bundleUse for Kubernetes deployment, manifests, Helm, Kustomize, operations, scaling, storage, networking, RBAC, NetworkPolicy, Pod Security, rollout planning, rollback, and cluster troubleshooting.
- ▌ Security Mobile Masvs · ashermahonin bundleReview a native iOS or Android application against current OWASP MASVS and relevant platform controls. Use before release and after changes to authentication, local storage, networking, WebViews, deep links, permissions, signing, privacy, resilience, or SDKs. Review backend and API surfaces separately with the web security skill.
- ▌ Self Improvement Loop · ashermahonin bundleRepair a measured failure in agent routing, instructions, tool contracts, context, memory, or evaluation, then verify the repair and resume the original task. Use after a reproducible failed check, route mismatch, tool misuse, regression, or specific user correction. Do not activate from vague dissatisfaction or use it to increase permissions or autonomy silently.
- ▌ Infrastructure As Code · ashermahonin bundleUse for Terraform, OpenTofu, Pulumi, CloudFormation, Bicep, ARM, Crossplane, provider constraints, remote state, imports, moved blocks, plan review, drift, policy checks, modular infrastructure, and safe resource changes.
- ▌ Security Owasp Agentic · ashermahonin bundleReview a tool-using or multi-agent system against the current OWASP Agentic Application risks. Use when an LLM can read, write, execute tools, retain memory, act under an identity, or delegate work. Produce risk status, autonomy and permission boundaries, tool inventory, abuse-case evidence, recovery controls, and a release recommendation.
- ▌ Service Implementation · ashermahonin bundleImplement a bounded feature, bug fix, module, service, or migration after the expected behavior, write scope, interfaces, and validation commands are known. Use when production code must change. Preserve unrelated work and existing contracts; do not use this skill to plan a broad product or to perform an unscoped rewrite.
- ▌
- ▌ Incident Troubleshooting · ashermahonin bundleUse for incidents, outages, degradation, failed deployments, performance regressions, emergency diagnostics, stabilization, timelines, hypotheses, recovery plans, rollback, evidence capture, root cause notes, and prevention actions.
- ▌ Observability Operations · ashermahonin bundleUse for metrics, logs, traces, dashboards, alerting, SLI/SLO design, OpenTelemetry, Prometheus, Grafana, Loki, ELK, OpenSearch, Tempo, Jaeger, production diagnostics, and alert noise reduction.
- ▌ Obsidian Graph Navigator · ashermahonin bundleFind the smallest useful reading set in an Obsidian-compatible project vault by following indexes, wikilinks, metadata, and task scope. Use before loading project notes for planning, architecture, security, implementation, or handoff. Do not read the whole vault when a focused path can answer the task.
- ▌ Documentation Graph Curator · ashermahonin bundleMaintain project documentation and Obsidian-first knowledge graph using Markdown notes, wikilinks, ADRs, artifact indexes, Mermaid diagrams as visual layer, change logs, and graph hygiene. Use when syncing docs after code changes, creating a project vault skeleton, updating project memory, linking requirements to architecture and tasks, cleaning stale notes, or making sure agents can navigate the project without confusion.
- ▌ Project Structure Governance · ashermahonin bundleKeep a repository understandable while an agent creates files, tests, scripts, documentation, fixtures, screenshots, migrations, or generated output. Use during project setup, implementation, review, release, and documentation work. Maintain a clear project map, isolated temporary artifacts, one canonical documentation entrypoint, and a cleanup check before handoff.