← all publishers

gabrielmoreira

@gabrielmoreira source repo

Report this profile Claim this profile

• 21k skills
• 0 followers
• 17 repo stars
• 2 weeks ago last updated

1. ▌
   Build Script Path Rot · gabrielmoreira

   Hardcoded paths in build scripts break when directory structure changes:
   17 repo stars
2. ▌
   Copilot Usage Metrics · gabrielmoreira

   Retrieve and display GitHub Copilot usage metrics for organizations and enterprises using the GitHub CLI and REST API.
   17 repo stars
3. ▌
   Project Risk Analysis · gabrielmoreira

   Systematic methodology for identifying, categorizing, and mitigating software project risks before implementation
   17 repo stars
4. ▌
   Hr People Operations · gabrielmoreira

   Talent acquisition, employee lifecycle, compensation, labor regulations, and organizational development.
   17 repo stars
5. ▌
   Create Associate Nsg · gabrielmoreira

   Creates a new Network Security Group and associates it with the specified subnets and/or NICs of a Virtual Network.
   17 repo stars
6. ▌
   Visual Vocabulary · gabrielmoreira

   Chart catalog organized by communication goal, CSAR evaluation loop for AI-generated charts, 5-visual rule, override decision framework, and living gallery references
   17 repo stars
7. ▌
   Managing Autonomous Development · gabrielmoreira

   Execute enables AI assistant to manage sugar's autonomous development workflows. it allows AI assistant to create tasks, view the status of the system, review pending tasks, and start autonomous execution mode. use this skill when the user asks to create a new develo... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
   17 repo stars
8. ▌
   Python Tooling · gabrielmoreira

   Use when managing Python packages, virtual environments, or linting and formatting Python code
   17 repo stars
9. ▌
   Strategic Clarity · gabrielmoreira

   Guided workflow for establishing team identity, boundaries, and strategic clarity. Use when starting a new role, inheriting ambiguity, when a team lacks clear identity, or when you need to define "what we own" vs "what we don't". Triggers include "strategic clarity", "team identity", "new role", "inherited ambiguity", "what does my team own", or "define our boundaries".
   17 repo stars
10. ▌
    Abridge Sdk Patterns · gabrielmoreira

    Apply production-ready patterns for Abridge clinical AI integration. Use when building reusable Abridge client wrappers, implementing HIPAA-compliant error handling, or establishing team coding standards for healthcare AI. Trigger: "abridge SDK patterns", "abridge best practices", "abridge code patterns".
    17 repo stars
11. ▌
    Algolia Sdk Patterns · gabrielmoreira

    Apply production-ready algoliasearch v5 patterns: singleton client, typed search, error handling, and batch operations. Use when implementing Algolia integrations, refactoring SDK usage, or establishing team coding standards. Trigger: "algolia SDK patterns", "algolia best practices", "algolia code patterns", "idiomatic algolia".
    17 repo stars
12. ▌
    Clickup Sdk Patterns · gabrielmoreira

    Production-ready ClickUp API v2 client patterns with typed wrappers, error handling, caching, and multi-tenant support. Trigger: "clickup client wrapper", "clickup SDK patterns", "clickup best practices", "clickup typescript client", "clickup API wrapper", "production clickup code".
    17 repo stars
13. ▌
    Cohere CI Integration · gabrielmoreira

    Configure CI/CD for Cohere integrations with GitHub Actions and automated testing. Use when setting up automated testing for Chat/Embed/Rerank, configuring CI pipelines, or testing Cohere-powered applications. Trigger with phrases like "cohere CI", "cohere GitHub Actions", "cohere automated tests", "CI cohere", "cohere pipeline".
    17 repo stars
14. ▌
    Granola Sdk Patterns · gabrielmoreira

    Zapier automation patterns and Enterprise API integration for Granola. Use when building automated workflows, connecting Granola to 8,000+ apps via Zapier, or querying the Enterprise API for notes and transcripts. Trigger: "granola zapier", "granola automation", "granola API", "granola SDK".
    17 repo stars
15. ▌
    Linear CI Integration · gabrielmoreira

    Integrate Linear with GitHub Actions CI/CD pipelines. Use when setting up automated testing, PR-to-issue linking, or creating Linear issues from CI failures. Trigger: "linear CI", "linear GitHub Actions", "linear CI/CD", "linear automated tests", "linear PR integration".
    17 repo stars
16. ▌
    Linear Local Dev Loop · gabrielmoreira

    Set up local Linear development environment and testing workflow. Use when configuring local dev, testing integrations, or setting up a development workflow with Linear webhooks. Trigger: "linear local development", "linear dev setup", "test linear locally", "linear development environment".
    17 repo stars
17. ▌
    Linear Prod Checklist · gabrielmoreira

    Production readiness checklist for Linear integrations. Use when preparing to deploy, reviewing production requirements, or auditing existing Linear deployments. Trigger: "linear production checklist", "deploy linear", "linear production ready", "linear go live", "linear launch".
    17 repo stars
18. ▌
    Miro Deploy Integration · gabrielmoreira

    Deploy Miro REST API v2 integrations to Vercel, Fly.io, and Cloud Run with proper OAuth token management and webhook configuration. Trigger with phrases like "deploy miro", "miro Vercel", "miro production deploy", "miro Cloud Run", "miro Fly.io".
    17 repo stars
19. ▌
    Posthog Sdk Patterns · gabrielmoreira

    Production-ready PostHog SDK patterns: singleton client, typed events, React hooks, Next.js App Router integration, and Python patterns. Trigger: "posthog SDK patterns", "posthog best practices", "posthog React hook", "posthog Next.js", "posthog typescript".
    17 repo stars
20. ▌
    Serpapi Sdk Patterns · gabrielmoreira

    Production-ready SerpApi client patterns with caching, typing, and multi-engine support. Use when building search services, implementing result caching, or wrapping SerpApi with typed responses. Trigger: "serpapi patterns", "serpapi best practices", "serpapi client wrapper".
    17 repo stars
21. ▌
    Vercel Edge Functions · gabrielmoreira

    Build and deploy Vercel Edge Functions for ultra-low latency at the edge. Use when creating API routes with minimal latency, geolocation-based routing, A/B testing, or authentication at the edge. Trigger with phrases like "vercel edge function", "vercel edge runtime", "deploy edge function", "vercel middleware", "@vercel/edge".
    17 repo stars
22. ▌
    Webflow Debug Bundle · gabrielmoreira

    Collect Webflow debug evidence for support tickets and troubleshooting. Gathers SDK version, token validation, rate limit status, site connectivity, CMS health, and error logs into a single diagnostic bundle. Trigger with phrases like "webflow debug", "webflow support bundle", "collect webflow logs", "webflow diagnostic", "webflow troubleshoot".
    17 repo stars
23. ▌
    Webflow Sdk Patterns · gabrielmoreira

    Apply production-ready Webflow SDK patterns — singleton client, typed error handling, pagination helpers, and raw response access for the webflow-api package. Use when implementing Webflow integrations, refactoring SDK usage, or establishing team coding standards. Trigger with phrases like "webflow SDK patterns", "webflow best practices", "webflow code patterns", "idiomatic webflow", "webflow typescript".
    17 repo stars
24. ▌
    Windsurf Load Scale · gabrielmoreira

    Scale Windsurf adoption across large organizations with workspace strategies and performance tuning. Use when rolling out Windsurf to 50+ developers, managing large monorepo workspaces, or planning enterprise-scale deployment. Trigger with phrases like "windsurf at scale", "windsurf large team", "windsurf monorepo", "windsurf organization", "windsurf 100 developers".
    17 repo stars
25. ▌
    Hardcoded Credential Finder · gabrielmoreira

    Manage hardcoded credential finder operations. Auto-activating skill for Security Fundamentals. Triggers on: hardcoded credential finder, hardcoded credential finder Part of the Security Fundamentals skill category. Use when working with hardcoded credential finder functionality. Trigger with phrases like "hardcoded credential finder", "hardcoded finder", "hardcoded".
    17 repo stars
26. ▌
    Definition Of Done Generator · gabrielmoreira

    Generate definition of done generator operations. Auto-activating skill for Enterprise Workflows. Triggers on: definition of done generator, definition of done generator Part of the Enterprise Workflows skill category. Use when working with definition of done generator functionality. Trigger with phrases like "definition of done generator", "definition generator", "definition".
    17 repo stars
27. ▌
    Classify Material Handling Requirements · gabrielmoreira bundle

    Classify material handling requirements from load, dimensions, volume, distance, throughput, environment, and safety constraints.
    17 repo stars
28. ▌
    Analyze Warehouse Kpis · gabrielmoreira bundle

    Analyze warehouse KPI data, targets, trends, variance, exceptions, and operational implications with source and unit discipline.
    17 repo stars
29. ▌
    Identify Us Logistics Jurisdiction · gabrielmoreira

    Identify federal, state, territorial, modal, product, workplace, and activity jurisdiction for United States logistics research.
    17 repo stars
30. ▌
    Research Us Import Export Controls · gabrielmoreira

    Prepare CBP-centered United States import and export research briefs for logistics evidence, documentation, release, reporting, and broker review.
    17 repo stars
31. ▌
    Manage Safety Analysis · gabrielmoreira

    Create, populate, and manage safety analysis spreadsheets (FMEA, FHA, HARA, custom) and fault trees (FTA) in Safety Analysis Manager. Use when the user asks to perform FMEA, hazard analysis, fault tree analysis, safety analysis, or work with Safety Analysis Manager documents. Requires Simulink Fault Analyzer.
    17 repo stars
32. ▌
    Implementing Deception Based Detection With Canarytoken · gabrielmoreira bundle

    Deploys and monitors Canary Tokens via the Thinkst Canary REST API for deception-based breach detection, programmatically creating web bug, DNS, MS Word document, and AWS API key tokens and generating deception coverage reports from triggered alerts. Use when standing up honeytoken tripwires for early breach detection or building a deception-technology coverage report.
    17 repo stars
33. ▌
    Implementing Github Advanced Security For Code Scanning · gabrielmoreira bundle

    Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform automated static analysis and vulnerability detection across repositories at enterprise scale, including custom CodeQL queries and CI workflow integration. Use when setting up or tuning code scanning, rolling out CodeQL across an organization, or shifting SAST left into pull request workflows.
    17 repo stars
34. ▌
    Implementing Network Intrusion Prevention With Suricata · gabrielmoreira bundle

    Deploys and configures Suricata as an inline network intrusion prevention system, covering IPS mode setup (NFQueue), custom rule writing, Emerging Threats ruleset management, performance tuning, and logging integration. Use when deploying real-time inline traffic inspection to actively block malicious traffic, or when tuning Suricata rules and performance for production IDS/IPS deployment.
    17 repo stars
35. ▌
    Implementing Privileged Access Management With Cyberark · gabrielmoreira bundle

    Deploy CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise infrastructure, covering vault architecture, session isolation, credential rotation policies, and integration with NIST 800-53 access control requirements. Use when standing up CyberArk PAM, vaulting privileged credentials, or designing credential rotation policies.
    17 repo stars
36. ▌
    Android Retrofit · gabrielmoreira

    Expert guidance on setting up and using Retrofit for type-safe HTTP networking in Android. Covers service definitions, coroutines, OkHttp configuration, and Hilt integration.
    17 repo stars
37. ▌
    Multi File Excel Parquet Analysis · gabrielmoreira

    读取多 Sheet Excel 文件并统计规模，支持大文件向 Parquet 格式转换、分类数据统计及可视化报告生成。
    17 repo stars
38. ▌
    Performing AI Assisted Vulnerability Discovery · gabrielmoreira

    Using LLMs to accelerate vulnerability research and pentest workflows — generating syntax-valid fuzzing seeds and evolving grammars, fine-tuned mutation dictionaries, parallel agent-based proof-of-vulnerability generation, and evidence-driven passive analysis of real HTTP traffic via the Burp MCP server. Covers concrete prompts, AFL++/ libFuzzer wiring, and Burp+Codex/Gemini/Ollama MCP setup.
    17 repo stars
39. ▌
    Performing Return Oriented Programming · gabrielmoreira

    Methodology for building Return-Oriented Programming (ROP) chains to bypass NX/DEP by reusing existing code gadgets, covering gadget discovery, calling-convention argument setup, ret2libc, ret2syscall (execve), one_gadget, stack alignment, JOP, and stack pivoting across x86/x64/ARM64 during authorized engagements.
    17 repo stars
40. ▌
    Performing Windows Binary Exploitation · gabrielmoreira

    Methodology for exploiting classic 32-bit Windows stack buffer overflows in network services during authorized engagements (OSCP-level), covering crash reproduction, EIP offset discovery with pattern_create/pattern_offset, shellcode space and bad-character enumeration, locating a reliable JMP ESP return address with mona.py, and delivering an msfvenom payload to gain remote code execution.
    17 repo stars
41. ▌
    Performing Cryptographic Audit Of Application · gabrielmoreira

    A cryptographic audit systematically reviews an application's use of cryptographic primitives, protocols, and key management to identify vulnerabilities such as weak algorithms, insecure modes, hardco
    17 repo stars
42. ▌
    Analyzing Linux Audit Logs For Intrusion · gabrielmoreira

    Uses the Linux Audit framework (auditd) with ausearch and aureport utilities to detect intrusion attempts, unauthorized access, privilege escalation, and suspicious system activity. Covers audit rule configuration, log querying, timeline reconstruction, and integration with SIEM platforms. Activates for requests involving auditd analysis, Linux audit log investigation, ausearch queries, aureport summaries, or host-based intrusion detection on Linux.
    17 repo stars
43. ▌
    Conducting Post Incident Lessons Learned · gabrielmoreira

    Facilitate structured post-incident reviews to identify root causes, document what worked and failed, and produce actionable recommendations to improve future incident response.
    17 repo stars
44. ▌
    Exploiting Insecure Data Storage In Mobile · gabrielmoreira

    Identifies and exploits insecure local data storage vulnerabilities in Android and iOS mobile applications including unencrypted databases, world-readable files, insecure SharedPreferences, plaintext credential storage, and improper keychain/keystore usage. Use when performing mobile penetration testing focused on OWASP M9 (Insecure Data Storage) or assessing compliance with MASVS-STORAGE requirements. Activates for requests involving mobile data storage security, local storage exploitation, SharedPreferences analysis, or mobile data leakage assessment.
    17 repo stars
45. ▌
    Implementing Mobile Application Management · gabrielmoreira

    Implements Mobile Application Management (MAM) policies to protect enterprise data on managed and unmanaged mobile devices through app-level controls including data loss prevention, selective wipe, app configuration, and containerization. Use when securing corporate apps on BYOD devices, implementing Intune App Protection Policies, or enforcing data separation between personal and work apps. Activates for requests involving MAM deployment, app protection policies, mobile containerization, or BYOD security.
    17 repo stars
46. ▌
    Intercepting Mobile Traffic With Burpsuite · gabrielmoreira

    Intercepts and analyzes HTTP/HTTPS traffic from mobile applications using Burp Suite proxy to identify insecure API communications, authentication flaws, data leakage, and server-side vulnerabilities. Use when performing mobile application penetration testing, assessing API security, or evaluating client-server communication patterns. Activates for requests involving mobile traffic interception, Burp Suite mobile proxy, API security testing, or mobile HTTPS analysis.
    17 repo stars
47. ▌
    Performing Dynamic Analysis Of Android App · gabrielmoreira

    Performs runtime dynamic analysis of Android applications using Frida, Objection, and Android Debug Bridge to observe application behavior during execution, intercept function calls, modify runtime values, and identify vulnerabilities that static analysis misses. Use when testing Android apps for runtime security flaws, hooking sensitive methods, bypassing client-side protections, or analyzing obfuscated applications. Activates for requests involving Android dynamic analysis, runtime hooking, Frida Android instrumentation, or live app behavior analysis.
    17 repo stars
48. ▌
    Conducting Mobile App Penetration Test · gabrielmoreira

    Conducts penetration testing of iOS and Android mobile applications following the OWASP Mobile Application Security Testing Guide (MASTG) to identify vulnerabilities in data storage, network communication, authentication, cryptography, and platform-specific security controls. The tester performs static analysis of application binaries, dynamic analysis at runtime, and API security testing to evaluate the complete mobile attack surface. Activates for requests involving mobile app pentest, iOS security assessment, Android security testing, or OWASP MASTG assessment.
    17 repo stars
49. ▌
    Executing Phishing Simulation Campaign · gabrielmoreira

    Executes authorized phishing simulation campaigns to assess an organization's susceptibility to email-based social engineering attacks. The tester designs realistic phishing scenarios, builds credential harvesting infrastructure, sends targeted phishing emails, and tracks open rates, click-through rates, and credential submission rates to measure human security awareness. Activates for requests involving phishing simulation, social engineering assessment, email security testing, or security awareness measurement.
    17 repo stars
50. ▌
    Performing Internal Network Pentesting · gabrielmoreira

    Methodology for internal network penetration testing from a foothold on the LAN, covering host discovery, port scanning, passive/active sniffing, MitM (ARP/DNS/ICMP/DHCPv6), and LLMNR/NBT-NS/mDNS poisoning with Responder plus relay attacks during authorized engagements.
    17 repo stars
51. ▌
    Detecting Beaconing Patterns With Zeek · gabrielmoreira

    Performs statistical analysis of Zeek conn.log connection intervals to detect C2 beaconing patterns. Uses the ZAT library to load Zeek logs into Pandas DataFrames, calculates inter-arrival time standard deviation, and flags periodic connections with low jitter. Use when hunting for command-and-control callbacks in network data.
    17 repo stars
52. ▌
    Implementing Ticketing System For Incidents · gabrielmoreira

    Implements an integrated incident ticketing system connecting SIEM alerts to ServiceNow, Jira, or TheHive for structured incident tracking, SLA management, escalation workflows, and compliance documentation. Use when SOC teams need formalized incident lifecycle management with automated ticket creation, assignment routing, and resolution tracking.
    17 repo stars
53. ▌
    Ga4 Bigquery Export · gabrielmoreira

    Wire GA4 → BigQuery for unsampled, queryable event-level data. Covers the one-time export setup, the events_YYYYMMDD table schema, partitioning + clustering, and the SQL patterns for the reports the Data API can't do well (true cohort retention, custom-event attribution, large date ranges). Trigger with "GA4 BigQuery", "GA4 to BQ", "event-level GA4 data", "unsampled GA4", "GA4 export setup", "GA4 SQL".
    17 repo stars
54. ▌
    Miro Data Handling · gabrielmoreira

    Implement Miro REST API v2 data handling with PII detection in board content, data export via API, retention policies, and GDPR/CCPA compliance patterns. Trigger with phrases like "miro data", "miro PII", "miro GDPR", "miro data export", "miro privacy", "miro compliance".
    17 repo stars
55. ▌
    Miro Observability · gabrielmoreira

    Set up observability for Miro REST API v2 integrations with Prometheus metrics, OpenTelemetry traces, structured logging, and Grafana dashboards. Trigger with phrases like "miro monitoring", "miro metrics", "miro observability", "monitor miro", "miro alerts", "miro tracing".
    17 repo stars
56. ▌
    Optimizing Database Connection Pooling · gabrielmoreira bundle

    Process use when you need to work with connection management. This skill provides connection pooling and management with comprehensive guidance and automation. Trigger with phrases like "manage connections", "configure pooling", or "optimize connection usage".
    17 repo stars
57. ▌
    Kubernetes Configmap Handler · gabrielmoreira

    Configure kubernetes configmap handler operations. Auto-activating skill for DevOps Advanced. Triggers on: kubernetes configmap handler, kubernetes configmap handler Part of the DevOps Advanced skill category. Use when configuring systems or services. Trigger with phrases like "kubernetes configmap handler", "kubernetes handler", "kubernetes".
    17 repo stars
58. ▌
    SQL Injection Detector · gabrielmoreira

    Detect sql injection detector operations. Auto-activating skill for Security Fundamentals. Triggers on: sql injection detector, sql injection detector Part of the Security Fundamentals skill category. Use when working with sql injection detector functionality. Trigger with phrases like "sql injection detector", "sql detector", "sql".
    17 repo stars
59. ▌
    Container Security Auditor · gabrielmoreira

    Audit container security auditor operations. Auto-activating skill for Security Advanced. Triggers on: container security auditor, container security auditor Part of the Security Advanced skill category. Use when analyzing or auditing container security auditor. Trigger with phrases like "container security auditor", "container auditor", "container".
    17 repo stars
60. ▌
    Encryption At REST Checker · gabrielmoreira

    Validate encryption at rest checker operations. Auto-activating skill for Security Advanced. Triggers on: encryption at rest checker, encryption at rest checker Part of the Security Advanced skill category. Use when working with encryption at rest checker functionality. Trigger with phrases like "encryption at rest checker", "encryption checker", "encryption".
    17 repo stars
61. ▌
    Connection Pool Analyzer · gabrielmoreira

    Analyze connection pool analyzer operations. Auto-activating skill for Performance Testing. Triggers on: connection pool analyzer, connection pool analyzer Part of the Performance Testing skill category. Use when analyzing or auditing connection pool analyzer. Trigger with phrases like "connection pool analyzer", "connection analyzer", "analyze connection pool r".
    17 repo stars
62. ▌
    Gatling Scenario Creator · gabrielmoreira

    Create gatling scenario creator operations. Auto-activating skill for Performance Testing. Triggers on: gatling scenario creator, gatling scenario creator Part of the Performance Testing skill category. Use when working with gatling scenario creator functionality. Trigger with phrases like "gatling scenario creator", "gatling creator", "gatling".
    17 repo stars
63. ▌
    Jmeter Test Plan Creator · gabrielmoreira

    Create jmeter test plan creator operations. Auto-activating skill for Performance Testing. Triggers on: jmeter test plan creator, jmeter test plan creator Part of the Performance Testing skill category. Use when writing or running tests. Trigger with phrases like "jmeter test plan creator", "jmeter creator", "jmeter".
    17 repo stars
64. ▌
    Troubleshooting Guide Creator · gabrielmoreira

    Create troubleshooting guide creator operations. Auto-activating skill for Technical Documentation. Triggers on: troubleshooting guide creator, troubleshooting guide creator Part of the Technical Documentation skill category. Use when working with troubleshooting guide creator functionality. Trigger with phrases like "troubleshooting guide creator", "troubleshooting creator", "troubleshooting".
    17 repo stars
65. ▌
    Mermaid Gantt Chart Generator · gabrielmoreira

    Generate mermaid gantt chart generator operations. Auto-activating skill for Visual Content. Triggers on: mermaid gantt chart generator, mermaid gantt chart generator Part of the Visual Content skill category. Use when working with mermaid gantt chart generator functionality. Trigger with phrases like "mermaid gantt chart generator", "mermaid generator", "mermaid".
    17 repo stars
66. ▌
    Mermaid State Diagram Creator · gabrielmoreira

    Create mermaid state diagram creator operations. Auto-activating skill for Visual Content. Triggers on: mermaid state diagram creator, mermaid state diagram creator Part of the Visual Content skill category. Use when working with mermaid state diagram creator functionality. Trigger with phrases like "mermaid state diagram creator", "mermaid creator", "mermaid".
    17 repo stars
67. ▌
    Email Template Generator · gabrielmoreira

    Generate email template generator operations. Auto-activating skill for Business Automation. Triggers on: email template generator, email template generator Part of the Business Automation skill category. Use when working with email template generator functionality. Trigger with phrases like "email template generator", "email generator", "email".
    17 repo stars
68. ▌
    Google Sheets Automation · gabrielmoreira

    Manage google sheets automation operations. Auto-activating skill for Business Automation. Triggers on: google sheets automation, google sheets automation Part of the Business Automation skill category. Use when working with google sheets automation functionality. Trigger with phrases like "google sheets automation", "google automation", "google".
    17 repo stars
69. ▌
    Meeting Scheduler Helper · gabrielmoreira

    Configure with meeting scheduler helper operations. Auto-activating skill for Business Automation. Triggers on: meeting scheduler helper, meeting scheduler helper Part of the Business Automation skill category. Use when working with meeting scheduler helper functionality. Trigger with phrases like "meeting scheduler helper", "meeting helper", "meeting".
    17 repo stars
70. ▌
    Risk Assessment Creator · gabrielmoreira

    Create risk assessment creator operations. Auto-activating skill for Enterprise Workflows. Triggers on: risk assessment creator, risk assessment creator Part of the Enterprise Workflows skill category. Use when working with risk assessment creator functionality. Trigger with phrases like "risk assessment creator", "risk creator", "risk".
    17 repo stars
71. ▌
    Forecast Warehouse Workload · gabrielmoreira bundle

    Forecast warehouse workload from orders, receipts, SKU mix, seasonality, backlog, service windows, and source evidence.
    17 repo stars
72. ▌
    Analyze Logistics Scan Events · gabrielmoreira bundle

    Analyze logistics scan events across devices, labels, locations, users, timestamps, process steps, and source systems.
    17 repo stars
73. ▌
    Design Logistics Barcode Flow · gabrielmoreira bundle

    Design logistics barcode and scan-flow concepts for process steps, identifiers, labels, validation points, exceptions, and system handoffs.
    17 repo stars
74. ▌
    Validate Location Master Data · gabrielmoreira bundle

    Validate logistics location master data for location type, zone, status, capacity, dimensions, restrictions, pickability, and source-system alignment.
    17 repo stars
75. ▌
    Select Material Handling Equipment · gabrielmoreira bundle

    Compare material handling equipment classes from handling requirements, facility constraints, labor, safety, and capital intensity.
    17 repo stars
76. ▌
    Calculate Replenishment Demand · gabrielmoreira bundle

    Calculate replenishment demand from order forecast, pick-face inventory, capacity, service window, and pack constraints.
    17 repo stars
77. ▌
    Eu AI Act Report Oliver Schmidt Prietz · gabrielmoreira bundle

    Generates a formal, structured AI Act compliance assessment report suitable for legal files, audit trails, and regulatory inquiries. This skill should be used when the user asks to "generate an AI Act report", "create a compliance assessment report", "document the AI Act analysis", "create a Prüfbericht", "export as Word document", or wants to consolidate prior AI Act skill outputs into a formal documented assessment.
    17 repo stars
78. ▌
    Managing Simulink Projects · gabrielmoreira

    Manages MATLAB projects for Simulink workflows: path management, file registration, labels, source control configuration, and project lifecycle. Use when creating projects, adding models/dictionaries/requirements to projects, configuring labels for automation, fixing broken model references, or setting up source control for Simulink artifacts.
    17 repo stars
79. ▌
    Simulating Simulink Models · gabrielmoreira

    Configures Simulink simulations non-destructively using SimulationInput objects — parameter overrides without modifying the model, batch sweeps via parsim, custom input signals via Dataset, and simulation data retrieval via logsout. Use when running sim()/parsim() with setVariable, setBlockParameter, setExternalInput, or when performing parameter sweeps and multi-run analysis. Not needed for one-shot simulations without configuration.
    17 repo stars
80. ▌
    Analyzing Email Headers For Phishing Investigation · gabrielmoreira bundle

    Parse and analyze email headers (Received chain, Return-Path, Message-ID) to trace the true origin of a phishing email and validate SPF, DKIM, and DMARC results to confirm or rule out sender spoofing. Use when triaging a suspicious or reported email, investigating a phishing incident, or verifying whether a message's sender domain was spoofed.
    17 repo stars
81. ▌
    Collecting Volatile Evidence From Compromised Host · gabrielmoreira bundle

    Collect volatile forensic evidence from a compromised host by following the order of volatility, preserving memory, network connections, running processes, and system state with documented chain of custody before they are lost. Use before isolating, shutting down, or remediating a compromised host, especially when fileless or memory-resident malware is suspected, root cause analysis is needed, or the evidence must hold up in legal proceedings.
    17 repo stars
82. ▌
    Detecting Dns Exfiltration With Dns Query Analysis · gabrielmoreira bundle

    Detect data exfiltration via DNS tunneling (tools like iodine, dnscat2, dns2tcp) by analyzing query entropy, subdomain length, query volume to single domains, TXT/CNAME/NULL record abuse, and oversized response payloads using passive DNS monitoring and statistical/ML methods. Use when hunting for covert DNS-based data exfiltration or building a passive DNS anomaly detection capability.
    17 repo stars
83. ▌
    Implementing Conduit Security For Ot Remote Access · gabrielmoreira bundle

    Implements secure conduit architecture for OT remote access under the IEC 62443 zones-and-conduits model, deploying jump servers, MFA gateways, session recording, and approval-based workflows for vendor and engineer access to ICS. Use when replacing direct VPN access into OT networks, securing third-party vendor access to SCADA equipment, or remediating audit findings on uncontrolled OT remote access.
    17 repo stars
84. ▌
    Implementing Fuzz Testing In Cicd With Aflplusplus · gabrielmoreira bundle

    Integrates AFL++ coverage-guided fuzzing into CI/CD pipelines, covering harness construction, AFL++/AddressSanitizer/CmpLog instrumentation builds, and persistent-mode fuzzing to discover memory-corruption and input-handling vulnerabilities in C/C++ code. Use when adding automated fuzz testing to a build pipeline or hunting for memory-safety bugs in native/compiled applications.
    17 repo stars
85. ▌
    Implementing Kubernetes Network Policy With Calico · gabrielmoreira bundle

    Installs Calico as the cluster CNI and writes standard Kubernetes NetworkPolicy under it, covering default-deny baselines, policy ordering and precedence, service-account-based selectors, and verifying that policy is genuinely being enforced. Use when adopting Calico as the enforcement CNI, establishing a default-deny baseline, or debugging why a NetworkPolicy is not taking effect under Calico. Keywords: Calico CNI, NetworkPolicy, default deny, policy order, Felix, service account selector. Do not use for Calico-only CRDs such as GlobalNetworkPolicy or DNS egress - use implementing-container-network-policies-with-calico; for CNI-agnostic policy use implementing-network-policies-for-kubernetes.
    17 repo stars
86. ▌
    Implementing Network Access Control With Cisco Ise · gabrielmoreira bundle

    Deploys Cisco Identity Services Engine (ISE) as a RADIUS policy server for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, dynamic VLAN assignment, downloadable ACLs, and TrustSec Security Group Tags. Use when deploying enterprise NAC with ISE and Active Directory integration, enforcing endpoint posture compliance, or segmenting access with TrustSec instead of a generic 802.1X/PacketFence setup.
    17 repo stars
87. ▌
    Implementing Opa Gatekeeper For Policy Enforcement · gabrielmoreira bundle

    Deploys OPA Gatekeeper via Helm as a Kubernetes admission controller and writes ConstraintTemplates with Rego plus instantiated Constraints to validate, mutate, or deny resource requests at admission time. Use when enforcing custom policy-as-code at admission on Kubernetes v1.24+, blocking non-compliant workloads before scheduling, or expressing a rule that built-in controls cannot. Keywords: Gatekeeper, ConstraintTemplate, Constraint, Rego, admission webhook, audit, mutation. Do not use for the standard pod security profiles that Pod Security Admission already covers - use implementing-pod-security-admission-controller.
    17 repo stars
88. ▌
    Implementing Policy As Code With Open Policy Agent · gabrielmoreira bundle

    Implements policy-as-code enforcement with Open Policy Agent (OPA) and Gatekeeper for Kubernetes and CI/CD pipelines, covering writing Rego policies, deploying OPA Gatekeeper as a Kubernetes admission controller, testing policies in development, and integrating policy evaluation into deployment pipelines. Use when writing Rego policies, deploying Gatekeeper admission control, or gating CI/CD pipelines with policy-as-code checks.
    17 repo stars
89. ▌
    Implementing Zero Standing Privilege With Cyberark · gabrielmoreira bundle

    Deploy CyberArk Secure Cloud Access (SCA) to eliminate standing privileges in AWS, Azure, and GCP by provisioning ephemeral, scoped roles on a just-in-time basis governed by the TEA framework (Time, Entitlements, Approvals). Use when designing or implementing zero standing privilege / just-in-time privileged access models with CyberArk, or when replacing persistent cloud admin roles with time-bound, approval-gated sessions.
    17 repo stars
90. ▌
    Performing Log Analysis For Forensic Investigation · gabrielmoreira bundle

    Collect, parse, and correlate system, application, and security logs to reconstruct events and establish timelines during forensic investigations.
    17 repo stars
91. ▌
    Performing Malware Hash Enrichment With Virustotal · gabrielmoreira bundle

    Enrich malware file hashes (MD5, SHA-1, SHA-256) using the VirusTotal API v3 to retrieve multi-engine detection rates, sandbox behavioral analysis, YARA rule matches, related indicators, and community threat intelligence. Use during SOC triage, incident response, or threat intelligence workflows to validate whether a file hash is malicious and gather context for IOC enrichment.
    17 repo stars
92. ▌
    Performing Mobile Device Forensics With Cellebrite · gabrielmoreira bundle

    Acquire and analyze mobile device data using Cellebrite UFED Touch/4PC, UFED Physical Analyzer, and open-source alternatives (ALEAPP, iLEAPP, MEAT, libimobiledevice) to extract communications, call logs, location data, and application artifacts. Use when extracting or recovering deleted evidence from smartphones or tablets during criminal, corporate, or employee-misuse investigations.
    17 repo stars
93. ▌
    Android Gradle Logic · gabrielmoreira

    Expert guidance on setting up scalable Gradle build logic using Convention Plugins and Version Catalogs.
    17 repo stars
94. ▌
    Android Testing · gabrielmoreira

    Comprehensive testing strategy involving Unit, Integration, Hilt, and Screenshot tests.
    17 repo stars
95. ▌
    Range Reading And Large File Analysis · gabrielmoreira

    读取多 Sheet Excel 文件，根据数据量动态选择处理策略，支持特定区域数据提取、大文件 Parquet 转换、统计分析及可视化图表生成。
    17 repo stars
96. ▌
    Turning Engineering Analytics Into Insights · gabrielmoreira

    Converts engineering analytics (PR / CI) data into saved PostHog insights, dashboards, and subscriptions, and explains how to query the product data directly with SQL. Covers discovering per-team GitHub warehouse tables via engineering-analytics-sources, replicating curated column semantics in HogQL, reading exposed engineering_analytics_* warehouse views where product logic is involved (CI cost, fingerprinted failure lines, commit attribution), saving queries with insight-create, and scheduling delivery with subscriptions-create. Use when asked to "save this as an insight", "put CI health / merge times on a dashboard", "email me PR throughput weekly", "chart CI cost", "track time to first review", "subscribe to these numbers", "alert on CI success rate", or "what data/tables/views does engineering analytics read". For ad-hoc CI and merge questions use diagnosing-ci-and-merge-bottlenecks; to investigate one specific CI failure use investigating-ci-failures.
    17 repo stars
97. ▌
    Sglang Diffusion Benchmark Profile · gabrielmoreira bundle

    Use when benchmarking denoise latency or profiling a diffusion bottleneck in SGLang.
    17 repo stars
98. ▌
    Smart Data Analysis · gabrielmoreira

    数据分析员工（Data Analyst Agent）的唯一总入口：凡与数据资产、取数、指标、表/视图、 治理职责、知识网络、统计或分析相关的问题，必须先经本 skill 做编排与路由，再进入找表或问数等子流程。 负责 kn 分域、上下文注入（accountId / date）、多候选 KN 时的 LLM 决策、 问数分支的 SQL 生成；与 smart-search-tables / smart-ask-data / ontology-core 的交接。 当用户提出任何数据类自然语言任务、或需在多条业务 KN 间切换时使用； 所有 ontology CLI 执行均委托 ontology-core 完成，本 skill 不直接执行 CLI。
    17 repo stars
99. ▌
    Smart Search Tables · gabrielmoreira

    找表/找数端到端编排：在元数据型知识网络下用 ontology bkn object-type query 检索表/视图实例， 再在职责型知识网络下检索相关部门职责与治理边界，最后汇总为中文结论 （候选表 + 职责要点 + 下一步）。当用户问「表在哪、哪个视图、数据资产归属、谁负责这类数据」时使用。 所有 ontology CLI 执行均委托 ontology-core 完成；本 skill 不直接执行 CLI。
    17 repo stars
100. ▌
     AI Coding Agents Observability Evals · gabrielmoreira

     Designs coding-agent observability and evals. Use when measuring traces, replay, checkpoint lineage, quality trajectories, tool grading, regression, or cost.
     17 repo stars