gabrielmoreira
- 21k skills
- 0 followers
- 17 repo stars
- 2 weeks ago last updated
- ▌ Windsurf Dockerfile Generation · gabrielmoreira bundleCreate optimized Dockerfiles with AI-driven best practices. Activate when users mention "create dockerfile", "container image", "docker optimization", "containerize application", or "docker best practices". Handles Docker configuration generation. Use when working with windsurf dockerfile generation functionality. Trigger with phrases like "windsurf dockerfile generation", "windsurf generation", "windsurf".
- ▌ Windsurf Performance Profiling · gabrielmoreira bundleProfile and optimize code with AI-assisted analysis. Activate when users mention "performance profiling", "optimize performance", "bottleneck analysis", "profiling", or "performance tuning". Handles performance analysis and optimization. Use when working with windsurf performance profiling functionality. Trigger with phrases like "windsurf performance profiling", "windsurf profiling", "windsurf".
- ▌ Docker Compose Creator · gabrielmoreiraCreate docker compose creator operations. Auto-activating skill for DevOps Basics. Triggers on: docker compose creator, docker compose creator Part of the DevOps Basics skill category. Use when working with docker compose creator functionality. Trigger with phrases like "docker compose creator", "docker creator", "docker".
- ▌ Github Actions Starter · gabrielmoreiraManage github actions starter operations. Auto-activating skill for DevOps Basics. Triggers on: github actions starter, github actions starter Part of the DevOps Basics skill category. Use when working with github actions starter functionality. Trigger with phrases like "github actions starter", "github starter", "github".
- ▌ Jenkins Pipeline Intro · gabrielmoreiraManage jenkins pipeline intro operations. Auto-activating skill for DevOps Basics. Triggers on: jenkins pipeline intro, jenkins pipeline intro Part of the DevOps Basics skill category. Use when working with jenkins pipeline intro functionality. Trigger with phrases like "jenkins pipeline intro", "jenkins intro", "jenkins".
- ▌ Ansible Role Creator · gabrielmoreiraCreate ansible role creator operations. Auto-activating skill for DevOps Advanced. Triggers on: ansible role creator, ansible role creator Part of the DevOps Advanced skill category. Use when working with ansible role creator functionality. Trigger with phrases like "ansible role creator", "ansible creator", "ansible".
- ▌ Helm Chart Generator · gabrielmoreiraGenerate helm chart generator operations. Auto-activating skill for DevOps Advanced. Triggers on: helm chart generator, helm chart generator Part of the DevOps Advanced skill category. Use when working with helm chart generator functionality. Trigger with phrases like "helm chart generator", "helm generator", "helm".
- ▌ Hipaa Audit Helper · gabrielmoreiraAssist with hipaa audit helper operations. Auto-activating skill for Security Advanced. Triggers on: hipaa audit helper, hipaa audit helper Part of the Security Advanced skill category. Use when analyzing or auditing hipaa audit helper. Trigger with phrases like "hipaa audit helper", "hipaa helper", "hipaa".
- ▌ Vue Component Generator · gabrielmoreiraGenerate vue component generator operations. Auto-activating skill for Frontend Development. Triggers on: vue component generator, vue component generator Part of the Frontend Development skill category. Use when working with vue component generator functionality. Trigger with phrases like "vue component generator", "vue generator", "vue".
- ▌ Database Schema Designer · gabrielmoreiraBuild database schema designer operations. Auto-activating skill for Backend Development. Triggers on: database schema designer, database schema designer Part of the Backend Development skill category. Use when working with database schema designer functionality. Trigger with phrases like "database schema designer", "database designer", "database".
- ▌ Error Handler Middleware · gabrielmoreiraManage error handler middleware operations. Auto-activating skill for Backend Development. Triggers on: error handler middleware, error handler middleware Part of the Backend Development skill category. Use when working with error handler middleware functionality. Trigger with phrases like "error handler middleware", "error middleware", "error".
- ▌ GRAPHQL Resolver Creator · gabrielmoreiraCreate graphql resolver creator operations. Auto-activating skill for Backend Development. Triggers on: graphql resolver creator, graphql resolver creator Part of the Backend Development skill category. Use when working with graphql resolver creator functionality. Trigger with phrases like "graphql resolver creator", "graphql creator", "graphql".
- ▌ Typeorm Entity Generator · gabrielmoreiraGenerate typeorm entity generator operations. Auto-activating skill for Backend Development. Triggers on: typeorm entity generator, typeorm entity generator Part of the Backend Development skill category. Use when working with typeorm entity generator functionality. Trigger with phrases like "typeorm entity generator", "typeorm generator", "typeorm".
- ▌ Gradient Clipping Helper · gabrielmoreiraConfigure with gradient clipping helper operations. Auto-activating skill for ML Training. Triggers on: gradient clipping helper, gradient clipping helper Part of the ML Training skill category. Use when working with gradient clipping helper functionality. Trigger with phrases like "gradient clipping helper", "gradient helper", "gradient".
- ▌ Model Checkpoint Manager · gabrielmoreiraManage model checkpoint manager operations. Auto-activating skill for ML Training. Triggers on: model checkpoint manager, model checkpoint manager Part of the ML Training skill category. Use when working with model checkpoint manager functionality. Trigger with phrases like "model checkpoint manager", "model manager", "model".
- ▌ Model Evaluation Metrics · gabrielmoreiraBuild model evaluation metrics operations. Auto-activating skill for ML Training. Triggers on: model evaluation metrics, model evaluation metrics Part of the ML Training skill category. Use when working with model evaluation metrics functionality. Trigger with phrases like "model evaluation metrics", "model metrics", "model".
- ▌ Sklearn Pipeline Builder · gabrielmoreiraBuild sklearn pipeline builder operations. Auto-activating skill for ML Training. Triggers on: sklearn pipeline builder, sklearn pipeline builder Part of the ML Training skill category. Use when working with sklearn pipeline builder functionality. Trigger with phrases like "sklearn pipeline builder", "sklearn builder", "sklearn".
- ▌ Tensorflow Model Trainer · gabrielmoreiraBuild tensorflow model trainer operations. Auto-activating skill for ML Training. Triggers on: tensorflow model trainer, tensorflow model trainer Part of the ML Training skill category. Use when working with tensorflow model trainer functionality. Trigger with phrases like "tensorflow model trainer", "tensorflow trainer", "tensorflow".
- ▌ Gpu Resource Optimizer · gabrielmoreiraOptimize gpu resource optimizer operations. Auto-activating skill for ML Deployment. Triggers on: gpu resource optimizer, gpu resource optimizer Part of the ML Deployment skill category. Use when working with gpu resource optimizer functionality. Trigger with phrases like "gpu resource optimizer", "gpu optimizer", "gpu".
- ▌ Model Registry Manager · gabrielmoreiraManage model registry manager operations. Auto-activating skill for ML Deployment. Triggers on: model registry manager, model registry manager Part of the ML Deployment skill category. Use when working with model registry manager functionality. Trigger with phrases like "model registry manager", "model manager", "model".
- ▌ Database Test Helper · gabrielmoreiraAssist with database test helper operations. Auto-activating skill for Test Automation. Triggers on: database test helper, database test helper Part of the Test Automation skill category. Use when writing or running tests. Trigger with phrases like "database test helper", "database helper", "database".
- ▌ Mutation Test Runner · gabrielmoreiraRun mutation test runner operations. Auto-activating skill for Test Automation. Triggers on: mutation test runner, mutation test runner Part of the Test Automation skill category. Use when writing or running tests. Trigger with phrases like "mutation test runner", "mutation runner", "mutation".
- ▌ Snapshot Test Helper · gabrielmoreiraAssist with snapshot test helper operations. Auto-activating skill for Test Automation. Triggers on: snapshot test helper, snapshot test helper Part of the Test Automation skill category. Use when writing or running tests. Trigger with phrases like "snapshot test helper", "snapshot helper", "snapshot".
- ▌ Test Naming Enforcer · gabrielmoreiraTest Naming Enforcer - Auto-activating skill for Test Automation. Triggers on: test naming enforcer, test naming enforcer Part of the Test Automation skill category. Use when writing or running tests. Trigger with phrases like "test naming enforcer", "test enforcer", "test".
- ▌ Spike Test Setup · gabrielmoreiraConfigure spike test setup operations. Auto-activating skill for Performance Testing. Triggers on: spike test setup, spike test setup Part of the Performance Testing skill category. Use when writing or running tests. Trigger with phrases like "spike test setup", "spike setup", "spike".
- ▌ Airflow Dag Generator · gabrielmoreiraGenerate airflow dag generator operations. Auto-activating skill for Data Pipelines. Triggers on: airflow dag generator, airflow dag generator Part of the Data Pipelines skill category. Use when working with airflow dag generator functionality. Trigger with phrases like "airflow dag generator", "airflow generator", "airflow".
- ▌ Beam Pipeline Builder · gabrielmoreiraBuild beam pipeline builder operations. Auto-activating skill for Data Pipelines. Triggers on: beam pipeline builder, beam pipeline builder Part of the Data Pipelines skill category. Use when working with beam pipeline builder functionality. Trigger with phrases like "beam pipeline builder", "beam builder", "beam".
- ▌ Compression Optimizer · gabrielmoreiraOptimize compression optimizer operations. Auto-activating skill for Data Pipelines. Triggers on: compression optimizer, compression optimizer Part of the Data Pipelines skill category. Use when working with compression optimizer functionality. Trigger with phrases like "compression optimizer", "compression optimizer", "compression".
- ▌ File Format Converter · gabrielmoreiraConvert file format converter operations. Auto-activating skill for Data Pipelines. Triggers on: file format converter, file format converter Part of the Data Pipelines skill category. Use when working with file format converter functionality. Trigger with phrases like "file format converter", "file converter", "file".
- ▌ Churn Analysis Helper · gabrielmoreiraConfigure with churn analysis helper operations. Auto-activating skill for Data Analytics. Triggers on: churn analysis helper, churn analysis helper Part of the Data Analytics skill category. Use when working with churn analysis helper functionality. Trigger with phrases like "churn analysis helper", "churn helper", "churn".
- ▌ Kpi Definition Helper · gabrielmoreiraConfigure with kpi definition helper operations. Auto-activating skill for Data Analytics. Triggers on: kpi definition helper, kpi definition helper Part of the Data Analytics skill category. Use when working with kpi definition helper functionality. Trigger with phrases like "kpi definition helper", "kpi helper", "kpi".
- ▌ Lambda Function Generator · gabrielmoreiraGenerate lambda function generator operations. Auto-activating skill for AWS Skills. Triggers on: lambda function generator, lambda function generator Part of the AWS Skills skill category. Use when working with lambda function generator functionality. Trigger with phrases like "lambda function generator", "lambda generator", "lambda".
- ▌ Bigquery Ml Model Creator · gabrielmoreiraCreate bigquery ml model creator operations. Auto-activating skill for GCP Skills. Triggers on: bigquery ml model creator, bigquery ml model creator Part of the GCP Skills skill category. Use when working with bigquery ml model creator functionality. Trigger with phrases like "bigquery ml model creator", "bigquery creator", "bigquery".
- ▌ Vertex AI Endpoint Config · gabrielmoreiraConfigure vertex ai endpoint config operations. Auto-activating skill for GCP Skills. Triggers on: vertex ai endpoint config, vertex ai endpoint config Part of the GCP Skills skill category. Use when configuring systems or services. Trigger with phrases like "vertex ai endpoint config", "vertex config", "vertex".
- ▌ API Caching Strategy · gabrielmoreiraConfigure api caching strategy operations. Auto-activating skill for API Development. Triggers on: api caching strategy, api caching strategy Part of the API Development skill category. Use when working with APIs or building integrations. Trigger with phrases like "api caching strategy", "api strategy", "api".
- ▌ API Throttling Setup · gabrielmoreiraConfigure api throttling setup operations. Auto-activating skill for API Development. Triggers on: api throttling setup, api throttling setup Part of the API Development skill category. Use when working with APIs or building integrations. Trigger with phrases like "api throttling setup", "api setup", "api".
- ▌ API Client Generator · gabrielmoreiraGenerate api client generator operations. Auto-activating skill for API Integration. Triggers on: api client generator, api client generator Part of the API Integration skill category. Use when working with APIs or building integrations. Trigger with phrases like "api client generator", "api generator", "api".
- ▌ Error Mapping Helper · gabrielmoreiraConfigure with error mapping helper operations. Auto-activating skill for API Integration. Triggers on: error mapping helper, error mapping helper Part of the API Integration skill category. Use when working with error mapping helper functionality. Trigger with phrases like "error mapping helper", "error helper", "error".
- ▌ Long Polling Handler · gabrielmoreiraManage long polling handler operations. Auto-activating skill for API Integration. Triggers on: long polling handler, long polling handler Part of the API Integration skill category. Use when working with long polling handler functionality. Trigger with phrases like "long polling handler", "long handler", "long".
- ▌ Response Transformer · gabrielmoreiraTransform response transformer operations. Auto-activating skill for API Integration. Triggers on: response transformer, response transformer Part of the API Integration skill category. Use when working with response transformer functionality. Trigger with phrases like "response transformer", "response transformer", "response".
- ▌ API Reference Creator · gabrielmoreiraCreate api reference creator operations. Auto-activating skill for Technical Documentation. Triggers on: api reference creator, api reference creator Part of the Technical Documentation skill category. Use when working with APIs or building integrations. Trigger with phrases like "api reference creator", "api creator", "api".
- ▌ Design Cycle Count Program · gabrielmoreira bundleDesign cycle count programs from inventory classes, risk, count capacity, accuracy history, and review cadence.
- ▌ Analyze Order Profile · gabrielmoreira bundleAnalyze order volume, lines, units, channels, cutoffs, mix, and variability for warehouse planning.
- ▌ Analyze Product Affinity · gabrielmoreira bundleAnalyze product affinity from co-order, co-pick, SKU group, slot location, and movement evidence.
- ▌ Optimize Storage Density · gabrielmoreira bundleOptimize storage density by comparing capacity, utilization, selectivity, handling limits, SKU mix, growth, and risk.
- ▌ Slot Warehouse Inventory · gabrielmoreira bundleSlot warehouse inventory using SKU velocity, cube, weight, affinity, handling, replenishment, and location constraints.
- ▌ Compare Freight Rates · gabrielmoreira bundleCompare freight rates from quotes, lanes, service levels, weights, dimensions, accessorials, and rate-basis evidence.
- ▌ Plan Freight Shipment · gabrielmoreira bundlePlan freight shipments from origin, destination, goods, service timing, mode, documents, and operational constraints.
- ▌ Plan Dock Capacity · gabrielmoreira bundlePlan dock capacity from inbound and outbound volume, dwell time, doors, schedules, labor, staging, and constraints.
- ▌ Dotnet Testing Autodata Xunit Integration · gabrielmoreira bundleAutoFixture 與 xUnit 整合完整指南。當需要使用 AutoData 或 InlineAutoData 簡化 xUnit 參數化測試資料準備時使用。涵蓋自訂 Customization 與測試資料屬性,提升測試可讀性與維護性。 Make sure to use this skill whenever the user mentions AutoData, InlineAutoData, MemberAutoData, AutoFixture xUnit integration, or parameterized test data attributes, even if they don't explicitly ask for AutoData guidance. Keywords: AutoData, InlineAutoData, AutoFixture xUnit, [AutoData], [InlineAutoData], AutoDataAttribute, ICustomization, DataAttribute, 參數化測試, Theory AutoData, MemberAutoData, 測試資料屬性, fixture.Customize
- ▌ Cps Rca Central African Republic Jeanne Sulzer · gabrielmoreira bundleMéthodologie « verification-first » pour la Cour Pénale Spéciale de Centrafrique (cour hybride, siège à Bangui). Toute citation est vérifiée (JusticeInfo, FIDH, HRW, legal-tools.org ; les sites officiels renvoient souvent une erreur 403). Couvre l'affaire Paoua, le « notamment » de l'article 3, et la complémentarité avec la CPI. Aide à la recherche, pas un conseil juridique. Fait partie de la bibliothèque open source « Skills for International Justice » — méthodologie : github.com/jeannesulzer/international-criminal-tribunals-skills
- ▌ Contract Intelligence Workflow Reviewer Carl Ditzler · gabrielmoreira bundleContract intelligence and contract operations workflow skill for Claude and Codex. Guides the full contract lifecycle review process from intake and playbook normalization through clause review, deviation scoring, negotiation planning, approval routing, QA, and action recommendations. Reviews legal, business, operational, compliance, privacy, security, technology, and AI-related risks across contracts and legal documents. Supports NDAs, SaaS agreements, DPAs, procurement contracts, commercial agreements, contract comparisons, redlines, approval packages, clause research, and drafting. Warning-Comprehensive reviews can consume significant Claude/OpenAI tokens, especially for large agreements, playbooks, exhibits, schedules, and multi-document reviews.
- ▌ Eu AI Act High Risk Classifier Oliver Schmidt Prietz · gabrielmoreira bundleDepth assessment of whether an AI system is high-risk under Art. 6 of the EU AI Act, grounded in the Commission's draft Art. 6(5) classification guidelines (general principles + Annex I + Annex III). Covers the Annex I product-safety route, all eight Annex III areas with worked examples, the Art. 6(3) exception and its profiling re-exception, and the Art. 25 quasi-provider trap. Outputs a structured decision block, a practitioner memo, and a JSON interchange artefact.
- ▌ Gibraltar Law Osint Philip Vasquez · gabrielmoreira bundleA jurisdiction-grounding reference file for AI assistants working on Gibraltar legal, regulatory, and compliance research. Corrects systematic errors AI models make when applying English law to Gibraltar — a distinct jurisdiction under the Gibraltar Constitution Order 2006, with its own court hierarchy, civil procedure rules, employment law, and regulatory framework. Covers the source hierarchy, court structure, civil procedure divergences (14-day deemed service, post-Jackson reforms not adopted), employment law specifics (uncapped discrimination awards, 5-employee redundancy threshold), FSC financial services regulation, AML/KYC compliance sources, Gibraltar Companies Act 2014 with UBO public register, and a structured directory of official public record sources. Includes research profiles for lawyers, compliance professionals, and due diligence practitioners. Not legal advice.
- ▌ New Designation Screening Test · gabrielmoreira bundleGenerate a spreadsheet of test entries — newly designated names from OFAC, OFSI, and EU sanctions lists plus deliberate variations of those names — to validate that a sanctions screening system catches fresh designations and is tuned to the right fuzziness threshold. Use this whenever the user asks for sanctions list update test data, screening regression test data, screening QA, fuzzy match calibration, or wants to verify their screening lists are current. Trigger even if the user doesn't say 'screening' explicitly — phrases like 'test my sanctions list', 'check our SDN coverage', 'is my list up to date', or 'build me a regression set from the latest designations' should also invoke this skill.
- ▌ Transfer Impact Assessment Tia Oliver Schmidt Prietz · gabrielmoreira bundleGDPR Transfer Impact Assessment for Chapter V transfers under the EDPB Recommendations 01/2020 six-step methodology, the CNIL TIA Guide (January 2025), and EDPB essential guarantees. Handles transfer qualification, Art. 45 adequacy fast-tracks, Art. 46 full assessments with country profiles for 12 jurisdictions, and balanced Art. 49 derogation analysis. Outputs a Markdown report, a .docx formal TIA, and a JSON delta for RoPA interchange.
- ▌ Matlab Plan Course Adoption · gabrielmoreiraUse when an instructor asks for a setup guide, adoption guide, planning guide, implementation checklist, prerequisite check, MATLAB Course Designer course structure plan, Common Cartridge workflow, Simulink starter and solution model planning, LMS import plan, or starter prompt for creating a MATLAB and Simulink enabled course with the matlab-generate-course skill.
- ▌ Embedded AI Deployment · gabrielmoreiraDeploy AI models to embedded hardware using MathWorks tools (MATLAB, Simulink, Embedded Coder). Covers two workflow patterns: (1) MathWorks-native or 3P-imported models rebuilt as dlnetwork for lean hardware (Cortex-M, DSP), (2) direct C/C++ code generation from PyTorch and LiteRT models for high-performance hardware (Cortex-A, x86, GPU). Trigger when: user wants to deploy AI to embedded targets; generate C/CUDA from neural networks; compress AI models for MCU/DSP; integrate AI in Simulink for system-level simulation; import PyTorch/ONNX/TensorFlow models for embedded deployment; optimize AI for resource-constrained hardware; or use loadPyTorchExportedProgram, importNetworkFromPyTorch, dlquantizer, exportNetworkToSimulink, or Embedded Coder with AI models.
- ▌ Agent Skill Author · gabrielmoreiraUse this skill when the user wants to author, design, scope, or refine an Agent Skill (a SKILL.md file). Trigger phrases include "build a new skill", "design an agent skill", "scope a SKILL.md", "how should I structure this skill", "write a skill for X", "my skill isn't working well", or any request to improve an existing SKILL.md. Walks the user through an empirical, test-first process — probe the agent for real failures, design only for genuine knowledge gaps, iterate against runnable examples, and verify across models.
- ▌ Filing Bug Reports · gabrielmoreiraGenerate a standalone bug report that another developer can use to reproduce, investigate, and fix an issue. Use when the user says 'file a bug', 'write a bug report', 'report this issue', or asks to document a defect for handoff.
- ▌ Azure AI Contentunderstanding Py · gabrielmoreiraAzure AI Content Understanding SDK for Python. Use for multimodal content extraction from documents, images, audio, and video. Triggers: "azure-ai-contentunderstanding", "ContentUnderstandingClient", "multimodal analysis", "document extraction", "video analysis", "audio transcription".
- ▌ Azure AI Translation Document Py · gabrielmoreiraAzure AI Document Translation SDK for batch translation of documents with format preservation. Use for translating Word, PDF, Excel, PowerPoint, and other document formats at scale. Triggers: "document translation", "batch translation", "translate documents", "DocumentTranslationClient".
- ▌ Azure AI Vision Imageanalysis Py · gabrielmoreiraAzure AI Vision Image Analysis SDK for captions, tags, objects, OCR, people detection, and smart cropping. Use for computer vision and image understanding tasks. Triggers: "image analysis", "computer vision", "OCR", "object detection", "ImageAnalysisClient", "image caption".
- ▌ 24 AI Avatar Production Global · gabrielmoreiraUse when a PERSONAL brand needs AI avatar video at scale — three tool tiers, four workflows for single avatar, translation, batch, and hybrid, reference image intake, face, style, logo, and palette replacement, voice clone pairing, anti-detection, and a QA score, with disclosure-law variants for US FTC, EU AI Act, SEA, and LATAM, covering HeyGen and Synthesia. Trigger on 'AI avatar', 'HeyGen video', 'Synthesia', 'talking head AI video', 'translate my videos with AI', 'I cannot be on camera every day'. Not for — the words the avatar says, see `04-script-video-global`; audio-only voice clone and podcast, see `25-voice-clone-podcast-global`; a company product video edit, see `44-video-editor-brief-global`.
- ▌ Analyzing Browser Forensics With Hindsight · gabrielmoreira bundleParse Chromium-based browser databases with Hindsight to extract and correlate browsing history, downloads, cookies, cached content, autofill data, saved passwords, and extensions from Chrome, Edge, Brave, Opera, and Vivaldi into a unified timeline (XLSX, JSON, or SQLite output). Use during incident response, insider-threat investigations, or criminal cases when you need to reconstruct a user's web activity from a browser profile.
- ▌ Analyzing Lnk File And Jump List Artifacts · gabrielmoreira bundleAnalyze Windows LNK shortcut files and Jump List artifacts with LECmd, JLECmd, and manual Shell Link Binary Format parsing to establish evidence of file access, program execution, and user activity that persists even after the target file is deleted. Use when investigating Windows user activity, reconstructing file-access or program-execution timelines, or examining recent/frequently-used file evidence in a forensic exam.
- ▌ Analyzing Packed Malware With Upx Unpacker · gabrielmoreira bundleIdentifies and unpacks UPX-packed malware samples, including binaries with modified UPX magic bytes or headers that block automated decompression, to recover the original executable for static analysis. Use when a sample shows high entropy, minimal imports, or only LoadLibrary/GetProcAddress in its import table, or when preparing a packed binary for disassembly in Ghidra or IDA.
- ▌ Building Devsecops Pipeline With Gitlab CI · gabrielmoreira bundleConfigure a GitLab CI/CD pipeline that embeds SAST (Semgrep, SpotBugs, Gosec, Bandit, NodeJsScan), DAST, container scanning, dependency scanning, and secret detection via GitLab's managed security templates. Use when building a shift-left DevSecOps pipeline in GitLab, adding automated vulnerability scanning stages to .gitlab-ci.yml, or triaging scanner findings with GitLab Duo AI before deployment.
- ▌ Building Incident Timeline With Timesketch · gabrielmoreira bundleBuild collaborative forensic incident timelines using Timesketch to ingest, normalize, and analyze multi-source event data (including Plaso output) for attack chain reconstruction and investigation documentation. Use when reconstructing the sequence of events during an incident investigation or when multiple analysts need to jointly tag, annotate, and search a shared DFIR timeline.
- ▌ Building Role Mining For Rbac Optimization · gabrielmoreira bundleApply bottom-up and top-down role mining techniques, including clustering algorithms and formal concept analysis, to discover optimal RBAC roles from existing user-permission assignments, consolidating overlapping roles and enforcing least privilege. Use when an identity program needs to reduce role explosion or redesign its RBAC role set from access data.
- ▌ Building Threat Feed Aggregation With Misp · gabrielmoreira bundleDeploy MISP via Docker and configure feeds from sources like abuse.ch, AlienVault OTX, and CIRCL to aggregate, correlate, and distribute threat intelligence, including automated feed synchronization and STIX/TAXII-based integration with Splunk, Elasticsearch, and SOAR platforms. Use when standing up centralized IOC management or wiring multi-source threat feeds into a SIEM.
- ▌ Deploying Cloudflare Access For Zero Trust · gabrielmoreira bundleDeploys Cloudflare Access with Cloudflare Tunnel for zero trust access to self-hosted apps, configuring identity-aware policies, device posture checks, and WARP client enrollment as a VPN replacement. Use when replacing VPN with Cloudflare One, exposing internal apps without open inbound ports, or securing contractor/third-party access to specific applications.
- ▌ Detecting Arp Poisoning In Network Traffic · gabrielmoreira bundleDetect Layer 2 ARP poisoning/spoofing by deploying ARPWatch, Dynamic ARP Inspection (DAI), Wireshark packet analysis, and custom Python monitoring scripts that flag gratuitous ARP floods, IP-to-MAC mapping changes, and duplicate IP addresses. Use when investigating suspected man-in-the-middle interception or session hijacking on a local network segment, or when building layer-2 anomaly detection for a SOC.
- ▌ Detecting Modbus Command Injection Attacks · gabrielmoreira bundleDetect command injection against Modbus TCP/RTU in ICS/SCADA environments by monitoring unauthorized writes, anomalous function codes, malformed frames, and deviations from communication baselines using ICS-aware IDS and deep packet inspection. Use when deploying IDS for Modbus OT networks, investigating unauthorized PLC register/coil changes, or responding to FrostyGoop-style Modbus attacks.
- ▌ Detecting Spearphishing With Email Gateway · gabrielmoreira bundleDetect and block spearphishing emails that use personalized, researched content to evade generic spam filters, by configuring email security gateway (SEG) impersonation protection, URL rewriting, attachment sandboxing, and custom detection rules in Microsoft Defender for Office 365, Proofpoint, Mimecast, or Barracuda. Use when hardening a mail gateway against targeted phishing or investigating a suspected spearphishing campaign.
- ▌ Exploiting Nosql Injection Vulnerabilities · gabrielmoreira bundleDetects and exploits NoSQL injection vulnerabilities in MongoDB, CouchDB, and similar databases to demonstrate authentication bypass, data extraction, and unauthorized access via crafted query operators. Use when pentesting APIs or web applications backed by NoSQL databases to test input validation and injection defenses.
- ▌ Hardening Docker Containers For Production · gabrielmoreira bundleHardens Dockerfiles, images, and per-container runtime settings against the CIS Docker Benchmark v1.8.0: non-root users, dropped capabilities, read-only root filesystem, seccomp and AppArmor profiles, and minimal multi-stage builds, validated with docker-bench-security, Hadolint, and Dockle. Use when preparing a container or Dockerfile for production, or auditing images and runtime flags against CIS Docker controls. Keywords: Dockerfile, USER, --cap-drop, read-only rootfs, seccomp, AppArmor, multi-stage, Hadolint, Dockle. Do not use for the Docker daemon's own configuration - use hardening-docker-daemon-configuration.
- ▌ Implementing API Gateway Security Controls · gabrielmoreira bundleConfigures API gateways such as Kong, AWS API Gateway, Azure APIM, or Apigee as a centralized security enforcement point, covering authentication enforcement, rate limiting and throttling, request validation, IP allowlisting, TLS termination, and threat protection. Use when securing API traffic at the gateway layer, setting up gateway-level authentication and quota management, or centralizing API protection before requests reach backend services.
- ▌ Implementing AWS Iam Permission Boundaries · gabrielmoreira bundleConfigures AWS IAM permission boundaries that cap the maximum permissions an identity-based policy can grant to a user or role, so effective permissions are the intersection of the identity policy and the boundary even if the policy grants AdministratorAccess. Use when letting security teams delegate IAM role and policy creation to developers for self-service while enforcing least-privilege ceilings and preventing privilege escalation.
- ▌ Implementing Cloud Dlp For Data Protection · gabrielmoreira bundleImplement cloud DLP using Amazon Macie, Google Cloud DLP API, Microsoft Purview, Azure Information Protection, and Nightfall AI to discover, classify, label, de-identify, and protect sensitive data (PII, PHI, financial data) across cloud storage, databases, and pipelines. Use for GDPR/HIPAA/PCI DSS data-discovery, cloud data governance, or CI/CD DLP scanning; not for endpoint, email, or network-level DLP.
- ▌ Implementing Delinea Secret Server For Pam · gabrielmoreira bundleImplements Delinea Secret Server for privileged access management, covering secret vault configuration, role-based access policies, automated password rotation, session recording, and Active Directory/cloud integration. Use when centralizing privileged credential management, replacing spreadsheet-based secrets, automating password rotation, or meeting PAM compliance (SOX, PCI-DSS, HIPAA, NIST 800-53).
- ▌ Implementing Dmarc Dkim Spf Email Security · gabrielmoreira bundleConfigures SPF, DKIM, and DMARC DNS TXT records to authenticate outbound email, prevent domain spoofing, and enforce a rejection/quarantine policy on unauthenticated mail, including auditing a domain's current DNS state. Use when hardening a domain's email security posture or defending against phishing and spoofing attacks.
- ▌ Implementing Endpoint Detection With Wazuh · gabrielmoreira bundleDeploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing with wazuh-logtest, and automated active-response actions. Use when setting up endpoint detection and response, writing or testing custom Wazuh rules, or querying and triaging Wazuh alerts.
- ▌ Implementing Gdpr Data Protection Controls · gabrielmoreira bundleImplements GDPR (EU 2016/679) technical and organizational measures — privacy by design/default, DPIAs, data subject rights management, 72-hour breach notification, and cross-border transfer mechanisms (SCCs, BCRs, adequacy). Use when designing or auditing GDPR controls, building a DPIA, handling data subject access/erasure requests, or assessing cross-border data transfers.
- ▌ Implementing Log Integrity With Blockchain · gabrielmoreira bundleBuilds an append-only log integrity chain using SHA-256 hash chaining, where each entry incorporates the previous entry's hash so tampering invalidates all subsequent hashes; covers log ingestion (syslog/JSON/plain text), chain verification, pinpoint tamper detection, and checkpoint anchoring to external timestamping services. Use for tamper-evident log storage for compliance or forensics, or to verify whether log entries were altered.
- ▌ Implementing Ot Incident Response Playbook · gabrielmoreira bundleDevelops OT-specific incident response playbooks using a SANS PICERL-based Python engine that classifies incident severity (safety, process, access, recon) and coordinates IT SOC, OT engineering, and plant operations, aligned with IEC 62443 and NIST SP 800-82. Use when building ICS/SCADA incident response procedures for the first time, preparing for OT ransomware scenarios, or aligning IR with IEC 62443/NERC CIP reporting requirements.
- ▌ Implementing Privileged Access Workstation · gabrielmoreira bundleDesign and implement Privileged Access Workstations (PAWs) using the tiered administration model, with device hardening, device compliance enforcement via Microsoft Intune or Group Policy, just-in-time (JIT) access provisioning, and integration with PAM platforms like CyberArk or BeyondTrust. Use when hardening admin endpoints, designing a tiered administration model, or securing privileged administrative operations.
- ▌ Implementing Privileged Session Monitoring · gabrielmoreira bundleImplements privileged session monitoring and recording using PAM solutions, focusing on CyberArk Privileged Session Manager (PSM) and open-source alternatives, covering session recording configuration, keystroke logging, real-time monitoring, risk-based session analysis, and compliance audit trail generation. Use when configuring CyberArk PSM, recording administrator sessions, or building compliance audit trails for privileged access.
- ▌ Implementing Rapid7 Insightvm For Scanning · gabrielmoreira bundleDeploy and configure Rapid7 InsightVM Security Console and Scan Engines, including scan templates, credentialed scanning, and Insight Agent integration, for authenticated and unauthenticated vulnerability scanning across enterprise environments. Use when standing up InsightVM infrastructure, configuring credentialed vulnerability scans, or integrating continuous asset assessment via the Insight Agent.
- ▌ Implementing Rbac Hardening For Kubernetes · gabrielmoreira bundleHardens Kubernetes RBAC by designing least-privilege Roles and ClusterRoles, auditing RoleBindings, eliminating cluster-admin sprawl, separating service accounts, and integrating an external OIDC identity provider. Use when tightening cluster access control, removing excessive ClusterRoleBindings, or hardening service-account permissions against escalation and lateral movement. Keywords: RBAC, Role, ClusterRole, RoleBinding, least privilege, service account, OIDC, cluster-admin. Do not use for discovering existing escalation paths - use auditing-kubernetes-rbac-privilege-escalation.
- ▌ Implementing Secrets Management With Vault · gabrielmoreira bundleDeploy HashiCorp Vault for centralized secrets management, covering dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes integration. Use when eliminating hardcoded credentials from application code or CI/CD pipelines, migrating to short-lived auto-rotated secrets, or giving Kubernetes workloads secure access to database or cloud provider credentials.
- ▌ Chengfeng Cut · gabrielmoreira剪辑中文口播原素材:逐词转录、词典修字出修字表、五轮扫描找口误与重复、汇总表与重复句子表、打开 Studio 让用户复核、复盘沉淀用户偏好与词典。只产出一份已复核的删词账本,不切媒体、不做字幕、不做分镜动画。用户说剪口播、处理口误、生成口播基础素材、继续剪口播,或确认卡回传 action=return_cut_review 时使用。不要用于执行物理剪切、导出剪后视频、单独安装、单独打开工作台或口播分镜成片。
- ▌ Gpu Kubernetes Operations · gabrielmoreiraOperate GPU-backed Kubernetes clusters for AI inference and training with scheduling, autoscaling, node health, MIG partitioning, and cost controls.
- ▌ Background · gabrielmoreiraUse when the user wants to see, inspect, cancel, or prune background agents fired during prior chain runs. Read/manage `.hyperflow/background/registry.json` and the per-agent output buffers at `.hyperflow/background/<id>.md`. Standalone — never auto-invoked. Trigger with /hyperflow:background, "list background agents", "what's running in background", "cancel background agent", "show background result".
- ▌ Apex Takeover · gabrielmoreiraSystem takeover — take ownership of an existing codebase or inherited system. Use when "we acquired this", "previous team left", "take over this system", "inherited this codebase".
- ▌ Atlas Onboard · gabrielmoreiraGenerate onboarding documentation — what this project does, how to set up locally, where things live, key decisions, how to deploy. Written for day-one engineers who know nothing. Use when asked for "onboarding docs", "new engineer guide", "how to get started", or "developer setup".
- ▌ Atlas Present · gabrielmoreiraGenerate a polished HTML presentation page and Obsidian Canvas for big releases — new products, takeovers, major migrations. Non-technical audience. Use when asked to "present this", "release announcement", "show what we built", or "stakeholder update".
- ▌ Cortex Prompt · gabrielmoreiraBuild a production-ready prompt package — system prompt, few-shot examples, output format, edge case handling, eval criteria. Use when asked to "prompt engineering", "build a prompt", "write a system prompt", or "improve this prompt".
- ▌ Crest Compete · gabrielmoreiraCompetitive analysis ending in a clear positioning call — where to play, how to win. Use when asked to "analyze competitors", "competitive landscape", "how do we compare to X", "competitive positioning", "where should we play", "find our white space", or "who else does this".
- ▌ Crest Roadmap · gabrielmoreiraBuild a product roadmap with sequenced bets and explicit tradeoffs. Use when asked to "build a roadmap", "prioritize the backlog strategically", "what do we build next quarter", "sequence our bets", "what should we focus on", or "product strategy for the next N months".