is-bo
- 160 skills
- 0 followers
- 3 hours ago last updated
- ▌ Gemini API · is-bo bundleUse when the user asks about using Gemini in an enterprise environment or explicitly mentions Vertex AI, Google Cloud, or Agent Platform. Guides the usage of the Gemini API on Agent Platform with the Google Gen AI SDK. Covers SDK usage (Python, JS/TS, Go, Java, C#), capabilities like multimodal inputs, tools, media generation, caching, batch prediction, and Live API.
- ▌ Cloud Run Basics · is-bo bundleManages Cloud Run services, jobs, and worker pools. Use when you need to deploy applications responding to HTTP requests (services), run event-triggered or scheduled tasks (jobs), or handle always-on pull-based background processing (worker pools).
- ▌ Cloud SQL Basics · is-bo bundleThis file generates or explains Cloud SQL resources. Use this file when the user asks to create a Cloud SQL instance or database for MySQL, PostgreSQL, or SQL Server. Cloud SQL manages third-party MySQL, PostgreSQL, and SQL Server instances as resources in Cloud SQL. For example, when Cloud SQL creates an open-source MySQL instance, the resulting resource is a Cloud SQL for MySQL instance that Google Cloud manages. Cloud SQL handles backups, high availability, and secure connectivity for relational database workloads.
- ▌ Gke Multitenancy · is-boPlans and configures multi-tenancy on GKE. Covers namespace isolation, RBAC planning for teams, resource quotas, LimitRanges, network isolation, and cost allocation. Use when designing GKE multi-tenancy, configuring GKE namespaces, setting up resource quotas, or isolating GKE teams. Don't use for single-tenant cluster configuration or general deployment instructions (use gke-basics or gke-app-onboarding instead).
- ▌ Shipping And Launch · is-boPrepares production launches. Use when preparing to deploy to production. Use when you need a pre-launch checklist, when setting up monitoring, when planning a staged rollout, or when you need a rollback strategy.
- ▌ Gke Observability · is-boConfigures GKE observability, including Cloud Logging, Cloud Monitoring, and managed Prometheus. Use when configuring GKE monitoring, setting up GKE logging, or configuring Prometheus metrics collection. Don't use to configure local application logging frameworks or external APMs outside GKE.
- ▌ Gke Productionize · is-boOrchestrates comprehensive production readiness reviews and assessments for GKE clusters and workloads across scalability, security, reliability, observability, backup/DR, and cost optimization. Use when asked to productionize, prepare, assess, audit, or review a GKE cluster or workload before going live to production. Don't use for deep-dive single-domain implementation (use specific domain skills like gke-scaling, gke-platform-security, gke-workload-security, gke-service-networking, gke-reliability instead).
- ▌ Gke Workload Scaling · is-bo bundleManages scaling for GKE workloads using HPA and VPA. Use when configuring Horizontal Pod Autoscaler (HPA), configuring Vertical Pod Autoscaler (VPA), or applying best practices for GKE workload autoscaling. Do not use for cluster-level autoscaling (Cluster Autoscaler), static cluster sizing, or configuring node-level machine styles directly.
- ▌ Test Driven Development · is-boDrives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code works, when a bug report arrives, or when you're about to modify existing functionality.
- ▌ Gke Platform Security · is-boPlans, configures, and hardens platform-level Google Kubernetes Engine (GKE) cluster security. Covers cluster add-ons (Secret Manager enablement), RBAC hardening (disabling insecure bindings, audit tools), Binary Authorization, enabling Shielded Nodes, GKE Sandbox cluster enablement, GKE IAM roles, and cross-service authentication IAM patterns. Use when securing cluster control planes, hardening GKE RBAC, enabling Shielded Nodes, enabling GKE Sandbox runtime, enabling cluster-wide security add-ons, or managing GKE IAM roles. Don't use for workload-level security (Workload Identity, SecretProviderClass, PSS, NetPol, gVisor pod runtimeClassName; use gke-workload-security instead).
- ▌ Gke Workload Security · is-bo bundleAudits, configures, and hardens workload-level security controls for Google Kubernetes Engine (GKE) applications and namespaces. Covers running cluster security audits (`audit_cluster.sh`), configuring Workload Identity Federation (impersonation, KSA/GSA binding, and pod setup), enforcing Network Policies (default-deny and Dataplane V2 logging), isolating high-risk pods inside GKE Sandbox (`gVisor`), enforcing Pod Security Standards (`restricted` labeling), and mounting Secret Manager secrets via CSI (`SecretProviderClass`). Use when auditing cluster security posture, isolating namespaces, applying pod security standards, setting up Workload Identity, or configuring network policies and secret volume mounts. Don't use for cluster-wide control plane security, RBAC hardening, Binary Authorization, Shielded Nodes, or enabling platform-level GKE add-ons (use gke-platform-security instead).
- ▌ Incremental Implementation · is-boDelivers changes incrementally. Use when implementing any feature or change that touches more than one file. Use when you're about to write a large amount of code at once, or when a task feels too big to land in one step.
- ▌ Debugging And Error Recovery · is-boGuides systematic root-cause debugging. Use when tests fail, builds break, behavior doesn't match expectations, or you encounter any unexpected error. Use when you need a systematic approach to finding and fixing the root cause rather than guessing.
- ▌ Google Cloud Waf Reliability · is-boGenerates guidance for reliability, resilience, availability, redundancy, fault-tolerance, and disaster recovery (DR) for Google Cloud workloads based on the design principles and recommendations in the Google Cloud Well-Architected Framework. Use when the user asks to evaluate, design, or improve the reliability, resilience, availability, or disaster recovery capabilities of Google Cloud workloads.
- ▌ Google Cloud Waf Cost Optimization · is-boGenerates cost optimization guidance for Google Cloud workloads based on the Google Cloud Well-Architected Framework (WAF). Use this skill to evaluate a workload, identify cost requirements and constraints, and provide actionable recommendations for build, deploy, and manage the workload cost-efficiently in Google Cloud.
- ▌ Google Analytics Data API Basics · is-bo bundleManages Google Analytics reporting data, enables the Analytics Data API via the Cloud CLI, and creates reports using the Google Analytics Data API (v1beta). Use when you need to interact with Google Analytics properties, run customized analytics reports, query metrics (like activeUsers, screenPageViews) and dimensions (like city, date), check metrics and dimensions compatibility, or verify API enablement. Don't use for Google Analytics Admin API operations (e.g., creating properties, managing users) or for front-end tracking installation.
- ▌ Google Analytics Admin API Basics · is-bo bundleManages Google Analytics account and property settings, enables the Analytics Admin API via the Cloud CLI, lists accounts and properties, and manages data streams, custom dimensions, conversion events, and integrations. Use when you need to programmatically configure Google Analytics accounts, provision properties, manage data retention, configure Measurement Protocol secrets, or manage Firebase and Google Ads links.
- ▌ Forge Feature 2 · is-boOwn the full feature lifecycle (frame, plan, implement, check, done, resume, accept-risk, abandon) with CLI-enforced statuses. Use for building, continuing, or shipping a specific feature in build mode.
- ▌ Forge Offline 2 · is-boAudit local persistence, queued actions, synchronization, conflicts, revocation, privacy, and recovery under intermittent connectivity.
- ▌ Forge Privacy 2 · is-boInspect personal-data inventory, purpose, minimization, consent, retention, access, deletion, export, and logging.
- ▌ Forge Queries 2 · is-boFind correctness, injection, overfetching, N+1, pagination, locking, and index-use risks in data access.
- ▌ Forge Storage 2 · is-boInspect object naming, access control, encryption, lifecycle, consistency, integrity, and recovery.
- ▌ Forge Tenancy 2 · is-boVerify tenant context propagation and isolation across data, cache, files, jobs, search, analytics, and administration.
- ▌ Forge Testing 2 · is-boEvaluate whether tests provide reliable risk-based evidence across units, boundaries, workflows, and failure modes.
- ▌ Forge Uploads 2 · is-boAudit the complete upload, processing, storage, delivery, and deletion pipeline against hostile files.
- ▌ Forge Database 2 · is-boInspect schema integrity, migrations, constraints, tenancy, lifecycle, recovery, and production-safe evolution.
- ▌ Forge Discover 2 · is-boBuild an evidence-backed application profile and architecture map before any specialized audit begins.
- ▌ Forge Frontend 2 · is-boUse automatically for frontend implementation and review, including components, pages, layouts, responsive behavior, React, Next.js, browser state, rendering, hydration, network behavior, and measured frontend performance.
- ▌ Forge Payments 2 · is-boAudit money movement, pricing, entitlements, provider events, reconciliation, idempotency, and sensitive data boundaries.
- ▌ Forge Realtime 2 · is-boInspect WebSocket, SSE, subscription, and presence flows for authorization, lifecycle, ordering, abuse, and recovery.
- ▌ Forge Recovery 2 · is-boVerify recoverability of data and service against explicit RPO, RTO, corruption, deletion, and regional scenarios.
- ▌ Forge Security 2 · is-boPerform a threat-informed audit of trust boundaries, injection, secrets, browser controls, dependencies, and abuse cases.
- ▌ Forge 3 · is-bo bundleUse automatically for installed software engineering: build, change, fix, review, audit, test, verify, deploy, release, or ship. Apply production discipline proportionately; explicit commands are optional. Not for unrelated conversation.
- ▌ Forge Analytics 2 · is-boAudit event semantics, consent, data quality, identity, privacy, delivery, and decision usefulness.
- ▌ Fullstack Forge 3 · is-bo bundleExplicit compatibility entry; use when requested. Work uses the concise router.
- ▌ Forge Deployment 2 · is-boInspect build promotion, configuration, migrations, rollout, rollback, health, and environment parity.
- ▌ Forge Performance 2 · is-boMeasure and improve user- and system-visible latency, throughput, resource use, and stability without guessing.
- ▌ Forge Reliability 2 · is-boAudit timeouts, retries, overload, dependencies, degradation, consistency, and operational objectives.
- ▌ Forge AI 3 · is-boAudit model boundaries, prompt injection, tool authority, data handling, output validation, evaluation, fallback, and cost.
- ▌ Forge UI 3 · is-boUse automatically for visual-interface creation and improvement, including direction, typography, color, spacing, layout, systems, states, consistency, motion, and polish while preserving usability, accessibility, and established brand conventions.
- ▌ Forge UX 3 · is-boUse automatically for user-flow and usability work, including information architecture, navigation, forms, onboarding, feedback, errors, recovery, empty states, decision complexity, and task completion.
- ▌ Forge Architecture 2 · is-boEvaluate system boundaries, dependency direction, failure domains, and the fitness of the current topology.
- ▌ Forge Integrations 2 · is-boAudit outbound and inbound integrations for authentication, validation, failure isolation, drift, and replay safety.
- ▌ Forge Requirements 2 · is-boTrace business rules and acceptance criteria to executable behavior, including adverse and recovery paths.
- ▌ Forge Supply Chain 2 · is-boInspect dependencies, build integrity, provenance, releases, licenses, actions, and secret exposure across the delivery chain.
- ▌ Forge All 3 · is-boDiscover the project, select applicable modules, run safe independent checks, merge evidence, and prioritize remediation.
- ▌ Forge API 3 · is-boAudit API contracts, boundary validation, authorization, consistency, pagination, errors, and idempotency.
- ▌ Forge New 3 · is-boGuide the new-project foundation workflow that frames product, users, business rules, risk class, stack rationale, non-goals, design direction, and an initial feature list. Use for starting a new product or codebase in build mode.
- ▌ Forge SEO 3 · is-boConditionally inspect public web content for crawlability, canonicalization, metadata, structured data, and rendering.
- ▌ Forge Accessibility 2 · is-boUse automatically for human-facing interface work and audit WCAG 2.2 AA with automated evidence plus keyboard and assistive-technology reasoning.
- ▌ Forge Authorization 2 · is-boVerify deny-by-default function, object, role, tenant, and administrative authorization on every path.
- ▌ Forge Notifications 2 · is-boInspect email, SMS, push, and in-app notifications for authorization, preferences, retries, privacy, and deliverability.
- ▌ Forge Observability 2 · is-boVerify that logs, metrics, traces, events, alerts, and dashboards answer concrete operational questions safely.
- ▌ Forge Auth 3 · is-boInspect identity proofing, credentials, sessions, recovery, federation, and reauthentication controls.
- ▌ Forge Code 3 · is-boFind correctness, maintainability, type-safety, error-handling, and dead-code risks in changed and critical paths.
- ▌ Forge Cost 3 · is-boTie resource and vendor cost to workloads, ownership, unit economics, budgets, and safe optimization choices.
- ▌ Forge Docs 3 · is-boVerify that user, contributor, architecture, operations, security, and release documentation is accurate and executable.
- ▌ Forge I18N 3 · is-boFind locale, translation, formatting, expansion, fallback, and bidirectional-layout defects.
- ▌ Forge Jobs 3 · is-boInspect queued and scheduled work for durability, idempotency, retries, poison messages, and operability.
- ▌ Forge Ship 3 · is-boEnforce a fail-closed release gate across project checks, findings, generated assets, packages, licenses, and installation.
- ▌ Forge Infrastructure 2 · is-boAudit infrastructure as code, network and identity boundaries, encryption, state, drift, and least privilege.
- ▌ Forge Cache 3 · is-boFirst decide whether caching is justified, then audit keys, invalidation, consistency, privacy, and failure behavior.
- ▌ Forge Scale 3 · is-boAssess growth limits, contention, partitioning, quotas, backpressure, and cost against explicit demand scenarios.
- ▌ Forge Feature 3 · is-boOwn the full feature lifecycle (frame, plan, implement, check, done, resume, accept-risk, abandon) with CLI-enforced statuses. Use for building, continuing, or shipping a specific feature in build mode.
- ▌ Forge Offline 3 · is-boAudit local persistence, queued actions, synchronization, conflicts, revocation, privacy, and recovery under intermittent connectivity.
- ▌ Forge Privacy 3 · is-boInspect personal-data inventory, purpose, minimization, consent, retention, access, deletion, export, and logging.
- ▌ Forge Queries 3 · is-boFind correctness, injection, overfetching, N+1, pagination, locking, and index-use risks in data access.
- ▌ Forge Storage 3 · is-boInspect object naming, access control, encryption, lifecycle, consistency, integrity, and recovery.
- ▌ Forge Tenancy 3 · is-boVerify tenant context propagation and isolation across data, cache, files, jobs, search, analytics, and administration.
- ▌ Forge Testing 3 · is-boEvaluate whether tests provide reliable risk-based evidence across units, boundaries, workflows, and failure modes.
- ▌ Forge Uploads 3 · is-boAudit the complete upload, processing, storage, delivery, and deletion pipeline against hostile files.
- ▌ Forge Database 3 · is-boInspect schema integrity, migrations, constraints, tenancy, lifecycle, recovery, and production-safe evolution.
- ▌ Forge Discover 3 · is-boBuild an evidence-backed application profile and architecture map before any specialized audit begins.
- ▌ Forge Frontend 3 · is-boUse automatically for frontend implementation and review, including components, pages, layouts, responsive behavior, React, Next.js, browser state, rendering, hydration, network behavior, and measured frontend performance.
- ▌ Forge Payments 3 · is-boAudit money movement, pricing, entitlements, provider events, reconciliation, idempotency, and sensitive data boundaries.
- ▌ Forge Realtime 3 · is-boInspect WebSocket, SSE, subscription, and presence flows for authorization, lifecycle, ordering, abuse, and recovery.
- ▌ Forge Recovery 3 · is-boVerify recoverability of data and service against explicit RPO, RTO, corruption, deletion, and regional scenarios.
- ▌ Forge Security 3 · is-boPerform a threat-informed audit of trust boundaries, injection, secrets, browser controls, dependencies, and abuse cases.
- ▌ Forge Analytics 3 · is-boAudit event semantics, consent, data quality, identity, privacy, delivery, and decision usefulness.
- ▌ Forge Deployment 3 · is-boInspect build promotion, configuration, migrations, rollout, rollback, health, and environment parity.
- ▌ Forge Performance 3 · is-boMeasure and improve user- and system-visible latency, throughput, resource use, and stability without guessing.
- ▌ Forge Reliability 3 · is-boAudit timeouts, retries, overload, dependencies, degradation, consistency, and operational objectives.
- ▌ Forge Architecture 3 · is-boEvaluate system boundaries, dependency direction, failure domains, and the fitness of the current topology.
- ▌ Forge Integrations 3 · is-boAudit outbound and inbound integrations for authentication, validation, failure isolation, drift, and replay safety.
- ▌ Forge Requirements 3 · is-boTrace business rules and acceptance criteria to executable behavior, including adverse and recovery paths.
- ▌ Forge Supply Chain 3 · is-boInspect dependencies, build integrity, provenance, releases, licenses, actions, and secret exposure across the delivery chain.
- ▌ Forge Accessibility 3 · is-boUse automatically for human-facing interface work and audit WCAG 2.2 AA with automated evidence plus keyboard and assistive-technology reasoning.
- ▌ Forge Authorization 3 · is-boVerify deny-by-default function, object, role, tenant, and administrative authorization on every path.
- ▌ Forge Notifications 3 · is-boInspect email, SMS, push, and in-app notifications for authorization, preferences, retries, privacy, and deliverability.
- ▌ Forge Observability 3 · is-boVerify that logs, metrics, traces, events, alerts, and dashboards answer concrete operational questions safely.
- ▌ Forge Infrastructure 3 · is-boAudit infrastructure as code, network and identity boundaries, encryption, state, drift, and least privilege.
- ▌ Sentry Otel Exporter Setup · is-boConfigure the OpenTelemetry Collector with Sentry Exporter for multi-project routing and automatic project creation. Use when setting up OTel with Sentry, configuring collector pipelines for traces and logs, or routing telemetry from multiple services to Sentry projects.
- ▌ Forge 2 · is-bo bundleUse automatically for installed software engineering: build, change, fix, review, audit, test, verify, deploy, release, or ship. Apply production discipline proportionately; explicit commands are optional. Not for unrelated conversation.
- ▌ Fullstack Forge 2 · is-bo bundleExplicit compatibility entry; use when requested. Work uses the concise router.
- ▌ Forge AI 2 · is-boAudit model boundaries, prompt injection, tool authority, data handling, output validation, evaluation, fallback, and cost.
- ▌ Forge UI 2 · is-boUse automatically for visual-interface creation and improvement, including direction, typography, color, spacing, layout, systems, states, consistency, motion, and polish while preserving usability, accessibility, and established brand conventions.
- ▌ Forge UX 2 · is-boUse automatically for user-flow and usability work, including information architecture, navigation, forms, onboarding, feedback, errors, recovery, empty states, decision complexity, and task completion.
- ▌ Forge All 2 · is-boDiscover the project, select applicable modules, run safe independent checks, merge evidence, and prioritize remediation.
- ▌ Forge API 2 · is-boAudit API contracts, boundary validation, authorization, consistency, pagination, errors, and idempotency.
- ▌ Forge New 2 · is-boGuide the new-project foundation workflow that frames product, users, business rules, risk class, stack rationale, non-goals, design direction, and an initial feature list. Use for starting a new product or codebase in build mode.