← all publishers

jeremylongshore

@jeremylongshore source repo

Report this profile Claim this profile

• 3.9k skills
• 0 followers
• last month last updated

1. ▌
   Modeling Nosql Data 2 · jeremylongshore

   Build use when you need to work with NoSQL data modeling. This skill provides NoSQL database design with comprehensive guidance and automation. Trigger with phrases like "model NoSQL data", "design document structure", or "optimize NoSQL schema".
   13 installs
2. ▌
   Optimizing Cloud Costs 2 · jeremylongshore

   Execute use when you need to work with cloud cost optimization. This skill provides cost analysis and optimization with comprehensive guidance and automation. Trigger with phrases like "optimize costs", "analyze spending", or "reduce costs".
   11 installs
3. ▌
   Vertex AI Media Master 2 · jeremylongshore

   Execute automatic activation for all google vertex ai multimodal operations operations. Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
   14 installs
4. ▌
   Building Cicd Pipelines 2 · jeremylongshore

   Execute use when you need to work with deployment and CI/CD. This skill provides deployment automation and pipeline orchestration with comprehensive guidance and automation. Trigger with phrases like "deploy application", "create pipeline", or "automate deployment".
   11 installs
5. ▌
   Archiving Databases 2 · jeremylongshore

   This skill automates database archival processes. It helps reduce primary database size by moving historical records to archive tables or cold storage solutions like S3, Azure Blob, or GCS. The plugin supports PostgreSQL and MySQL, implementing automated retention policies, compression, compliance tracking, and zero-downtime migration. Use this when the user mentions "database archival", "archive old database records", "retention policies", "cold storage", or "reduce database size." It is particularly useful for handling requests related to data lifecycle management and compliance requirements in database systems.
   8 installs
6. ▌
   Detecting Data Anomalies 2 · jeremylongshore

   Process identify anomalies and outliers in datasets using machine learning algorithms. Use when analyzing data for unusual patterns, outliers, or unexpected deviations from normal behavior. Trigger with phrases like "detect anomalies", "find outliers", or "identify unusual patterns".
   12 installs
7. ▌
   Generating Smart Commits 2 · jeremylongshore

   Execute use when generating conventional commit messages from staged git changes. Trigger with phrases like "create commit message", "generate smart commit", "/commit-smart", or "/gc". Automatically analyzes changes to determine commit type (feat, fix, docs), identifies breaking changes, and formats according to conventional commit standards.
   14 installs
8. ▌
   Tracking Model Versions 2 · jeremylongshore

   This skill enables Claude to track and manage AI/ML model versions using the model-versioning-tracker plugin. It should be used when the user asks to manage model versions, track model lineage, log model performance, or implement version control for AI/ML models. Use this skill when the user mentions "track versions", "model registry", "MLflow", or requests assistance with AI/ML model deployment and management. This skill facilitates the implementation of best practices for model versioning, automation of model workflows, and performance optimization.
   11 installs
9. ▌
   Building Automl Pipelines 2 · jeremylongshore

   Build automated machine learning pipelines with feature engineering, model selection, and hyperparameter tuning. Use when automating ML workflows from data preparation through model deployment. Trigger with phrases like "build automl pipeline", "automate ml workflow", or "create automated training pipeline".
   10 installs
10. ▌
    Building Gitops Workflows 2 · jeremylongshore

    Execute use when constructing GitOps workflows using ArgoCD or Flux. Trigger with phrases like "create GitOps workflow", "setup ArgoCD", "configure Flux", or "automate Kubernetes deployments". Generates production-ready configurations, implements best practices, and ensures security-first approach for continuous deployment.
    12 installs
11. ▌
    Managing Network Policies 2 · jeremylongshore

    Execute use when managing Kubernetes network policies and firewall rules. Trigger with phrases like "create network policy", "configure firewall rules", "restrict pod communication", or "setup ingress/egress rules". Generates Kubernetes NetworkPolicy manifests following least privilege and zero-trust principles.
    10 installs
12. ▌
    Analyzing Database Indexes 2 · jeremylongshore

    Process use when you need to work with database indexing. This skill provides index design and optimization with comprehensive guidance and automation. Trigger with phrases like "create indexes", "optimize indexes", or "improve query performance".
    12 installs
13. ▌
    Building Terraform Modules 2 · jeremylongshore

    Execute this skill empowers AI assistant to build reusable terraform modules based on user specifications. it leverages the terraform-module-builder plugin to generate production-ready, well-documented terraform module code, incorporating best practices for sec... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
    12 installs
14. ▌
    Comparing Database Schemas 2 · jeremylongshore

    Process use when you need to work with schema comparison. This skill provides database schema diff and sync with comprehensive guidance and automation. Trigger with phrases like "compare schemas", "diff databases", or "sync database schemas".
    12 installs
15. ▌
    Configuring Service Meshes 2 · jeremylongshore

    Configure this skill configures service meshes like istio and linkerd for microservices. it generates production-ready configurations, implements best practices, and ensures a security-first approach. use this skill when the user asks to "configure service ... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
    10 installs
16. ▌
    Creating Ansible Playbooks 2 · jeremylongshore

    Execute use when you need to work with Ansible automation. This skill provides Ansible playbook creation with comprehensive guidance and automation. Trigger with phrases like "create Ansible playbook", "automate with Ansible", or "configure with Ansible".
    13 installs
17. ▌
    Designing Database Schemas 2 · jeremylongshore

    Process use when you need to work with database schema design. This skill provides schema design and migrations with comprehensive guidance and automation. Trigger with phrases like "design schema", "create migration", or "model database".
    6 installs
18. ▌
    Configuring Load Balancers 2 · jeremylongshore

    This skill configures load balancers, including ALB, NLB, Nginx, and HAProxy. It generates production-ready configurations based on specified requirements and infrastructure. Use this skill when the user asks to "configure load balancer", "create load balancer config", "generate nginx config", "setup HAProxy", or mentions specific load balancer types like "ALB" or "NLB". It's ideal for DevOps tasks, infrastructure automation, and generating load balancer configurations for different environments.
    16 installs
19. ▌
    Managing Database Recovery 2 · jeremylongshore

    Process use when you need to work with database operations. This skill provides database management and optimization with comprehensive guidance and automation. Trigger with phrases like "manage database", "optimize database", or "configure database".
    7 installs
20. ▌
    Managing Database Sharding 2 · jeremylongshore

    Process use when you need to work with database sharding. This skill provides horizontal sharding strategies with comprehensive guidance and automation. Trigger with phrases like "implement sharding", "shard database", or "distribute data".
    12 installs
21. ▌
    Monitoring Database Health 2 · jeremylongshore

    Monitor use when you need to work with monitoring and observability. This skill provides health monitoring and alerting with comprehensive guidance and automation. Trigger with phrases like "monitor system health", "set up alerts", or "track metrics".
    10 installs
22. ▌
    Planning Disaster Recovery 2 · jeremylongshore

    Execute use when you need to work with backup and recovery. This skill provides backup automation and disaster recovery with comprehensive guidance and automation. Trigger with phrases like "create backups", "automate backups", or "implement disaster recovery".
    11 installs
23. ▌
    Scanning Database Security 2 · jeremylongshore

    Process use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".
    10 installs
24. ▌
    Setting Up Log Aggregation 2 · jeremylongshore

    Execute use when setting up log aggregation solutions using ELK, Loki, or Splunk. Trigger with phrases like "setup log aggregation", "deploy ELK stack", "configure Loki", or "install Splunk". Generates production-ready configurations for data ingestion, processing, storage, and visualization with proper security and scalability.
    11 installs
25. ▌
    Analyzing Query Performance 2 · jeremylongshore

    Execute use when you need to work with query optimization. This skill provides query performance analysis with comprehensive guidance and automation. Trigger with phrases like "optimize queries", "analyze performance", or "improve query speed".
    11 installs
26. ▌
    Automating Database Backups 2 · jeremylongshore

    Automate database backup processes with scheduling, compression, and encryption. Supports PostgreSQL (pg_dump), MySQL (mysqldump), MongoDB (mongodump), and SQLite. Generates production-ready backup scripts with retention policies and restore procedures. Trigger: "automate database backups", "schedule backups", "create backup script", "disaster recovery". Use when working with automating database backups. Trigger with 'automating', 'database', 'backups'.
    12 installs
27. ▌
    Deploying Monitoring Stacks 2 · jeremylongshore

    Monitor use when deploying monitoring stacks including Prometheus, Grafana, and Datadog. Trigger with phrases like "deploy monitoring stack", "setup prometheus", "configure grafana", or "install datadog agent". Generates production-ready configurations with metric collection, visualization dashboards, and alerting rules.
    12 installs
28. ▌
    Scanning Container Security 2 · jeremylongshore

    Execute use when you need to work with security and compliance. This skill provides security scanning and vulnerability detection with comprehensive guidance and automation. Trigger with phrases like "scan for vulnerabilities", "implement security controls", or "audit security".
    9 installs
29. ▌
    Detecting Database Deadlocks 2 · jeremylongshore

    Process use when you need to work with deadlock detection. This skill provides deadlock detection and resolution with comprehensive guidance and automation. Trigger with phrases like "detect deadlocks", "resolve deadlocks", or "prevent deadlocks".
    12 installs
30. ▌
    Firestore Operations Manager 2 · jeremylongshore

    Manage Firebase/Firestore operations including CRUD, queries, batch processing, and index/rule guidance. Use when you need to create/update/query Firestore documents, run batch writes, troubleshoot missing indexes, or plan migrations. Trigger with phrases like "firestore operations", "create firestore document", "batch write", "missing index", or "fix firestore query".
    8 installs
31. ▌
    Generating Stored Procedures 2 · jeremylongshore

    Use when you need to generate, validate, or deploy stored procedures for PostgreSQL, MySQL, or SQL Server. Creates database functions, triggers, and procedures with proper error handling and transaction management. Trigger with phrases like "generate stored procedure", "create database function", "write SQL procedure", "add trigger to table", or "create CRUD procedures".
    11 installs
32. ▌
    Integrating Secrets Managers 2 · jeremylongshore

    Manage this skill enables AI assistant to seamlessly integrate with various secrets managers like hashicorp vault and aws secrets manager. it generates configurations and setup code, ensuring best practices for secure credential management. use this skill when... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
    11 installs
33. ▌
    Managing Database Migrations 2 · jeremylongshore

    Process use when you need to work with database migrations. This skill provides schema migration management with comprehensive guidance and automation. Trigger with phrases like "create migration", "run migrations", or "manage schema versions".
    11 installs
34. ▌
    Managing Database Partitions 2 · jeremylongshore

    Process use when you need to work with database partitioning. This skill provides table partitioning strategies with comprehensive guidance and automation. Trigger with phrases like "partition tables", "implement partitioning", or "optimize large tables".
    11 installs
35. ▌
    Generating Database Seed Data 2 · jeremylongshore

    Process this skill enables AI assistant to generate realistic test data and database seed scripts for development and testing environments. it uses faker libraries to create realistic data, maintains relational integrity, and allows configurable data volumes. u... Use when working with databases or data models. Trigger with phrases like 'database', 'query', or 'schema'.
    12 installs
36. ▌
    Google Cloud Agent Sdk Master 2 · jeremylongshore

    Execute automatic activation for all google cloud agent development kit (adk) Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
    8 installs
37. ▌
    Implementing Database Caching 2 · jeremylongshore

    Process use when you need to implement multi-tier caching to improve database performance. This skill sets up Redis, in-memory caching, and CDN layers to reduce database load. Trigger with phrases like "implement database caching", "add Redis cache layer", "improve query performance with caching", or "reduce database load".
    9 installs
38. ▌
    Managing Container Registries 2 · jeremylongshore

    Execute use when you need to work with containerization. This skill provides container management and orchestration with comprehensive guidance and automation. Trigger with phrases like "containerize app", "manage containers", or "orchestrate deployment".
    9 installs
39. ▌
    Managing Database Replication 2 · jeremylongshore

    Process use when you need to work with database scalability. This skill provides replication and sharding with comprehensive guidance and automation. Trigger with phrases like "set up replication", "implement sharding", or "scale database".
    10 installs
40. ▌
    Managing Deployment Rollbacks 2 · jeremylongshore

    Deploy use when you need to work with deployment and CI/CD. This skill provides deployment automation and orchestration with comprehensive guidance and automation. Trigger with phrases like "deploy application", "create pipeline", or "automate deployment".
    10 installs
41. ▌
    Validating Database Integrity 2 · jeremylongshore

    Process use when you need to ensure database integrity through comprehensive data validation. This skill validates data types, ranges, formats, referential integrity, and business rules. Trigger with phrases like "validate database data", "implement data validation rules", "enforce data integrity constraints", or "validate data formats".
    10 installs
42. ▌
    Detecting Infrastructure Drift 2 · jeremylongshore

    Execute use when detecting infrastructure drift from desired state. Trigger with phrases like "check for drift", "infrastructure drift detection", "compare actual vs desired state", or "detect configuration changes". Identifies discrepancies between current infrastructure and IaC definitions using terraform plan, cloudformation drift detection, or manual comparison.
    8 installs
43. ▌
    Implementing Backup Strategies 2 · jeremylongshore

    Execute use when you need to work with backup and recovery. This skill provides backup automation and disaster recovery with comprehensive guidance and automation. Trigger with phrases like "create backups", "automate backups", or "implement disaster recovery".
    9 installs
44. ▌
    Generating Docker Compose Files 2 · jeremylongshore

    Execute use when you need to work with Docker Compose. This skill provides Docker Compose file generation with comprehensive guidance and automation. Trigger with phrases like "generate docker-compose", "create compose file", or "configure multi-container app".
    7 installs
45. ▌
    Managing Autonomous Development 2 · jeremylongshore

    Execute enables AI assistant to manage sugar's autonomous development workflows. it allows AI assistant to create tasks, view the status of the system, review pending tasks, and start autonomous execution mode. use this skill when the user asks to create a new develo... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.
    9 installs
46. ▌
    Performing Security Code Review 2 · jeremylongshore

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin. it analyzes code for potential vulnerabilities like sql injection, xss, authentication flaws, and insecure dependencies. AI assistant uses this skill wh... Use when assessing security or running audits. Trigger with phrases like 'security scan', 'audit', or 'vulnerability'.
    10 installs
47. ▌
    Monitoring Database Transactions 2 · jeremylongshore

    Monitor use when you need to work with monitoring and observability. This skill provides health monitoring and alerting with comprehensive guidance and automation. Trigger with phrases like "monitor system health", "set up alerts", or "track metrics".
    5 installs
48. ▌
    Configuring Auto Scaling Policies 2 · jeremylongshore

    Configure use when you need to work with auto-scaling. This skill provides auto-scaling configuration with comprehensive guidance and automation. Trigger with phrases like "configure auto-scaling", "set up elastic scaling", or "implement scaling".
    9 installs
49. ▌
    Generating Infrastructure As Code 2 · jeremylongshore

    Execute use when generating infrastructure as code configurations. Trigger with phrases like "create Terraform config", "generate CloudFormation template", "write Pulumi code", or "IaC for AWS/GCP/Azure". Produces production-ready code for Terraform, CloudFormation, Pulumi, ARM templates, and CDK across multiple cloud providers.
    12 installs
50. ▌
    Orchestrating Multi Agent Systems 2 · jeremylongshore

    Execute orchestrate multi-agent systems with handoffs, routing, and workflows across AI providers. Use when building complex AI systems requiring agent collaboration, task delegation, or workflow coordination. Trigger with phrases like "create multi-agent system", "orchestrate agents", or "coordinate agent workflows".
    11 installs
51. ▌
    Validating AI Ethics And Fairness 2 · jeremylongshore

    Validate AI/ML models and datasets for bias, fairness, and ethical concerns. Use when auditing AI systems for ethical compliance, fairness assessment, or bias detection. Trigger with phrases like "evaluate model fairness", "check for bias", or "validate AI ethics".
    7 installs
52. ▌
    Checking Infrastructure Compliance 2 · jeremylongshore

    Execute use when you need to work with compliance checking. This skill provides compliance monitoring and validation with comprehensive guidance and automation. Trigger with phrases like "check compliance", "validate policies", or "audit compliance".
    10 installs
53. ▌
    Orchestrating Deployment Pipelines 2 · jeremylongshore

    Deploy use when you need to work with deployment and CI/CD. This skill provides deployment automation and orchestration with comprehensive guidance and automation. Trigger with phrases like "deploy application", "create pipeline", or "automate deployment".
    6 installs
54. ▌
    Implementing Database Audit Logging 2 · jeremylongshore

    Process use when you need to track database changes for compliance and security monitoring. This skill implements audit logging using triggers, application-level logging, CDC, or native logs. Trigger with phrases like "implement database audit logging", "add audit trails", "track database changes", or "monitor database activity for compliance".
    9 installs
55. ▌
    Managing Environment Configurations 2 · jeremylongshore

    Implement environment and configuration management with comprehensive guidance and automation. Use when you need to work with environment configuration. Trigger with phrases like "manage environments", "configure environments", or "sync configurations".
    9 installs
56. ▌
    Optimizing Database Connection Pooling 2 · jeremylongshore

    Process use when you need to work with connection management. This skill provides connection pooling and management with comprehensive guidance and automation. Trigger with phrases like "manage connections", "configure pooling", or "optimize connection usage".
    10 installs
57. ▌
    Guidewire Observability And Incident Response · jeremylongshore bundle

    Operate a Guidewire Cloud API integration in production — define SLIs/SLOs for token availability, bind success rate, FNOL p99 latency; route alerts so the on-call gets paged for real outages and never for transient noise; triage 401 spikes, 409 storms, 429 saturation, scope drift, and Gosu OOM cascades from signal to recovery in 15 minutes or less. Use when designing a dashboard for a new integration, writing the on-call runbook, or running a post-incident review. Trigger with "guidewire observability", "guidewire slo", "guidewire on-call", "guidewire 401 spike", "guidewire 409 storm", "guidewire incident".
    5 installs
58. ▌
    Checking HTTP Security Headers · jeremylongshore bundle

    | Audit a target's HTTP security headers — CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and the Cross-Origin trio (COOP, COEP, CORP). Use when: SOC2 / PCI auditor flagged "missing security headers" or a Mozilla Observatory grade is below B, OR you need HSTS preload eligibility for chrome://net-internals. Threshold: any missing required header on production HTML response, HSTS max-age below 31536000s (preload requirement), CSP with 'unsafe-inline' or 'unsafe-eval', X-Frame-Options absent AND CSP frame-ancestors absent (clickjacking), Cache-Control allowing public cache on authenticated endpoint. Trigger with: "audit security headers", "check csp", "hsts check", "header posture".
    7 installs
59. ▌
    Composing Vulnerability Report · jeremylongshore bundle

    | Read findings JSONL files from cluster 1-4 skills, deduplicate by fingerprint, group by severity, and compose a deliverable- grade markdown vulnerability report with per-finding sections (title, severity, target, detail, remediation, evidence) and a top-level summary table. The canonical written artifact a customer receives at engagement close; precise, reproducible, machine- checkable against source findings. Use when: closing an engagement, generating an interim report, regenerating after CVE or OWASP enrichment, or producing the input for generating-executive-summary. Threshold: findings missing required fields are dropped. HIGH and CRITICAL findings highlighted in the summary section. Trigger with: "compose vuln report", "write pentest report", "generate vulnerability deliverable", "render findings to report".
    7 installs
60. ▌
    Scanning For Hardcoded Secrets · jeremylongshore bundle

    | Scan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens, Anthropic API keys, OpenAI keys, JWT signing secrets, generic base64-encoded passwords, RSA / SSH private keys, and high-entropy string literals that pattern-match common credential shapes. Use when: pre-commit gate before pushing a feature branch, audit before SOC2, post-incident scan after a leak, or inheriting a codebase you didn't write. Threshold: any source file contains a string that matches a canonical credential regex (AWS AKIA prefix, GitHub ghp_ prefix, etc.) OR a string with Shannon entropy above 4.5 in a field context (key=, token:, secret=). Trigger with: "scan secrets", "credential scan", "find hardcoded keys", "leak check".
    6 installs
61. ▌
    Windsurf Dependency Management · jeremylongshore bundle

    'Analyze and update dependencies with vulnerability scanning. Activate when users mention "update dependencies", "security audit", "npm audit", "vulnerability scan", or "dependency updates". Handles dependency analysis and updates. Use when working with windsurf dependency management functionality. Trigger with phrases like "windsurf dependency management", "windsurf management", "windsurf". '
    9 installs
62. ▌
    Langchain Langgraph Human In Loop · jeremylongshore bundle

    "Build LangGraph 1.0 human-in-the-loop approval flows with `interrupt_before`\ \ /\n`interrupt_after` and `Command(resume=...)` \u2014 JSON-serializable state,\ \ clean\nresume semantics, and UI wiring for approval decisions. Use when adding\ \ an\napproval gate before an expensive tool call, wiring a Slack/web UI for agent\n\ approvals, or debugging a graph that crashes on interrupt.\nTrigger with \"langgraph\ \ human in loop\", \"langgraph interrupt_before\",\n\"langgraph approval flow\"\ , \"Command resume\", \"langgraph HITL\".\n"
    8 installs
63. ▌
    Retellai Advanced Troubleshooting · jeremylongshore bundle

    "Retell AI advanced troubleshooting \u2014 AI voice agent and phone call\ \ automation.\nUse when working with Retell AI for voice agents, phone calls, or\ \ telephony.\nTrigger with phrases like \"retell advanced troubleshooting\", \"\ retellai-advanced-troubleshooting\", \"voice agent\".\n"
    12 installs
64. ▌
    Firecrawl Advanced Troubleshooting · jeremylongshore

    'Debug hard-to-diagnose Firecrawl issues with systematic isolation and evidence collection. Use when standard troubleshooting fails, investigating why scrapes return empty content, crawl jobs hang, or webhooks don''t fire. Trigger with phrases like "firecrawl hard bug", "firecrawl mystery error", "firecrawl impossible to debug", "firecrawl deep debug", "firecrawl not scraping". '
    6 installs
65. ▌
    Podium Conversation History Export · jeremylongshore bundle

    Bulk-export Podium conversation, review, and contact history into a vector-store-ready corpus with cursor-paginated full crawls, CDC via updated_at watermarks, attachment URL refresh on expiry, windowed semantic chunking, and PII redaction before embedding. Use when standing up a RAG pipeline on a Podium org, building nightly incremental syncs, or hardening export jobs against attachment expiry. Trigger with "podium history export", "podium rag corpus", "podium cdc sync", "podium incremental export", "podium chunk for embedding".
    4 installs
66. ▌
    Detecting Exposed Secrets Files · jeremylongshore bundle

    | Probe a target for accidentally-served secret-bearing files in the web root — `.git/`, `.env`, `.DS_Store`, backup files, database dumps, key files, CI configs, IDE configs. Use when: post-deploy verification on a new release, or SOC2 auditor asked "what's reachable in the web root that shouldn't be," or a bug-bounty report hints at a leaked file. Threshold: any of the canonical 40+ paths returns 200 OR returns a body matching the expected fingerprint of the file type (e.g., `.git/HEAD` returns content starting with `ref:` or a 40-char hex SHA). Trigger with: "check exposed files", "git directory exposure", "env file leak", "backup file scan".
    12 installs
67. ▌
    Mapping Findings To Owasp Top10 · jeremylongshore bundle

    | Annotate every pentest finding with its OWASP Top 10 (2021) category by applying a deterministic rule table keyed on source skill, finding category, detail keywords, and CWE identifier when present. Produces an enriched findings JSONL plus a per-category rollup report showing how findings distribute across A01 through A10. Required for customer-facing OWASP coverage sections and compliance contexts (PCI DSS 6.5, SOC2 CC7, ISO 27001 A.14.2). Use when: enriching findings after cluster 1-4 scans, regenerating the report with OWASP tags, producing the OWASP coverage section for an exec summary, or auditing engagement OWASP coverage. Threshold: unclassifiable findings emitted as INFO with UNMAPPED category for operator review. Trigger with: "map to OWASP", "owasp top 10 mapping", "annotate owasp categories", "owasp coverage check".
    11 installs
68. ▌
    Confirming Pentest Authorization · jeremylongshore bundle

    | Verify that a penetration test has explicit, written, signed authorization before any scanning begins. Reads a Rules-of- Engagement (ROE) attestation file, validates required fields (authorizer, in-scope targets, time window, emergency contact, signature), checks the signer against an allowlist, and emits a CRITICAL finding if anything is missing. Designed as the first skill the orchestrator routes to. Use when: starting a new engagement, after a scope change, or before any cluster 1-4 scan skill runs. Threshold: any missing or unsigned ROE field; any time-window expiry; any in-scope target outside the authorized list. Trigger with: "confirm authorization", "verify ROE", "check pentest authz", "pre-flight authorization".
    8 installs
69. ▌
    Podium Review Request Automation · jeremylongshore bundle

    Trigger Podium review requests from Shopify order-shipped events and survive the delivery-side failures — cooldown-window violations, ship-event races with refunds, failed-send silent rejections, dropped review-response webhooks, multi-platform routing misconfig, and opt-out compliance gaps. Use when wiring Shopify orders-fulfilled to Podium review campaigns, building a cooldown gate, ingesting review-response webhooks, or auditing opt-out compliance across flows. Trigger with "podium review request", "shopify review automation", "podium cooldown", "review response webhook", "podium opt-out audit", "review platform routing".
    9 installs
70. ▌
    Auditing Python Dependencies · jeremylongshore bundle

    | Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema. Detects vulnerable direct AND transitive packages, normalizes pip-audit's severity output via OSV severity bands, falls back to pip list --outdated when pip-audit isn't installed, and supports requirements.txt, pyproject.toml (PEP 621), Pipfile.lock, and poetry.lock as input sources. Use when: pre-merge gate on a Python project, post-incident sweep after a PyPI compromise (e.g. ctx, request-toolbelt typosquats, ultralytics 8.3.42 compromise), SOC2 evidence collection, or inheriting an unfamiliar Python codebase. Threshold: any HIGH or CRITICAL CVE in the resolved dependency tree. MODERATE / LOW reported informationally. Trigger with: "audit python deps", "pip vulnerability scan", "check pypi...
    11 installs
71. ▌
    Coreweave Gpu Node Forensics · jeremylongshore bundle

    | Triage a dead or degraded GPU on a CoreWeave node fast — decide reschedule vs GPU-reset vs node-reboot vs RMA from an Xid code or a pasted dmesg / nvidia-smi blob, so a bad card does not silently kill a multi-day training run. Use when a GPU throws an Xid error, a node "fell off the bus", a training run stalls or NCCL hangs on one rank, or you need to know whether to replace, reset, or just reschedule. Trigger with "xid error", "gpu fell off the bus", "coreweave gpu dead", "should I RMA this GPU", "gpu node triage".
    10 installs
72. ▌
    Databricks Cluster Forensics · jeremylongshore bundle

    | Diagnose broken or unexplained Databricks compute — slow cold starts, failed cluster launches, Photon paying its premium without the speedup, DBR-upgrade landmines, and spot-interruption shuffle aborts — by correlating a cluster's live event stream across API surfaces. Use when a Databricks cluster won't start, died mid-run, is randomly slow to start, when planning a Databricks Runtime upgrade, or when a job keeps failing on spot loss. Trigger with "databricks cluster won't start", "cluster failed", "why is my cluster slow", "NPIP_TUNNEL_SETUP_FAILURE", "databricks runtime upgrade", "photon not helping".
    10 installs
73. ▌
    Openevidence Security Basics · jeremylongshore bundle

    'Security Basics for OpenEvidence. Trigger: "openevidence security basics". '
    8 installs
74. ▌
    Openrouter Compliance Review · jeremylongshore bundle

    'Review OpenRouter integration for regulatory compliance (SOC2, GDPR, HIPAA). Use when preparing for audits, evaluating data handling, or documenting compliance posture. Triggers: ''openrouter compliance'', ''openrouter gdpr'', ''openrouter soc2'', ''openrouter data residency''. '
    11 installs
75. ▌
    Podium Multi Location Router · jeremylongshore bundle

    Route Podium API calls across multiple physical locations with strict per-location credential isolation, pre-flight location-ID verification, an immutable audit trail of every write, idempotent bulk onboarding, and per-location rate-limit budgets that cannot starve each other. Use when running Podium for more than one physical store (an agency operator managing 50+ accounts, a multi-store SMB with 2+ locations, or a compliance team that needs to prove which location received which write). Trigger with "podium multi-location", "podium location router", "podium per-location", "podium location audit", "podium bulk onboarding", "podium location_uid verification".
    12 installs
76. ▌
    Recording Pentest Engagement · jeremylongshore bundle

    | Package an engagement's findings, scan outputs, evidence, and signed ROE into a timestamped archive with a SHA-256 manifest covering every file. Establishes chain of custody so legal counsel, internal audit, or an outside SOC can verify the archive hasn't been modified after closeout. Optionally signs the manifest with GPG for cryptographic attestation. Use when: closing an engagement, snapshotting evidence after each scan day, before handing artifacts to customer, or after an emergency-stop event. Threshold: file in tree without a manifest entry, hash mismatch, out-of-tree path referenced in findings, unsigned manifest when signing was requested. Trigger with: "record engagement", "archive evidence", "create chain of custody", "package pentest artifacts".
    11 installs
77. ▌
    Detecting Command Injection Patterns · jeremylongshore bundle

    | Scan a source tree for command-injection vulnerable patterns: shell=True calls in Python subprocess, os.system / os.popen with interpolated strings, Node child_process.exec with template literals, Ruby backticks / Kernel#system / Kernel#exec with interpolation, Go exec.Command with shell wrapping, PHP system / passthru / shell_exec / backticks with $-interpolation, Java Runtime.exec with concatenated args. Use when: pre-commit gate on code that calls out to shell utilities, audit of file-processing / archive-handling / image-conversion code, post-bug-report investigation for "we shell out to a tool." Threshold: any shell-invocation API called with a string that contains a variable interpolation, OR shell=True with anything other than a fixed literal. Trigger with: "scan command injection", "shell=True audit", "find exec calls", "check os.system".
    6 installs
78. ▌
    Openevidence Prod Checklist · jeremylongshore

    'Prod Checklist for OpenEvidence. Trigger: "openevidence prod checklist". '
    5 installs
79. ▌
    Obsidian Project Documentation · jeremylongshore bundle

    Document technical projects in Obsidian vault. Use when the User mentions "document this", "close out", "wrap up", "update notes", "track progress", "where are we at", or asks about project docs.
    5 installs
80. ▌
    Guidewire Webhooks Integrations · jeremylongshore bundle

    Consume Guidewire App Events into downstream systems (SQS/SNS, Kafka, webhooks) and survive the event-side failures — events not firing because Gosu registration was missed, duplicates from queue redelivery, out-of-order arrival on the same resource, replay from a checkpoint for backfill, and back-pressure when consumers cannot keep up with producers. Use when registering App Events in Gosu, building an event-consumer service, or recovering from a missed-event window. Trigger with "guidewire app events", "guidewire webhooks", "guidewire event consumer", "guidewire event replay", "guidewire idempotent consumer".
    5 installs
81. ▌
    Notion Advanced Troubleshooting · jeremylongshore bundle

    | Use when standard Notion troubleshooting fails or you are chasing intermittent API errors — deep debugging for response inspection, permission chain tracing, property type mismatches, pagination edge cases, and block nesting limits. Trigger with phrases like "notion deep debug", "notion permission trace", "notion property mismatch", "notion pagination bug", "notion nesting limit".
    10 installs
82. ▌
    Openevidence Deploy Integration · jeremylongshore bundle

    'Deploy Integration for OpenEvidence. Trigger: "openevidence deploy integration". '
    10 installs
83. ▌
    Oraclecloud Prod Checklist · jeremylongshore bundle

    "Pre-production readiness checklist for OCI \u2014 backup policies, security\ \ audit, key rotation, encryption, and Cloud Guard.\nUse when preparing an OCI environment\ \ for production workloads or auditing an existing deployment.\nTrigger with \"\ oraclecloud prod checklist\", \"oci production ready\", \"oci security audit\",\ \ \"oci well-architected\".\n"
    11 installs
84. ▌
    Schedule After Usage Reset · jeremylongshore

    Schedule a task to run after the Claude usage limit resets. Use when the user says things like: schedule this after my usage resets, run this when my tokens refresh, queue this task for after the limit lifts, or any variation of wanting to defer a task until after a Claude usage/token limit reset. Finds the reset time from the Anthropic usage API and calls /schedule with that exact time. Trigger with phrases like \"schedule after my usage resets\" or \"run this when my limit lifts\".
    9 installs
85. ▌
    Salesforce Security Basics · jeremylongshore

    'Apply Salesforce security best practices for Connected Apps, OAuth, and field-level security. Use when securing API credentials, implementing least privilege access, or auditing Salesforce security configuration. Trigger with phrases like "salesforce security", "salesforce secrets", "secure salesforce", "salesforce connected app security", "salesforce FLS". '
    7 installs
86. ▌
    Stackblitz Security Basics · jeremylongshore

    'Secure WebContainer deployments: CSP headers, sandbox isolation, input validation. Use when working with WebContainers or StackBlitz SDK. Trigger: "stackblitz security". '
    12 installs
87. ▌
    Langchain Langgraph Subgraphs · jeremylongshore bundle

    "Compose LangGraph 1.0 subgraphs correctly \u2014 shared state key propagation,\n\ Send / Command(graph=...) dispatch, callback scoping, per-subgraph recursion\nbudgets,\ \ and testing each subgraph in isolation. Use when building a planner +\nexecutor,\ \ a nested agent team, or a reusable subgraph library. Trigger with\n\"langgraph\ \ subgraph\", \"langgraph composition\", \"langgraph send\",\n\"nested agents\"\ , \"langgraph state propagation\", \"Command(graph=...)\",\n\"langgraph subgraph\ \ callbacks\".\n"
    6 installs
88. ▌
    Retellai Reliability Patterns · jeremylongshore bundle

    "Retell AI reliability patterns \u2014 AI voice agent and phone call\ \ automation.\nUse when working with Retell AI for voice agents, phone calls, or\ \ telephony.\nTrigger with phrases like \"retell reliability patterns\", \"retellai-reliability-patterns\"\ , \"voice agent\".\n"
    6 installs
89. ▌
    Snowflake Advanced Troubleshooting · jeremylongshore

    'Apply advanced Snowflake debugging with query profiling, spill analysis, lock contention, and performance deep-dives using ACCOUNT_USAGE views. Use when standard troubleshooting fails, investigating slow queries, or diagnosing warehouse performance issues. Trigger with phrases like "snowflake hard bug", "snowflake slow query debug", "snowflake query profile", "snowflake spilling", "snowflake deep debug". '
    10 installs
90. ▌
    Oraclecloud Reference Architecture · jeremylongshore bundle

    'Standard 3-tier OCI reference architecture with VCN, subnets, gateways, load balancer, compute, and Autonomous DB. Use when designing a new OCI deployment, translating AWS/Azure patterns, or creating Terraform for OCI infrastructure. Trigger with "oraclecloud architecture", "oci reference design", "oci 3 tier", "oci vpc design". '
    10 installs
91. ▌
    Tracing Transitive Vulnerabilities · jeremylongshore bundle

    | Build a dependency-tree map of a project (npm or Python) and trace the path from each known-vulnerable transitive package back to one or more direct dependencies. Identifies which direct-dep bump would clear the most findings at once (highest-leverage upgrade), which vulnerabilities are unreachable through any version bump and require overrides or vendor-patch, and which CVEs sit at deep transitive depth (3+ levels from a direct dep) where blast-radius triage is hardest. Use when: a multi-finding audit produces noise and you need to prioritize, when planning a major dependency refresh, after an upstream package compromise hits your tree (e.g. event-stream flatmap-stream), or when an audit shows findings that automated fix commands cannot auto-resolve. Threshold: any HIGH or CRITICAL CVE reachable only through transitive paths that no single direct-dep bump can clear. Trigger with:...
    9 installs
92. ▌
    Obsidian Deploy Integration · jeremylongshore bundle

    'Publish Obsidian plugins to the community plugin directory. Use when releasing your first plugin, updating existing plugins, or managing the community plugin submission process. Trigger with phrases like "publish obsidian plugin", "obsidian community plugins", "submit obsidian plugin", "obsidian plugin directory". '
    10 installs
93. ▌
    Detecting Insecure Deserialization · jeremylongshore bundle

    | Scan a source tree for unsafe-by-default deserialization APIs: Python pickle.loads / cPickle / shelve / dill, Ruby Marshal.load / YAML.load (pre-3.1 default), Java ObjectInputStream.readObject, PHP unserialize, .NET BinaryFormatter / NetDataContractSerializer, Node.js node-serialize, JavaScript JSON.parse with reviver containing eval. Use when: pre-commit gate on services that accept binary blobs, audit of legacy job-queue code (workers deserializing tasks), post-bug-report when "we accept user-uploaded archives." Threshold: any call to a known-unsafe deserialization API on data that originates from user input, network, file upload, or untrusted storage. Trigger with: "scan deserialization", "pickle audit", "java readObject scan", "yaml.load check".
    6 installs
94. ▌
    Firecrawl Reliability Patterns · jeremylongshore

    'Implement Firecrawl reliability patterns: circuit breakers, crawl fallbacks, and content validation. Use when building fault-tolerant scraping pipelines, implementing crawl-to-scrape fallback, or adding content quality gates to Firecrawl integrations. Trigger with phrases like "firecrawl reliability", "firecrawl circuit breaker", "firecrawl fallback", "firecrawl resilience", "firecrawl fault tolerant". '
    5 installs
95. ▌
    Oraclecloud Deploy Integration · jeremylongshore bundle

    'Deploy containers to OCI using OKE (Kubernetes) or Container Instances. Use when deploying applications to Oracle Cloud, pushing images to OCIR, or configuring OKE clusters. Trigger with "oraclecloud deploy", "oci kubernetes", "oke deploy", "oci container instances", "oracle cloud deploy integration". '
    9 installs
96. ▌
    Fireflies Core Workflow A · jeremylongshore

    'Retrieve and process Fireflies.ai meeting transcripts with speaker diarization and summaries. Use when fetching transcripts, extracting action items, or building meeting intelligence pipelines. Trigger with phrases like "fireflies transcript", "get meeting notes", "fireflies meeting data", "fetch fireflies recording". '
    8 installs
97. ▌
    Lucidchart Prod Checklist · jeremylongshore

    'Prod Checklist for Lucidchart. Trigger: "lucidchart prod checklist". '
    11 installs
98. ▌
    Mindtickle Prod Checklist · jeremylongshore

    'Prod Checklist for MindTickle. Trigger: "mindtickle prod checklist". '
    10 installs
99. ▌
    Openrouter Prod Checklist · jeremylongshore bundle

    'Validate production readiness of your OpenRouter integration. Use before launching to production or during operational reviews. Triggers: ''openrouter production'', ''openrouter launch'', ''production checklist openrouter'', ''openrouter deploy''. '
    6 installs
100. ▌
     Perplexity Prod Checklist · jeremylongshore

     'Execute Perplexity production deployment checklist for Sonar API integrations. Use when deploying Perplexity integrations to production, preparing for launch, or implementing go-live procedures. Trigger with phrases like "perplexity production", "deploy perplexity", "perplexity go-live", "perplexity launch checklist". '
     12 installs