oxsecurity
- 26 skills
- 0 followers
- 19 hours ago last updated
- ▌ Megalinter · oxsecurityEntry point for everything MegaLinter. Use when the user wants to lint their repository, set up MegaLinter, check or fix lint errors, make CI lint jobs pass, or says "run megalinter", "fix lint errors", "make the linters happy", "clean up code quality". Detects the repository state and orchestrates the megalinter-setup, megalinter-check and megalinter-fix skills in a loop until the repository is clean.
- ▌ Test · oxsecurityBuild the MegaLinter Docker image and run the targeted linter tests to verify the implementation. Fourth step of the contribution workflow, use after /implement.
- ▌ Design · oxsecurityDesign a MegaLinter solution and write a technical specification. Second step of the contribution workflow, use after /analyze.
- ▌ Megalinter Fix · oxsecurity bundleFix the errors reported by MegaLinter. Use after megalinter-check found errors, or when the user pastes MegaLinter/CI lint errors and wants them fixed. Applies safe fixes automatically (auto-fix linters first, then guided manual fixes using per-linter fix guides), asks the user when fixing is ambiguous, and can disable rules or linters with user confirmation. Never pushes to the default branch.
- ▌ Analyze · oxsecurityGather requirements for a MegaLinter change by asking clarifying questions until the problem is fully understood. First step of the contribution workflow.
- ▌ Megalinter Check · oxsecurity bundleCollect MegaLinter lint errors for the current repository. Use when the user wants to know if the code passes linting, why the MegaLinter CI job fails, or before/after fixing lint errors. Two modes - watch a CI job (GitHub Actions, GitLab CI, Azure Pipelines, Bitbucket Pipelines) and parse its logs, or run MegaLinter locally with Docker (full run or fast parallel standalone linter runs).
- ▌ Megalinter Setup · oxsecurity bundleInstall or upgrade MegaLinter on a repository. Use when the user wants to add MegaLinter to a project, set up linting CI, update MegaLinter configuration or version, or says "install megalinter", "setup linting", "add code quality checks", "update megalinter skills". Always goes through npx mega-linter-runner (--install or --upgrade), then refines .mega-linter.yml. In upgrade mode it also refreshes the installed MegaLinter skills and sub-agents. Also sets up a MegaLinter custom flavor repository when the user explicitly asks for one.
- ▌ Fix Issue · oxsecurityEnd-to-end workflow to fix a GitHub issue — collect context, analyze, implement on a branch, open a PR, then hand off to /pr-watch-fix until CI is green.
- ▌ Implement · oxsecurityImplement a feature, bug fix, or code change in MegaLinter. Use whenever the user asks to add a feature, fix a bug, or make a code change - with or without a prior /design phase.
- ▌ Add Flavor · oxsecurityAdd a new MegaLinter flavor (language-specific Docker image). Use when creating a new specialized Docker image variant.
- ▌ Add Linter · oxsecurityGuided workflow for adding a new linter to MegaLinter. Use when a contributor needs to add support for a new linting tool.
- ▌ Add Reporter · oxsecurityAdd a new output reporter to MegaLinter. Use when adding support for a new CI system or output format.
- ▌ Pr Watch Fix · oxsecurityWatch the GitHub PR for the current branch, wait for CI to finish, and autonomously fix failing jobs by reading logs, editing sources, and pushing. Stops cleanly when stuck.
- ▌ Grafana Promql · oxsecurity bundleWrite, validate, and optimize PromQL for Prometheus / Grafana Mimir / Grafana Cloud Metrics. Covers `rate` vs `irate` vs `increase`, label matchers and regex, `sum / avg / topk / by / without` aggregation, classic + native `histogram_quantile`, ratios with divide-by-zero guards, `absent` / `changes` for staleness, time offsets and `predict_linear`, recording-rule naming, SLO + burn-rate math, and a cardinality-hunting playbook. Use when writing a metric query, fixing wrong p95s, building an error-budget alert, debugging "query is slow", finding the noisy label that blew up cardinality, or migrating a dashboard query to a recording rule — even when the user says "calculate the error rate", "p99 latency", "sum by service", "why is this query slow", or "what's filling Mimir" without naming PromQL.
- ▌ Diagnose Config · oxsecurityDiagnose MegaLinter .mega-linter.yml configuration issues. Use when linters aren't running as expected or configuration seems wrong.
- ▌ Fix Linter Test · oxsecurityDebug and fix a failing MegaLinter linter test. Use when a linter test fails in CI or locally.
- ▌ Prepare Release · oxsecurity bundlePrepare a MegaLinter release — update CHANGELOG (prune empty sections, collapse linter versions, backfill PR numbers), run the release build, push commit and tag, and guide GitHub release creation.
- ▌ Renovate Rebase · oxsecurity bundleTick the Renovate "Dependency Dashboard" issue checkboxes (Rate-Limited + Open sections) to force creation of rate-limited PRs and rebase of all open Renovate PRs. Runs autonomously, no confirmation.
- ▌ Sync Dashboards · oxsecurityKeep the MegaLinter observability dashboards (docs/dashboards/) in sync with the ApiReporter v2 payload and metrics contract. Use after modifying ApiReporter.py, megalinter/api_providers/, or the dashboards themselves.
- ▌ Kibana Dashboards · oxsecurity bundleCreate and manage Kibana Dashboards and visualizations. Use when you need to define dashboards and visualizations declaratively, version control them, or automate their deployment.
- ▌ Review Descriptor · oxsecurityAudit a linter descriptor YAML for completeness, correctness, and best practices. Checks all properties against the full schema.
- ▌ Datadog Dashboards · oxsecurity bundleManage Datadog dashboards including listing, viewing, creating, updating, and deleting dashboards with their widgets and configurations. Official Datadog content, vendored from https://github.com/DataDog/datadog-api-claude-plugin (agents/dashboards.md), Apache-2.0.
- ▌ Fix Security Issue · oxsecurityHandle CVE/vulnerability reports from security linters (trivy, osv-scanner, etc.). Tries to upgrade first; ignores only when safe and justified; disables an unmaintained linter (with user confirmation) when a dangerous CVE has no fix.
- ▌ Grafana Dashboarding · oxsecurity bundleBuild, modify, and ship Grafana dashboards as JSON via the HTTP API — panel types (timeseries / stat / gauge / table / heatmap / logs / traces / node-graph), `gridPos` 24-column layout, units, thresholds, template + datasource + chained variables, transformations (`organize` / `calculateField` / `filterByValue`), panel + dashboard links with `${__field.labels.x}` / `${__from}`, and Loki/Prometheus annotations. Use when scripting dashboard creation, writing the dashboard JSON for a new service, adding a `$job` dropdown variable, computing an "Error %" column with a transformation, overlaying deploys as annotations, or pushing a dashboard via `POST /api/dashboards/db` — even when the user says "create a dashboard for this metric", "add a service dropdown", "show errors as percentage", "overlay our deploys", or "export the dashboard JSON" without naming the API or schema. After every API push, verify with the returned `version` plus a GET on the dashboard UID.
- ▌ Pr Watch Fix Renovate · oxsecurityRun the pr-watch-fix loop in parallel across every open Renovate-bot PR, each in its own git worktree. Use to green-light or triage all dependency-update PRs at once.
- ▌ Update Linter Version · oxsecurityUpdate a linter's pinned version in its descriptor YAML. Use when upgrading a linter tool to a new release.