petr-korobeinikov
- 19 skills
- 0 followers
- 19 hours ago last updated
- ▌ Fd · petr-korobeinikovPrefers `fd` (https://github.com/sharkdp/fd) over `find` for filesystem searches in shell snippets. `fd` is faster on large trees, has saner defaults (respects `.gitignore`, smart case, regex by default), and a more ergonomic CLI. Falls back to `find` when `fd` is not available on the host.
- ▌ Jo · petr-korobeinikov bundlePrefers `jo` (https://github.com/jpmens/jo) for constructing JSON in shell snippets over hand-written quoted JSON literals. Removes quote-escaping pitfalls, makes variable interpolation natural, and lets `jo` infer field types from values (with explicit coercion when needed).
- ▌ Act · petr-korobeinikovSecond line of defence after actionlint: runs GitHub Actions workflows locally with act (nektos/act) to check they actually work, not just that they parse. Proposes the run on a workflow commit; never blocks it.
- ▌ Tee · petr-korobeinikovReplaces the agent's reflex of piping a command straight through `tail -n N` or `head -n N` with `tee` to a file inside a `mktemp -d` directory followed by the same `tail` / `head`. The truncated view stays the same; the full output stays recoverable. Skipped for outputs expected to be very long.
- ▌ Mise · petr-korobeinikovConfigures mise as the sole runtime and CLI tool manager for a project. Every mise.toml carries [settings] disable_backends = ["ubi", "asdf"] and lockfile = true, pins every version fully, commits mise.lock, routes Python CLIs through pipx and Node CLIs through npm, and rejects competing managers (brew/nvm/asdf/volta/fnm/pyenv/ubi).
- ▌ Roast · petr-korobeinikovPerforms a direct critical review of an artifact (file, plan, idea, skill, snippet) by holding it to its own goals. Surfaces substantive problems first, triages by impact, and stops at findings without proposing fixes.
- ▌ Sembr · petr-korobeinikovReformats prose using Semantic Line Breaks (https://sembr.org/) — strictly, no compromises. Never alters wording or rendered output.
- ▌ Which · petr-korobeinikovForbids using the `which` command to check whether a command exists or to resolve its path. Always use the POSIX shell builtin `command -v` instead.
- ▌ Mktemp D · petr-korobeinikovForbids creating temporary files or directories at hardcoded paths under `/tmp`. Always allocate a private directory with `mktemp -d` and place every temporary artifact inside it.
- ▌ Skill New · petr-korobeinikovScaffolds a new skill in the current project, following the project's existing skill layout.
- ▌ Ssh Audit · petr-korobeinikovAudit the crypto posture of an SSH server or client with jtesta/ssh-audit — key-exchange, host-key, cipher and MAC algorithms, plus non-crypto checks (the DHEat DoS, CVE-2002-20001, and Terrapin, CVE-2023-48795). Installs cleanly through the mise skill (pipx, isolated venv, zero dependencies, nothing on the target — the scan is remote). Reads the fail/warn/rec output, then turns findings into concrete sshd_config directives via the tool's built-in hardening guides — without prescribing how you deploy them.
- ▌ Actionlint · petr-korobeinikovValidates GitHub Actions workflow files with actionlint before they are committed, so obviously broken workflows never land in the repository. Installs actionlint through the mise skill when the project lacks it.
- ▌ Dockerfile · petr-korobeinikov bundleCompose, optimize, and fix Dockerfiles for fast, cache-friendly builds and the smallest secure final image — multi-stage, deps-before-source layer caching, and a final base driven toward scratch / distroless / slim. Keeps builds portable when BuildKit is unavailable and secrets out of layers, runs non-root, pins bases, and gates on a linter.
- ▌ Npx Skills · petr-korobeinikovDocuments the `npx skills` CLI for installing and updating agent skills, plus the project-level `skills-lock.json` lockfile. On start, detects a `skills-lock.json` without installed skills under `.claude/skills/` and proposes restoring them via `npx skills add … --copy -y` per the source recorded in the lockfile.
- ▌ Git Flow Next · petr-korobeinikovInstalls git-flow-next (the actively maintained Tower / gittower fork documented at https://git-flow.sh/) via mise's aqua backend, initializes the classic Gitflow preset, configures rebase as the upstream merge strategy for feature branches with a contributor-side interactive rebase that collapses the branch into a single commit with a hand-written message before finish, and runs the feature / release / hotfix flow with `git flow …` commands.
- ▌ Vcs Commit Msg · petr-korobeinikovWrites commit messages that match the project's existing style — detected from history, asked when the signal isn't strong enough, and never mentioning an AI agent or model in any form. Git is primary; the same flow applies to other popular VCS (hg, jj, svn) by analogy.
- ▌ Dependency Audit · petr-korobeinikov bundleA hard pre-adoption gate for every third-party dependency, in any language. Before a new package — or a major version bump — is added in js, go, python, kotlin, rust, ruby, java, anything: resolve its exact identity, scan it for known CVEs, review its supply-chain behaviour on socket.dev and snyk, then install it inside a disposable, network-isolated Docker container with no host mounts to inspect its full transitive dependency tree and what it runs at install time. Nothing enters the project until it passes.
- ▌ Shell Snippet Fmt · petr-korobeinikovFormats shell commands and scripts meant for copy-paste, execution, or visual inspection so every line stays within 120 columns, with an explicit `\` line continuation at safe break points.
- ▌ Vcs Identity Check · petr-korobeinikovVerifies the VCS author identity (name + email) is set correctly before committing, and recommends configuring commit signing (GPG or SSH) when it isn't already set up.