sawrus
- 61 skills
- 0 followers
- 1 week ago last updated
- ▌ API Design Principles · sawrus bundleREST API design decisions — URL conventions, error contracts, versioning, pagination, idempotency, auth patterns.
- ▌ Prompt Project Planner · sawrus bundleInteractive project planning skill. Collects context, asks clarifying questions, selects rules/skills/workflows, and produces an execution-ready plan.
- ▌ Prometheus Alertmanager · sawrusWrite production-quality Prometheus alert rules, recording rules, and Alertmanager routing configs.
- ▌ CSS Architecture · sawrusStructure CSS/Tailwind for maintainability — tokens, BEM naming, specificity control, responsive patterns.
- ▌ General Dev Tools · sawrusCore development tools used across any project — git, docker, make, CI/CD, linting, formatting, pre-commit hooks.
- ▌ Github Actions Patterns · sawrusProduction-grade GitHub Actions workflows — reusable workflows, OIDC cloud auth, caching, matrix builds, and environment protection rules. Use when the user creates, reviews, or debugs CI/CD pipelines in .github/workflows, or asks about GitHub Actions deployment, OIDC authentication, or workflow optimization.
- ▌ Migration Safety · sawrusSafe database migrations in production — expand-and-contract, lock-safe DDL, timing estimation, rollback SQL.
- ▌ Redis Operations · sawrusRedis operational runbooks — memory management, eviction policy, persistence config, Sentinel/Cluster, K8s-hosted Redis ops.
- ▌ Container Hardening · sawrusHarden container images and Kubernetes workload security contexts — distroless, multi-stage, minimal attack surface.
- ▌ Cluster Operations · sawrusDay-2 cluster operations — node management, etcd backup/restore, certificate rotation, namespace lifecycle.
- ▌ Log Aggregation · sawrusSet up Loki or ELK log aggregation for K8s workloads — structured logging, log routing, and log-based alerting.
- ▌ Drift Detection · sawrusDetect, classify, and automate Terraform drift detection in CI — scheduled plans, drift metrics, cloud-native audit log correlation.
- ▌ Pod Troubleshooting · sawrusSystematic diagnosis of Kubernetes pod failures — CrashLoopBackOff, OOMKilled, Pending, ImagePullBackOff, and service connectivity issues. Use when the user encounters pods not starting, container restart loops, scheduling failures, or service unreachability in a K8s cluster.
- ▌ Backend Developer · sawrusSpecialized skill for Python backend development using FastAPI, SQLAlchemy, and Pydantic.
- ▌ State Management · sawrusManage Terraform remote state — backend setup, state isolation, locking, import, mv, and state surgery.
- ▌ Postgres Operations · sawrusPostgreSQL operational runbooks — health checks, vacuum, bloat, locks, PITR, connection pool management.
- ▌ Ansible Playbooks · sawrusWrite idempotent Ansible playbooks and roles for server configuration, K8s node provisioning, and application bootstrap.
- ▌ Cost Optimization · sawrusIdentify and reduce cloud infrastructure costs — right-sizing, reserved capacity, waste detection, tagging for cost attribution.
- ▌ Terraform Modules · sawrusDesign reusable, well-tested Terraform modules with cloud-agnostic interfaces and safe state management.
- ▌ Grafana Dashboards · sawrusDesign and maintain Grafana dashboards — service overview panels, SLO tracking, variable templates, dashboard-as-code with Grafonnet/Jsonnet.
- ▌ Slo Implementation · sawrusImplement SLOs end-to-end in Prometheus — recording rules, burn rate alerts, error budget dashboards, and Sloth/pyrra integration.
- ▌ Distributed Tracing · sawrusImplement distributed tracing with OpenTelemetry, Tempo/Jaeger — instrumentation, sampling, and trace-to-log correlation. Use when the user asks about distributed tracing, OpenTelemetry setup, span instrumentation, trace propagation, or connecting traces to logs and metrics.
- ▌ Artifact Management · sawrusManage container images, Helm charts, and build artifacts — registry organization, retention, promotion between environments.
- ▌ Dns Management · sawrusDNS management for Kubernetes — CoreDNS tuning, external-dns automation, split-horizon DNS, and bare-metal DNS design.
- ▌ Troubleshooting · sawrusSystematic backend debugging — reproduce, isolate root cause, implement fix with regression test.
- ▌ Test Data Management · sawrusManage test data with factories, fixtures, isolation strategies, and cleanup to prevent test pollution.
- ▌ Secret Detection · sawrusDetect secrets in code, git history, and running containers — pre-commit hooks, CI scanning, and incident response for exposed credentials.
- ▌ Sigstore Signing · sawrusSign container images and artifacts with cosign (keyless via OIDC and key-based); verify signatures in CD pipelines and admission policies.
- ▌ Resource Tuning · sawrusRight-size pod resources, configure HPA/VPA/KEDA, and eliminate resource waste in Kubernetes.
- ▌ Tls Termination · sawrusConfigure TLS termination with cert-manager — Let's Encrypt, internal CA via Vault PKI, wildcard certs, mTLS between services.
- ▌ Async Processing · sawrusDesign and implement async task queues, message consumers, and background job patterns.
- ▌ Blackbox Testing · sawrusAutomates end-to-end and system validation tests. Runs services via Docker, feeds inputs, executes scenarios, and verifies outputs.
- ▌ Accessibility Testing · sawrusRun automated WCAG audits, manual keyboard/screen reader testing, and CI a11y gates.
- ▌ Threat Modeling · sawrusApply STRIDE threat modeling to system designs, identify IDOR and authorization vulnerabilities, and build threat matrices for security reviews. Use when the user designs a new system, reviews an architecture, prepares for a security audit, or asks about common API vulnerabilities like IDOR or broken access control.
- ▌ Backup Restore · sawrusPostgreSQL backup and restore with pgBackRest — full/incremental/WAL, PITR, K8s CronJob scheduling, and restore verification.
- ▌ DB Performance · sawrusPostgreSQL query performance — EXPLAIN ANALYZE, index design, pg_stat_statements, slow query detection, connection pool tuning.
- ▌ Sbom Supply Chain · sawrusGenerate, attach, and verify SBOMs (CycloneDX/SPDX) for container images; implement SLSA provenance; harden software supply chain.
- ▌ Network Policies · sawrusDesign and implement Kubernetes NetworkPolicy and Cilium network policies for namespace isolation and service-to-service access control.
- ▌ Ingress Patterns · sawrusNGINX Ingress Controller patterns — TLS, rate limiting, CORS, rewrites, path-based routing, and MetalLB for bare-metal.
- ▌ Database Modeling · sawrusDesign relational schemas, write efficient queries, plan indexes, and implement safe migrations.
- ▌ Component Design · sawrusDesign reusable React components with compound patterns, controlled/uncontrolled hybrids, typed prop APIs, async state handling, and ARIA accessibility. Use when the user creates, refactors, or reviews React components, or mentions props, hooks, .tsx files, component APIs, or accessible UI patterns.
- ▌ API Testing · sawrusWrite API integration tests and consumer-driven contract tests (Pact) for service boundaries.
- ▌ E2e Patterns · sawrusWrite robust E2E tests with Playwright — page objects, resilient waiting, auth, and CI integration.
- ▌ Test Pyramid · sawrusDecide what type of test to write, structure the suite, measure health, and apply test doubles correctly.
- ▌ Slo Sli Design · sawrusDefine SLIs, SLOs, and error budgets; implement burn rate alerts; integrate with Prometheus.
- ▌ Incident Command · sawrusStructured incident command for P0/P1 — roles, timeline, communication templates, and mitigation-first approach.
- ▌ API Design · sawrusDesign and implement REST APIs with consistent conventions, versioning, error contracts, and security.
- ▌ Vpc Design · sawrusDesign cloud-agnostic private networks — subnet layout, CIDR allocation, zone redundancy, routing, and bare-metal equivalent.
- ▌ Capacity Planning · sawrusForecast infrastructure capacity needs — traffic projection, resource headroom calculations, node pool sizing, K8s cluster capacity.
- ▌ Chaos Engineering · sawrusDesign and run chaos experiments in Kubernetes — pod failures, network partitions, resource pressure with LitmusChaos and manual chaos.
- ▌ Opa Policies · sawrusWrite OPA/Gatekeeper and Kyverno admission policies for Kubernetes security guardrails.
- ▌ Helm Charts · sawrusDesign, structure, and test production-grade Helm charts with multi-environment overlays.
- ▌ Rbac Design · sawrusDesign minimal-privilege RBAC for workloads, operators, and human access in multi-tenant clusters.
- ▌ Pipeline Security · sawrusSecure CI/CD pipelines with keyless signing, OIDC federation, provenance attestations, policy enforcement, and hardened runners.
- ▌ Service Mesh · sawrusImplement service mesh for mTLS, traffic management, and observability — Istio and Linkerd patterns for Kubernetes.
- ▌ Postmortem Analysis · sawrusWrite blameless postmortems with 5-whys RCA, actionable follow-ups, and systematic prevention measures.
- ▌ Observability · sawrusImplement structured logging, distributed tracing, and metrics for production-ready backend services.
- ▌ Build Optimization · sawrusOptimize CI build speed — Docker layer caching, dependency caching, multi-stage builds, parallelism, and build matrix strategies.
- ▌ Gitlab CI Patterns · sawrusGitLab CI/CD pipelines — include templates, environments, OIDC auth, caching, protected runners, deployment gates.
- ▌ App Builder · sawrus bundleOrchestrate full-stack application scaffolding — determine project type, select tech stack, coordinate agents, scaffold structure.
- ▌ Performance Testing · sawrusDesign and execute load/stress tests with k6, establish SLO baselines, and identify bottlenecks.