Skills for your AI
Automates Git Flow branching, merging, releases, pull requests, and commit standardization in a git repository. Use when the user asks to create, finish, or clean up feature/release/hotfix branches, manage a release, generate a pull request, standardize commit
Designs and optimizes Git workflows, branching strategies, merge management, automation, releases, and monorepo structure for teams. Use when a team lacks a clear Git strategy, hits merge conflicts, needs branch protection or hooks, plans releases, or manages
Generates production-ready GitHub Actions workflow YAML from project analysis, covering CI, deployment, release, scheduled, security scanning, and Docker build workflows. Use when the user asks to create, set up, or secure a GitHub Actions workflow, or asks wh
Designs, secures, and audits GitHub Actions workflows with least-privilege permissions, pinned actions, OIDC authentication, and supply-chain scanning. Use when creating or optimizing CI/CD workflows, setting up OIDC cloud auth, adding security scanning, audit
Adds Google Chat channel integration to a NanoClaw project by applying the adapter, configuring Google Cloud credentials, verifying the webhook endpoint, troubleshooting, or removing the integration. Use when the user wants Google Chat support in NanoClaw, nee
Guides authentication and authorization for Google Cloud services and APIs, covering human users, service identities, ADC, IAM, and identity types. Use when a user asks how to authenticate to Google Cloud, how to authorize access with IAM, or how to set up wor
Investigates Google Cloud networking issues by analyzing VPC Flow, NAT, firewall and threat logs, metrics, and Connectivity Tests. Use when asked about denied traffic, top talkers, NAT port exhaustion, latency or RTT, path diagnostics, or any VPC traffic quest
Guides a solo developer through first-time Google Cloud setup — account, billing, project, gcloud CLI, and first resource deployment — with step-by-step instructions and progress checks. Use when someone is starting with Google Cloud, activating the free trial
Evaluates Google Cloud workloads against the Well-Architected Framework Cost Optimization pillar and produces prioritized recommendations. Use when a user wants a cost posture assessment, a cost optimization report, framework rationale, or product suggestions
Evaluates Google Cloud workloads against the Well-Architected Framework Reliability pillar, producing assessments, prioritized recommendations, and validation checklist statuses. Use when a user describes a Google Cloud workload, asks for a reliability assessm
Assesses Google Cloud workloads against the security pillar of the Google Cloud Well-Architected Framework and produces prioritized, framework-grounded recommendations. Use when the user describes a Google Cloud workload for security review, asks what to fix f
Analyzes and fixes GraphQL API performance bottlenecks such as N+1 queries, resolver inefficiency, caching gaps, and slow federation entity resolution. Use when list queries are slow, queries need complexity or depth limits, persisted queries or CDN caching ar
Audits GraphQL APIs for vulnerabilities and implements authorization, query validation, introspection control, rate limiting, and attack protections. Use when reviewing a GraphQL API for security, fixing unauthorized field access, adding depth/complexity limit
Supports green infrastructure planning work — site analysis, stakeholder engagement, cost-benefit and design analysis, policy research, funding identification, monitoring, and project-type guidance. Use when an environmental consultant needs site suitability a
Audits gRPC endpoints for reflection enumeration, missing auth, trust-boundary bypass, plaintext transport, proto leakage, transcoding injection, and HTTP/2 Rapid Reset DoS. Use when testing authorized gRPC services, confirming gRPC transport, enumerating serv
Finds and verifies Host header injection vulnerabilities in authorized web targets, covering password reset poisoning, cache poisoning, routing and path-override SSRF, and OAuth/OIDC poisoning. Use when testing a target's forgot-password flow, CDN or reverse-p
Plans and drafts HR crisis response materials — communication plans, employee support programs, compliance briefs, risk assessments, training packages, policies, incident response plans, continuity plans, and team charters. Use when the EVP of HR needs crisis
Handles HRIS security and compliance work including access control, encryption, privacy impact assessments, compliance monitoring, incident response, audit trails, training, retention, policy enforcement, and vendor management. Use when reviewing HRIS access,
Loads the correct attack capability set for an authorized /hunt engagement by establishing engagement context, running a 404 baseline, fingerprinting hosts, and selecting platform capabilities. Use when starting a /hunt run, when the mode (redteam or wapt) and
Hunts IDOR vulnerabilities in web applications by mapping object references, replaying requests across accounts, testing cross-tenant and GraphQL access, chaining leaks, and documenting findings. Use when a security researcher has authorized access to a target
Generates realistic portrait mobile app screen mockups (iOS or Android) for pitches and previews, including style spec, prompt log and numbered PNGs. Use when the user asks for app screen mockups, onboarding or flow screens, or a visual preview of a mobile app
Adds an iMessage channel to a NanoClaw installation by selecting a local or hosted backend, copying and registering the adapter, installing pinned packages, configuring credentials, restarting the service, and resolving the owner handle. Use when the user want
Generates structured, AI-executable implementation plans for features or refactoring, validated against a mandatory template and saved to /plan/. Use when the user requests a plan for a feature or refactoring, asks to check or update an existing plan's status,
Designs, analyzes, and balances in-game economies—currencies, item pricing, trading systems, monetization, and compliance. Use when a developer needs economy analysis from player data, currency or pricing design, resource and reward balancing, trading or aucti
