Skills for your AI
Designs and executes ISO 27001 ISMS audit programs, risk-based audit plans, security control assessments, technical testing integration, and compliance audits. Use when planning an audit program, prioritizing audits by risk, auditing controls against ISO 27001
/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation. Use before annual Clause 9.2 internal audit, surveillance audit prep, or stage 1 certification readiness.
Designs and documents AI-driven IT automation solutions across the IT lifecycle, from data analysis and integration to deployment, monitoring, security, and reporting. Use when an IT consultant needs automation blueprints, scripts, workflow designs, monitoring
Guides IT project managers through conflict resolution, from assessment and solution generation to action planning, mediation, monitoring, and post-resolution learning. Use when a conflict arises or is reported, when parties need to reach agreement, when imple
Provides IT operations frameworks for incident management, monitoring and observability, change management, capacity planning, automation, alert tuning, crisis documentation, and knowledge transfer. Use when handling alerts or outages, defining SLIs/SLOs, asse
Coordinates multi-domain IT operations by decomposing tasks, routing them to specialist agents, sequencing and merging their outputs, and enforcing safety review gates. Use when a request spans PowerShell, .NET, Windows, Azure, M365, or security domains, when
Drafts and reviews IT policies, compliance assessments, risk and vulnerability plans, training, incident and disaster plans, vendor and asset procedures, and audit preparation. Use when the user asks to create, review, or improve an IT policy, prepare for an a
Guides IT support staff through security best practices and response planning across passwords, encryption, network security, phishing, patching, incident response, mobile devices, training, audits, backup, and physical security. Use when drafting security gui
Removes tech debt from a codebase by deleting unused code, simplifying complexity, cleaning dependencies, tests, docs and infrastructure as code. Use when asked to find dead code, simplify nested logic, audit dependencies, prune flaky or duplicate tests, clean
Designs enterprise Java and Spring Boot architectures, plans migrations, and implements cloud-native microservices. Use when analyzing Java project structure, planning Java or Spring Boot upgrades, designing microservices, implementing or optimizing Java code,
Audits JWT-based authentication for bypass and implementation flaws such as algorithm confusion, weak HMAC secrets, header injection, and missing claim validation. Use when testing a web or mobile app that uses JWTs, reviewing captured tokens, or planning auth
Queries KEGG pathways, genes, compounds, enzymes, diseases and drugs through the public REST API and returns raw or formatted results. Use when the user needs KEGG database info, entry lists, keyword or formula searches, full entries or sequences, ID conversio
Designs, implements, and modernizes Kotlin codebases using coroutines, Kotlin Multiplatform, functional patterns, and Ktor. Use when analyzing Kotlin architecture, refactoring to Flow and structured concurrency, sharing code across platforms, building DSLs, ru
Use when building a Kubernetes Operator — custom controllers that reconcile CRD state. Triggers on "build an operator", "CRD design", "reconcile loop", "controller-runtime", "kubebuilder", "operator-sdk", "metacontroller", "KOPF", "operator capability levels",
Hunts Kubernetes and Docker misconfigurations for RCE and credential disclosure, covering anonymous API access, kubelet exec/run, etcd exposure, docker.sock escapes, and RBAC issues. Use when auditing containerized infrastructure, probing ports 6443/10250/1025
Designs, deploys, hardens, and troubleshoots production Kubernetes clusters across architecture, security, workloads, storage, multi-tenancy, service mesh, GitOps, and observability. Use when planning a cluster, auditing CIS/RBAC security, deploying or scaling
Runs KQL queries against Azure Data Explorer clusters to answer data questions, discover schemas, sample tables, and list clusters or databases. Use when the user asks about data in an ADX cluster, provides a cluster URI or database name, wants KQL written or
Builds, optimizes, tests and upgrades Laravel 10+ applications covering Eloquent, queues, APIs, events and performance. Use when planning Laravel architecture, fixing N+1 queries, writing Pest tests, upgrading legacy Laravel versions, or setting up Horizon, Sa
Hunts LDAP and XPath injection vulnerabilities in web applications, covering backend confirmation, auth bypass, blind attribute exfiltration, and directory enumeration. Use when testing a login or search feature for LDAP/XPath injection, confirming an injectab
Sets up multi-language support in web apps by following a strict i18n checklist, from project analysis through code changes and build validation. Use when adding i18n to a React, Vue, or similar project, fetching framework i18n docs, wrapping UI strings, or re
Audit named agent instructions, tool definitions, and supported Python prompts with local LintLang checks; return finding codes and locations without changing files.
Designs and executes load tests to find system bottlenecks and capacity limits, analyzing results and recommending optimizations. Use when the user provides SLA documents, wants performance requirements defined, needs load test scenarios or scripts, wants prog
Guides a full local bug bounty workflow — recon, scope verification, pre-hunt learning, vulnerability hunting, AI/LLM testing, bug chaining, bypass testing, code grep, and reporting. Use when starting a hunt, verifying scope, testing a bug class, chaining bugs
Turns a repository goal into an orchestrated outer loop from goal definition through merge, writing /goal-style prompts with testable proof and running the gather, prompt, launch, review, merge cycle. Use when the user wants an engineering goal turned into a s
