Skills for your AI
Produces regression testing plans, test case lists, test data, environment setup guides, execution and automation strategies, defect reports, impact analyses, CI and parallel testing designs, smoke and performance plans, and risk-based strategies. Use when pla
Runs server-enforced STRIDE and LINDDUN threat models with live CVE data and EU regulatory grounding. Use when the user asks for a threat model, dependency vulnerability screen, or which EU security obligations (GDPR, NIS2, CRA, AI Act) apply to a system.
Runs a fixed release checklist covering pre-flight checks, release staging, post-deploy monitoring, rollback readiness, and release history. Use when preparing, staging, watching, or reviewing a software release.
Assesses and hardens remote work infrastructure across network security, VPN, cloud collaboration, VDI, endpoints, bandwidth, policy, disaster recovery, and user support, returning findings and recommendations only. Use when analyzing remote access logs, recom
Analyzes a codebase and generates Render Blueprint (render.yaml) files, selects deployment methods, verifies prerequisites, and guides deployment to Render. Use when deploying an app to Render, generating or validating a render.yaml, setting up Render MCP, or
Integrates the Resend email channel into a chat SDK by copying and registering the adapter, installing the pinned package, validating the build and tests, storing credentials, and wiring the owner's email. Use when setting up Resend email, adding the Resend ch
Builds and fixes responsive web layouts with CSS Grid, Flexbox, container queries, and fluid typography, delivering mobile-first code in Tailwind CSS or plain CSS. Use when the user describes a layout need, shows a broken or non-adapting layout, or asks for br
Turns incident reports, inspection data, procedures, and site details into hazard checklists, risk assessment templates, investigation protocols, and trend analyses for health and safety specialists. Use when reviewing incident patterns, building inspection or
Assesses technology risks, compliance gaps, threats, controls, continuity, vendors, and incident readiness from owner-provided data. Use when a technology manager needs vulnerability prioritization, policy review, threat modeling, control assessment, impact an
Builds a decision-grade root-cause Pareto for downtime, defects, complaints, or delays with unit-of-measure discipline, category hygiene, exposure normalization, and stability checks. Use when the user supplies incident, defect, complaint, or delay data and wa
Analyzes production incidents with Rootly data to gather context, find similar past incidents, suggest solutions, coordinate on-call engineers, plan remediation, and document resolutions. Use when given an incident ID or production issue description, when find
Generate operational runbooks from a service name — deployment, incident response, maintenance, and rollback workflows. Templated structure customizable per environment. Use when documenting on-call procedures for a new service, standardizing incident response
Generates complete, production-ready SaaS project boilerplate including authentication, database schemas, billing integration, API routes, and a working dashboard using Next.js 14+ App Router, TypeScript, Tailwind CSS, shadcn/ui, Drizzle ORM, and Stripe. Use w
Turns workplace safety data into structured hazard analyses, risk assessments, control evaluations, JSAs, incident investigations and compliance reports. Use when a safety engineer needs hazards identified from incident or inspection data, risks scored and pri
Supports the full risk assessment lifecycle—hazard identification, risk ranking, control measures, documentation, compliance, training, and incident investigation—for health and safety specialists. Use when identifying workplace hazards, prioritizing risks, de
Drafts and reviews school safety protocols across emergency preparedness, security, training, communication, threat assessment, policy, partnerships, mental health, and cybersecurity. Use when a principal needs emergency plans, drills, security audits, trainin
Generates publication-quality scientific diagrams from natural language descriptions using iterative AI generation with quality review. Use when the user wants a scientific figure, flowchart, pathway, or architecture diagram created for a paper, thesis, grant,
Converts UI screenshots into clean, responsive HTML/CSS, React, Vue, or Next.js code by analyzing layout, components, colors, and spacing. Use when the user shares a UI screenshot and wants front-end code, asks to convert a design image to code, or requests a
Triages deployment failures, fixes CI/CD pipeline and build issues, enforces security and reliability standards, plans monitoring and rollbacks, and debugs systematically. Use when a deployment fails, a build breaks, pipelines need hardening, or rollback and m
Reviews code changes for AI/ML bias, accessibility barriers, privacy violations, and ethical risk, producing test reports, fix code, and RAI-ADR documentation. Use when a change involves AI/ML decisions, user-facing features, or personal data handling.
Reviews code for security vulnerabilities using OWASP Top 10, OWASP LLM Top 10, Zero Trust, and reliability checks, producing prioritized findings with vulnerable and secure code examples. Use when asked to security-review code, plan a review, check LLM or API
Reviews system architecture for security, scalability, reliability, cost, and AI-specific concerns using Well-Architected frameworks, and drafts Architecture Decision Records. Use when a user shares a system design, diagram, or architecture description and ask
Use when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager), implement secret rotation, or audit secret access patterns.
Guides secure software development across threat modeling, secure coding review, testing plans, hardening, deployment, documentation, training, incident response, compliance, and cross-cutting security concerns. Use when a cybersecurity analyst needs security
