Skills for your AI
Defines SLIs/SLOs, manages error budgets, reduces toil, and designs fault-tolerant systems from provided reliability data. Use when assessing reliability posture, setting SLO targets and burn rate policies, automating incident response, planning chaos experime
Hunts and confirms SSRF vulnerabilities on authorized targets through URL-input surface mapping, out-of-band callback validation, and sink attribution. Use when the user asks to test for SSRF, map URL-accepting parameters, validate blind or full-read SSRF, pro
Sets up StackHawk API security testing for a repository by assessing its attack surface, generating stackhawk.yml and a GitHub Actions workflow, and opening a draft pull request. Use when a user asks to add StackHawk security testing, check if a repo is a good
Checks Railway project status, deployments, and uptime for a linked project using the Railway CLI. Use when the user asks for Railway status, deployment state, uptime, or before any Railway operation in this directory.
Plans, optimizes, and secures data storage across backup and DR, archiving, deduplication, encryption, virtualization, performance, capacity, vendor selection, migration, and cloud adoption. Use when the user asks for storage plans, comparisons, policies, blue
Provides structured debugging support covering root cause analysis, error message interpretation, execution tracing, test design, refactoring, code review, performance optimization, team communication, and debugging documentation. Use when a user shares a bug,
Hunts and verifies subdomain takeover vulnerabilities on authorized domains using DNS and HTTP checks, provider fingerprints, and impact analysis. Use when the user asks to enumerate subdomains, detect takeover indicators, verify claimability, assess impact, o
Analyzes and optimizes Supabase realtime WebSocket connections, subscriptions, and monitoring, and diagnoses connection failures. Use when realtime latency, throughput, or dropped connections need investigation, when subscription filters must be optimized, whe
Prepares crisis communication, risk assessment, response planning, sentiment monitoring, training, post-crisis analysis, legal guidance, reputation recovery, and hotline support for Senior Vice Presidents. Use when planning or running crisis response, drafting
Designs and refines IT system architectures across requirements, analysis, technology selection, documentation, risk, scalability, integration, compliance, high availability, and modern patterns. Use when a consultant needs architecture analysis, options, plan
Plans system integration projects end-to-end, covering data mapping, interface design, testing, error handling, security, performance, documentation, API strategy, migration, vendors, scalability, change management, data sync, training and continuous improveme
Analyzes logs, metrics, alerts, and infrastructure data to detect anomalies and recommend actions for IT monitoring. Use when reviewing logs, tracking performance or uptime, checking hardware or network health, detecting security incidents, optimizing database
Runs security assessments for systems analysts — vulnerability scanning, penetration testing, policy review, risk, compliance, architecture, training, incident response, audits and tool evaluation. Use when planning, executing or documenting any of these asses
Test-driven development skill for writing unit tests, generating test fixtures and mocks, analyzing coverage gaps, and guiding red-green-refactor workflows across Jest, Pytest, JUnit, Vitest, and Mocha. Use when the user asks to write tests, improve test cover
Improves code quality, security, and design through test-driven refactoring while keeping tests green and GitHub issues compliant. Use when refactoring code, hardening security, improving architecture, or verifying acceptance criteria against a linked GitHub i
Scan codebases for technical debt, score severity, track trends, and generate prioritized remediation plans. Use when users mention tech debt, code quality, refactoring priority, debt scoring, cleanup sprints, or code health assessment. Also use for legacy cod
Evaluates and optimizes a company's tech stack across performance, cost, security, and future readiness, producing comparison reports, POC plans, vendor matrices, and optimization guides. Use when comparing stack options or vendors, assessing security, scalabi
Technology stack evaluation and comparison with TCO analysis, security assessment, and ecosystem health scoring. Use when comparing frameworks, evaluating technology stacks, calculating total cost of ownership, assessing migration paths, or analyzing ecosystem
Guides technology integration assessments covering data analysis, vendor evaluation, cost-benefit, risk, compatibility, change management, implementation planning, training, performance monitoring, and workflow optimization. Use when a service manager needs to
Assesses technology risks across infrastructure, policy, threats, vendors, data, cloud, mobile, emerging tech, and digital transformation for insurance risk analysts. Use when an analyst needs a structured risk assessment, gap analysis, threat model, or mitiga
Generates compliant Terraform configurations, resolves provider and module versions from public or private registries, orchestrates HCP Terraform workspaces and runs, and runs security scans. Use when the user asks for Terraform code, registry version lookups,
Creates, reviews, validates and standardises Azure Terraform configurations from planning files or user requests. Use when the user asks to write new Azure .tf code, review or refactor existing Terraform, run validate/fmt/tflint/terraform-docs, apply Azure bes
Produces a deterministic, markdown Azure Terraform implementation plan under .terraform-planning-files/ from specs or codebase analysis, covering resource planning, diagrams, WAF alignment and phases. Use when asked to plan Azure Terraform infrastructure, clas
Designs and implements reusable Terraform modules with remote state management, security scanning, and CI/CD approval gates across AWS, Azure, and GCP. Use when analyzing IaC maturity, building or refactoring modules, setting up state backends, pipelines, mult
