security-assessment
Execute threat modeling, vulnerability scanning, and security control validation. Use when relevant to the task.
Discover content media cicd skills, compare source repositories and read the instructions for each workflow.
Execute threat modeling, vulnerability scanning, and security control validation. Use when relevant to the task.
Review GitHub pull requests for code quality, security, and best practices. Use for automated PR feedback and approval workflows.
Generate comprehensive SDLC reports including iteration status, metrics dashboards, and executive summaries. Use when relevant to the task.
Orchestrate multi-agent artifact generation with the Primary Author → Parallel Reviewers → Synthesizer → Archive pattern. Use when relevant to the task.
Multi-stakeholder approval routing with status tracking and escalation. Use when relevant to the task.
Manage architecture changes with impact analysis, ADR generation, and migration planning. Use when relevant to the task.
Assesses workspace alignment and suggests cleanup or realignment actions at key transition points. Use when relevant to the task.
Validate AIWG configuration files and project setup for correctness and completeness. Use when relevant to the task.
Analyze test coverage, identify gaps, and recommend test improvements. Use when relevant to the task.
Dispatch a release using GitHub Actions. Use when asked to create a release, publish to npm, or start the release process.
Track complex, multi-session work with dependency graphs using bd (beads) issue tracker. Use when work spans multiple sessions, has complex dependencies, or requires persistent context across compaction cycles....
Infrastructure as Code with Terraform and Terragrunt. Use for creating, validating, troubleshooting, and managing Terraform configurations, modules, and state. Covers Terraform workflows, best practices, module...
Systematic Kubernetes troubleshooting and incident response. Use when diagnosing pod failures, cluster issues, performance problems, networking issues, storage failures, or responding to production incidents. P...
CI/CD pipeline design, optimization, DevSecOps security scanning, and troubleshooting. Use for creating workflows, debugging pipeline failures, implementing SAST/DAST/SCA, optimizing build performance, implemen...
GitOps deployment workflows with ArgoCD and Flux. Use for setting up GitOps (ArgoCD 3.x, Flux 2.7), designing repository structures (monorepo/polyrepo, app-of-apps), multi-cluster deployments (ApplicationSets,...
Turborepo monorepo management. Use when working with workspaces, build pipelines, caching, or monorepo-wide operations.
How to use the `cmach` toolchain: build/run/dep commands, options, and practical examples.
Four-phase debugging framework that finds root causes before proposing fixes. Use when investigating bugs, errors, unexpected behavior, failed tests, or when previous fixes haven't worked.
Git branching and commit best practices. Use when working with git branches, commits, or merges.
Use when setting up CI/CD, implementing versioning, optimizing workflows, or managing releases with monorepo development workflows including version management, publishing, and team collaboration practices.
Use when configuring GitLab CI/CD variables, managing secrets, or integrating with external secret providers. Covers secure credential handling.
Use automatically during development workflows when making claims about tests, builds, verification, or code quality requiring concrete evidence to ensure trust through transparency.
Use when configuring Sentry alerts, managing issues, or setting up notifications. Covers alert rules, issue triage, and integrations.
Use when configuring Maven plugins, setting up common plugins like compiler, surefire, jar, or creating custom plugin executions.
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.