5.8K skills · sorted by relevance
You are a workflow automation expert specializing in creating efficient CI/CD pipelines, GitHub Actions workflows, and automated development processes. Design and implement automation that reduces manual work, improves consistency, and accelerates delivery while maintaining quality and security.
The English summary is being prepared. Showing the original description.
Expert Terraform/OpenTofu specialist mastering advanced IaC automation, state management, and enterprise infrastructure patterns. Handles complex module design, multi-cloud deployments, GitOps workflows, policy as code, and CI/CD integration. Covers migration strategies, security best practices, and modern IaC ecosystems. Use PROACTIVELY for advanced IaC, state management, or infrastructure automation.
The English summary is being prepared. Showing the original description.
Git-aware undo by logical work unit (track, phase, or task)
The English summary is being prepared. Showing the original description.
You are a GitHub issue resolution expert specializing in systematic bug investigation, feature implementation, and collaborative development workflows. Your expertise spans issue triage, root cause analysis, test-driven development, and pull request management. You excel at transforming vague bug reports into actionable fixes and feature requests into production-ready code.
The English summary is being prepared. Showing the original description.
You are an expert AI-powered code review specialist combining automated static analysis, intelligent pattern recognition, and modern DevOps practices. Leverage AI tools (GitHub Copilot, Qodo, GPT-5, Claude 4.5 Sonnet) with battle-tested platforms (SonarQube, CodeQL, Semgrep) to identify bugs, vulnerabilities, and performance issues.
The English summary is being prepared. Showing the original description.
Composes GitHub Actions workflows. Reusable workflows, composite actions, matrix, caching.
The English summary is being prepared. Showing the original description.
Configures GitHub Actions .NET build/test -- setup-dotnet, NuGet cache, reporting.
The English summary is being prepared. Showing the original description.
Releases CLI tools. GitHub Actions build matrix, artifact staging, Releases, checksums.
The English summary is being prepared. Showing the original description.
Adds CI/CD to a .NET project. GitHub Actions vs Azure DevOps detection, workflow templates.
The English summary is being prepared. Showing the original description.
Create safe, deterministic git worktrees for large or risky workstreams. Use when tasks are complex enough to warrant isolation from the main working tree.
The English summary is being prepared. Showing the original description.
Build and maintain CI/CD pipelines, containerization, Kubernetes manifests, and quality gates. Use when tasks involve Docker, Kubernetes, GitHub Actions/Azure DevOps pipelines, deployment, reliability, or static analysis workflows.
The English summary is being prepared. Showing the original description.
Sync shared repo assets into local ~/.github and ~/.codex, and apply MCP settings from the shared canonical runtime catalog.
The English summary is being prepared. Showing the original description.
Sync shared repo assets into local ~/.github, ~/.codex, and ~/.claude, and apply MCP settings from the shared canonical runtime catalog. Use when runtime assets are stale or after onboarding a new machine.
The English summary is being prepared. Showing the original description.
Produce and maintain repository documentation and release artifacts including README files, PR descriptions, changelog entries, prompt templates, and instruction docs. Use when the user asks to create or update docs/process files under .github or project root.
The English summary is being prepared. Showing the original description.
Build and maintain CI/CD pipelines, containerization, Kubernetes manifests, and quality gates for this repository. Use when the user asks for Docker, Kubernetes, GitHub Actions/Azure DevOps pipelines, deployment, reliability, or static analysis workflows.
The English summary is being prepared. Showing the original description.
Produce and maintain repository documentation and release artifacts, including README files, PR descriptions, changelog entries, prompt templates, and instruction docs. Use when the user asks to create or update docs/process files under .github or project root.
The English summary is being prepared. Showing the original description.
Create safe, deterministic git worktrees for large or risky workstreams using the repository-owned runtime helper and Windows-safe defaults.
The English summary is being prepared. Showing the original description.
Git commit, branch, and pull request conventions for create-vue-dsfr. Use before creating commits, branches, issues, or PRs. This skill has priority over other project skills for commit and PR work.
The English summary is being prepared. Showing the original description.
Display project statistics — phases, plans, requirements, git metrics, and timeline
The English summary is being prepared. Showing the original description.
Safe git revert. Roll back phase or plan commits using the phase manifest with dependency checks.
The English summary is being prepared. Showing the original description.
Post-mortem investigation for failed GSD workflows — analyzes git history, artifacts, and state to diagnose what went wrong
The English summary is being prepared. Showing the original description.
Detects typosquatting attacks in npm and PyPI package registries by analyzing package name similarity using Levenshtein distance and other string metrics, examining publish date heuristics to identify recently created packages mimicking established ones, and flagging download count anomalies where suspicious packages have disproportionately low usage compared to their legitimate targets. The analyst queries the PyPI JSON API and npm registry API to gather package metadata for automated comparison. Activates for requests involving package typosquatting detection, dependency confusion analysis, malicious package identification, or software supply chain threat hunting in package registries.
The English summary is being prepared. Showing the original description.
Detect DLL side-loading attacks where adversaries place malicious DLLs alongside legitimate applications to hijack execution flow for defense evasion.
The English summary is being prepared. Showing the original description.
Detect abuse of legitimate Windows binaries (LOLBins) used for living off the land attacks. Monitors process creation, command-line arguments, and parent-child relationships to identify suspicious LOLBin execution patterns.
The English summary is being prepared. Showing the original description.