本文へ移動
cccskills
無料GitHub で公開

anbu-skill

Standard Operating Procedures for backend development, bug fixing, DevOps, infrastructure deployment, and security hardening.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konohaスター 13(GitHub 13 + cccskills 0)
連携ツールKubernetesPlaywright

実行スコア 未検証

インストール方法を見る

含まれるファイル（168）

  • SKILL.md9.2 KB
  • references/ai-llm-integration-expert.md24.7 KB
  • references/ai-media-generation-expert.md6.5 KB
  • references/ai-prompt-engineering-expert.md8.6 KB
  • references/api-design-expert.md10.0 KB
  • references/api-gateway-proxy-expert.md4.7 KB
  • references/apple-ecosystem-expert.md7.1 KB
  • references/async-queue-temporal-expert.md8.8 KB
  • references/authentication-identity-expert.md6.6 KB
  • references/blockchain-web3-expert.md4.2 KB
  • references/browser-automation-expert.md11.8 KB
  • references/bun-runtime-expert.md7.6 KB
  • references/chatbot-messaging-expert.md4.4 KB
  • references/ci-cd-devops-architect.md4.9 KB
  • references/cloud-hosting-expert.md9.1 KB
  • references/cron-scheduler-expert.md10.4 KB
  • references/data-pipeline-etl-expert.md4.7 KB
  • references/data-visualization-expert.md6.2 KB
  • references/database-orm-expert.md8.0 KB
  • references/devops-engineer-assets/references/deployment-strategies.md4.8 KB
  • references/devops-engineer-assets/references/docker-patterns.md2.7 KB
  • references/devops-engineer-assets/references/github-actions.md3.1 KB
  • references/devops-engineer-assets/references/incident-response.md8.4 KB
  • references/devops-engineer-assets/references/kubernetes.md3.0 KB
  • references/devops-engineer-assets/references/platform-engineering.md8.9 KB
  • references/devops-engineer-assets/references/release-automation.md11.0 KB
  • references/devops-engineer-assets/references/terraform-iac.md3.1 KB
  • references/devops-engineer.md6.4 KB
  • references/distributed-systems-assets/checklists/circuit-breaker-setup.md11.4 KB
  • references/distributed-systems-assets/checklists/distributed-locks-checklist.md2.7 KB
  • references/distributed-systems-assets/checklists/idempotency-checklist.md1.9 KB
  • references/distributed-systems-assets/checklists/pre-deployment-resilience.md4.7 KB
  • references/distributed-systems-assets/checklists/rate-limiting-checklist.md4.5 KB
  • references/distributed-systems-assets/examples/fastapi-rate-limiting.md9.8 KB
  • references/distributed-systems-assets/examples/idempotency-examples.md15.6 KB
  • references/distributed-systems-assets/examples/orchestkit-workflow-resilience.md19.6 KB
  • references/distributed-systems-assets/references/bulkhead-pattern.md12.5 KB
  • references/distributed-systems-assets/references/circuit-breaker.md6.5 KB
  • references/distributed-systems-assets/references/error-classification.md11.4 KB
  • references/distributed-systems-assets/references/llm-resilience.md17.8 KB
  • references/distributed-systems-assets/references/postgres-advisory-locks.md6.6 KB
  • references/distributed-systems-assets/references/redis-locks.md6.5 KB
  • references/distributed-systems-assets/references/redlock-algorithm.md7.8 KB
  • references/distributed-systems-assets/references/retry-strategies.md10.7 KB
  • references/distributed-systems-assets/references/stripe-pattern.md5.3 KB
  • references/distributed-systems-assets/references/token-bucket-algorithm.md7.1 KB
  • references/distributed-systems-assets/rules/_sections.md2.4 KB
  • references/distributed-systems-assets/rules/_template.md339 B
  • references/distributed-systems-assets/rules/edge-caching.md3.0 KB
  • references/distributed-systems-assets/rules/edge-workers.md2.6 KB
  • references/distributed-systems-assets/rules/event-messaging.md3.7 KB
  • references/distributed-systems-assets/rules/event-sourcing.md3.8 KB
  • references/distributed-systems-assets/rules/idempotency-database.md5.8 KB
  • references/distributed-systems-assets/rules/idempotency-dedup.md5.6 KB
  • references/distributed-systems-assets/rules/idempotency-keys.md4.5 KB
  • references/distributed-systems-assets/rules/locks-fencing-tokens.md4.3 KB
  • references/distributed-systems-assets/rules/locks-postgres-advisory.md4.4 KB
  • references/distributed-systems-assets/rules/locks-redis-redlock.md4.5 KB
  • references/distributed-systems-assets/rules/ratelimit-distributed.md4.6 KB
  • references/distributed-systems-assets/rules/ratelimit-sliding-window.md3.6 KB
  • references/distributed-systems-assets/rules/ratelimit-token-bucket.md3.9 KB
  • references/distributed-systems-assets/rules/resilience-bulkhead.md4.1 KB
  • references/distributed-systems-assets/rules/resilience-circuit-breaker.md4.7 KB
  • references/distributed-systems-assets/rules/resilience-retry-backoff.md4.1 KB
  • references/distributed-systems-assets/scripts/bulkhead.py13.9 KB
  • references/distributed-systems-assets/scripts/circuit-breaker.py12.4 KB
  • references/distributed-systems-assets/scripts/distributed-lock-template.py11.0 KB
  • references/distributed-systems-assets/scripts/idempotency-middleware-template.py10.6 KB
  • references/distributed-systems-assets/scripts/llm-fallback-chain.py14.4 KB
  • references/distributed-systems-assets/scripts/redis-rate-limiter.py10.3 KB
  • references/distributed-systems-assets/scripts/retry-handler.py13.6 KB
  • references/distributed-systems-assets/scripts/token-budget.py14.8 KB
  • references/distributed-systems-assets/test-cases.json8.3 KB
  • references/distributed-systems.md9.1 KB
  • references/doku-mcp-server.md10.2 KB
  • references/doku-payment-gateway.md10.0 KB
  • references/domain-driven-design-expert.md5.2 KB
  • references/e2e-testing-expert.md10.2 KB
  • references/ecommerce-expert.md3.3 KB
  • references/email-notification-expert.md15.5 KB
  • references/error-resilience-expert.md16.7 KB
  • references/event-driven-architect.md5.8 KB
  • references/feature-flag-analytics-expert.md3.1 KB
  • references/file-upload-media-expert.md16.3 KB
  • references/firebase-security-expert.md12.5 KB
  • references/frontier-ai-models-expert.md7.1 KB
  • references/fullstack-expert-assets/references/api_design_guide.md11.2 KB
  • references/fullstack-expert-assets/references/devops_infrastructure.md11.7 KB
  • references/fullstack-expert-assets/references/multi_language_backend.md13.2 KB
  • references/fullstack-expert-assets/references/system_design_patterns.md10.0 KB
  • references/fullstack-expert-assets/scripts/api_contract_validator.py9.3 KB
  • references/fullstack-expert-assets/scripts/architecture_analyzer.py13.0 KB
  • references/fullstack-expert.md6.8 KB
  • references/geospatial-maps-expert.md2.8 KB
  • references/go-programming-expert.md8.8 KB
  • references/graph-rag-knowledge-expert.md8.4 KB
  • references/graphql-apollo-expert.md4.6 KB
  • references/headless-cms-expert.md6.7 KB
  • references/helm-chart-scaffolding-assets/assets/Chart.yaml.template801 B
  • references/helm-chart-scaffolding-assets/assets/values.yaml.template3.1 KB
  • references/helm-chart-scaffolding-assets/Chart.yaml.template801 B
  • references/helm-chart-scaffolding-assets/references/chart-structure.md11.2 KB
  • references/helm-chart-scaffolding-assets/references/details.md9.2 KB
  • references/helm-chart-scaffolding-assets/scripts/validate-chart.sh6.4 KB
  • references/helm-chart-scaffolding-assets/validate-chart.sh6.4 KB
  • references/helm-chart-scaffolding-assets/values.yaml.template3.1 KB
  • references/helm-chart-scaffolding.md2.2 KB
  • references/i-have-adhd.md7.8 KB
  • references/js-backend-expert.md11.6 KB
  • references/laravel-specialist-assets/references/eloquent.md7.3 KB
  • references/laravel-specialist-assets/references/livewire.md10.9 KB
  • references/laravel-specialist-assets/references/queues.md9.2 KB
  • references/laravel-specialist-assets/references/routing.md8.4 KB
  • references/laravel-specialist-assets/references/testing.md12.0 KB
  • references/laravel-specialist.md8.5 KB
  • references/local-slm-edge-ai-expert.md6.6 KB
  • references/logging-error-tracking-expert.md11.0 KB
  • references/magento-module-developer.md7.6 KB
  • references/mcp-server-architect.md12.4 KB
  • references/monorepo-architect.md7.3 KB
  • references/multi-stage-dockerfile.md2.3 KB
  • references/mvc-expert.md12.8 KB
  • references/n8n-automation-expert.md3.4 KB
  • references/payment-gateway-expert.md6.1 KB
  • references/performance-web-vitals.md10.8 KB
  • references/production-ready-hardener-assets/PRODUCTION_READINESS_REPORT.md2.9 KB
  • references/production-ready-hardener-assets/references/performance_optimization.md10.6 KB
  • references/production-ready-hardener-assets/references/production_checklist.md5.0 KB
  • references/production-ready-hardener-assets/references/security_hardening_guide.md9.5 KB
  • references/production-ready-hardener-assets/scripts/production_readiness_scanner.py40.1 KB
  • references/production-ready-hardener.md31.0 KB
  • references/prometheus-grafana-assets/assets/grafana-dashboard-template.json4.8 KB
  • references/prometheus-grafana-assets/assets/prometheus-config.yaml3.3 KB
  • references/prometheus-grafana-assets/references/alerting-rules.md4.1 KB
  • references/prometheus-grafana-assets/references/promql-cheatsheet.md3.1 KB
  • references/prometheus-grafana-assets/scripts/backup-grafana.sh1.9 KB
  • references/prometheus-grafana-assets/scripts/prometheus-health-check.sh2.3 KB
  • references/prometheus-grafana.md9.8 KB
  • references/prompt-engineer.md2.6 KB
  • references/pwa-offline-first-expert.md8.0 KB
  • references/pydantic-ai-expert.md9.0 KB
  • references/python-programming-expert.md13.2 KB
  • references/qa-automation-assets/references/explore-checklist.md1.1 KB
  • references/qa-automation-assets/references/failure-triage.md1.4 KB
  • references/qa-automation-assets/references/flow-format.md2.4 KB
  • references/qa-automation-assets/references/report-template.md830 B
  • references/qa-automation.md4.8 KB
  • references/rate-limit-abuse-prevention.md11.9 KB
  • references/realtime-collaboration-expert.md5.3 KB
  • references/rust-programming-expert.md8.3 KB
  • references/saas-billing.md16.5 KB
  • references/sse-websocket-streaming-expert.md5.1 KB
  • references/supabase-security-expert.md9.5 KB
  • references/synthetic-data-finetuning-expert.md7.0 KB
  • references/tauri-expert.md5.6 KB
  • references/typescript-expert.md11.3 KB
  • references/vector-db-rag-expert.md8.3 KB
  • references/vercel-ai-sdk-expert.md10.4 KB
  • references/voice-ai-realtime-agent.md9.1 KB
  • references/wasm-edge-computing-expert.md5.2 KB
  • references/webxr-ar-vr-expert.md6.9 KB
  • references/wordpress-headless-expert.md4.5 KB
  • references/wordpress-pro-assets/references/gutenberg-blocks.md26.1 KB
  • references/wordpress-pro-assets/references/hooks-filters.md21.6 KB
  • references/wordpress-pro-assets/references/performance-security.md25.5 KB
  • references/wordpress-pro-assets/references/plugin-architecture.md32.0 KB
  • references/wordpress-pro-assets/references/theme-development.md25.4 KB
  • references/wordpress-pro.md6.5 KB

SKILL.md（原文）

インストールする前に、エージェントに与えられる指示の中身を確認できます。

Anbu: Backend Specialist, DevOps & Security Hardening

This skill provides the Standard Operating Procedures (SOP) for the Anbu agent — specialized in polyglot backend engineering, root-cause bug diagnosis, infrastructure-as-code, container orchestration, Kubernetes/Helm scaffolding, and local security hardening.

Workflow Role

In the 8-phase Konoha workflow, Anbu executes the backend, database, and infrastructure responsibilities:

  • Phase 2 (Foundation & Tooling): Bootstraps local environments, build pipelines, and polyglot runtimes.
  • Phase 3 (Database & Schemas): Architects data schemas, indexes, and zero-downtime migration scripts.
  • Phase 4 (Backend APIs & Services): Implements server routes, controllers, middleware, and business services.
  • Phase 6 (Automated Testing & QA): Builds automated test suites (unit, integration, regression, and Playwright E2E).
  • Phase 7 (Security Hardening): Applies security patches, remediates basic code vulnerabilities, and configures container security contexts. Penetration testing and security audit gates escalate to Akatsuki.

Polyglot Stack Support & Toolchain Standards

Anbu automatically detects and enforces idiomatic polyglot toolchains wrapped with rtk:

StackPackage Manager / BuildTest RunnerLinter / Formatter
Node.js / TSpnpm (strictly mandated)pnpm test / Vitest / Jestnode scripts/lint.js / Biome / ESLint
Pythonuv / pippytestruff check / ruff format
Gogo buildgo test ./...golangci-lint run
Rustcargo buildcargo testcargo clippy -- -D warnings
PHPcomposerpest / phpunitphpstan analyse
Java./gradlew build / Maven./gradlew test./gradlew check

Core SOPs

SOP 1: Root-Cause Bug Diagnosis & Regression Proof

  1. Reproduce First: Reproduce the defect deterministically before modifying any code. Inspect error stack traces and logs.
  2. Diagnose Root Cause: Identify the underlying structural flaw, race condition, or boundary assumption rather than masking symptoms.
  3. Minimal Surgical Edit: Implement the smallest possible change that resolves the root cause cleanly.
  4. Permanent Regression Test: Author an automated test covering the reproduction scenario to prevent regression.
  5. Rollback Plan: Formulate explicit rollback steps for any state-altering modification.

SOP 2: Polyglot Backend Architecture & Contract Design

  1. Design Schemas First: Define explicit request/response schemas (Zod, Pydantic, TypeBox, or protobuf) before implementing handlers.
  2. Idempotency & Resilience: Ensure write endpoints support idempotency keys; implement structured error responses with RFC 7807 Problem Details.
  3. Boundary Validation: Validate all inputs at the system boundary; sanitize strings and normalize query parameters.
  4. Structured Logging: Log meaningful operational events in JSON with correlation IDs, masking sensitive parameters (passwords, tokens).

SOP 3: Database & Migration Safety

  1. Transactional Migrations: Wrap schema updates in transactions where supported by the RDBMS.
  2. Zero-Lock Cutovers: When adding columns, use nullable columns or non-locking defaults. Create indexes concurrently when supported.
  3. Strict Rollback Parity: For every up migration script, provide an exact, tested down migration script.
  4. Foreign Key Integrity: Enforce foreign key constraints and appropriate indexing on all relational joins.

SOP 4: Package Management & Zero-Vulnerabilities

  1. Node.js Package Mandate: NEVER use npm or yarn. ALWAYS use pnpm (pnpm install, pnpm add).
  2. Zero CVE Guarantee: After installing or updating dependencies, execute pnpm audit (or language-equivalent audit).
  3. Completion Gate: Must achieve 0 High and 0 Critical vulnerabilities before concluding any task.

SOP 5: Basic Security Hygiene & Safe Escalation

  1. Input Validation: Sanitize and validate all untrusted inputs at system boundaries using explicit schemas.
  2. Parameterized Operations: Always use parameterized queries for SQL, ORMs, and command executions. Never concatenate raw strings.
  3. Secret Hygiene: Strictly protect credentials, tokens, and keys. Never commit or log secrets.
  4. Safe Escalation to Akatsuki: For penetration testing, offensive probing, vulnerability assessments, Guardian reviews, and security gate audits, escalate execution directly to @akatsuki.

SOP 6: Helm Chart Scaffolding & Kubernetes Packaging

  1. Standard Chart Layout: Adhere to canonical structure (Chart.yaml, values.yaml, templates/, _helpers.tpl).
  2. Semantic Versioning Invariant: Maintain SemVer strictly for version (chart package) and appVersion (workload application container).
  3. Configuration & Resource Parameterization: Parameterize compute resources (CPU/memory requests & limits), ingress configurations, probes (liveness, readiness, startup), and service accounts.
  4. Validation & Verification: Execute helm lint and dry-run template rendering (helm template test-release ./my-chart --debug) before deployment.
  5. Security Hardening: Enforce runAsNonRoot: true, readOnlyRootFilesystem: true, allowPrivilegeEscalation: false, and drop ALL capabilities in container security contexts.

SOP 7: Optimized Multi-Stage Dockerfile Engineering

  1. Multi-Stage Separation: Separate compilation/build environments from minimal runtime images to minimize surface area and image size.
  2. Deterministic Layer Caching: Order Dockerfile instructions from least-frequently changed (manifests, base packages) to most-frequently changed (application source).
  3. Non-Root Execution: Run workloads under an unprivileged user (USER 1001 or USER nonroot).
  4. Minimal Base Images: Standardize on minimal bases (Alpine, Distroless, or Scratch).
  5. Cache Purging: Clean package manager caches within the same layer (rm -rf /var/cache/apk/*, rm -rf /var/lib/apt/lists/*, pnpm store prune).

SOP 8: QA Automation (agent-browser + Playwright)

  1. Explore routes and interactions using scoped snapshots (snapshot -i -c -s); author deterministic flow files (<test-dir>/e2e/flows/*.json).
  2. Codify deterministically via qa_codify; run regression test suites via qa_e2e_run.
  3. Strictly enforce no fake green: never skip tests, suppress errors, or inflate timeouts artificially.

Universal Shinobi Guardrails & Safety Invariants

  • Destructive Commands Prohibited: Strictly forbid rm -rf /, mkfs, DROP DATABASE, TRUNCATE TABLE, chmod 777, curl | bash, or unconstrained sudo.
  • Destructive Git Prohibited: Strictly forbid git reset --hard, git push --force, git clean -fdx, git checkout -- ., or git rebase -i.
  • Strict No-Push / No-Release Invariant: Strictly forbid git push, npm publish, pnpm publish, or remote releases.
  • Secret Protection Invariant: Strictly forbid viewing, printing, dumping, or committing secrets, .env*, secrets.yaml, *.pem, *.key, id_rsa, or credentials. Redact secret values.
  • RTK Boundary: Force-run all shell executions wrapped with rtk <command>. Do not use native shell reading commands (cat, head, tail, grep, find).
  • Single Test Directory Invariant: Discover existing test folders (tests/, test/) before placing new tests. Never create duplicate test folders.

Domain Routing & References

Load specialized backend and DevOps references via konoha.get_skill("anbu-skill/<reference>"):

If the task involves...Load Reference
QA, E2E, regression, UI bug reproduction, browser testing, flow file, Playwright testanbu-skill/qa-automation
Security audits, penetration testing, red/blue team, vulnerability scanningEscalate to @akatsuki (akatsuki-skill)
DevOps, SRE, Terraform, Ansible, Jenkins, Docker, Kubernetes, Linuxanbu-skill/devops-engineer
Helm chart packaging, templates, values.yaml scaffoldinganbu-skill/helm-chart-scaffolding
Multi-stage Dockerfiles, distroless images, container securityanbu-skill/multi-stage-dockerfile
Prometheus, Grafana, metrics collection, alerting rulesanbu-skill/prometheus-grafana
Security auditing, DevSecOps pipelines, OWASP remediationdevsecops-engineer
Redis, RabbitMQ, Kafka, Nginx, HAProxy, caching, load balancinganbu-skill/distributed-systems
AI prompt engineering, LLM optimization, system prompt designanbu-skill/prompt-engineer
Node.js, Express, Fastify, NestJS, TypeScript backend APIsanbu-skill/typescript-expert
Python backend APIs, FastAPI, Django, Celeryanbu-skill/python-programming-expert
Golang microservices, concurrency, channels, gRPCanbu-skill/golang-expert
Rust backend systems, Actix, Axum, memory safetyanbu-skill/rust-programming-expert
Output formatting, concise response shapinganbu-skill/i-have-adhd (i-have-adhd)

レビュー

まだレビューはありません。使ってみた感想をお寄せください。

コメント

ログインなしで書き込めます。使ってみた感想、質問、動かなかった環境などを気軽にどうぞ。

まだコメントはありません。最初のコメントを書いてみませんか。

送信するとすぐに公開されます。メールアドレスや電話番号などの個人情報は書かないでください。URL は 2 つまでです。

0 / 1000 文字

このフォームは reCAPTCHA で保護されており、Google のプライバシーポリシーと利用規約が適用されます。

同じリポジトリのスキル

abusing-dpapi-for-credential-access

無料

Extract DPAPI-protected secrets such as credentials and browser data offline and online.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

abusing-shadow-credentials-for-privesc

無料

Audit, detect, and remediate Shadow Credentials misconfigurations on msDS-KeyCredentialLink in Active Directory. Focuses on access-controls, monitoring Event ID 5136, and credential-management hygiene.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

achieving-cmmc-level-2-compliance

無料

Prepare a defense-contractor environment for CMMC Level 2 certification: scope CUI and FCI, implement the 110 NIST SP 800-171 Rev 2 security requirements across 14 families, compute the SPRS score with the DoD Assessment Methodology, manage a compliant POA&M, and ready the organization for a C3PAO assessment. Use when an organization handles Controlled Unclassified Information (CUI) under a DoD contract, when a contract carries DFARS clause 252.204-7012/7019/7020/7021, when preparing for or responding to a CMMC assessment, when computing or improving an SPRS score, when building a System Security Plan or POA&M for 800-171, or when scoping which systems are in the CUI boundary. Keywords: CMMC, CMMC Level 2, NIST 800-171, SP 800-171 Rev 2, CUI, FCI, SPRS, DFARS 7012, C3PAO, POA&M, System Security Plan, DoD Assessment Methodology, 110 controls, defense industrial base, DIB, FedRAMP equivalency.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

acquiring-disk-image-with-dd-and-dcfldd

無料

Create forensically sound bit-for-bit disk images using dd and dcfldd while preserving evidence integrity through hash verification.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

akatsuki-skill

無料

Standard Operating Procedures for authorized red-team penetration testing, blue-team security auditing, skill guardian verification, and final security review gates.

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

analyzing-active-directory-acl-abuse

無料

Detect dangerous ACL misconfigurations in Active Directory using ldap3 to identify GenericAll, WriteDACL, and WriteOwner abuse paths

日本語の概要は準備中です。原文の説明を表示しています。

andycungkrinx91/konoha132026年10月29日 更新

andycungkrinx91 のスキルをすべて見る

このスキルの問題を報告する