The infra-delivery RECURRING drift sentinel (post-spine) — a read-only forever drift check that re-runs the empty-plan seam (`tofu plan == ∅`) on a CADENCE to compare reality vs…
The infra-delivery change-authoring craft (step 5) — author/edit the IaC for the intended change ON A BRANCH, kept in sync with the frozen intended-change manifest (the…
The read-only live-env → IaC import entry mode (infra-delivery step 2) — survey an existing AWS/Kubernetes environment that has NO IaC, codify it into OpenTofu/Kubernetes IaC, and…
The infra-delivery cross-env PROMOTION orchestrator (step 16) — "this change passed in env N, carry it to env N+1 (e.g.
The infra-delivery INCIDENT safe-revert PROCEDURE skill (the recurring/incident rollback step) — the PROCEDURE the generic agent runs when a delivered change did NOT land (a…
The infra-delivery OFFLINE LOCAL-SIMULATION step (the new `simulate` step, between `id-test` and `id-plan`) — a PROCEDURE skill the generic agent runs ENTIRELY OFFLINE (no live…
The infra-delivery POST-MERGE GitOps reconcile-and-observe driver (step 13) — the PROCEDURE the generic agent runs AFTER merge (merge IS the deploy trigger) to drive the GitOps…
The infra-delivery TEST step (step 7) — run the active stack profile''s EXISTING read-only `infra_binding.policy` slot (the policy-as-code / CONTRACT tests, `conftest test` / OPA…
Use when Codex needs to turn a rough app, tool, game, automation, or product idea into a ready-to-build project plan, scaffold direction, implementation task breakdown,…
Enable prompt injection detection, PII masking, behavioral contracts, kill switch controls, and agent identity for safe production deployments.
Deploy Ideogram integrations to Vercel, Cloud Run, and Docker platforms. Use when deploying Ideogram-powered applications to production, configuring platform-specific secrets, or…
Configure Ideogram across development, staging, and production environments. Use when setting up multi-environment deployments, configuring per-environment keys, or implementing…
Execute Ideogram production deployment checklist and rollback procedures. Use when deploying Ideogram integrations to production, preparing for launch, or implementing go-live…
Validate and deploy this generated Python project using its selected target, portable Docker base, and optional Pulumi or Terraform configuration.
Ignore file management for .gitignore, .dockerignore, and .specstory directories. Includes synchronization, alphabetical ordering, organization, best practices, and testing…
Docker イメージを管理する。「イメージ一覧」「docker images」「イメージ確認」「ビルドして」「docker build」「イメージ作成」「イメージ取得」「docker pull」「イメージダウンロード」「イメージの履歴」「docker history」などで起動。 — from engineering/devops
Ranks any list of impediments and their countermeasures using a value-stream scoring model (ROI, Cost to Implement, Ease of Deployment, Risk Factor) and a fixed prioritiz — from…
Implements a new Calico API resource by plumbing it through all layers of the codebase. Use after API design is complete (see design-kubernetes-api skill).
Implement GitOps continuous delivery using Argo CD or Flux with app-of-apps pattern, automated sync policies, drift detection, and multi-environment promotion.
Enforce Kubernetes network segmentation using Calico CNI network policies and global network policies to control
Implement GitOps continuous delivery for Kubernetes using ArgoCD or Flux. Use for automated deployments with Git as single source of truth, pull-based delivery, drift detection,…
Implement Kubernetes network segmentation using Calico NetworkPolicy and GlobalNetworkPolicy for zero-trust pod-to-pod
Kubernetes NetworkPolicies provide pod-level network segmentation by defining ingress and egress rules that control
Enforce Kubernetes admission policies using OPA Gatekeeper with ConstraintTemplates, Rego rules, and the Gatekeeper
Harden Kubernetes Role-Based Access Control by implementing least-privilege policies, auditing role bindings,
Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment
Implementation guide for secure multi-party computation enabling privacy-preserving analytics across organizations.
既存リソースを Terraform に import する。「import して」「リソース import」「既存リソース取り込み」「terraform import」「インポート」「既存インフラを管理」「import ガイド」「リソースを terraform で管理」などで起動。
Import existing Azure resources into Terraform using Azure CLI discovery and Azure Verified Modules (AVM).
Constructs incident timelines from PagerDuty Events API v2, Datadog Monitors API, and Slack message archives. Correlates alerts with deployment events for root cause analysis.
Use when the user asks to build, refresh, or extend a per-repo codebase index; when onboarding to an unfamiliar microservice, library, or infra-heavy repo; when mapping domains,…
Runs LLM inference on CPU, Apple Silicon, and consumer GPUs without NVIDIA hardware. Use for edge deployment, M1/M2/M3 Macs, AMD/Intel GPUs, or when CUDA is unavailable — from…
Optimizes LLM inference with NVIDIA TensorRT for maximum throughput and lowest latency. Use for production deployment on NVIDIA GPUs (A100/H100), when you need 10-100x fa — from…
Discover and adopt existing infrastructure - analyze Terraform structure, AWS profiles, and custom agents to generate faber-cloud configuration and migration plan
Creates infrastructure as code configurations for cloud and on-premise deployments
Define and manage cloud infrastructure with code. Use when writing Terraform, CloudFormation, or Pulumi configs, managing state, planning deployments, setting up…
Docker containerization patterns for Node.js/TypeScript development and production
Analyze infrastructure deployment errors - categorize error types (permission/ config/resource/state), search issue log for historical solutions, rank solutions by success rate…
Cal.com self-hosted deployment to GCP Cloud Run with Supabase PostgreSQL. Docker Compose for local dev.
Deploy infrastructure - execute Terraform apply to create/update AWS resources, verify deployment success, update resource registry with ARNs and console URLs, generate deployment…
Troubleshoots infrastructure deployment failures. Use when analyzing deployment failures of ADC applications or direct/raw Terraform deployment errors.
Infrastructure developer for AIM. Creates and modifies Dockerfiles, Kubernetes manifests, GitHub Actions workflows, Pulumi IaC, Taskfile configurations, and container build…
Comprehensive infrastructure engineering covering DevOps, cloud platforms, FinOps, and DevSecOps. Platforms: AWS (EC2, Lambda, S3, ECS, EKS, RDS, CloudFormation), Azure basics,…
Generate Kubernetes manifests, CI/CD pipelines, nginx/Apache configs, and Terraform templates from plain English
SST (Ion) infrastructure-as-code — TypeScript-first serverless on AWS with Pulumi, resource linking, and live Lambda dev
Manage IAM permissions - grant missing permissions when deployments fail, maintain IAM audit trail, enforce profile separation, scope permissions to environment.
Vercel deployment platform — project configuration, serverless/edge functions, Routing Middleware, cron jobs, environment variables, monorepo setup
Infrastructure and DevOps reviewer for AIM. Reviews Kubernetes manifests, Dockerfiles, CI/CD workflows (GitHub Actions), Pulumi IaC, Taskfile configurations, and container build…
Enforces Terraform best practices for safe and scalable infrastructure as code. Emphasizes modularity, state management, and security. Automatically applied for IaC implementation.
Test infrastructure configurations and deployments - security scanning with Checkov/tfsec, cost estimation analysis, pre-deployment validation, post- deployment verification,…
Infrastructure and DevOps tooling (Terraform, K8s, Config Mgmt). Use when the project needs this capability or the user / team manifest asks for it.
Validate infrastructure configuration - run Terraform validate, check syntax, verify resource configurations, validate security settings, and ensure compliance with best…
Infrastructure as Code patterns for deploying Guts nodes using Terraform, Docker, and Kubernetes
Infrastructure-as-Code specialist for Terraform, AWS, Azure, and serverless architectures. Use when setting up cloud infrastructure, writing Terraform modules, or deploying to AWS…
Provides Infrastructure as Code best practices for Terraform, Pulumi, CloudFormation, and OpenTofu. Use when provisioning infrastructure, writing IaC modules, managing cloud…
Universal Infrastructure as Code (IaC) agent skill for authoring, securing, and managing cloud infrastructure across Terraform, Pulumi, CloudFormation, Ansible, and Bicep.
Comprehensive infrastructure security audit framework for IaC, Docker, Kubernetes, and cloud configurations. Use for full infrastructure audits.
Deploy data infrastructure changes using CI/CD patterns with GitHub Actions, Terraform, and AWS OIDC authentication
Expert guide for documenting infrastructure including architecture diagrams, runbooks, system documentation, and operational procedures.
Infrastructure guidelines for A4C-AppSuite. Covers idempotent Supabase SQL migrations with RLS policies, Kubernetes deployments for Temporal workers, CQRS projections with…