DevOps

Diagnoses and root-causes Amazon MWAA workflow failures across Provisioned (Python DAG) and Serverless (YAML workflow) environments.

Migrate workloads from Google Cloud Platform to AWS — plus AI and agentic workloads from any provider.

Migrate workloads from Heroku to AWS.

Migrates vibe-coded web applications to AWS.

Sets up CloudWatch observability for the first time - Omni (CloudWatch Application Observability) and classic CloudWatch.

Best-practice authoring guidance AND a read-only policy gate for AWS Terraform generated by a migration skill.

Upgrades an MWAA environment to a newer Airflow version — within 2.x, within 3.x, or across the 2.x-to-3.x boundary.

Interact with GitHub repos, PRs, issues, CI, and notifications via the pi-github extension commands and gh CLI.

Generate a complete SaaS landing page with EdgeOne Pages deployment.

Learn how to ship a change through merge, CI, release, stage deployment, rollout, verification, rollback and flags.

Package and build custom AI models with Cog for deployment on Replicate.

Diagnoses CI and pull-request pipeline health for a GitHub repo using the engineering analytics MCP tools — pull-requests (PR list with CI status)…

Meta's 86M prompt injection and jailbreak detector.

Design app specs, deploy to App Platform, watch deployments, and read logs.

Inspect and explain bmad-loop run artifacts under `.bmad-loop/runs/`.

Autonomous cloud-cost analyst across Neon, Vercel, Railway and GitHub Actions - pulls per-object usage, attributes it to the biggest drivers, root-causes…

Build and release Go binaries that are reproducible and verifiable: version stamping, -trimpath builds, cross-compilation, GoReleaser, checksums, SBOMs…

Continuous integration for Go projects: GitHub Actions pipelines, caching, golangci-lint setup, test/coverage gates, vulnerability scanning, SAST (CodeQL…

Go testing patterns for production-grade code: subtests, test helpers, fixtures, golden files, httptest, testcontainers, fuzz testing, and testing/synctest.

Manage NAP workspaces, prompts, templates, credentials, service tokens, agent files, providers, tags, shares, schedules via REST, and build applications whose…

Evidence-driven penetration and attack-surface engineering for web applications, APIs, networks, identity systems, Active Directory, cloud, containers…

Open-source intelligence (OSINT) collection, passive reconnaissance, attack-surface mapping, phishing campaign analysis, credential exposure auditing, and…

Diagnose app errors, unreachable Droplets, database connection failures, and DNS issues on DigitalOcean, read-only first.

App-level security audit and hardening for Capacitor apps.