DevOps

基于 ast-grep 的代码审查门禁：使用 code-checklist 规则集对 Java/C++/ANSI C 项目分级扫描（high/medium/low），输出命中清单与 CI 退出码。仅使用 CLI 模式（run.sh），适用于交互式审查、CI 质量门禁、批量检测

Create polished, validated architecture, workflow, sequence, data-flow, and lifecycle/state diagrams as explorable standalone HTML with inline SVG, dark/light…

実装済みブランチをレビューし、必要な修正・PR 作成・CI 確認まで仕上げる。中断した作業の再開にも使う。

agent skillを作成・編集し、agentが実際に従うかを検証するSkill。ユーザーが「skillを作って」「このskillを直して」と依頼したときや、deploy前にskillの動作を確かめるときに使うこと。既存のskillを固定の基準で採点する場合は使わない(skill-reviewを使う)

Systematically debug issues with persistent state across context resets.

AWS architecture patterns for webhooks, event routing, SQS/Lambda pipelines, microservices, environment target guards, and long-running server deployment with…

Pre-deployment security audit of Solidity smart contracts in a Foundry project.

Builds a structured vulnerability scanning workflow using tools like Nessus, Qualys, and OpenVAS to discover, prioritize, and track remediation of security…

Collects and synthesizes open-source intelligence (OSINT) about threat actors, malicious infrastructure, and attack campaigns using publicly available data…

Conducts comprehensive network penetration tests against authorized target environments by performing host discovery, port scanning, service enumeration…

Conducts authorized wireless network penetration tests to assess the security of WiFi infrastructure by testing for weak encryption protocols, captive portal…

Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an…

Plan, run, and measure an adversary engagement operation using the MITRE Engage framework so that deployed deception is driven by strategy instead of deployed…

Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception.

Deploy applications and websites to Vercel.

OpenVINO — real-time object detection via Docker (NCS2, Intel GPU, CPU)

Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator…

Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account…

Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive…

Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, behavioral patterns, and contextual…

Kubernetes 集群健康检查与安全修复 — 诊断问题，用户确认后执行修复

Take a GitHub PR to a conclusion, every review comment and every failing CI check, or work through a local review.

Use when the user operates Alibaba Cloud Container Service for Kubernetes (ACK).

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API…