DevOps

Review a Confluent agent skill in this repo against the Agent Skills spec (agentskills.io), Confluent conventions in CLAUDE.md, the PR template gates, and the…

Parses and processes SARIF files from static analysis tools like CodeQL, Semgrep, or other scanners.

CI/CD与开发平台攻击深度专业技能：DevOps供应链攻击链(源码→构建→制品→发布)、代码托管平台攻击(GitHub/GitLab/Gitee)、Git对象深度利用与Secret挖掘、CI系统攻击(Jenkins CVE-2024-23897/GitHub Actions workflow注入/GitLab…

容器安全深度攻防测试专业技能（v3.0高级版）：Docker/K8s全攻击面覆盖、2025-2026最新容器逃逸CVE深度利用（runc/containerd/kernel面）、K8s完整攻击链（API Server未授权→RBAC提权→kubelet…

Set up build environment and test fixtures for COBOL-to-Java migrations.

Iterate on a GitHub pull request — drive it through CI, code review, and QA until it is merge-ready.

云安全深度攻防与审计专业技能（v3.0）：AWS/Azure/GCP/阿里云全平台配置审计与云上渗透、IAM深度攻击（策略混淆代理/OIDC信任滥用/sts:AssumeRoot/21种提权路径）、云原生完整攻击链（元数据→IAM横向→数据泄露→权限提升）、容器与K8s逃逸、Serverless/Lambda注入、托…

安全事件响应深度专业技能（v3.0高级版）：NIST 800-61r3六阶段响应框架、攻防视角入侵链还原与MITRE ATT&CK映射、Volatility 3/KAPE内存与主机取证深度、无文件攻击追查、云与容器(K8s)事件响应专项、勒索软件专项响应流程、假设驱动威胁猎捕、AI辅助应急响应(LLM日志分析/事件聚…

Log4Shell（CVE-2021-44228）及 Log4j2 全漏洞家族深度利用专业技能：JNDI Lookup 全链路原理与利用、全变体家族（44228/45046/45105/44832/4104）、现代 JDK 高版本绕过矩阵（8u191/17/21+）、Lookup…

安全代码审计深度专业技能 v3.0：攻击面驱动的审计优先级方法论（入口点→数据流→敏感操作）、多语言漏洞模式识别（Java/Python/Go/Node.js/PHP/C#）、数据流与污点分析、认证授权审计、业务逻辑审计、供应链代码审计（依赖投毒/后门植入/恶意包）、反混淆与对抗审计、AI…

安全自动化顶级专业技能：DevSecOps全流程集成、CI/CD安全管道、SAST/DAST/SCA/容器/IaC自动化扫描编排、安全工具链集成实战、攻防双视角自动化（红队打点/蓝队检测响应）、SOAR深度编排、Agentic AI安全自动化（LLM…

Read T Cloud Public (formerly Open Telekom Cloud) infrastructure inventory and prepare guarded DevOps operations through gateway-managed OTC API signing.

Shared HomeRail rules for AI agents operating the local-source release candidate: service roles, environment variables, secrets, provider boundaries, Docker…

Interact with Azure DevOps repositories, pull requests, and APIs using the AZURE_DEVOPS_TOKEN environment variable.

Run Docker commands within a container environment, including starting the Docker daemon and managing containers.

Create, debug, and test GitHub Actions workflows and custom actions.

Reference skill for the OpenHands Software Agent SDK - the Python framework for building AI agents that write software.

Deploy and manage applications on Vercel, including preview deployments and deployment protection.

Manage Home Assistant configuration safely and fast — edit and deploy YAML (automations, blueprints, scripts, scenes, templates, MQTT), validate with ha core…

Docker containers, images, volumes, networks (CLI + Dockerode)

Manage Docker containers, images, volumes, and networks via the Docker CLI and Dockerode API

Periodically check pull requests and merge only current heads with independent review, tests, and passing CI.

Post-deploy canary monitoring.

Land and deploy workflow.