DevOps

Detects and analyzes Bluetooth Low Energy (BLE) security attacks including sniffing, replay attacks, GATT enumeration abuse, and Man-in-the-Middle interception.

OpenVINO — real-time object detection via Docker (NCS2, Intel GPU, CPU)

Extract and analyze Cobalt Strike beacon configuration from PE files and memory dumps to identify C2 infrastructure, malleable profiles, and operator…

Auditing Kubernetes cluster RBAC configurations to identify overly permissive roles, wildcard permissions, dangerous ClusterRoleBindings, service account…

Auditing Terraform infrastructure-as-code for security misconfigurations using Checkov, tfsec, Terrascan, and OPA/Rego policies to detect overly permissive…

Deploy AI and NLP-powered detection systems to identify business email compromise attacks by analyzing writing style, behavioral patterns, and contextual…

Kubernetes 集群健康检查与安全修复 — 诊断问题，用户确认后执行修复

Take a GitHub PR to a conclusion, every review comment and every failing CI check, or work through a local review.

Use when the user operates Alibaba Cloud Container Service for Kubernetes (ACK).

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC modifications, privileged pod creation, and anonymous API…

Analyzes malicious Linux ELF (Executable and Linkable Format) binaries including botnets, cryptominers, ransomware, and rootkits targeting Linux servers…

Use when running long local tasks on a Mac or MacBook, waiting on CI, polling other systems, or when the user says /anti-sleep; also when idle sleep, lid…

Babysit a PR to merge-ready.

Liberação para produção dos pacotes Colibri a partir de tarefas do Jira: lê uma ou mais chaves (por exemplo WIN-3159), levanta as versões dos pacotes, confere…

Use when writing or changing Kubernetes CustomResourceDefinitions, custom resources, operators or controllers, or before upgrading a cluster.

Build the user's Daily Brief across personal work and every permitted company.

Use when the user says 'diagnose', 'debug this', reports something broken/throwing/failing/slow, when encountering a bug/test failure/unexpected behavior and…

Bootstrap a project for issue-driven agent development — existing repo or brand-new empty directory.

Use for any request to debug, find the root cause, or explain why something fails or got slower: incidents, latency jumps, error spikes, crashes, memory…

Implements and hardens Docker-first build, test, and release pipelines, where one build script runs the quality gates, the build, and the e2e tests inside…

Use when asked whether what is running matches what is in git, after a deploy, when a rollout seems stuck, or when someone changed infrastructure by hand.

Scaffold or audit a repo's hierarchical AGENTS.md Intent Layer.

Engineering-standards architecture guardrails and review.

The loop-spec method for taking a coding request to a verified pull request: a spec with checkable acceptance criteria, a task graph (DAG) built in parallel…