DevOps

Open-source intelligence (OSINT) collection, passive reconnaissance, attack-surface mapping, phishing campaign analysis, credential exposure auditing, and…

Diagnose app errors, unreachable Droplets, database connection failures, and DNS issues on DigitalOcean, read-only first.

App-level security audit and hardening for Capacitor apps.

Testing guide for Capacitor apps and plugins.

End-to-end LLM accuracy evaluation on AMD ROCm (ROCm-only) — docker container setup OR host (no-docker) runtime, vLLM/SGLang/ATOM serving, lm-eval / lighteval…

Responds to security incidents in cloud environments (AWS, Azure, GCP) by performing identity-based containment, cloud-native log analysis, resource…

Diagnose HitKeep traffic drops, spikes, source shifts, and suspicious changes.

CI-only self-improvement workflow using gh-aw (GitHub Agentic Workflows).

CI-only Simplify & Harden workflow for pull requests using gh-aw (GitHub Agentic Workflows).

Ship a SciClaw software change through an isolated worktree, implementation, pruning, verification, commit, push, draft pull request, CI closeout, and…

Expert FinOps guidance for cloud, AI, and SaaS technology spend.

Reduce the size of compiled Go binaries and container images: linker flags, inlining budget, CGO and build tags, embedded assets, dependency weight, and…

Scaffold new Go projects and services: directory structure, cmd/ and internal/ conventions, when to use a flat layout, module naming, and main package wiring.

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build…

Systematically deobfuscate multi-layer PowerShell malware using AST analysis, dynamic tracing, and tools like PSDecode and PowerDecode to reveal hidden…

Plan, execute, investigate, and report HitKeep quality gates through hk.

Build students' capacity to place historical documents in their temporal and social context.

Generate a small app or tool and deploy it live to Vercel via API

MUST use before any git push to main/master/production, or when user mentions 'deploy', 'going live', 'push to prod', 'ready to ship', 'merge to main'…

arifOS sovereign deployment: static hub, docs, runtime, and machine files.

Set up Playwright in a project.

Use this skill when configuring, testing, debugging, or documenting lance-spark with AWS Glue Data Catalog and S3, including Spark catalog options, pytest, CI…

Deploy Llama Guard, NeMo Guardrails, and LLM Guard input/output scanners as runtime defenses.