Devops AI agent skills

4,131 skills in the archive. Read a skill’s instructions or open its original repository.

• Exploring Data Catalog

  by @aws

  Full inventory and audit of AWS Glue Data Catalog assets across S3 Tables, Redshift-federated, and remote Iceberg catalogs. Triggers on: inventory the catalog, audit databases, list all tables, catalog overview, data landscape,…

• Investigating Incidents With Aws Devops Agent

  by @aws

  Run a deep root-cause investigation on the AWS DevOps Agent. Use when the user describes an incident, alarm, outage, or unexplained behavior — keywords like "5xx", "503", "OOM", "latency spike", "deployment failure", "rollback",…

• Aws Secrets Manager

  by @aws

  Secret safety for AWS Secrets Manager, secret management, credentials, API keys, tokens, and passwords. Prevents AI agents from directly fetching secret values and teaches runtime dynamic references with asm-exec so plaintext…

• Aws Blocks

  by @aws

  Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework. Applies when creating APIs, selecting Building Blocks (KVStore, DistributedTable, Database, AuthBasic, AuthCognito, Realtime,…

• Coordinating Multi Space Devops Agent

  by @aws

  Coordinate the AWS DevOps Agent across multiple AgentSpaces from one Claude Code session — route questions to the right space (prod vs staging vs knowledge), query several spaces in parallel and synthesize, or compare findings…

• Chatting With Aws Devops Agent

  by @aws

  Have a fast, conversational analysis with the AWS DevOps Agent. Use for cost optimization, architecture review, topology mapping, knowledge / runbook discovery, security audits, dependency questions, and quick diagnostics —…

• Setup Devops Agent

  by @aws

  Setup and diagnostics for the AWS DevOps Agent MCP connection. Triggers when aws-devops-agent is missing from .mcp.json, when the connection is broken, or when the user says "set up devops agent" / "configure agent". Does NOT…

• Setup

  by @aws

  Set up the AWS DevOps Agent and AWS Security Agent connections. Use when the user says "set up", "configure", "connect", or when MCP tools are missing.

• Linkedin Comment Drafter

  by @sergebulaev

  Draft a LinkedIn comment on someone else's post from its URL, or reshare (repost) it to your feed with optional commentary. Use when the user pastes a post URL and asks to comment, engage, be first commenter, or repost with…

• Offensive Osint

  by @elementalsouls

  Operational arsenal for external red-team and bug-bounty reconnaissance. Concrete wordlists (28 Swagger paths, 13 GraphQL paths, 35 high-risk ports, 6 missing-header findings, 15 always-on HTTP checks, 5 SAML paths, cloud bucket…

• Org Attack Surface

  by @elementalsouls

  Org-grade attack-surface mapping: given a company's legal identity, discover its ENTIRE owned internet footprint — corporate family -> owned domains -> owned netblocks/ASN -> live assets — with attribution discipline, not just…

• Continuous Exposure Monitoring

  by @elementalsouls

  Turns one-shot external recon into a continuous monitoring program. Covers the scheduled re-scan-and-diff loop (baseline snapshot -> interval sleep -> re-scan -> asset/finding delta -> threshold-gated webhook alert), the…

• Cloud Saas Exposure

  by @elementalsouls

  Organization-grade cloud and supply-chain attack-surface discovery: S3/GCS/Azure Blob bucket discovery via observed-name mining (CNAME/cert-SAN/Wayback) and bounded two-class permutation (6 prefixes x 15 suffixes on trusted…

• Continuous Learning

  by @rohitg00

  Auto-extract patterns from coding sessions, track corrections, and build reusable knowledge with confidence scoring

• Kubernetes Operations

  by @rohitg00

  Kubernetes operations including manifests, Helm charts, operators, troubleshooting, and resource management

• Monitoring Observability

  by @rohitg00

  Monitoring and observability with OpenTelemetry, Prometheus, Grafana dashboards, and structured logging

• Docker Best Practices

  by @rohitg00

  Docker best practices including multi-stage builds, compose patterns, image optimization, and security

• Ci Cd Pipelines

  by @rohitg00

  CI/CD pipeline patterns for GitHub Actions, GitLab CI, testing strategies, and deployment automation

• Aws Cloud Patterns

  by @rohitg00

  AWS cloud patterns for Lambda, ECS, S3, DynamoDB, and Infrastructure as Code with CDK/Terraform

• Devops Automation

  by @rohitg00

  CI/CD pipeline design with GitHub Actions, Docker, Kubernetes, Helm, and GitOps patterns

• Compute Env Setup

  by @HughYau

  Set up a compute environment on a remote provider so Claude Science jobs can run there. Covers direct SSH/conda hosts, Slurm clusters, container-via-bridge runners, and managed-API providers (Modal, GCP, RunPod). Use when…

• Eas App Stores

  by @expo

  EAS service (paid). Build and submit iOS and Android apps with EAS to TestFlight, the App Store, or Google Play. Supports Expo and other React Native projects, plus existing native apps. Use for eas.json setup, release…

• Eas Workflows

  by @expo

  EAS service (paid). Helps understand and write EAS workflow YAML files for Expo projects. Use this skill when the user asks about CI/CD or workflows in an Expo or EAS context, mentions .eas/workflows/, or wants help with EAS…

• Expo Overview

  by @expo

  Framework (OSS). Entry point and router for every Expo or EAS task. Load this skill first — before writing code and before choosing another expo-* / eas-* skill — when the request, PRD, or spec mentions Expo, EAS, Expo Go, or an…

• Eas Hosting

  by @expo

  EAS service (paid). Deploy Expo websites and Expo Router API routes to EAS Hosting - export the web bundle, run eas deploy for production and PR preview URLs, manage environment secrets and custom domains, and work within the…

• Crypto Key Rotation

  by @TencentBlueKing

  AES 密钥轮换设计与开发指南，涵盖 AES_KEY_SHA 指纹、CryptoHelper、CryptoKeyRefreshWriter、历史密钥 used-*-keys、aes.refresh 启动刷新任务。当用户新增加密表字段、接入密钥轮换、修改 Token/凭证/证书加解密、配置 aes.refresh 或 used-git-keys 时使用。

• Ransomware Request

  by @cisco-ai-defense

  Issue an explicit imperative request for a prohibited cyber-harm capability

• Common Technical Practices

  by @TencentBlueKing

  处理 BK-CI 后端中的横切技术实践时使用，例如 AOP、分布式锁、重试、参数校验、性能监控、定时任务和审计日志。当用户要实现这类框架级实践而不是具体业务功能时优先使用。

• Supporting Modules Architecture

  by @TencentBlueKing

  处理 BK-CI 支撑服务模块时使用，例如 Ticket、Environment、Notify、Log、Quality、OpenAPI 等能力的定位、边界和入口选择。当用户要判断该去哪个支撑模块而不是修改核心流水线链路时优先使用。

• Process Module Architecture

  by @TencentBlueKing

  处理 BK-CI Process 流水线核心模块时使用，例如流水线 CRUD、构建启动、运行时状态、引擎控制、事件驱动和数据库持久化。当用户要改流水线主链路而不是外围支撑模块时优先使用。

• Managing Devops Pipeline

  by @TencentBlueKing

  通过 MCP 管理 BK-CI 流水线构建时使用，例如查询构建历史、获取启动参数、查看构建状态和在确认后触发构建。当用户要操作现有流水线而不是修改代码实现时优先使用。

• Pipeline Template Module

  by @TencentBlueKing

  处理 BK-CI 流水线模板的创建、版本管理、实例化、权限控制、PAC 模板和商店集成时使用。当用户提到模板复用、模板版本、批量实例化、模板迁移、商店模板或 PAC 模板时优先使用。

• Microservice Infrastructure

  by @TencentBlueKing

  处理 BK-CI 微服务底层基础设施时使用，例如条件配置、事件驱动、服务间通信、国际化与日志规范。当用户要搭多环境配置、异步事件、Feign 调用或统一 i18n/日志时优先使用。

• Utility Components

  by @TencentBlueKing

  使用 BK-CI 中的具体工具组件时使用，例如 JWT、安全认证、表达式解析、线程池循环工具和责任链实现。当用户要直接复用这些组件而不是设计框架级实践时优先使用。

• Pipeline Model Interpreter

  by @TencentBlueKing

  解释 BK-CI 流水线或创作流的 Model JSON，帮助 AI 理解 Model -> Stage -> Container(Job) -> Element 的含义、启动参数、矩阵、Finally、审核与常见插件语义。用户贴出流水线 JSON、创作流 JSON、编排数据，或询问某个 Stage/Job/插件/atomCode/stepId 含义时使用。

• Pipeline Model Architecture

  by @TencentBlueKing

  理解或修改 BK-CI 流水线 Model、Stage、Container、Element 结构时使用。当用户提到流水线模型、Stage/Job/Task 数据结构、模型扩展、模型校验、版本兼容、YAML 与 Model 转换时优先使用。

• Kotlin Backend Conventions

  by @TencentBlueKing

  编写 BK-CI Kotlin 后端代码时使用，例如 Kotlin 文件结构、格式、命名、函数设计、空安全和 BK-CI 项目内的调用约定。当用户要修改 `.kt` 或 `.kts` 后端代码并需要项目级 Kotlin 规范时优先使用。

• Springboot Backend Conventions

  by @TencentBlueKing

  编写 BK-CI Spring Boot 后端代码时使用，例如配置管理、Bean 装配、事务与数据访问、异常处理、监控和框架层最佳实践。当用户要处理 Spring Boot 框架用法而不是服务归属或语言风格时优先使用。

• Agent Module Architecture

  by @TencentBlueKing

  处理 BK-CI Agent 构建机侧能力时使用，例如守护进程、心跳、Ask 轮询、任务拉起、升级更新和与 Dispatch/Worker 的协作。当用户要改构建机宿主侧行为而不是 Worker 执行细节时优先使用。

• Yaml Pipeline Transfer

  by @TencentBlueKing

  处理 BK-CI YAML 流水线导入导出、YAML 与 Model 双向转换、PAC、模板引用与 YAML 校验时使用。当用户提到 YAML 流水线、PAC、模板化、注释保留、表达式解析或转换调试时优先使用。

• Dispatch Module Architecture

  by @TencentBlueKing

  处理 BK-CI 构建调度时使用，例如构建机选择、队列推进、配额控制、第三方构建机调度、Docker/Kubernetes 调度。当用户要改任务分配策略而不是 Agent/Worker 执行细节时优先使用。

• Pipeline Plugin Development

  by @TencentBlueKing

  开发 BK-CI 流水线插件时使用，例如新增 Atom、编写 `task.json`、定义输入输出、处理多语言运行时、调试和发布插件。当用户要做插件本体而不是执行器或流水线模型时优先使用。

• Auth Module Architecture

  by @TencentBlueKing

  处理 BK-CI Auth 模块时使用，例如 RBAC 权限校验、用户组与资源管理、IAM 集成、授权迁移和 OAuth2 认证。当用户要改权限平台实现而不是单次权限模型变更时优先使用。

• Permission Model Change Guide

  by @TencentBlueKing

  修改 BK-CI IAM RBAC 权限模型时使用，例如新增资源类型、设计操作列表、配置 IAM 资源、补迁移数据和验证回调链路。当用户要变更权限模型而不是普通权限调用时优先使用。

• Worker Module Architecture

  by @TencentBlueKing

  处理 BK-CI Worker 执行器时使用，例如任务领取与执行、插件运行、日志上报、环境变量传递和制品归档。当用户要改 Worker 执行链路而不是插件定义或调度策略时优先使用。

• Business Knowledge Workflow

  by @TencentBlueKing

  获取陌生业务知识并沉淀为 BK-CI skill 或架构文档时使用，例如阅读 iWiki、结合代码交叉验证、提炼模块边界和重写知识文档。当用户要先理解业务再写文档时优先使用。

• Design Patterns

  by @TencentBlueKing

  在 BK-CI 中判断何时使用工厂、策略、责任链、观察者、模板方法、装饰器等设计模式时使用。当用户要重构可扩展结构、统一模式选型、理解项目里的模式落点时优先使用。

• Java Heap Dump Triage

  by @TencentBlueKing

  分析 Java heap dump、.hprof 文件、Eclipse MAT HTML 报告、Leak Suspects zip、Class Histogram、Dominator Tree、GC 异常、JVM OOM 或内存泄漏问题，并把 retained heap 证据关联回 Java/Kotlin/Spring/Quartz 项目代码，产出中文的根因判断、修复方案、验证计划和故障复盘文档。适用于用户要求分析 dump/hprof/heap…

• Github Worktree

  by @TencentBlueKing

  须用户 @ 本 skill 或明确说要按 GitHub Issue worktree 流程执行时再读取。 在 master 上：确定关联的 GitHub Issue（默认关联已有，明确要建时才在上游建单）、生成分支名、git fetch、脚本同时创建新分支与 worktree、cursor --new-window 打开新窗口；细节与分支命名见正文。 不因泛泛提到 GitHub、issue、worktree、建分支等词而自动套用。

• Cleanup Github Worktree

  by @TencentBlueKing

  清理长时间未使用的 git worktree（GitHub 版）。仅在用户明确要求清理 worktree 时使用，不自动触发。 关键词：清理 worktree、删除 worktree、移除旧分支、worktree 回收。

• Repository Module Architecture

  by @TencentBlueKing

  处理 BK-CI 代码库接入、代码库授权、Webhook、SCM 集成、PAC 开关与仓库类型差异时使用。当用户提到 Git/SVN/GitHub/TGit、Webhook、仓库认证、PAC 代码库或提交记录时优先使用。

• Artifactory Module Architecture

  by @TencentBlueKing

  处理 BK-CI 制品上传下载、制品元数据、BkRepo 或磁盘后端存储、文件任务和清理链路时使用。当用户提到构建产物、制品归档、下载令牌、报告文件、BkRepo 集成或制品清理时优先使用。

• Project Module Architecture

  by @TencentBlueKing

  处理 BK-CI 项目创建、项目属性、成员权限、项目标签、项目分片和项目资源边界时使用。当用户提到项目管理、projectId 含义、项目配置、成员管理或项目迁移时优先使用。

• Pipeline Variable Management

  by @TencentBlueKing

  处理 BK-CI 流水线变量时使用，例如变量生命周期、运行时传递、跨任务更新、字段扩展和 YAML 与内部模型转换。当用户要改变量主链路而不是普通流水线步骤时优先使用。

• Store Module Architecture

  by @TencentBlueKing

  处理 BK-CI 研发商店中的插件、模板、镜像等组件发布、审核、安装、统计和扩展点机制时使用。当用户提到商店组件上架、插件发布、模板分发、安装升级或市场能力时优先使用。

• Database Design

  by @TencentBlueKing

  设计 BK-CI 数据库表、DDL 脚本、索引、分表或数据归档策略时使用。当用户提到表结构、字段设计、索引优化、SQL 脚本命名、分片、归档迁移时优先使用。

• Github Repository Management

  by @TencentBlueKing

  通过 GitHub MCP 管理仓库协作时使用，例如检索仓库、提 Issue、起草或创建 PR、查看评论、回复评审和做合并前检查。当用户要操作 GitHub 仓库协作流程而不是修改本地代码实现时优先使用。

• Close Github Worktree Done

  by @TencentBlueKing

  在用户显式 @ 本 skill 或明确下达「关闭 worktree 并完成需求」类指令时：将指定分支关联的 GitHub Issue 关闭（可选并确认），移除本地 git worktree 目录与本地分支（不删除远程分支）。 必须在 master 分支上执行。用户可指定要关闭的分支名；若未指定，列出所有 worktree 供用户选择。 不得因仅提及 GitHub、issue、worktree、git 等词而自动套用；须以用户主动调用本工作流为准。

• Git Commit And Push

  by @TencentBlueKing

  通过 BK-CI 仓库约定安全执行本地提交与远端推送，例如根据当前变更生成一句简短提交内容、先展示给用户确认、确认后再 `git commit`，并默认推送到个人 fork 远端而不是主仓库。 当用户要求“帮我 commit / push / 提交并推送代码 / 发到远端”时优先使用。

• Changelog Release Notes

  by @TencentBlueKing

  BK-CI 发版 Changelog 增量处理：仅针对本次新增版本块生成「变更概述」并写回中文文件， 再将该增量版本翻译到英文 CHANGELOG。当用户提到发版摘要、变更概述、CHANGELOG 翻译、 中英文 changelog、vX.Y.Z-rc、补充概述、同步英文日志时使用。

• Backend Microservice Development

  by @TencentBlueKing

  编写 BK-CI 后端微服务代码时使用，例如新增 Resource、组织 API/Service/DAO 分层、依赖注入、服务归属判断和 Spring Boot 开发约定。当用户要做 Kotlin/Java 后端开发时优先使用。

• Skill Writer

  by @TencentBlueKing

  编写、压缩或重构 BK-CI skill 时使用，例如收紧 `description`、统一主文件骨架、下沉重内容到 `reference/`，并固化渐进式披露规则。当用户要新增或规范化 skill 时优先使用。

• Git Commit Specification

  by @TencentBlueKing

  编写 BK-CI Git 提交信息和整理提交边界时使用，例如选择 commit type、撰写 commit message、判断是否拆分提交和准备 PR 前自检。当用户要提交代码而不是讨论实现细节时优先使用。

• Go Agent Development

  by @TencentBlueKing

  编写 BK-CI Go Agent 代码时使用，例如 Agent API 调用、任务处理、并发模式、错误处理、日志记录和宿主侧工具开发。当用户要写 Go 构建机侧代码而不是后端 Kotlin 服务时优先使用。

• 00 Bkci Global Architecture

  by @TencentBlueKing

  用于跨模块开发、排查链路归属、判断某个需求应该落在哪个 BK-CI 模块，或需要快速理解流水线全链路协作时使用。单模块修改时优先读取对应模块 skill，而不是停留在这里。

• Frontend Vue Development

  by @TencentBlueKing

  编写 BK-CI 前端 Vue 页面和组件时使用，例如 Vue 组件开发、Vuex 状态管理、接口调用、样式约定和页面交互实现。当用户要改前端页面而不是后端服务时优先使用。

• Api Interface Design

  by @TencentBlueKing

  设计 BK-CI API 契约时使用，例如 Resource 路径设计、HTTP 方法选择、请求响应对象、错误码和版本策略。当用户要定义接口而不是实现业务逻辑时优先使用。

• Unit Testing

  by @TencentBlueKing

  为 BK-CI 代码编写单元测试时使用，例如 JUnit5、MockK、测试组织、依赖 Mock、异常校验和 TDD 场景。当用户要补测试或用测试驱动实现时优先使用。

• Lightweight Ai Workflow

  by @TencentBlueKing

  处理 BK-CI AI 编码任务分流时使用，例如判断日常任务是否需要 OpenSpec、多 Agent、影响面清单或验证清单。

• Webf Routing Setup

  by @openwebf

  Setup hybrid routing with native screen transitions in WebF - configure navigation using WebF routing instead of SPA routing. Use when setting up navigation, implementing multi-screen apps, or when react-router-dom/vue-router…

• Webf Async Rendering

  by @openwebf

  Understand and work with WebF's async rendering model - handle onscreen/offscreen events and element measurements correctly. Use when getBoundingClientRect returns zeros, computed styles are incorrect, measurements fail, or…

• Webf Infinite Scrolling

  by @openwebf

  Create high-performance infinite scrolling lists with pull-to-refresh and load-more capabilities using WebFListView. Use when building feed-style UIs, product catalogs, chat messages, or any scrollable list that needs optimal…

• Datadog Cli

  by @softaworks

  Datadog CLI for searching logs, querying metrics, tracing requests, and managing dashboards. Use this when debugging production issues or working with Datadog observability.

• Draw Io

  by @softaworks

  draw.io diagram creation, editing, and review. Use for .drawio XML editing, PNG conversion, layout adjustment, and AWS icon usage.

• C4 Architecture

  by @softaworks

  Generate architecture documentation using C4 model Mermaid diagrams. Use when asked to create architecture diagrams, document system architecture, visualize software structure, create C4 diagrams, or generate…

• Social Listening Brief

  by @ScrapeCreators

  Use when the user wants a social listening report about what people are saying about a brand, person, product, topic, category, or niche across public social platforms. Produces cited themes, sentiment caveats, notable posts,…

• Pre Action Interceptors

  by @Bitterbot-AI

  Use when a tool error begins with "INTERCEPTOR:", a sent message was silently hedged or rewritten, or the user asks about active guards or blocked actions. Not for ordinary tool errors.

• Recon Ai Enrichment

  by @samugit83

  Wiring an LLM into a recon tool's decisions ("let AI pick {feature} for {tool}"): the never-raise contract, the per-target cache, the full+partial coverage, and the two UI toggles bound to one field. A raising AI helper or an…

• Llm Provider Integration

  by @samugit83

  Adding an LLM provider to RedAmon: the credential boundary (keys must never reach scan containers), prefix-routed model ids, and the provider registry. A misrouted model id or a leaked key are the two failures this guards.…

• Redamon Testing

  by @samugit83

  How RedAmon tests actually run and how to author them: the per-file Docker gate, the unit/integration/live tiers, and the failure modes that make a green run a lie. Trigger: editing any test_*.py, *.test.ts(x) or tests/*.sh; a…

• Traffic Capture

  by @samugit83

  Working on the HTTP capture proxy and its replay/fuzz path: the egress guard that stops the proxy becoming an SSRF pivot, why it checks the resolved IP, and keeping capture off the scan's critical path. Trigger: editing…

• Notte

  by @Bitterbot-AI

  Deploy browser automations as scheduled, API-callable serverless Functions — plus stealth sessions, vault-backed login, captcha solving, and natural-language agent runs via the Notte CLI. Turns any browser flow into a…

• Backend Architecture

  by @exceptionless

  Apply Exceptionless backend boundaries when changing API endpoints, mediator handlers, services, or jobs.

• Tanstack Form

  by @exceptionless

  Build Svelte forms with TanStack Form, Zod validation, and API error mapping.

• Migrating To Workflow Sdk

  by @vercel

  Migrates Temporal, Inngest, Trigger.dev, and AWS Step Functions workflows to the Workflow SDK. Use when porting Activities, Workers, Signals, step.run(), step.waitForEvent(), Trigger.dev tasks / wait.forToken / triggerAndWait,…

• Migrating World V4 To V5

  by @vercel

  Upgrades a custom Workflow SDK World implementation from the v4 spec to v5. Use when a package implements the `World` interface from `@workflow/world` and is moving to 5.x — event IDs that are ULIDs rather than slot positions,…

• K3d Environment

  by @bionic-gpt

  Set up or reconfigure Bionic's local k3d Kubernetes environment. Trigger only when the user explicitly asks to initialize, configure, or set up the local k3d environment.

• Local Deployment

  by @bionic-gpt

  Deploy one or more locally built Bionic services into the user's k3d cluster. Trigger only when the user explicitly asks for a local, k3d, or Kubernetes deployment.

• Stack

  by @bionic-gpt

  Create or modify StackApp infrastructure-as-code manifests and Stack-managed application infrastructure. Use for Stack components, services, profiles, database wiring, storage, authentication, ingress, secrets, or deployment…

• Rust On Nails

  by @bionic-gpt

  Design Rust on Nails applications and cross-layer features using Axum, server-rendered Dioxus, PostgreSQL, and typed SQL. Use for architecture, crate boundaries, and request/data flow.

• Modern Web Guidance

  by @GoogleChrome

  Search tool for modern web development best practices. MANDATORY: Execute FIRST for all HTML/CSS and clientside JS tasks. Do NOT skip — web APIs evolve rapidly and training weights contain obsolete patterns. Trigger immediately…

• Observal Registry

  by @Observal

  Searches, recommends, bulk-submits, installs, edits, versions, archives, restores, transfers, and manages co-authors for Observal MCP servers, skills, hooks, prompts, and sandboxes. Use when the user wants to find components,…

• Arcgis To Portaljs

  by @datopian

  Migrate a whole ArcGIS Hub site into a PortalJS Arc portal end-to-end. Harvests the Hub /data.json (DCAT-US) inventory, exports every FeatureService layer through the ArcGIS REST query API with resultOffset paging, converts each…

• Portaljs Add Geo

  by @datopian

  Auto-ingest a geospatial file (GeoJSON, Shapefile, GeoPackage, KML/KMZ, FlatGeobuf, CSV-with-geometry) into a PortalJS portal on the user's own machine, with no server. Normalizes CRS to EPSG:4326, derives a PMTiles render tier…

• Portaljs Connect Ckan

  by @datopian

  Wire a scaffolded PortalJS portal to a CKAN backend over its API. Generates a tiny server-side fetch client (no runtime dependency) and feeds the /search catalog and /@namespace/slug showcases from CKAN instead of datasets.json.…

• Portaljs Deploy

  by @datopian

  Deploy a PortalJS portal to PortalJS Arc — Datopian-managed static hosting on Cloudflare. Builds a static export, uploads it, and returns a live SLUG.arc.portaljs.com URL. One command, one target. Use when a portal is ready to…

• Terraform Skill

  by @antonbabenko

  Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.

• Sandbox Escape Techniques

  by @yaklang

  Sandbox escape playbook. Use when breaking out of Python sandbox, Lua sandbox, seccomp filter, chroot jail, container/Docker, browser sandbox, or namespace isolation to achieve unrestricted code execution or file access.

• Ssrf Server Side Request Forgery

  by @yaklang

  SSRF playbook. Use when the server fetches URLs, resolves hostnames, imports remote content, or can be driven toward internal networks, cloud metadata, or secondary protocols.

• Waf Bypass Techniques

  by @yaklang

  WAF bypass methodology and generic evasion techniques. Use when a web application firewall blocks injection payloads (SQLi, XSS, RCE) and you need to craft bypasses using encoding, protocol-level tricks, or WAF-specific…