Use this agent when a CI pipeline is failing and you need the root cause and exact fix, across GitHub Actions, GitLab CI, or CircleCI. Trigger on "CI is red", "workflow failed", "pipeline broken", "why did the build fail", "actions permission denied", "secret not found", or a pasted CI log. Examples.
Use this agent when a Dockerfile should be made smaller, safer, and faster, multi-stage build, non-root user, pinned base, cache-friendly ordering, and a matching .dockerignore. Trigger on "harden my Dockerfile", "reduce image size", "container runs as root", "add multi-stage build", or a scanner flagging an image.…
Use this agent when an incident is resolved and you need a blameless postmortem assembled from raw evidence. Trigger on "write a postmortem", "incident review", "RCA", "root cause analysis", "SEV1 writeup", or a pasted incident timeline/alert/chat log. Examples.
This skill should be used when the user mentions "Dockerfile", "docker image size", "container security", "multi-stage build", "distroless", "run as root", "docker layer caching", or is reviewing/optimizing a container image. It provides a catalog of Dockerfile anti-patterns and the hardening principles that fix them.
This skill should be used when the user mentions "github actions failing", "CI failure", "workflow failed", "actions permission denied", "secret not found", "matrix", "cache miss", "GITHUBTOKEN", "pipeline red", or is diagnosing a red GitHub Actions run. It provides a taxonomy of failure classes with log signals, root…
This skill should be used when the user mentions "postmortem", "incident", "root cause analysis", "blameless", "severity", "SEV1", "on-call", "RCA", or "outage", or is writing up an incident. It provides a blameless postmortem methodology, a severity model, and reliability metric definitions.
This skill should be used when the user mentions "kubernetes manifest", "k8s yaml", "deployment not ready", "pod crashloop", "resource limits", "liveness readiness probe", "securityContext", or "helm values", or is validating manifests before deploy. It provides the silent failure modes of K8s manifests plus a…
Use this agent when the user asks about system architecture, component structure, dependency graphs, design patterns, module coupling, or wants architecture diagrams generated. Examples.
Use this agent when the user asks about code quality, code smells, complexity analysis, maintainability, code standards, duplication, or wants a code review focused on quality. Examples.
Use this agent when the user asks about performance, optimization, bottlenecks, bundle size, caching strategy, runtime efficiency, memory leaks, or rendering performance. Examples.
Use this agent when the user discusses security vulnerabilities, asks for security review, mentions hardcoded secrets, injection attacks, authentication issues, or OWASP compliance. Examples.
Use this agent when the user asks about test coverage, test quality, missing tests, testing strategy, test-to-code ratio, or wants to evaluate their testing approach. Examples.
This skill should be used when the user asks to "generate architecture diagrams", "create dependency graph", "draw sequence diagram", "visualize system architecture", "C4 model", "Mermaid diagram", "component diagram", "ER diagram", or "data flow diagram". Provides C4 model methodology and Mermaid diagram templates…
This skill should be used when the user asks to "score a codebase", "rate code quality", "generate assessment score", "calculate weighted score", "final assessment", or when any code-auditor agent needs to produce a scoring summary. Provides the standardized scoring methodology for code assessment reports.
This skill should be used when the user mentions "OWASP", "CWE", "CVE", "security compliance", "security scoring", "security maturity model", "vulnerability classification", "risk rating", or "dependency vulnerability scanning". Provides security assessment frameworks and vulnerability classification methodology.