Generate sandbox security policies from plain-language requirements and optional REST API documentation. Produces L4 or fine-grained L7 network policies and ordered network middleware configuration. Use for API access rules, middleware host selection, failure behavior, or built-in and operator-run middleware…
Guide agents through using the OpenShell CLI (openshell) for sandbox management, gateway registration, provider configuration and refresh, policy iteration, settings, service exposure, BYOC workflows, and inference routing. Covers basic through advanced multi-step workflows. Trigger keywords - openshell, sandbox…
Drive this repo's build/release scripts end-to-end without touching the network. Use when verifying changes to scripts/downloadcli.py, scripts/buildwheel.py, scripts/updatecliversion.py, or scripts/cliversionvalidation.py.
Deploys one assigned DynamoGraphDeployment and proves it with an OpenAI-compatible smoke test. Use when user-interviewer has captured the user-provided baseline DGD or hypothesis-challenger has approved a later DGD.
Use this agent to create a prerelease PR that triggers the automated GitHub Actions release workflow with the --prerelease flag set on the resulting GitHub Release. It bumps the version using a prerelease tag (e.g., 3.2.9-beta.1), generates prerelease notes from merged PRs since the last release, updates RELEASES.md…
Best practices for building agents and agentic applications with Plano, including configuration, routing, orchestration, guardrails, observability, and deployment.
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action, Gemini CLI, OpenAI Codex, and GitHub AI Inference. Detects attack vectors where attacker-controlled input reaches AI agents running in CI/CD pipelines, including env var intermediary patterns, direct…
Worktrunk-specific guidance for tend CI workflows. Adds codecov polling, Rust test commands, labels, and review criteria on top of the generic tend- skills. Use when operating in CI.
Builds a development-only GreptimeDB Docker image from a local debug binary for local-cluster testing, and optionally pushes it to a development registry. Use when the user asks to package, build, tag, publish, or cross-build a non-release GreptimeDB or GreptimeDB Enterprise image for debugging.
Run Mooncake pre-PR local validation through scripts/runcitest.sh. Use this skill whenever the user wants to validate a branch before opening or submitting a PR, run local CI, run ci test, check changes before PR, reproduce GitHub Actions locally, or force a full pre-submit verification. Trigger on phrases like "提交 PR…
Manage a production-like Lightdash deployment on Azure AKS with the Azure Container Apps Sandboxes backend. Args: (none) = status, up = idempotently provision + deploy, deploy = build this branch → ACR → roll the deployment, down = tear everything down to stop spend.
An automation procedure for deploying a Model Context Protocol (MCP) program from source code. MCP is a standard way for an AI client to connect to tools or data services.
You are a release agent for the Rivet project. Your job is to cut a new release by running the release script, monitoring the GitHub Actions workflow, and fixing any failures until the release succeeds.
A guide for cloud-native infrastructure: software and configuration used to run applications in containers and manage cloud resources. It covers Kubernetes, Helm, Kustomize, GitOps tools such as ArgoCD and Flux, and infrastructure-as-code tools such as Terraform and Pulumi.
This skill should be used when the user wants to "deploy an agent", "deploy my ADK agent", "set up CI/CD", "configure secrets", "troubleshoot a deployment", or needs guidance on Agent Runtime, Cloud Run, or GKE deployment targets, or binding an agent to an Agent Gateway. Covers deployment workflows, service accounts…