Run rsyslog's local, threat-model-aware security delta review for a PR candidate, create a digest-bound local receipt, or resolve one independently confirmed candidate. Use for $rsyslog-security-pr-review, SECURITY REVIEW, SECURITY RESOLVE candidate-id, and FINISH on code PR work.
Orchestrate long-running rsyslog issue-fix sessions with a rolling active set of work units, local issue cache use, separate worktrees, full validation gates, PR babysitting, merged-PR cleanup, and automatic refill until the selected issue class is exhausted.
Triage rsyslog GitHub issues one issue or cluster at a time, classify stale and current reports, draft or post closure comments, and maintain a local evidence board.
A source-based comparison of how historical Buddhist commentators explained the same scripture passage. It uses aligned commentary texts and links each result back to the original book.
Guidance for managing Elasticsearch, a search and data-storage system that organizes information into searchable indexes. It covers cluster health, nodes, shards, indexes, and related status APIs.
Handle Atlas Store product returns and RMA (Return Merchandise Authorization) requests. Use this skill whenever a shopper wants to return, exchange, or get a refund for an order; asks whether an item is still within the return window; needs an RMA number generated; or asks about the return policy, restocking fees, or…
Compose on-brand narrative content (articles, video scripts, newsletters, and one-pagers) for Acme Corp. Use this skill whenever the user asks to draft, write, restructure, or polish marketing or editorial content; needs a pull quote extracted from source material; wants a topic turned into a mind-map; or asks to…
Unified log search across Loki, Elasticsearch, and CloudWatch. Natural language queries translated to LogQL, ES DSL, or CloudWatch filter patterns. Read-only. Never modifies or deletes logs.
A set of rules for writing and changing Java backend code in a specific project. It describes the project's code layers, response format, validation, error handling, and files that must not be changed.
Query Elasticsearch and Kibana via the Kibana console proxy API. Use this skill whenever the user asks to search logs, query Elasticsearch indices, list indices, view dashboards, check Kibana status, or investigate production issues in the Elastic stack. Also use when the user mentions Kibana, Elasticsearch, ES, logs…
Review an existing sigma rule for spec compliance, detection quality, and improvement opportunities. Use when the user pastes a sigma YAML rule, asks "is this rule any good", asks for a code review on a detection, or wants to harden a rule against false positives. Runs pySigma validation, best-practices linter, and…
Guided sigma detection rule writing from a natural language threat description. Use when the user asks to write a sigma rule, SIEM detection rule, EDR alert logic, or any "detect when X happens" question. Asks clarifying questions (logsource, MITRE ATT&CK TTP, severity), drafts YAML via…
Analyze a sigma rule corpus against the MITRE ATT&CK matrix and produce a coverage gap report. Use when the user asks "what TTPs am I missing", asks for a coverage report, wants to compare their detections against a threat actor profile (e.g. APT29, Scattered Spider), or wants a prioritized list of detection rules to…
Use this skill when working with Elasticsearch in any capacity — designing index mappings, writing or optimizing queries (Query DSL, ES|QL, KQL), planning cluster architecture, configuring ingest pipelines, tuning performance, troubleshooting cluster health, implementing search features, or building AI-powered search…