Skip to content

Claude Skills by air-gapped

github.com/air-gapped

74 skillsA× 67B× 6C× 14 installs198 views

Messages ApiAReference for the Anthropic Messages API (/v1/messages) as a third-party compatibility protocol — the 7 inference servers that implement it natively (vLLM, SGLang, llama.cpp, Ollama, mistral.rs, Llama Stack/OGX, Lemonade), gateways that adapt it (LiteLLM, Bifrost, Superagent Gateway), client behavior (Claude Code, opencode anthropic provider), Messages ↔ Chat Completions translation, the thinking-signature seam, stop_reason divergences, and streaming quirks. NOT for official Anthropic API usa...ai-agentsgobashVotes: 0GitHub stars: 5
Mimir UpgradeAPlan and run a controlled, COMMUNITY-edition Grafana Mimir upgrade on the `mimir-distributed` Helm chart, air-gap first — the chart↔app co-pinned ladder (5.7→5.8→6.0.6→6.1.0 = app 2.16→2.17→3.0.4→3.1.2), the classic-vs-ingest-storage decision (the chart ships a supported `classic-architecture.yaml`; `kafka.enabled: false` alone is NOT the switch and causes an ingestion outage), the community-specific nginx→gateway rename that silently moves the proxy's DNS name and breaks every remote_write c...ai-agentsrustgoVotes: 0GitHub stars: 5
Netbox Best PracticesANetBox 4.2-4.6 deployment and upgrade knowledge the official netboxlabs/skills marketplace does not cover — deploying or upgrading NetBox on Kubernetes with the netbox-community helm chart (netbox-chart), external PostgreSQL/valkey wiring, API token bootstrap on 4.5+ (nbt_ v2 tokens), plugin installation in the official image, version-migration planning across 4.2-4.6, module type profiles, front/rear port (patch panel) API changes, and OIDC/SSO group-to-role mapping. Gap-filler only: for gen...ai-agentsrustgoVotes: 0GitHub stars: 5
Open Webui ApiAAdminister Open WebUI entirely via its REST API (v0.11.x): user/group lifecycle, permissions, model catalog GitOps (export/import/sync), knowledge/RAG pipelines, config-as-code, SCIM provisioning, event webhooks, and backup surfaces. Grounded in the v0.11.0 source — covers the 476-path surface the official docs leave ~96% undocumented, the auth bootstrapping traps (ENABLE_API_KEYS default-off, JWT 4-week expiry, one unscoped key per user), and the 0.10.0 breaking changes (access_control→acces...ai-agentsrustgoVotes: 0GitHub stars: 5
PatchA[4/4 defending-code] Generate candidate fixes for verified security findings. Last step of the find-and-fix loop (/threat-model -> /vuln-scan -> /triage -> /patch); run /triage first so fixes aren't written for false positives. Consumes TRIAGE.json (preferred), VULN-FINDINGS.json, or an execution-harness results directory. Static-analysis input gets a per-finding patch subagent + an independent reviewer and is written as inert diffs for human review; results-directory input from an external e...ai-agentspythonrustVotes: 0GitHub stars: 5
Postgres Operator Best PracticesARun, configure, upgrade and troubleshoot the Zalando postgres-operator (acid.zalan.do `postgresql` CRs, Spilo, Patroni, WAL-G) on Kubernetes. Core knowledge: the v1.x -> v2.x major upgrade and its three changed defaults that bite silently (`kubernetes_use_configmaps` true, spilo-17 -> spilo-18, scram-sha-256 password encryption); the Patroni DCS living in deprecated v1 Endpoints and the split-brain hazard in switching to ConfigMaps; Helm never updating the CRDs; exactly which spec changes tri...ai-agentsgobashVotes: 0GitHub stars: 5
Skills DirectorySkills Directory Look up any of 103,619 scanned skills — grade, score, and every finding. Free.Check a skill
Postgres Operator Cloudnative Pg MigrationAMigrate PostgreSQL clusters from the Zalando postgres-operator (acid.zalan.do `postgresql` CRs, Spilo/Patroni, WAL-G) to CloudNativePG (CNPG) on Kubernetes, incl. fully air-gapped clusters. Core knowledge: the two walls (Spilo↔CNPG glibc/collation divergence that corrupts physically-copied indexes; WAL-G↔Barman archive incompatibility that strands old backups), three migration paths (logical replication default; initdb.import for small DBs/PG≤13; pg_basebackup as the discouraged same-major ex...ai-agentsrustgoVotes: 0GitHub stars: 5
Rancher Logging ExitAMigrate off the Rancher-bundled `rancher-logging` chart (cattle-logging-system, rancher/mirrored-kube-logging-* images) to the upstream kube-logging logging-operator ≥6.7.0 — air-gap-first. Rancher 2.11 through 2.15-dev all bundle a frozen operator 4.10.0 that is inside the affected range of CVE-2026-54680 (CVSS 9.9 config-injection RCE, no SUSE fix) — so the exit is security-urgent. Covers the maintainer-endorsed helm-release-secret strategy (near-zero gap; NOT `helm uninstall rancher-loggin...ai-agentsgonodeVotes: 0GitHub stars: 5
Rancher UpgradeAPlan and sequence COMMUNITY-edition Rancher upgrades across air-gapped multi-cluster fleets — a management/"hosting" Rancher cluster plus the downstream RKE2/K3s clusters it provisions. Covers the community release model (2.11→2.15, community-vs-Prime cadence, EOL), the Kontainer Driver Metadata (KDM) matrix deciding which downstream k8s minors each Rancher version can manage (and the stranding risk when a host-Rancher bump outruns its sub-clusters), cross-cluster upgrade ordering, the embedd...ai-agentsgobashVotes: 0GitHub stars: 5
Redis To ValkeyAMigrate Redis deployments (especially Bitnami Redis Helm charts in Sentinel HA mode) to Valkey on Kubernetes, including fully air-gapped clusters. Core knowledge: the RDB-version wall (Valkey replicates/loads only from Redis ≤ 7.2.x; Redis 7.4+ writes RDB v12 which Valkey rejects; Valkey 9 writes its own v80 — a one-way door), the two transfer layers (version-bound REPLICAOF/DUMP-RESTORE vs version-agnostic logical replay with RedisShake or rdb-cli), a side-by-side cutover runbook, Valkey cha...ai-agentsgonodeVotes: 0GitHub stars: 5
Responses ApiAReference for the OpenAI Responses API (/v1/responses), OpenResponses open standard, and Codex CLI. Covers the request/response schema, previous_response_id, Conversations API, server-side compaction, WebSocket transport, hosted Shell tool, Skills, tool_search, MCP connectors, prompt caching, phase field, 53 typed streaming events, 10-backend support matrix (vLLM, llama.cpp, mistral.rs, Ollama, LiteLLM, SGLang, Llama Stack, TensorRT-LLM, Bifrost, Lemonade), and Chat Completions translation wi...ai-agentsgoshellVotes: 0GitHub stars: 5
Secure Boot Cert RotationATriage and fix the Microsoft Secure Boot 2011→2023 UEFI certificate rotation across Dell PowerEdge / iDRAC9 bare metal, Ubuntu/Linux servers, and Harvester HCI / KubeVirt guest VMs. Two 2011 CAs expired June 2026 and Windows Production PCA 2011 expires 2026-10-19 — but UEFI firmware ignores certificate expiry, so nothing stopped booting; the real risks are forward-compat once a 2023-only-signed shim arrives (already true on aarch64) plus a dbx/revocation freeze. Routes to the per-platform fix...ai-agentsrustgoVotes: 0GitHub stars: 5
Snmp ExporterABest practices for Prometheus snmp_exporter (v0.30.x): writing generator.yml modules, curating MIB walks, SNMPv2c/v3 auth, timeout tuning, Kubernetes deployment (Probe/ScrapeConfig CRDs, secrets, UDP egress), local docker testing, and debugging failed scrapes. Includes worked device references for Dell iDRAC 9/10, Cisco CBS250/350 (+ Catalyst 1200/1300), and NVIDIA/Mellanox Onyx switches.ai-agentsgobashVotes: 0GitHub stars: 5
Threat ModelA[1/4 defending-code] Build a threat model for a target codebase. Optional first step of the find-and-fix loop (/threat-model -> /vuln-scan -> /triage -> /patch); its THREAT_MODEL.md scopes and severity-calibrates every later step, but /vuln-scan runs without it. Three modes: "interview" walks an application owner through the four-question framework and produces a threat model from their answers; "bootstrap" derives a threat model from the code plus past vulnerabilities (CVEs, git history, pen...ai-agentspythonrustVotes: 0GitHub stars: 5
Traefik HardeningAHarden a Traefik 2.x/3.x reverse proxy against abusive or unwanted traffic — per-identity rate + concurrency limiting, IP allowlisting, request-body buffering, middleware chaining, keying limits on a JWT claim/header instead of raw source IP, air-gapped plugin loading (localPlugins/WASM), and detection/response via access logs. Covers the 2.x→3.x middleware deltas (IPWhiteList→IPAllowList, Redis-backed distributed RateLimit, status-based Retry), the single-leader-counting trap, and where Trae...ai-agentspythonrustVotes: 0GitHub stars: 5
TriageA[3/4 defending-code] Triage a batch of raw security findings. Third step of the find-and-fix loop (/threat-model -> /vuln-scan -> /triage -> /patch); consumes /vuln-scan's VULN-FINDINGS.json, but accepts any scanner output, so it also stands alone on a third-party backlog. Verify each is real, collapse duplicates, re-rank by impact-on-asset x exploitability, and tag with an owner. Takes a directory or file of scanner output and writes TRIAGE.json + TRIAGE.md sorted by what actually needs engi...ai-agentspythonrustVotes: 0GitHub stars: 5
Ubuntu AutoinstallAAuthor, validate, and debug Ubuntu Server autoinstall configuration (the Subiquity installer's `autoinstall:` schema, version 1) for Ubuntu Server LTS 24.04 and 26.04, focused on unattended on-premise and air-gapped installs — identity, storage (LVM/direct/ZFS/encryption/RAID), apt mirror-selection + proxy + offline fallback, ssh, packages, kernel, late-commands/early-commands, and zero-touch delivery via a NoCloud seed. The `network:` block is netplan v2 (use the ubuntu-netplan skill); the `...ai-agentspythongoVotes: 0GitHub stars: 5
Ubuntu Cloud InitAAuthor, validate, and debug cloud-init configuration for Ubuntu Server LTS 24.04 and 26.04, focused on on-premise and air-gapped hosts via the NoCloud datasource — `#cloud-config` user-data, the cloud-config modules (users, ssh, write_files, runcmd, apt with local mirrors, ca_certs for internal CAs, ntp, disk_setup), NoCloud seeding (seed dir, `cidata` ISO, `ds=nocloud;s=...` kernel cmdline, SMBIOS serial), boot stages, and pinning `datasource_list`. Public-cloud datasources (EC2/Azure/GCE…) ...ai-agentsrustgoVotes: 0GitHub stars: 5
Ubuntu NetplanAAuthor, validate, and debug netplan network configuration (`/etc/netplan/*.yaml`) for Ubuntu Server LTS 24.04 and 26.04, focused on on-premise and air-gapped hosts — static addressing, bonds, bridges, VLANs, VRFs, routing/policy-routing, DNS, interface matching/renaming, and the systemd-networkd renderer (NetworkManager and desktop covered briefly). Also the shared `network:` substrate for the ubuntu-autoinstall and ubuntu-cloud-init skills, which both use netplan v2.ai-agentsbashdebuggingVotes: 0GitHub stars: 5
Vuln ScanA[2/4 defending-code] Static source-code vulnerability scan. Second step of the find-and-fix loop (/threat-model -> /vuln-scan -> /triage -> /patch), and the usual entry point when no threat model exists. Reads a target directory (and THREAT_MODEL.md if present), spawns parallel review subagents per focus area, and writes VULN-FINDINGS.json + .md for /triage to consume. Read-only — no building, running, or network. For execution-verified crashes (build + run + sanitizer), see HARNESS.md. Use w...ai-agentsrustgoVotes: 0GitHub stars: 5
Ceph PerformanceATune and benchmark a healthy Ceph cluster, with Rook-on-Kubernetes specifics: mClock profiles and the NVMe capacity-fallback trap (osd_mclock_max_capacity_iops), osd_memory_target from pod requests, BlueStore allocation and cache defaults, PG autoscaler targets (mon_target_pg_per_osd, bulk, target_size_ratio), public/cluster network and Multus choices, msgr2 modes, Tentacle Fast EC (allow_ec_optimizations, stripe_unit), krbd vs rbd-nbd in ceph-csi, librbd cache, and benchmark method (rados be...ai-agentsgokubernetesVotes: 0GitHub stars: 5
Ceph S3ARun Ceph RGW as an S3 endpoint under Rook (CephObjectStore, CephObjectStoreUser, ObjectBucketClaim, COSI, CephBucketTopic, multisite realms/zones). Core knowledge: the 19.2.6 / 20.2.4 RGW security fixes and their fallout (SigV4 hardening rejecting presigned PUTs and RGW's own multisite forwarding; rgw_sigv4_insecure + rgw_s3_client_max_sig_ver), AWS SDK default checksums vs RGW (CRC64NVME only in Tentacle), bucket index sharding and large-omap warnings, Tentacle's two-phase reshard, RGW accou...ai-agentsphpkubernetesVotes: 0GitHub stars: 5
Ceph TroubleshootingADiagnose and recover an unhealthy Ceph cluster, with Rook-on-Kubernetes specifics: slow or stuck recovery/backfill under the mClock scheduler (why osd_max_backfills "does nothing"), nearfull/backfillfull/full, inconsistent/unfound/incomplete/down PGs, BLUESTORE_SLOW_OP_ALERT vs SLOW_OPS, OSD OOM kills from pod memory sizing, mon quorum loss and restore-quorum, OSD removal with the kubectl-rook-ceph plugin, stale RBD watchers after node loss, and field-reported failure modes on Squid 19.2 and ...ai-agentsgonodeVotes: 0GitHub stars: 5
Rook Ceph Best PracticesAOperate, configure and upgrade Rook-managed Ceph on Kubernetes (CephCluster CR; rook-ceph, rook-ceph-cluster and ceph-csi-drivers charts; ceph-csi-operator). Core knowledge: the Rook -> Ceph -> key-rotation upgrade order and its version gates; the CVE-2025-30156 fix (new AES256K CephX key type, daemon key rotation, the six AUTH_INSECURE_* health codes, kernel 7.0 for CSI keys); the Rook v1.20 move of CSI to ceph-csi-operator and the new ceph-csi-drivers chart; disabling the rook mgr module be...ai-agentsgophpVotes: 0GitHub stars: 5