Claude Skills by cloudthinker-ai

Use when performing infrastructure code review — infrastructure-as-Code review template for Terraform, CloudFormation, Pulumi, and other IaC tools. Covers security hardening, cost impact analysis, blast radius assessment, state management safety, and drift detection to ensure infrastructure changes are safe, secure, and cost-effective.

Use when performing infrastructure drift detection — detects and catalogs infrastructure drift between the desired state defined in Infrastructure as Code and the actual state of deployed resources. This template guides teams through drift detection, impact assessment, and reconciliation to maintain infrastructure consistency and compliance.

Use when performing iso27001 audit checklist — provides a comprehensive audit checklist aligned with ISO 27001:2022 Annex A controls for information security management systems. Covers all 93 controls across organizational, people, physical, and technological domains with evidence collection guidance and gap remediation planning.

Enrich code reviews with business context by finding the linked issue/ticket from branch name or PR/MR description. Validates that code changes satisfy acceptance criteria and business requirements before reviewing.

Use when performing it asset lifecycle management — iT asset lifecycle tracking from procurement through disposal covering asset intake, deployment, maintenance, refresh planning, and secure decommissioning. Provides a framework for managing assets at every stage to optimize costs, ensure compliance, and maintain accurate inventory records.

Use when performing it change management process — iTIL-aligned change management process covering change request submission, risk assessment, CAB review, approval workflows, implementation planning, and post-implementation review. Ensures all IT changes follow a controlled process to minimize risk and service disruption.

Create Jira tickets from incident RCA findings. Automatically generates structured tickets with root cause analysis, severity classification, and remediation steps.

Use when performing k8s cluster upgrade runbook — kubernetes cluster upgrade runbook covering pre-upgrade checks, API deprecation review, node upgrade procedure, validation tests, and rollback steps. Supports EKS, GKE, AKS, and self-managed clusters. Use for minor/major version upgrades.

Use when performing knowledge base article template — template for writing IT support knowledge base articles covering problem description, step-by-step resolution, troubleshooting tips, and related resources. Provides a standardized format for documenting solutions so helpdesk agents and end users can find and follow resolutions consistently.

Use when performing knowledge transfer plan — structures a knowledge transfer plan for engineering teams facing team transitions, departures, or domain ownership changes. This template ensures critical knowledge about systems, processes, and tribal context is documented, transferred to receiving team members, and validated before the transition is complete.

Use when performing kubernetes node drain — runbook for safely draining Kubernetes nodes for maintenance, upgrades, or decommissioning. Covers pod disruption budget validation, workload rescheduling, persistent volume handling, cordon and drain execution, and post-drain verification to ensure zero workload disruption.

Use when performing legacy api modernization — guides the modernization of legacy APIs (SOAP, XML-RPC, proprietary protocols) to modern RESTful or GraphQL interfaces. Covers API discovery, contract analysis, versioning strategy, backward compatibility, consumer migration, and deprecation planning.

Use when performing llm evaluation framework — provides a structured framework for evaluating large language models (LLMs) for production use. Covers task-specific benchmarking, safety testing, cost analysis, latency measurement, prompt engineering evaluation, and comparison across models to select the optimal LLM for a given use case.

Use when performing load test plan — load testing plan template covering test scenario design, baseline capture, execution configuration, results analysis, and reporting. Supports k6, Locust, Gatling, and JMeter approaches. Use for capacity validation, performance regression testing, or pre-launch load testing.

Use when performing load testing plan — designs a comprehensive load testing plan covering test scenario definition, workload modeling, environment preparation, tool selection, execution strategy, and results analysis. Supports stress testing, soak testing, spike testing, and capacity planning for web applications and APIs.

Use when performing log rotation setup — template for configuring and validating log rotation policies across services and infrastructure. Covers log volume assessment, rotation strategy selection, retention policy configuration, compression settings, and monitoring to prevent disk exhaustion and ensure compliance with retention requirements.

Use when performing mainframe to cloud — provides a structured methodology for migrating mainframe workloads (COBOL, JCL, CICS, IMS) to cloud-native platforms. Covers code analysis, automated conversion, data migration from hierarchical and VSAM stores, batch job modernization, and phased cutover with parallel validation.

Use when performing major incident communication it — iT-wide incident communication workflow for notifying end users and stakeholders during major IT outages or service disruptions. Covers initial impact notification, periodic status updates, resolution announcements, and post-incident summaries with templates for each communication stage.

Use when performing major incident review — guides teams through a structured, blameless review of major incidents, covering timeline reconstruction, root cause analysis, contributing factors, and corrective actions. This template ensures incidents become learning opportunities that drive systemic improvements rather than finger-pointing exercises.

Use when performing meeting effectiveness review — conducts a review of team meeting practices to identify waste, improve effectiveness, and reclaim productive time. Covers meeting inventory, cost analysis, attendee optimization, agenda quality, decision tracking, and implementation of meeting hygiene practices across the organization.

Use when performing memory leak investigation — provides a systematic methodology for detecting, diagnosing, and resolving memory leaks in production applications. Covers heap analysis, allocation profiling, leak pattern identification, garbage collection tuning, and validation procedures across common runtime environments.

Use when performing microservices code review — distributed systems code review template covering service resilience, API contract compliance, observability instrumentation, data consistency patterns, and inter-service communication. Provides a systematic review framework for microservices changes including circuit breakers, retries, idempotency, and distributed tracing.

Use when performing microservices decomposition — template for analyzing monolithic applications and planning decomposition into microservices. Covers bounded context identification, domain-driven design analysis, service boundary definition, data ownership mapping, communication pattern selection, and incremental extraction strategy.

Use when performing ml model code review — mL/AI code review template covering data leakage detection, model reproducibility, bias assessment, feature engineering validation, and experiment tracking. Provides a systematic review framework for machine learning pipelines, model training code, and inference service changes.

Use when performing ml model deployment checklist — provides a comprehensive checklist for deploying machine learning models to production, covering model validation, infrastructure setup, serving configuration, monitoring, A/B testing, and rollback procedures. Ensures models are reliable, observable, and maintainable in production environments.

Use when performing mobile code review — mobile application code review template covering battery efficiency, memory management, offline-first patterns, permission handling, app lifecycle management, and platform-specific best practices. Provides a systematic review framework for iOS, Android, React Native, and Flutter mobile applications.

Use when performing monolith to serverless — guides the decomposition of a monolithic application into serverless functions and managed services. Covers domain boundary identification, function extraction, event-driven architecture design, state management, and incremental migration using the strangler fig pattern.

Use when performing monorepo migration guide — step-by-step guide for migrating from multiple repositories to a monorepo structure. Covers repository consolidation strategy, history preservation, build system selection, CI/CD reconfiguration, code ownership setup, and dependency management to enable a successful monorepo transition.

Use when performing multi cloud cost comparison — provides a structured framework for comparing costs across multiple cloud providers for equivalent workloads. Covers service-level price comparison, TCO analysis, hidden cost identification, discount program evaluation, and recommendation generation for optimal cloud placement.

Use when performing multi region deployment — multi-region deployment template covering region selection, data replication strategy, traffic routing, failover configuration, consistency models, and operational procedures. Use for expanding to new regions, designing active-active architectures, or implementing global redundancy.

Use when performing network connectivity troubleshooting — network issue diagnosis decision tree covering WiFi connectivity, wired LAN problems, DNS resolution failures, DHCP issues, and general internet access troubleshooting. Guides helpdesk agents through systematic network diagnosis from physical layer up through application layer to identify and resolve connectivity issues.

Use when performing network partition recovery — runbook for diagnosing and recovering from network partition events across distributed systems. Covers partition detection, impact assessment, split-brain resolution, data reconciliation, connectivity restoration, and post-recovery validation to restore full cluster consistency.

Use when performing new employee onboarding it — iT onboarding checklist for new employees covering account provisioning, hardware setup, access permissions, software installation, and initial training. Generates a comprehensive onboarding task list that tracks progress through each phase from pre-arrival preparation to first-week orientation, ensuring no critical IT setup steps are missed.

Use when performing nist csf assessment — conducts an assessment against the NIST Cybersecurity Framework (CSF 2.0), evaluating organizational maturity across all six core functions: Govern, Identify, Protect, Detect, Respond, and Recover. Produces a current state profile, target profile, and prioritized gap remediation plan.

Use when performing observability maturity check — evaluates an organization's observability maturity across the three pillars (metrics, logs, traces) plus alerting, dashboards, and AIOps capabilities. Identifies gaps in visibility, assesses signal quality, and produces a roadmap for achieving full-stack observability.

Use when performing okr tracking template — provides a structured template for defining, tracking, and grading OKRs (Objectives and Key Results) for engineering teams. This template covers objective setting, key result definition with measurable targets, progress tracking cadences, and end-of-cycle grading to help teams maintain focus and measure meaningful outcomes.

Use when performing on call handoff checklist — structured on-call rotation handoff checklist ensuring effective context transfer between outgoing and incoming on-call engineers. Covers active incidents, known issues, recent deployments, pending alerts, escalation contacts, and environment health summary to minimize knowledge gaps during rotation transitions.

Use when performing on call health check — on-call health assessment covering page volume analysis, MTTA/MTTR measurement, toil identification, alert quality review, burnout indicators, and improvement recommendations. Use for quarterly on-call reviews or team health retrospectives.

Use when performing on prem to cloud migration — provides a comprehensive framework for migrating on-premises infrastructure to a cloud provider. Covers workload assessment, network connectivity, data migration, security posture translation, and phased cutover planning with minimal downtime targets.

Use when performing onboarding checklist — provides a comprehensive onboarding checklist for new engineering team members covering environment setup, access provisioning, codebase orientation, team introductions, and ramp-up milestones. This template helps teams deliver a consistent, thorough onboarding experience that gets new engineers productive quickly.

Use when performing open source contribution review — external open source contribution review template covering code quality standards, licensing compliance, security vetting, CLA verification, and community guidelines adherence. Provides a systematic framework for reviewing contributions from external contributors to ensure project quality, security, and legal compliance.

Use when performing pagerduty incident alert — create a PagerDuty incident from an RCA finding, monitoring alert, or escalation. Automatically formats incident details, selects the appropriate service and escalation policy, and posts an incident via the PagerDuty API. Use after an incident is identified and needs to be formally declared in PagerDuty.

Use when performing password reset procedure — self-service and assisted password reset workflow covering identity verification, reset execution across multiple systems, MFA recovery, and account lockout resolution. Provides step-by-step procedures for end users to reset passwords independently or with helpdesk assistance while maintaining security and audit compliance.

Use when performing pci dss assessment — pCI DSS v4.0 compliance assessment covering cardholder data protection, network segmentation, vulnerability management, access control, and monitoring. Use for self-assessment questionnaires (SAQ), audit preparation, or continuous compliance validation.

Use when performing pen test planning — plans and scopes a penetration test engagement, covering target identification, rules of engagement, testing methodology selection, team coordination, communication protocols, and findings remediation workflow. Supports network, application, cloud, and social engineering test types.

Use when performing performance budget check — template for defining, measuring, and enforcing performance budgets across web applications and services. Covers Core Web Vitals targets, bundle size limits, API latency thresholds, resource loading budgets, and regression detection to maintain fast user experiences.

Use when performing performance code review — performance-focused code review template covering N+1 query detection, memory leak identification, caching strategy evaluation, algorithmic complexity analysis, and resource utilization review. Provides a systematic framework for identifying performance bottlenecks and regressions before they impact production systems.

Use when performing performance degradation response — response playbook for latency spikes, throughput degradation, and performance incidents. Covers systematic investigation of application, database, infrastructure, and network layers, with decision frameworks for mitigation strategies including scaling, traffic shedding, and targeted optimization.

Use when performing platform engineering assessment — assesses the maturity and effectiveness of an organization's internal developer platform (IDP). Covers self-service capabilities, developer experience, golden paths, platform team structure, adoption metrics, and roadmap for building a platform that accelerates software delivery.

Use when performing pr review checklist — structured pull request review checklist covering security, performance, testing, documentation, and code quality. Provides a comprehensive, consistent review framework to ensure thorough reviews across all engineering teams and prevent common issues from reaching production.