Claude Skills by jazzautomations

Uses OCI pretrained AI services: Vision, Language (nested `oci ai language`) sentiment/PII/translation, Speech transcription and TTS, Document Understanding. Use when: OCR, read text from an image, sentiment, PII detection, translate, transcribe audio, text to speech, invoice or receipt extraction, document AI, extrair texto de PDF. Not for: LLM chat or embeddings (`oci-generative-ai`).

Reaches a private OCI host or database through OCI Bastion. Use when: bastion, jump host, tunnel, \"ssh into a private instance\", port forward, reach the DB on 1521, managed SSH session, session expired, CIDR allow-list, acessar host privado. Not for: designing the VCN (`oci-networking`) or SSH keys and cloud-init (`oci-compute`).

Operates OCI block, boot and File Storage. Use when: volumes, resize/attach, backup inventory or policy-assignment commands, clones, VPU, FSS, NFS, mount targets. Not for: effects of policy changes on retained backups or recoverability (`oci-dr-backup`, which delegates commands here); object buckets/PARs (`oci-object-storage`).

'Fixes OCI CLI authentication, identity and query problems. Use when: 401,

Launches, resizes and triages OCI Compute. Use when: launch instance, VM won't start, flexible shape, `.Flex`, image OCID, availability domain, cloud-init, boot volume, serial console, instance pool, autoscaling, A1 ARM, instância não sobe. Not for: out-of-capacity and limits (`oci-support-limits`), reachability (`oci-networking`), private-host access (`oci-bastion-access`).

Explains an OCI bill and estimates cost before provisioning: `usage-api` summarized usage, cost and FOCUS exports, budgets and alert rules, cost-tracking tags, and the credential-free Price List API. Use when: \"why did the bill go up\", cost analysis, showback, chargeback, FOCUS, budget, \"how much would X cost\", egress price, a conta subiu. Not for: Always Free allotments (`oci-free-tier`).

Moves and processes data on OCI: Streaming (Kafka-compatible) and Queue, Data Flow Spark, Data Integration, Data Catalog, GoldenGate CDC, Big Data Service, Batch, OpenSearch, Redis, and Data Science jobs and model deployments. Use when: Kafka on OCI, stream, queue, Spark job, ETL pipeline, CDC, notebook session, model deployment, BDS, cluster Hadoop. Not for: database-side SQL (`oracle-db-*`).

Builds OCI DevOps CI/CD. Use when: OCI DevOps project, build pipeline, deployment pipeline, `build_spec.yaml`, OCIR, push an image, Artifact Registry, image signing, vulnerability audit stage, trigger, approval stage, GitHub Actions to OCI, pipeline quebrou. Not for: what the pipeline deploys into (`oci-oke`, `oci-serverless`).

Assesses OCI recovery and backup retention. Use when: effects of policy changes on existing backups or recoverability (even one service), RPO/RTO, DR drills/failover, cross-region replication, AD/fault-domain spread. Delegates service commands after the assessment. Not for: backup commands or inventory without a recovery-impact question; volume mechanics (`oci-block-file-storage`).

Finds unused OCI resources and prices potential waste. Use when: idle resources, orphan volumes, desperdício OCI. Not for: bill explanation (oci-cost-analysis) or migration assessment.

Explains OCI Always Free allotments and trial lifecycle. Use when: explicit Free Tier/trial context, free eligibility, credits, expiry, upgrade to PAYG, idle-instance reclamation, free-account restrictions. An A1/ARM shape alone does not establish Free Tier. Not for: capacity or quota checks without free/trial context (`oci-support-limits`); paid bill analysis (`oci-cost-analysis`).

Plans OCI GenAI inference and agents. Use when: models (Cohere/Grok/llama), chat/embeddings, 429, clusters, RAG, agent endpoints, which identity or credentials an OCI AI agent uses for tools, managed-agent versus ADK execution. Not for: in-database vectors (`oracle-db-vector-ai`); policy statements for an identified principal (`oci-iam-policy`).

Authors OCI IAM statements and identity domains. Use when: least privilege, dynamic groups, permission denial for an identified principal, SAML/OIDC, SCIM, MFA, Endorse/Admit/Define. Not for: first identifying an OCI AI agent's tool-execution principal (`oci-generative-ai`); auditing existing policy (`oci-security-posture`).

Read-only runbook for an OCI resource that is down or degraded: alarm state, recent Audit mutations, Cloud Guard, metrics, logs, work requests, maintenance events and limits, then ranked hypotheses. Use when: \"it's down\", outage, page fired, \"worked yesterday\", after the deploy, caiu, ficou lento. Not for: non-OCI incidents, and never the fix — it does not mutate.

Searches OCI logs and Audit events. Use when: search the logs, \"who deleted\", 5xx in the LB log, flow logs, audit event, log group, `logging-search` syntax, LQL, Logging Analytics, Service Connector Hub, the 14-day window, quem apagou. Not for: alarms and metrics (`oci-monitoring-alarms`) or the outage runbook (`oci-incident-triage`).

Normalizes AWS, Azure and GCP inventory for OCI assessment. Use when: inventário para migrar nuvens. Not for: target pricing (oci-migration-map) or patching.

Drafts OCI Core Landing Zone variables from assessed inventory. Use when: landing zone para migração OCI. Not for: applying Terraform (oci-terraform) or source inventory.

Maps cloud inventory to OCI targets and scoped price comparisons. Use when: comparar migração AWS/GCP/Azure para OCI. Not for: inventory collection or current OCI bills.

Migrates and patches OCI fleets: Cloud Migrations, Cloud Bridge, Database Migration and ZDM, Rover, OS Management Hub, Ksplice, Java Management Service, Fleet Application Management, Exadata Fleet Update, OCVS. Use when: migrate to OCI, lift and shift, ZDM, patch my fleet, yum on OCI, Java estate, VMware on OCI, atualizar frota. Not for: Terraform adoption of existing infra (`oci-terraform`).

Queries OCI metrics and sets alarms, including Stack Monitoring. Use when: alarm, \"alert me when\", MQL, metric namespace, no datapoints, CPU utilization, ONS topic, PagerDuty, synthetic monitor, health check, APM, stack monitoring, alarme não dispara. Not for: reading logs or Audit (`oci-logging-audit`) or an active outage (`oci-incident-triage`).

Finds non-database CLI groups on current OCI. Use when: No such command, unknown group, wrong spelling, service discovery, cross-cloud concept mapping. Not for: Oracle Database/Base Database/Exadata family selection (`oracle-db-fleet`); Compute Classic/OCI-C terminology or comparisons; established service operations; application API scope (`oracle-enterprise-apps`).

Builds and debugs OCI VCN networking. Use when: VCN, subnet, NSG, security list, route table, IGW/NAT/service gateway, DRG, peering, VPN, FastConnect, DNS, load balancer 502, backend unhealthy, \"can't reach\", timeout, porta 80 não abre. Not for: OKE service annotations (`oci-oke`) or firewall/WAF findings (`oci-security-posture`).

Operates OCI Object Storage. Use when: bucket, namespace, object prefix and paging, pre-authenticated request, PAR, presigned URL, lifecycle rule, versioning, retention lock, replication, `os sync`, multipart cleanup, archive tier, bucket público. Not for: block/boot volumes or NFS (`oci-block-file-storage`).

Creates and operates OKE Kubernetes clusters. Use when: OKE, node pool, virtual nodes, kubeconfig, pod Pending, ErrImagePull, PVC stuck, LoadBalancer not provisioning, cluster upgrade, workload identity, CSI/LB annotations, cluster não sobe. Not for: the CI pipeline that deploys into it (`oci-devops-pipelines`) or the Terraform that creates it (`oci-terraform`).

'Writes OCI SDK code that works. Use when: oci python sdk, write a script,

Audits OCI security posture against CIS. Use when: \"are we secure\", tenancy audit, CIS benchmark, compliance check, public bucket, 0.0.0.0/0 ingress, MFA, stale API key, any-user policy, Cloud Guard problem, Data Safe, vulnerability scan, WAF, auditoria de segurança. Not for: writing the fix policy (`oci-iam-policy`) or Oracle's own attestations, which are Console-only.

Deploys OCI Functions, Container Instances and API Gateway. Use when: OCI Functions, `fn deploy`, serverless, container instance, API Gateway 504, route not matching, resource principal, cold start, image digest, memory or timeout limit, função não responde. Not for: OKE workloads (`oci-oke`) or the build pipeline (`oci-devops-pipelines`).

Answers \"can I actually create this\" and files the request when the answer is no: service limits vs compartment quotas vs physical capacity, resource-availability per AD, limit-increase requests, and OCI support incidents. Use when: out of host capacity, limit reached, quota, \"increase my limit\", GPU limit is zero, open a ticket/SR, aumentar limite. Not for: pricing (`oci-cost-analysis`).

Designs and audits OCI tenancy guardrails: compartment topology, tag namespaces, cost-tracking tags, quotas, budgets, landing zones, organizations and child tenancies. Use when: \"make this tenancy safe\", landing zone, CIS, compartment structure, tagging strategy, quota, budget alert, estrutura de compartimentos. Not for: policy statements (`oci-iam-policy`) or findings (`oci-security-posture`).

Authors and reviews OCI Terraform/OpenTofu and drives Resource Manager stacks. Use when: terraform, opentofu, provider `oracle/oci`, terraform plan or import, resource discovery, adopt existing infra, remote state, ORM stack, `create-plan-job`, drift, `oracle.oci` Ansible inventory. Not for: what the code creates — route the resource question to that service's skill.

Handles OCI Vault, KMS keys, Secrets and Certificates. Use when: vault, KMS, master encryption key, secret version or stage, rotate a key, \"`--endpoint` is required\", certificate expiring, mTLS cert, customer-managed key, HSM vs software, segredo, cofre. Not for: OS or database credentials (`oracle-db-sql-access`) or CI auth (`oci-devops-pipelines`).

Delivers Oracle APEX. Use when: APEX, Application Express, `f100.sql`, apex export or import, workspace, ORDS module, AutoREST, APEX Assistant, `APEX_AI` provider, Universal Theme, upgrade status, drift between environments, exportar aplicação APEX. Not for: raw SQL access for an agent (`oracle-db-sql-access`) or ADB provisioning (`oracle-autonomous-db`).

Provisions and connects Oracle Autonomous Database. Use when: autonomous database, ADB, ATP, ADW, always free database, wallet, mTLS vs TLS, tnsnames, ACL, ORA-12506, \"the database is stopped\", `_low`/`_medium` service, python-oracledb, banco autônomo. Not for: Base DB or Exadata (`oracle-db-fleet`), vectors (`oracle-db-vector-ai`), agent SQL access (`oracle-db-sql-access`).

Operates OCI non-Autonomous database services and enrolled Database Management fleets. Use when: Base DB, Exadata noun sets, HeatWave, OCI PostgreSQL, multicloud DB, managed RAC/Data Guard/AWR/PDB/RMAN, Ops Insights. Not for: Autonomous (`oracle-autonomous-db`) or standalone engine troubleshooting without OCI management.

Configures agent SQL access with database-enforced read privileges, SQLcl MCP, ORDS and Database Tools. Use when: SQLcl MCP, `sql -mcp`, database MCP, \"run this SQL from the agent\", ORDS endpoint, usuário somente leitura. Not for: schema design or vectors (`oracle-db-vector-ai`).

Builds vector search and Select AI inside Oracle Database 26ai/23ai. Use when: VECTOR column, `VECTOR_DISTANCE`, HNSW, IVF, embeddings in the database, `DBMS_VECTOR`, chunking, hybrid search, RAG on Oracle, Select AI, NL2SQL, busca semântica no banco. Not for: the OCI Generative AI inference endpoint outside the database (`oci-generative-ai`).

Explains Oracle application business APIs versus OCI environment APIs. Use when: whether CLI can automate Fusion approvals or reach application objects, Fusion/NetSuite/OIC/OAC/ODA/VB environment inventory and interface capability. Not for: visual-designer editing of Integration flows or UI; executing transactions; CLI name discovery or No such command (`oci-navigator`).