Business & Operations

Describe what this skill helps an agent do.

Describe what this skill helps an agent do.

Assess CVE triage, prioritization, SLAs, exploitability, asset criticality, exceptions, risk acceptance, and remediation tracking.

Review TypeScript strictness, narrowing, generics, declarations, runtime validation, and compiler configuration.

Design subscription billing for plans, trials, invoices, proration, usage, renewals, dunning, cancellation, and entitlements.

Design and review Stripe PaymentIntents or Checkout, idempotency, signed webhooks, Connect or Billing boundaries, versions, and tests.

Assess SLOs, SLIs, error budgets, capacity, degradation, timeouts, retries, circuit breakers, load shedding, and operational risks.

Review SLSA, provenance, SBOM, signatures, attestations, build integrity, artifact promotion, and trusted builders.

Review Internal Developer Platforms for secure golden paths, self-service guardrails, templates, permission models, secrets handling, and auditability.

Review secure-by-design decisions, least privilege, Zero Trust, tenant separation, secure defaults, and abuse scenarios.

Review Strong Customer Authentication and 3-D Secure challenge, exemption, liability, fallback, accessibility, and state handling.

Review SBOM generation, CVE triage, VEX, exception processes, patch SLAs, and the vulnerability lifecycle.

Create and review runbooks, operating instructions, incident playbooks, escalation paths, restart procedures, and checklists.

Document and assess conscious risk decisions, impact and likelihood, expiry dates, and compensating measures.

Review timeouts, retries, circuit breakers, failover, backpressure, degraded modes, and resilience behavior.

Guide controlled refunds, reversals, chargebacks, and disputes with eligibility checks, evidence, deadlines, approval, and audit trails.

Review React components, hooks, state, rendering, accessibility, Server Components, testing, and performance.

Review privacy, personal data, data classification, deletion concepts, purpose limitation, GDPR risks, and sensitive-data logging.

Create and update policies, standards, procedures, and control descriptions.

Review GitLab Security Policies, OPA/Rego, Kyverno, Conftest, Sentinel, admission policies, compliance pipelines, and central guardrails.

Create and review policies for OPA/Rego, Kyverno, GitLab Policies, Conftest, Checkov, Terraform, Kubernetes, and CI/CD gates.

Design and review secure CI/CD pipelines with isolated runners, minimal rights, OIDC, signed artifacts, protected environments, and approval gates.

Review load behavior, bottlenecks, caching, database access, queue behavior, scaling, timeouts, and resource limits.

Design and review PayPal Orders and Captures, PayPal-Request-Id, OAuth boundaries, verified webhooks, refunds, and sandbox tests.