All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,645
- 819
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 13,681–13,704 of 19,645 skills
- TurborepoConfigure and troubleshoot Turborepo repositories. Use when workingVotes: 0GitHub stars: 16
- PortQuery and operate Port.io — the Internal Developer Portal that governs your SDLC. Use when working with software catalogs, blueprints, entities, scorecards, self-service actions, incidents, or DevOps/platform requests. Triggers on mentions of Port, port.io, IDP, developer portal, scorecards, blueprints, service catalog, or self-service actions.Votes: 0GitHub stars: 16
- PnpmNode.js package manager with strict dependency resolution. Use whenVotes: 0GitHub stars: 16
- NuxtNuxt full-stack Vue framework with SSR, auto-imports, andVotes: 0GitHub stars: 16
- Gws ScriptManage Google Apps Script projects.Votes: 0GitHub stars: 16
- Create DocsCreate complete documentation sites for projects. Use when asked to: "create docs", "add documentation", "setup docs site", "generate docs", "document my project", "write docs", "initialize documentation", "add a docs folder", "create a docs website". Generates Docus-based sites with search, dark mode, MCP server, and llms.txt integration.Votes: 0GitHub stars: 16
- Sast SsrfimdsDetect Server-Side Request Forgery targeting cloud instance metadata endpoints (IMDSv1) using a three-phase approach: recon (find user-controlled URL fetch sinks, IMDSv1 usage, and cloud execution context indicators), batched verify (taint analysis tracing user input to the fetch sink while confirming cloud reachability, in parallel subagents of 3 candidates each), and merge (consolidate results into sast/ssrfimds-results.md and sast/ssrfimds-results.json). Covers Python, Node.js, Java, Go, P...Votes: 0GitHub stars: 12
- Sast PipelineinjDetect CI/CD pipeline injection vulnerabilities where untrusted event payload values (pull request titles, issue bodies, comment bodies, branch names) are interpolated directly into a `run:` shell step or `actions/github-script` via `${{ ... }}` expression syntax, letting an external contributor inject arbitrary shell commands into the CI runner. Uses a three-phase approach: recon (find all injection sinks across GitHub Actions, GitLab CI, and CircleCI configs), batched verify (parallel subag...Votes: 0GitHub stars: 12
- Sast IacDetect insecure Infrastructure-as-Code (IaC) configurations in a codebase using a three-phase approach: recon (inventory IaC files — Dockerfile, Terraform, Kubernetes manifests, GitHub Actions workflows, docker-compose), batched verify (apply rule-set against 3 files in parallel), and merge (consolidate batch results). Requires sast/architecture.md (run sast-analysis first). Outputs findings to sast/iac-results.md plus canonical sast/iac-results.json. Use when asked to find insecure IaC, cont...Votes: 0GitHub stars: 12
- Sast AgentidentityDetect over-privileged non-human agent identities — service accounts, API tokens, IAM roles, and CI credentials used by automated pipelines that carry broader permissions than the agent's task requires, violating least privilege for non-human identities. Applies LLM-driven scope-vs-need analysis to distinguish genuine over-permission from permissions constrained by boundary controls or OIDC short-lived issuance. Outputs findings to sast/agentidentity-results.md and the canonical sast/agentide...Votes: 0GitHub stars: 12
- Migrate Dotnet9 To Dotnet10Migrate a .NET 9 project or solution to .NET 10 and resolve all breaking changes. USE FOR: upgrading TargetFramework from net9.0 to net10.0, fixing build errors after updating the .NET 10 SDK, resolving source and behavioral changes in .NET 10 / C# 14 / ASP.NET Core 10 / EF Core 10, updating Dockerfiles for Debian-to-Ubuntu base images, resolving obsoletion warnings (SYSLIB0058-SYSLIB0062), adapting to SDK/NuGet changes (NU1510, PrunePackageReference), migrating System.Linq.Async to built-in ...Votes: 0GitHub stars: 485
- Migrate Dotnet8 To Dotnet9Migrate a .NET 8 project to .NET 9 and resolve all breaking changes. USE FOR: upgrading TargetFramework from net8.0 to net9.0, fixing build errors after updating the .NET 9 SDK, resolving behavioral changes in .NET 9 / C# 13 / ASP.NET Core 9 / EF Core 9, replacing BinaryFormatter (now always throws), resolving SYSLIB0054-SYSLIB0057, adapting to params span overload resolution, fixing C# 13 compiler changes, updating HttpClientFactory for SocketsHttpHandler, and resolving EF Core 9 migration/C...Votes: 0GitHub stars: 485
- Audit And Reduce DependenciesReduces JavaScript dependency footprint with pnpm while preserving lockfile, workspace layout, and dependency range style. Runs /check-npm first, then removes unused deps, dedupes versions, ranks transitive closure, and reports Keep/Replace/Remove triage. Use when cleaning up pnpm dependencies, reducing lockfile size, or shrinking node_modules in Grafana plugins; not for Go modules or full GitHub Actions workflow audits.Votes: 0GitHub stars: 268
- Profilecli InsightsQuery live Pyroscope profiles with profilecli, analyze them with pprof, and correlate hot functions with checked-out source code. Use when the user asks to investigate a service with a configured Pyroscope server, profilecli, and pprof.Votes: 0GitHub stars: 268
- K6 Trend AnalysisAnalyze Grafana Cloud k6 test run trends over time. Detects slow metric drift (e.g., P95 latency creeping up while still passing thresholds), computes headroom to thresholds, flags anomalies, and recommends threshold tightening. Use when the user asks about test performance trends, wants to know if metrics are degrading, asks whether thresholds should be tightened, or wants a health check across recent runs for a specific test. Trigger on phrases like "how is my test trending", "is P95 gettin...Votes: 0GitHub stars: 268
- Synthetic Monitoring ChecksAuthor Grafana Cloud Synthetic Monitoring checks, with deep coverage of k6 scripted and browser checks: SM's single-VU/single-iteration execution model, assertions that actually fail probe_success (expect() and fail() vs bare check()), secrets, deterministic scripts, robust browser locators, local validation with k6 run, deployment via UI/API/Terraform, verifying probe_success, and rollback. Also helps choose the simplest sufficient check type (HTTP/ping/DNS/TCP, MultiHTTP, scripted, browser)...Votes: 0GitHub stars: 268
- ToolsNarzędzia deweloperskie wiersza poleceń (CLI) platformy Soneta (enova365, Triva) — dla partnerów i zespołu Soneta (repozytorium źródłowe programu). Używaj gdy użytkownik: (1) zarządza bazami przez `dbmgr` — tworzy, rejestruje, konwertuje, backup/restore, licencje, rozszerzenia, analiza, kompilacja; (2) przygotowuje bazę testową/demo z CLI albo automatyzuje operacje na bazach w skrypcie/CI; (3) testuje działającą aplikację przez `buscall` — zdalnie steruje programem (nawigacja, formularze, gri...Votes: 0GitHub stars: 9
- ErpMapa i przewodnik po skillach platformy Soneta (enova365, Triva): soneta:programming (ORM, kod biznesowy), soneta:addon-planning, soneta:business-xml, soneta:form-xml, soneta:repx (wydruki .repx), soneta:place-def-elementow, soneta:config (import/eksport XML, scan-folders, appsettings.json, rejestr konfiguracji *.reg.json), soneta:tools (dbmgr, buscall, SonetaFrame), soneta:containers (docker compose, Apple container, Helm/Kubernetes). Używaj gdy użytkownik: (1) rozpoczyna zadanie dla platfor...Votes: 0GitHub stars: 9
- ContainersUruchamianie i wdrażanie platformy Soneta (enova365, Triva) w kontenerach. Używaj gdy użytkownik: (1) stawia środowisko (server + web) na obrazach Soneta przez `docker compose` albo na Apple `container` / Container Desktop; (2) tworzy bazę danych w kontenerze (usługa init z `dbmgr create`, `--demo`, `--recreate`, licencja, konwersja); (3) wdraża na Kubernetes przez Helm (`helm repo add soneta`, `values.yaml`, `dblist`, `adminMode`); (4) wybiera wersję obrazów (tagi z Docker Hub `soneta/*` lub...Votes: 0GitHub stars: 9
- ReleaseCut a kolu release — tag master, promote the Unreleased changelog entry, publish a GitHub release. ONLY invoke when the user explicitly types `/release` or `$release`; never auto-select from a natural-language request.Votes: 0GitHub stars: 81
- ParcelKolu's project-wide default for filesystem monitoring is `@parcel/watcher`. Reach for this skill when adding or modifying any code that watches files or directories — recursive subtree watching, single-file observation, fs.watch alternatives, chokidar replacement, inotify/FSEvents/watchman backend selection, ignore globs, watcher debouncing, or refcounted shared subscriptions. Covers backend dispatch, the watchman invocation path, ignore handling, post-install reconciliation, and the failure ...Votes: 0GitHub stars: 81
- CiRun this repo's CI end-to-end — the kolu-specific procedure on top of the odu runner: the odu MCP front door, banned opt-out flags, mandatory two-platform coverage, venue-pool leasing, fail-fast surfacing, e2e timing evidence, and the green-gate. Triggers on "run CI", "drive CI", "re-run the pipeline", "close the red check", "warm the pool". Runner mechanics live in the `/odu` skill.Votes: 0GitHub stars: 81
- Uniswap HooksSecurity-first assistance for building Uniswap v4 hooks — threat modeling, permission flags analysis, NoOp attack prevention, delta accounting, and pre-deployment audit checklists.Votes: 0GitHub stars: 1,203
- Uniswap CcaConfigure and deploy Continuous Clearing Auction (CCA) smart contracts — guided parameter setup, convex supply schedule generation, Q96 price calculations, and multi-chain CREATE2 deployment.Votes: 0GitHub stars: 1,203