All categories
DevOps & Cloud
Deployment, cloud, containers, CI/CD, monitoring, and infrastructure
- 19,595
- 817
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse devops & cloud skills
Showing 14,401–14,424 of 19,595 skills
- Snowflake MaestroUse this skill to classify a Snowflake task and route it to the narrowest review specialist on the Snowflake board, or to gate a mutation request behind explicit written human approval. Trigger when a Snowflake architecture, administration, identity, network, governance, compliance, FinOps, query performance, pipeline, streaming, analytics, ML, Cortex AI, Native App, BCDR, DevOps/IaC, migration, or business-value task arrives and the right specialist is not yet obvious. Routing only: it never...Votes: 0GitHub stars: 23
- Snowflake Live Warehouse Cost Change GuardApproval-gated live guard for exactly one Snowflake warehouse or cost-governance change: a size, auto-suspend, auto-resume, scaling or concurrency setting, a resource-monitor assignment or threshold, or a supported budget operation. Requires a quantified cost effect, a quantified performance effect with a falsification criterion, an affected-workload enumeration, and an agreed rollback trigger before execution. Treats a suspend-capable monitor as an availability control. Runs as a custom role...Votes: 0GitHub stars: 23
- Snowflake Live Rbac Grant GuardApproval-gated live guard for exactly one Snowflake privilege change: ONE privilege, on ONE securable, to or from ONE custom role. Use only after a human has read the effective-inheritance impact and returned written approval naming account, environment, securable, privilege, role, and accepted blast radius. Runs as a custom role owning only the target securable — never ACCOUNTADMIN, never MANAGE GRANTS. Refuses ALL PRIVILEGES, ownership transfer, system-role and PUBLIC targets, bulk operatio...Votes: 0GitHub stars: 23
- Snowflake Live Rbac Grant Guard At AzureMutating-runtime live guard for Snowflake RBAC privilege management on Azure. Executes exactly ONE GRANT or REVOKE of a single privilege on a single securable to a single custom role — with explicit written human approval, dry-run preflight (SHOW GRANTS prior state), and a named rollback owner. Phase B strictly-scoped controlled mutation; never ACCOUNTADMIN/SECURITYADMIN/SYSADMIN/PUBLIC, never OWNERSHIP, never MANAGE GRANTS, never future grants at database or account scope.Votes: 0GitHub stars: 23
- Snowflake Live Pipeline Streaming Change GuardApproval-gated live guard for exactly one Snowflake pipeline or ingestion change — one task, stream, dynamic table, or pipe operation, or one bounded backfill. Requires a freshness and count baseline, the last successful processing state, the offset or checkpoint position, a downstream consumer enumeration, and an explicit duplication-or-loss analysis before execution, plus a passing reconciliation afterwards. Refuses unbounded replays and replays into targets with no deduplication path. Runs...Votes: 0GitHub stars: 23
- Snowflake Live Failover Promotion GuardApproval-gated live guard for exactly one Snowflake failover group promotion. Requires a declared incident or drill, a named accountable owner, a data-loss window computed from replication refresh history, dependency readiness confirmed item by item by each owning team, a client redirection plan covering hardcoded clients, and a stated failback strategy — all before the statement is composed. Refuses on urgency alone. Runs as a custom role in the target account able to promote only the named ...Votes: 0GitHub stars: 23
- Snowflake Live Auth Network Policy GuardApproval-gated live guard for exactly one Snowflake network-policy or authentication-policy change. Refuses any tightening for which a surviving administrative path has not been demonstrated from login history — a named principal, a proven location, and the privilege to revert. Refuses combined add-and-remove changes, integration lifecycle operations, MFA weakening, and unconstrained break-glass paths. Runs as a custom role owning only the target policy object; never ACCOUNTADMIN.Votes: 0GitHub stars: 23
- Snowflake Identity Access SecurityUse this skill to review Snowflake identity and authorization: effective access across role hierarchy, ownership and future grants; custom, database, and application role choice; managed access schemas; authentication policies, MFA, SSO, SCIM, OAuth, key-pair, and workload identity federation; SERVICE and SERVICE_AGENT user types; and concrete privilege-escalation paths. Trigger on any question about who can do what in a Snowflake account, or how a principal proves identity. Static review onl...Votes: 0GitHub stars: 23
- Snowflake Governance PrivacyUse this skill to design or review Snowflake data controls: sensitive-data discovery and classification, tags and propagation, masking policies, row-access policies, aggregation/projection/join policies, policy assignment and the consumption paths a policy does or does not reach, lineage completeness, and data quality monitoring. Trigger when the question is what a permitted principal sees inside the data, or whether a control actually behaves. Static review only: it never attaches or alters ...Votes: 0GitHub stars: 23
- Snowflake Finops Cost GovernorUse this skill to make Snowflake consumption accountable: decompose warehouse, serverless, AI, storage and transfer spend; distinguish budgets from resource monitors and find the uncontrolled surface; attribute credits by query tag, object tag and warehouse; design defensible chargeback; investigate anomalies and forecast variance; and evaluate optimization economics. Trigger on any cost, credit, budget, attribution, or spend-anomaly question. Static review only: it never resizes a warehouse,...Votes: 0GitHub stars: 23
- Snowflake Devops Iac ReleaseUse this skill to review how Snowflake changes ship: the official Terraform provider and its stable-versus-preview resource split, version pinning and upgrade rehearsal, plan review for destroy/replace and grant changes, state posture, Snowflake CLI in automation, CI/CD and environment promotion, drift adoption versus reversion, behaviour-change bundle management, and rollout and rollback strategy. Trigger on any Snowflake IaC, pipeline, or release question. Static review only: it never appli...Votes: 0GitHub stars: 23
- Snowflake Data Science MlUse this skill to review the ML lifecycle in Snowflake for reproducibility and governability: feature engineering and leakage, point-in-time correctness and training/serving skew, training reproducibility, the model registry and versioning, batch and continuous inference, drift and performance monitoring, ML lineage, and retraining and rollback policy. Trigger when a model is moving toward or already in production. Static review only: it never trains, registers, deploys, or invokes a model, a...Votes: 0GitHub stars: 23
- Snowflake Data Platform Engineering At AzureDesign and review Snowflake data platform engineering on Azure, covering warehouse sizing and cost governance, Azure Private Link requirements, storage integration with ADLS Gen2 and Azure Blob, Snowpipe automation, object tagging, dynamic data masking, row access policies, and ACCESS_HISTORY lineage for GDPR and CCPA compliance.Votes: 0GitHub stars: 23
- Snowflake Data Engineering PipelinesUse this skill to review Snowflake batch and ELT pipelines for data correctness: COPY and load semantics, Streams offset behaviour, Tasks and task graphs, Dynamic Tables and achieved versus configured target lag, Snowpark transformations, schema evolution from the consumer's position, idempotency and replay, and reconciliation design. Trigger when data is late, duplicated, incomplete, or suspected wrong, or when a pipeline is being designed. Static review only: it never runs, resumes, or back...Votes: 0GitHub stars: 23
- Snowflake Compliance Evidence AuditorUse this skill to establish whether a Snowflake control is provable to an auditor: evidence collection from ACCESS_HISTORY, LOGIN_HISTORY, grant history and Trust Center, control mapping with named gaps, audit-period coverage, evidence freshness and retention limits, and segregation-of-duties analysis derived from the grant graph. Trigger when the question is proof rather than configuration. It never implements a control and never states a compliance conclusion.Votes: 0GitHub stars: 23
- Snowflake Business Value Adoption StrategistUse this skill to test whether a Snowflake initiative removes a business constraint anyone owns: value hypothesis, pre-work baseline, benefit modelling by credibility category, unit economics, causal attribution, adoption, time to value, decision latency, alternatives including do-nothing, benefit realization, and translation into executive KPIs. Trigger when an initiative is proposed, prioritized, or being justified — and especially when the justification is that Snowflake supports the capab...Votes: 0GitHub stars: 23
- Snowflake Bcdr ResilienceUse this skill to test whether a Snowflake recovery claim is provable: replication versus failover groups and their membership, edition and region constraints, Client Redirect, RPO and RTO tracked as requested/feasible/proven, the dependency matrix outside Snowflake, DR drill scope and evidence, failover preconditions and data-loss window, and failback design. Trigger on any DR, failover, replication, or business-continuity question. Static review only: it never promotes or fails over anythin...Votes: 0GitHub stars: 23
- Snowflake Analytics Semantic Data ProductUse this skill to review analytical correctness and business semantics in Snowflake: join grain and fan-out, window and null semantics, semantic views and their declared relationships, metric and KPI contracts, BI workload design, the Cortex Analyst semantic boundary, and conflicting business definitions. Trigger when a number is disputed, a metric is being defined, or a semantic model is being built. Static review only: it never executes a query, and it never settles a business-definition co...Votes: 0GitHub stars: 23
- Scaleway Live Kapsule Rollout GuardGate and execute Scaleway Kapsule live mutations — Kubernetes version upgrades, node pool creation/deletion/scaling, and cluster configuration changes — with mandatory PDB audit, cluster health verification, explicit approval, and a documented rollback plan. Use when a live Kapsule cluster or node pool mutation is requested. Hard-stops when target cluster ID, region/zone, approval, or rollback plan is absent or ambiguous.Votes: 0GitHub stars: 23
- Sap Transformation Portfolio Triage ReviewAdvisory triage of an SAP transformation program portfolio: workstream prioritization, dependency and risk mapping, value vs effort classification, readiness gating across S/4HANA, BTP, integration, and security workstreams, and RAID log assessment. Does not touch or mutate any live system.Votes: 0GitHub stars: 23
- Sap Testing Quality Gate ReviewReview SAP testing strategy and quality gate completeness for S/4HANA and SAP BTP programs: test scope and risk-based prioritization, SAP Cloud ALM test management configuration, automation coverage with Tricentis/CBTA, regression strategy for upgrades and transports, test data availability and masking, defect management workflow, and entry and exit criteria per test phase. Advisory only — does not execute tests, trigger automation runs, or mutate test management configuration.Votes: 0GitHub stars: 23
- Sap Supply Chain Ibp Resilience ReviewReview SAP Integrated Business Planning (IBP) and supply chain resilience posture: demand and supply planning configuration, Sales and Operations Planning (S&OP) process governance, inventory optimization and safety stock logic, statistical forecast accuracy and bias, IBP control tower alerts and exception management, scenario planning design, and supply chain risk coverage. Flags planning gaps, forecast blind spots, inventory policy misalignments, alert fatigue risks, and scenario planning d...Votes: 0GitHub stars: 23
- Sap Successfactors Hr Process Risk ReviewReview SAP SuccessFactors HR process risk: Employee Central data and role-based permissions (RBP), org and position management integrity, hire-to-retire process controls, payroll integration data flow, data privacy for PII and GDPR, and joiner-mover-leaver lifecycle governance. Escalates HR-sensitive and PII findings. Does not accept raw PII or touch live systems.Votes: 0GitHub stars: 23
- Sap Security Hr Legal ProtocolCross-functional escalation protocol governing handoffs between SAP Security, HR, and Legal when identity misuse, privileged-access anomalies, SoD violations, insider-risk signals, HR-sensitive system access, joiner/mover/leaver lifecycle events, or fraud-sensitive access patterns require coordinated response. Defines decision rights, evidence standards, redaction policy, approval gates, and audit packaging. Never mutates live systems and never bypasses any guarded-mutating gate.Votes: 0GitHub stars: 23