Tools & Utilities
Essential command-line tools and system utilities.
build-test-auto
Automatically builds and tests code changes. Use whenever code is modified, tests fail, before creating pull requests, or when verifying code quality.
guardrails-reviewer
Reviews code changes against Zenable conformance requirements using hybrid LLM-as-judge and deterministic validation. Automatically invoked when making code changes or at development milestones. Use for security compliance, quality checks, and policy enforcement.
workflow-trigger-security
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
code-review-checklist
Systematic code review guidelines and checklist. Use this skill when reviewing code, conducting pull request reviews, or establishing code quality standards. Provides comprehensive review criteria covering functionality, design, testing, security, and documentation. Complements the code-quality agent.
cicd-validation-merge-workflow
Pre-push validation checklist (cargo fmt, clippy with zero warnings, feature flag testing, test suite), CI monitoring, merge process, and release quality gates. Use when preparing to push code, validating changes before PR, running CI checks, merging PRs, or preparing releases.
github-actions
GitHub Actions workflow patterns for deployment. Use when creating CI/CD workflows.
senior-qa
Comprehensive QA and testing skill for quality assurance, test automation, and testing strategies for ReactJS, NextJS, NodeJS applications. Includes test suite generation, coverage analysis, E2E testing setup, and quality metrics. Use when designing test strategies, writing test cases, implementing test automation, performing manual testing, or analyzing test coverage.
pr-fixloop
Repo-scoped skill for deterministic CI autofix without PR comments
self-hosted-runner-hardening
Comprehensive hardening steps for self-hosted GitHub Actions runners. OS-level security, network isolation, credential protection, and audit logging.
refactor-critic
Reviews code quality analyst findings. Validates issues are real, severity is appropriate, and suggested refactorings are practical.
test-ci-locally
Test CI/CD scripts and workflows locally before pushing. Use when modifying GitHub Actions, CI configuration, or before pushing changes that might fail CI.
audit-readiness
Evaluate audit readiness of features, pages, or the overall platform. Use when the user asks to "check audit readiness", "test for auditors", "verify compliance evidence", "audit proof", or wants to ensure features will pass real BSI/ISO audits.
pre-commit-validator
Validates code quality before commits in the MigraineTracker React Native project. Use this skill when preparing to commit code, before pushing changes, or when the user asks to run pre-commit checks. Ensures TypeScript type safety, test coverage (80%+), passing tests, and proper branch strategy compliance.
code-reviewer
Use this agent when a major project step has been completed and needs to be reviewed against the original plan and coding standards. Examples: <example>Context: The user is creating a code-review agent that should be called after a logical chunk of code is written. user: "I've finished implementing the user authentication system as outlined in step 3 of our plan" assistant: "Great work! Now let me use the code-reviewer agent to review the implementation against our plan and coding standards" <commentary>Since a major project step has been completed, use the code-reviewer agent to validate the work against the plan and identify any issues.</commentary></example> <example>Context: User has completed a significant feature implementation. user: "The API endpoints for the task management system are now complete - that covers step 2 from our architecture document" assistant: "Excellent! Let me have the code-reviewer agent examine this implementation to ensure it aligns with our plan and follows best practices" <com
code-reviewer
Provides systematic code review with focus on quality, security, and best practices. Use when reviewing code, doing PR reviews, or asking for code feedback.
configuring-github-actions
Use when setting up GitHub Actions CI/CD for pull request checks - provides workflow templates for Python, JavaScript, and polyglot projects that run quality gates on every PR
secret-management-overview
Understanding GitHub Actions secret types, storage hierarchy, and threat model. Secure patterns for managing credentials, tokens, and sensitive configuration.
local-development-standard
Standardized local development environment setup ensuring consistency across team members and reducing "works on my machine" issues.
prepare-otterstack-deployment
Analyzes a codebase and prepares it for OtterStack deployment. Use when preparing docker-compose projects, checking OtterStack compatibility, scanning for environment variables, validating compose files, or setting up zero-downtime deployments. Triggers on "prepare for otterstack", "validate compose file", "check deployment readiness", or "scan env vars".
lxc-service-deployment
Standardized deployment procedure for services in LXC containers on the Proxmox HA cluster. Use when deploying a new service, creating LXC containers, configuring DHCP reservations (Kea), DNS rewrites (AdGuard), reverse proxy routes (Traefik), or integrating with monitoring (Uptime Kuma) and dashboard (Homepage). Triggers on phrases like "deploy a new service", "create container for", "set up DHCP", "add Traefik route", "configure DNS rewrite", or any homelab infrastructure deployment.
