Use when orchestrating sequential phases in plan execution - executes tasks one-by-one in main worktree using git-spice natural stacking (NO manual upstack commands, NO worktree creation, tasks build on each other)
Execute implementation plans using strict TDD workflow with quality gates. Use when: (1) Implementing a plan from docs/workflow/planning/{topic}.md, (2) User says 'implement', 'build', or 'code this' with a plan available, (3) Ad hoc coding that should follow TDD and quality standards, (4) Bug fixes or features benefiting from structured implementation. Writes tests first, implements to pass, commits frequently, stops for user approval between phases.
Execute a single phase from an implementation plan with all quality gates. This skill is the unit of work for implement-plan, handling implementation, verification, code review, ADR compliance, and plan synchronization for ONE phase. Triggers when implement-plan delegates a phase, or manually with "/implement-phase" and a phase reference.
You are a workflow automation expert specializing in creating efficient CI/CD pipelines, GitHub Actions workflows, and automated development processes. Design automation that reduces manual work, improves consistency, and accelerates delivery while maintaining quality and security.
GitHub repository skill for enableedge/playwright-typescript-enableedge
Use when orchestrating parallel phases in plan execution - creates isolated worktrees for concurrent task execution, installs dependencies, spawns parallel subagents, verifies completion, stacks branches linearly, and cleans up (mandatory for ALL parallel phases including N=1)
Deploy to production, configure infrastructure, set up monitoring, and prepare for launch. Use when starting stage 10 (deployment) or when user asks to deploy, go-live, or launch the product.
Use when GitHub PR or branch has failing checks and you need to find Konflux pipeline information (cluster, namespace, PipelineRun name). Teaches gh CLI commands to identify Konflux checks (filter out Prow/SonarCloud), extract PipelineRun URLs from builds and integration tests, and parse URLs for kubectl debugging.
Enforces quality verification gates with four-step validation (tests pass, build succeeds, checklist complete, no blockers) before task completion, PR creation, or status updates. Auto-activates when user says "done", "complete", "finished", "ready to merge", or runs /ccpm:verify or /ccpm:done commands. Provides systematic verification workflow that prevents false completion claims and ensures production readiness. Blocks external system writes (Jira, Slack) until evidence collected. Integrates with external-system-safety for confirmation workflow. When verification fails, suggests /ccpm:verify to debug issues systematically.
Audits project dependencies for outdated packages, duplicates, heavy/problematic libraries, security vulnerabilities, and risky version combinations. Generates prioritized reports with security, performance, and maintainability insights, upgrade paths, and safe pinning recommendations. Use when users request dependency audits, package updates, security checks, or dependency optimization.
Deploy and update patterns. Use when deploying new patterns, updating existing deployments, or testing syntax. Includes deployment commands and the first custom pattern celebration.
GitHub Actionsใฎใใใญใคๅฎ่กๅฑฅๆญดใๅๆใใใใใญใคๆ้ใฎใใฌใณใๆๆกใจ็ฐๅธธๆค็ฅใ่กใใใใใใญใคๅๆใใใใใญใคใใใฉใผใใณในใใจ่จใใใๆใซไฝฟ็จใ
Validates that a skill or MCP implementation matches its manifest by running Codex-powered semantic comparisons across descriptions, preconditions, effects, and API surface.
PR Code Review ่ฉไผฐ่ๅฎๆด็ผๅธๆต็จใ็ถไฝฟ็จ่ ๆๅฐ code reviewใPR ๅฏฉๆฅใreview ๅปบ่ญฐ่็ใmerge PRใ็ผๅธ็ๆฌใreleaseใsquash mergeใ็ๆฌๆจ็ฑคๆ่ชๅๅ็จใๅ ๅซ่ฉไผฐ Copilot/ไบบๅทฅ review ๅปบ่ญฐใ็จๅผ็ขผไฟฎๆญฃใGit ๅไฝตใ่ชๆๅ็ๆฌๆดๆฐใCHANGELOGใๆๅ ็ผๅธ็ๅฎๆดๅทฅไฝๆต็จใPR review evaluation and release workflow for processing code review comments, merging PRs, semantic versioning, and publishing releases.
Use when tracing Konflux builds from image references, finding build logs from artifacts, or verifying source commits for container images - extracts provenance attestations to navigate from images back to builds and source code
ไฟฎๅพฉ npm ไพ่ณดๅฎๅ จๆผๆด็ๅฎๆดๅทฅไฝๆต็จใ็ถไฝฟ็จ่ ๆๅฐๅฎๅ จ่ญฆๅใDependabot alertsใCVE ๆผๆดใnpm audit ๅ้กๆ่ชๅๅ็จใๅ ๅซๆฅ่ฉขๆผๆดใๅ็ดไพ่ณดใ้ฉ่ญไฟฎๅพฉใ็ผๅธ็ๆฌ็ๅฎๆดๆต็จใFixes npm dependency security vulnerabilities with a complete workflow including Dependabot alert analysis, package upgrades, build verification, version release following semantic versioning.
Optimizes Dockerfiles for smaller images, faster builds, better caching, and security hardening using multi-stage builds and best practices. Use when users request "optimize Dockerfile", "reduce Docker image size", "Docker best practices", or "containerize application".
Execute Quarkus native image tests using GraalVM/Mandrel builder. This skill should be used when users request to run native tests, validate native compilation, test GraalVM compatibility, or verify native image functionality for Quarkus applications.
Use when executing implementation plans from planning phase to verified completion
Professional DevOps engineering skill for creating CI/CD pipelines, implementing infrastructure as code, managing environments, and establishing monitoring and observability across all deployment stages.
You are a dependency security expert specializing in vulnerability scanning, license compliance, and supply chain security. Analyze project dependencies for known vulnerabilities, licensing issues, outdated packages, and provide actionable remediation strategies.
Use when starting any conversation in a project using spectacular - establishes mandatory workflows for spec-anchored development, including when to use /spectacular commands and how to work with constitutions
