infrastructure-audit
Audit deployment targets, certificates, accounts, and infrastructure health in Octopus Deploy
Audit deployment targets, certificates, accounts, and infrastructure health in Octopus Deploy
MCP server configuration for GitHub Actions including tool permissions, environment variables, and multi-server setups. Use when configuring MCP servers in GitHub Actions workflows.
Automatically validates Cloudflare Workers runtime compatibility during development, preventing Node.js API usage and ensuring proper Workers patterns
Deno Deploy deployment workflows - use when user says "deploy to deno deploy", "push to deno deploy", "ship to deno deploy", or asks about deploying Deno apps to Deno Deploy
Production-grade skill for C++ build infrastructure. Covers CMake, Make, Ninja, package managers (Conan, vcpkg), cross-platform builds, and CI/CD integration.
Scan code changes for security vulnerabilities using STRIDE threat modeling, validate findings for exploitability, and output structured results for downstream patch generation. Supports PR review, scheduled scans, and full repository audits.
Container image validation with Skaffold test and verify stages. Covers container-structure-tests for image hygiene, custom tests for security scanning, and post-deployment verification. Use when configuring pre-deploy tests, security scans, or integration tests in Skaffold pipelines.
Runs Software Composition Analysis (SCA) to detect vulnerable dependencies. Wraps npm audit and Trivy fs. Use when user asks to "scan dependencies", "check npm vulnerabilities", "SCA scan", "dependency audit", "依存関係スキャン", "脆弱性チェック".
Executes SonarCloud API queries via unified Python CLI. Use when checking quality gate status, searching issues (bugs, vulnerabilities, code smells), retrieving metrics (coverage, complexity), or viewing analysis history.
Generate production-ready Kubernetes manifests for AgentStack. Use for creating Deployments, Services, ConfigMaps, Secrets, RBAC, and other K8s resources. Triggers on "create deployment", "k8s manifest", "kubernetes yaml", "pod spec", "service definition", "configmap", "RBAC", or when deploying components to Kubernetes.
Create, update, validate, and submit Homebrew Casks. Use when the user mentions Homebrew cask/cask, Homebrew/homebrew-cask, adding a new cask, updating a cask, cask token naming, sha256, url verified:, livecheck, zap/uninstall, or when asked to run brew style/audit for a cask.
Use after creating PR - monitor CI pipeline, resolve failures cyclically until green or issue is identified as unresolvable
Investigate deployment failures, analyze task logs, and troubleshoot Octopus Deploy issues
HARD GATE before PR creation - verifies review artifact exists in issue comments, all findings addressed or tracked, blocks PR creation if requirements not met
Create a new Dagster workspace for managing multiple projects. Use when user wants to initialize a workspace, manage multiple Dagster projects together, or set up a multi-project environment.
FVH (Forum Virium Helsinki) release-please standards and configuration. Use when configuring release-please workflows, checking release automation compliance, or when the user mentions FVH release-please, automated releases, or version management.
Knowledge of the Vercel deployment pipeline, hybrid build scripts, and environment configuration.
Enterprise artifact management with governance, lifecycle, SBOM, and supply chain security for November 2025 standards
Execute comprehensive framework health checks to validate core cc-sessions functionality including write-gating, state persistence, skill precedence, LCMP freshness, and handoff log structure