Essential command-line tools and system utilities.
Manage QA test case workflows, status transitions, and verification checklists. Use when working with QA status states (Reviewing, DevError, ProdError, DevDone, ProdDone, Hold, Rejected, Duplicate), progress tracking (Waiting, Checking, Working, DevDeployed, ProdDeployed), activity logging, or test case management.
Kyverno resource governance policies enforcing CPU/memory limits, HPA requirements, and storage constraints for Kubernetes workloads.
Multi-agent code review orchestration following 2024-2025 best practices. Use when: - Reviewing code changes before commit or merge - PR review with comprehensive analysis needed - Security audit of code changes - Architectural review of significant changes - AI-generated code needs validation - Team code quality enforcement Do NOT use for: - Simple typo fixes (direct review is faster) - Documentation-only changes - Single-line changes without logic
Automate deployment of services from GitHub repositories to temporary Hetzner Cloud hosts with ZeroTier integration. Use this skill when users need to quickly spin up a service from a GitHub repo on a disposable VM, connected to an existing ZeroTier network. Supports Docker Compose deployments with automatic health checks.
Create, checkout, rebase, and manage git branches following Carbon ACX naming conventions and workflows.
This skill should be used when user asks to commit changes to git repository. Triggers on Ukrainian/English phrases like "закоміть зміни", "commit changes", "створи коміт", "зроби коміт", or any request to create git commits. Creates atomic commits with semantic file grouping using conventional commit format.
Expert skill for running security test suites including DeepTeam, OWASP tests, and adversarial prompt testing. Use when validating AI safety measures or performing security audits.
Automates creation and management of headless git worktree structures. Use when the user requests to clone a repository with worktree setup, convert an existing repository to use worktrees, or add new worktrees to a bare repository. Triggers on requests like "set up worktrees", "headless git setup", "bare repo with worktrees", or "add a worktree for branch X".
Quality verification before commits and deployments. Use for quality checks, running tests, checking coverage, validating changes.
Use when writing tests, debugging failures, or investigating bugs - provides TDD guidance, test generation patterns, systematic debugging framework. Activates when user says "write tests", "this test fails", "debug this", mentions "TDD", "test coverage", or encounters errors/bugs.
Build production-quality Terraform code following best practices. Use when creating Terraform code, modules, or .tf files. Also for reviewing/validating Terraform against standards.
Generate requirements-based test cases from Gherkin user stories using BDD methodology. Use this skill when the user asks to create test cases, generate test cases from user stories, analyze requirements for testing, convert user stories to test cases, or work with files in docs/user-stories/. This skill performs comprehensive requirement analysis and outputs Azure DevOps-compatible CSV test case files with proper formatting for import.
Autonomous 21-phase project audit with testing, security scanning, code quality, GitHub auditing, and auto-fixing
GitHub CLI (gh) expert for repository management. Use when users need to manage repos, issues, PRs, Actions, secrets, or interact with GitHub.
Quality assurance and testing toolkit for OpenTofu/Terraform infrastructure as code. Use this skill when reviewing, testing, or validating OpenTofu/Terraform configurations. This skill runs automated QA checks (tofu fmt, tofu validate, tflint, trivy) and validates code against client-specific conventions and best practices. Ideal for code review, pre-commit validation, and ensuring IaC quality standards.
Enforces strict GitHub workflow hygiene and best practices. Use this skill for ALL git and GitHub operations including commits, branches, pull requests, and repository management. Core rules - NEVER commit directly to main/master, ALWAYS work on feature branches, use GitHub MCP for all GitHub API operations (issues, PRs, reviews), require PRs for all merges. Triggers on any git command, GitHub operation, or when starting new feature work.
Specialized skill for testing and quality assurance of the construction project management platform. Use when writing unit tests, integration tests, E2E tests, performance tests, or security tests for job management, plan specifications (40 plans, 567 options), workflows, APIs, or UI components. Includes test strategies, coverage requirements, test data generation, CI/CD integration, and quality gates specific to construction workflows.
Generate exhaustive user-flow and edge-case test scenarios from an app's codebase, produce scenario .md files, execute tests using connected or newly created MCPs, and produce an app.qa.report.md summarizing failures and suggested fixes.
Scan project for outdated or vulnerable dependencies, enforce dependency policies, check licenses, and generate upgrade recommendations.
Performs comprehensive codebase analysis covering architecture, code quality, security, performance, testing, and maintainability. Use when user wants to audit code quality, identify technical debt, find security issues, assess test coverage, or get a codebase health check.
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
Automatically deploys to Vercel production, uses Vercel MCP to fetch build logs, analyzes errors, fixes them, and retries until successful deployment. Use when deploying to production or fixing deployment issues.
Git best practices and workflows including conventional commits, branching strategies, and collaboration patterns.
