domehahn/skcr - Page 2

runbook-playbook-maintainer

Create and review runbooks, operating instructions, incident playbooks, escalation paths, restart procedures, and checklists.

sbom-vulnerability-management-reviewer

Review SBOM generation, CVE triage, VEX, exception processes, patch SLAs, and the vulnerability lifecycle.

secure-code-reviewer

Review code vulnerabilities such as injection, path traversal, SSRF, XSS, deserialization, crypto misuse, and race conditions.

secure-design-reviewer

Review secure-by-design decisions, least privilege, Zero Trust, tenant separation, secure defaults, and abuse scenarios.

secure-developer-platform-reviewer

Review Internal Developer Platforms for secure golden paths, self-service guardrails, templates, permission models, secrets handling, and auditability.

software-supply-chain-architect

Review SLSA, provenance, SBOM, signatures, attestations, build integrity, artifact promotion, and trusted builders.

sre-reliability-reviewer

Assess SLOs, SLIs, error budgets, capacity, degradation, timeouts, retries, circuit breakers, load shedding, and operational risks.

vulnerability-management-coordinator

Assess CVE triage, prioritization, SLAs, exploitability, asset criticality, exceptions, risk acceptance, and remediation tracking.

architecture-reviewer

Review architecture, module boundaries, interfaces, coupling, scalability, data flows, and technical risks.

ci-cd-reviewer

Review CI/CD pipelines, runners, permissions, artifacts, caches, deployment gates, and token exposure.

compliance-governance-reviewer

Review governance controls such as CODEOWNERS, branch protection, approvals, auditability, and policy compliance.

cost-based-planner

Plan coding work with minimal context, relevant file selection, risk awareness, rollback, and validation strategy.

dependency-supply-chain-reviewer

Review dependencies, lockfiles, package managers, container images, actions, and supply-chain risks.

documentation-maintainer

Create and update README files, ADRs, setup guides, API docs, runbooks, and operational documentation.

iac-gitops-reviewer

Review Terraform, Kubernetes, Helm, Kustomize, GitOps reconciliation, promotion, and environment safety.

incident-postmortem-assistant

Support incident analysis, timeline creation, root cause analysis, impact assessment, corrective actions, and follow-up issues.

observability-reviewer

Review logging, metrics, tracing, health checks, alerts, dashboards, runbooks, and operational readiness.

release-readiness-reviewer

Assess release readiness, rollback, migrations, feature flags, monitoring, documentation, and breaking changes.

requirements-analyst

Analyze requirements, user stories, acceptance criteria, constraints, risks, and open questions before implementation.

safe-implementer

Create or modify code, tests, configuration, and project files safely with real file changes.

secrets-reviewer

Detect and prevent exposure of secrets, tokens, credentials, private keys, CI variables, and sensitive logs.

security-reviewer

Review code, CI/CD, configuration, permissions, dependencies, input validation, and DevSecOps risks.

test-strategy-engineer

Design and generate unit, integration, regression, security, and end-to-end test strategies.

threat-modeler

Identify assets, trust boundaries, abuse cases, attack paths, threats, and required security controls.

universal-skill-creator

Create, adapt, validate, and optimize reusable agent skills across agentic platforms.

verification-reviewer

Review diffs, validate acceptance criteria, inspect test results, and find missed requirements.