Write a Data Protection Impact Assessment (DPIA) for high-risk personal data processing. Required by GDPR Article 35 when processing is likely to result in high risk to individuals. Produces a structured assessment with risks, mitigations, and DPO review.
Skills in this repository
hpsgd/turtlestack - Page 5
SkillsMP has collected 228 skills from hpsgd/turtlestack. Open a skill to review its source and details.
hpsgd/turtlestackShowing 40 of 228 collected skills.
Structured analysis of a piece of text: entity extraction, key claims, sentiment, framing, and narrative identification. Use when you need to understand not just what content says but how it says it and what it leaves out.
Multi-pass exhaustive investigation of a topic with entity scoring, source triangulation, and explicit gap analysis. Use when web-research Deep tier isn't sufficient — typically for unfamiliar domains, contested topics, or high-stakes decisions requiring the…
Generate a health report of the current project's Claude Code setup — installed rules, enabled plugins, memory state, wisdom frame health, and learning coverage.
Break a product initiative into workstreams across CPO and CTO teams. Produces a dependency-sequenced workstream table with owners, deliverables, and effort estimates. Use at the start of any significant product effort to plan who does what.
Design an API — resource hierarchy, endpoints, request/response shapes, error handling, and pagination.
Write infrastructure-as-code using Terraform or Pulumi. Produces a module or stack with resource definitions, variables, outputs, and documentation. Use when provisioning cloud infrastructure, defining environments, or creating reusable infrastructure modules.
Define Service Level Objectives (SLOs) for a service -- SLIs, SLO targets, error budgets, and alerting policy. Produces a structured SLO document based on Google SRE practices. Use when a service enters production or when formalising reliability targets.
Plan a release — scope assessment, readiness gates, deployment strategy, communication plan, and go/no-go decision.
Create a customer onboarding playbook with milestones, success criteria, and escalation triggers. Produces a structured playbook for a customer segment. Use when formalising onboarding for a new segment or improving time-to-value.
Write a migration guide for a breaking change -- API version upgrade, database schema change, or major version transition. Produces step-by-step migration instructions with before/after examples, rollback plan, and timeline. Use when shipping breaking changes…
Create a user story map — a spatial arrangement of stories along a narrative backbone. Produces a backbone of user activities, a walking skeleton, and release slices. Use when planning a new feature area, epic, or release to ensure coverage and sequence.
Audit a component, page, or codebase for WCAG 2.2 AA accessibility compliance. Includes automated pattern detection, severity classification, and remediation recommendations.
Create a service blueprint -- mapping both the customer-facing journey and the backstage organisational processes that support it. Extends journey mapping with employee actions, support systems, and physical evidence. Use when analysing end-to-end service…
Audit the software supply chain for integrity risks — source, build, dependencies, and artifact provenance. Produces a SLSA-aligned assessment with findings and hardening recommendations. Use when assessing supply chain posture or after a dependency incident.
Evaluate and compare models for a use case — quality, latency, cost, reliability, and safety benchmarks on your own data.
Design and document a production prompt — structured template, evaluation criteria, test cases, and version control strategy.
Design a RAG pipeline — chunking strategy, embedding selection, retrieval configuration, and end-to-end evaluation.
Evaluate a technology, framework, or tool against weighted criteria. Produces a structured comparison with scored trade-offs and a recommendation. Use when choosing between technologies or assessing fitness of a single option.
Design a system — service boundaries, data flow, API contracts, and non-functional requirements.
Write an Architecture Decision Record using the MADR template. Captures context, options considered, decision made, consequences, and confirmation criteria.
Create a pull request following team conventions
Design a data model — entities, relationships, constraints, and access patterns.
Define an event tracking plan — what events to capture, with what properties, for what purpose.
Write a SQL query, dbt model, or analytics query to answer a business question.
Guide incident response — detect, assess, mitigate, root cause, prevent recurrence.
Write a Dockerfile for a service — multi-stage build, minimal image, security hardening.
Profile a system or endpoint for performance bottlenecks — measure, identify, and prioritise optimisation targets.
Write a BDD feature specification in Gherkin with step definitions.
Write a JSON Schema or Pydantic model for configuration validation or API contracts.
Generate test cases and test code for a function, component, endpoint, or feature.
Write a structured bug report with reproduction steps, expected vs actual behaviour, and severity assessment.
Write acceptance criteria for a user story using Example Mapping and Given/When/Then format. The primary output of the 3 amigos session (product + dev + QA). Use when a story needs testable criteria before development starts.
Implement a React component from a design specification or component-spec output.
Assess whether to rollback a release — evaluate signals, severity, blast radius, and recommend rollback vs forward-fix.
Audit project dependencies for known vulnerabilities, outdated packages, and license issues.
Review code or configuration for security vulnerabilities — OWASP Top 10, secrets, auth, injection.
Create a threat model using STRIDE — identify threats, attack surfaces, and mitigations for a system or feature.
Define OKRs (Objectives and Key Results) for a product initiative, quarter, or team. Enforces baselines, measurement methods, and the 70% completion target philosophy.
Write a specification document — the contract between product (what), engineering (how), and QA (verify). Produces a structured spec with user stories, acceptance criteria, API contracts, and data model. Use after decompose-initiative to define what will be…