skills-registry

Deep Ansible operational knowledge covering dangerous module classification, idempotency violations, inventory targeting risks, privilege escalation patterns, and handler ordering pitfalls.

ArgoCD sync and application-set guidance for GitOps delivery changes across shared clusters.

AWS CDK guidance for logical IDs, removal policies, and synth-time environment drift.

Azure Bicep guidance for deployment modes, secret exposure, and subscription-target drift.

Cert-Manager issuance and renewal guidance for issuer, solver, and secret-rotation changes.

Deep CloudFormation risk intelligence covering resource replacement detection, deletion policies, drift patterns, stack dependencies, IAM resource risks, and service quota awareness.

Crossplane composition guidance for control-plane fan-out, provider config, and managed resource safety.

Datadog monitor guidance for threshold drift, no-data handling, and alert-routing changes.

Container image and build risk knowledge covering Dockerfile security patterns, image provenance, multi-stage build risks, compose file analysis, and runtime container security.

Flux GitOps guidance for reconciliation, pruning, and source-driven rollout safety.

Git-based change context intelligence covering commit analysis, sensitive file detection, branch risk signals, author patterns, and co-change analysis. This skill is always loaded because Git context enriches every other tool's analysis.

Helm chart rollout guidance covering hooks, chart drift, and value-driven production failures.

Helmfile guidance for environment inheritance, release targeting, and shared values safety.

Istio traffic-management and policy guidance for routing, mTLS, and authorization changes.

Deep Jenkins pipeline safety knowledge covering approval gate analysis, credential exposure patterns, agent security, deployment stage risks, and shared library vulnerabilities.

Jsonnet guidance for import-graph drift, hidden defaults, and rendered secret exposure.

Deep Kubernetes operational knowledge covering workload safety, rolling update risks, RBAC escalation, network policy gaps, and resource management pitfalls.

Kustomize overlay guidance for name transforms, patch targeting, and namespace drift.

Nginx Ingress controller guidance for routing, annotations, and TLS handling.

OPA Gatekeeper policy guidance for deny rollouts, match scope, and inventory sync safety.

Prometheus rule guidance for alert timing, recording rules, and query-cardinality safety.

Pulumi Azure guidance for resource-group blast radius, identities, and recovery settings.

Pulumi GCP guidance for IAM authority, project targeting, and state exposure risks.

Pulumi stack guidance for aliasing, protection, and stateful replacement risks.

Tanka guidance for environment fan-out, cluster targeting, and Jsonnet-driven drift.

Tekton pipeline guidance for credentials, finally tasks, and shared-workspace safety.

Deep Terraform risk knowledge covering provider-specific patterns, state operations, lifecycle rules, and common failure modes across AWS, GCP, and Azure.

Community-authored Terragrunt guidance for include hierarchy drift, dependency output coupling, and run-all blast radius review.