domehahn/skcr - Página 2

runbook-playbook-maintainer

Create and review runbooks, operating instructions, incident playbooks, escalation paths, restart procedures, and checklists.

Idioma del texto original: inglés

sbom-vulnerability-management-reviewer

Review SBOM generation, CVE triage, VEX, exception processes, patch SLAs, and the vulnerability lifecycle.

Idioma del texto original: inglés

secure-code-reviewer

Review code vulnerabilities such as injection, path traversal, SSRF, XSS, deserialization, crypto misuse, and race conditions.

Idioma del texto original: inglés

secure-design-reviewer

Review secure-by-design decisions, least privilege, Zero Trust, tenant separation, secure defaults, and abuse scenarios.

Idioma del texto original: inglés

secure-developer-platform-reviewer

Review Internal Developer Platforms for secure golden paths, self-service guardrails, templates, permission models, secrets handling, and auditability.

Idioma del texto original: inglés

software-supply-chain-architect

Review SLSA, provenance, SBOM, signatures, attestations, build integrity, artifact promotion, and trusted builders.

Idioma del texto original: inglés

sre-reliability-reviewer

Assess SLOs, SLIs, error budgets, capacity, degradation, timeouts, retries, circuit breakers, load shedding, and operational risks.

Idioma del texto original: inglés

vulnerability-management-coordinator

Assess CVE triage, prioritization, SLAs, exploitability, asset criticality, exceptions, risk acceptance, and remediation tracking.

Idioma del texto original: inglés

architecture-reviewer

Review architecture, module boundaries, interfaces, coupling, scalability, data flows, and technical risks.

Idioma del texto original: inglés

ci-cd-reviewer

Review CI/CD pipelines, runners, permissions, artifacts, caches, deployment gates, and token exposure.

Idioma del texto original: inglés

compliance-governance-reviewer

Review governance controls such as CODEOWNERS, branch protection, approvals, auditability, and policy compliance.

Idioma del texto original: inglés

cost-based-planner

Plan coding work with minimal context, relevant file selection, risk awareness, rollback, and validation strategy.

Idioma del texto original: inglés

dependency-supply-chain-reviewer

Review dependencies, lockfiles, package managers, container images, actions, and supply-chain risks.

Idioma del texto original: inglés

documentation-maintainer

Create and update README files, ADRs, setup guides, API docs, runbooks, and operational documentation.

Idioma del texto original: inglés

iac-gitops-reviewer

Review Terraform, Kubernetes, Helm, Kustomize, GitOps reconciliation, promotion, and environment safety.

Idioma del texto original: inglés

incident-postmortem-assistant

Support incident analysis, timeline creation, root cause analysis, impact assessment, corrective actions, and follow-up issues.

Idioma del texto original: inglés

observability-reviewer

Review logging, metrics, tracing, health checks, alerts, dashboards, runbooks, and operational readiness.

Idioma del texto original: inglés

release-readiness-reviewer

Assess release readiness, rollback, migrations, feature flags, monitoring, documentation, and breaking changes.

Idioma del texto original: inglés

requirements-analyst

Analyze requirements, user stories, acceptance criteria, constraints, risks, and open questions before implementation.

Idioma del texto original: inglés

safe-implementer

Create or modify code, tests, configuration, and project files safely with real file changes.

Idioma del texto original: inglés

secrets-reviewer

Detect and prevent exposure of secrets, tokens, credentials, private keys, CI variables, and sensitive logs.

Idioma del texto original: inglés

security-reviewer

Review code, CI/CD, configuration, permissions, dependencies, input validation, and DevSecOps risks.

Idioma del texto original: inglés

test-strategy-engineer

Design and generate unit, integration, regression, security, and end-to-end test strategies.

Idioma del texto original: inglés

threat-modeler

Identify assets, trust boundaries, abuse cases, attack paths, threats, and required security controls.

Idioma del texto original: inglés

universal-skill-creator

Create, adapt, validate, and optimize reusable agent skills across agentic platforms.

Idioma del texto original: inglés

verification-reviewer

Review diffs, validate acceptance criteria, inspect test results, and find missed requirements.

Idioma del texto original: inglés