domehahn/skcr

network-tool-skill

Fetch a remote API and run a git command on the result.

Idioma do texto original: inglês

complete-skill

Review source files without changing external state.

Idioma do texto original: inglês

ai-change-risk-reviewer

Review AI-assisted changes before execution for automation boundaries, human approval, affected-system criticality, and audit evidence.

Idioma do texto original: inglês

aiops-signal-correlation-reviewer

Assess correlation of logs, metrics, traces, events, and incidents to reduce noise, improve root-cause analysis, and lower alert fatigue.

Idioma do texto original: inglês

alert-quality-reviewer

Review alerts for actionability, clear symptoms, runbook links, severity, ownership, SLO relation, deduplication, escalation, and remediation suitability.

Idioma do texto original: inglês

api-contract-reviewer

Review REST, GraphQL, OpenAPI, and gRPC contracts, breaking changes, versioning, AuthN/AuthZ, error formats, and compatibility.

Idioma do texto original: inglês

architecture-decision-recorder

Create and maintain ADRs with context, decisions, alternatives, risks, security impact, compliance relation, and review points.

Idioma do texto original: inglês

audit-evidence-reviewer

Review evidence, approvals, tickets, logs, test protocols, risk decisions, versioning, and accountable owners.

Idioma do texto original: inglês

audit-traceability-maintainer

Link requirements, controls, implementation, tests, tickets, and evidence into an auditable trace.

Idioma do texto original: inglês

auto-remediation-reviewer

Review automated repair actions for safe limits, dry runs, approval modes, rollback, audit logs, blast radius, and loop protection.

Idioma do texto original: inglês

backup-restore-reviewer

Review restore tests, RPO/RTO, data integrity, backup protection, recoverability, and disaster recovery.

Idioma do texto original: inglês

cloud-governance-reviewer

Review cloud naming, tags, ownership, cost centers, allowed services, regions, data classification, policy enforcement, and audit evidence.

Idioma do texto original: inglês

cloud-landing-zone-reviewer

Review cloud accounts or subscriptions, networks, IAM, logging, policies, baselines, guardrails, encryption, tagging, and tenant separation.

Idioma do texto original: inglês

container-security-reviewer

Review Dockerfiles, base images, user rights, capabilities, SBOM, image signing, distroless or slim images, CVEs, and runtime hardening.

Idioma do texto original: inglês

control-mapping-reviewer

Map technical measures to DORA, VAIT or BAIT migration needs, ISO 27001, BSI, internal policies, or MaRisk review expectations.

Idioma do texto original: inglês

developer-experience-reviewer

Review setup, local development, error messages, Makefiles or scripts, onboarding, tooling consistency, and practicality for teams.

Idioma do texto original: inglês

devsecops-maturity-reviewer

Assess maturity across plan, code, build, test, release, deploy, and operate with automation, security gates, ownership, and feedback loops.

Idioma do texto original: inglês

documentation-governance-reviewer

Review documentation freshness, ownership, review cycles, approvals, versioning, validity, and traceability.

Idioma do texto original: inglês

dora-readiness-reviewer

Review DORA readiness for ICT risk management, resilience testing, incidents, third-party risk, roles, policies, evidence, and auditability.

Idioma do texto original: inglês

evidence-package-creator

Create auditable evidence packages from tickets, pipeline results, test reports, approvals, scans, and architecture information.

Idioma do texto original: inglês

finops-reviewer

Review cloud costs, budgets, rightsizing, reserved or committed usage, anomalies, showback or chargeback, and team cost transparency.

Idioma do texto original: inglês

gitops-operations-reviewer

Review Argo CD or Flux setups, sync policies, drift detection, promotion, rollback, app-of-apps, secrets, cluster access, and deployment governance.

Idioma do texto original: inglês

ict-incident-reporting-reviewer

Review ICT incident classification, escalation, documentation, reportability, timelines, responsibilities, templates, and communication chains.

Idioma do texto original: inglês

ict-risk-management-reviewer

Review ICT risks, protection needs, criticality, controls, residual risks, treatment, and recurring reassessment.

Idioma do texto original: inglês

ict-third-party-risk-reviewer

Review cloud, SaaS, outsourcing, subcontractors, contracts, exit strategies, concentration risks, and DORA information-register readiness.

Idioma do texto original: inglês

identity-access-reviewer

Review IAM, roles, service accounts, groups, tokens, OIDC federation, GitLab or GitHub permissions, cloud rights, and privilege-escalation paths.

Idioma do texto original: inglês

kubernetes-platform-reviewer

Review Kubernetes clusters, namespaces, RBAC, NetworkPolicies, Pod Security, admission controllers, resource limits, secrets, ingress, tenancy, and upgrades.

Idioma do texto original: inglês

llmops-security-reviewer

Review GenAI workloads for prompt injection, tool permissions, data exfiltration, RAG sources, sensitive prompt logging, evals, guardrails, and model access.

Idioma do texto original: inglês

migration-change-reviewer

Review database migrations, schema changes, breaking changes, rollback ability, backward compatibility, and zero-downtime deployments.

Idioma do texto original: inglês

mlops-governance-reviewer

Review model versioning, training data, bias, drift, monitoring, approvals, reproducibility, model registry, and deployment gates.

Idioma do texto original: inglês

operational-resilience-tester

Review backup and restore, failover, disaster recovery, restart procedures, crisis exercises, scenario tests, and lessons learned.

Idioma do texto original: inglês

outsourcing-exit-strategy-reviewer

Review exit plans, data return, provider transitions, emergency operations, suboutsourcing, cloud dependencies, and business impact.

Idioma do texto original: inglês

performance-scalability-reviewer

Review load behavior, bottlenecks, caching, database access, queue behavior, scaling, timeouts, and resource limits.

Idioma do texto original: inglês

pipeline-security-architect

Design and review secure CI/CD pipelines with isolated runners, minimal rights, OIDC, signed artifacts, protected environments, and approval gates.

Idioma do texto original: inglês

policy-as-code-engineer

Create and review policies for OPA/Rego, Kyverno, GitLab Policies, Conftest, Checkov, Terraform, Kubernetes, and CI/CD gates.

Idioma do texto original: inglês

policy-as-code-reviewer

Review GitLab Security Policies, OPA/Rego, Kyverno, Conftest, Sentinel, admission policies, compliance pipelines, and central guardrails.

Idioma do texto original: inglês

policy-documentation-maintainer

Create and update policies, standards, procedures, and control descriptions.

Idioma do texto original: inglês

privacy-data-protection-reviewer

Review privacy, personal data, data classification, deletion concepts, purpose limitation, GDPR risks, and sensitive-data logging.

Idioma do texto original: inglês

resilience-reviewer

Review timeouts, retries, circuit breakers, failover, backpressure, degraded modes, and resilience behavior.

Idioma do texto original: inglês

risk-acceptance-reviewer

Document and assess conscious risk decisions, impact and likelihood, expiry dates, and compensating measures.

Idioma do texto original: inglês