Menu
Skills neste repositório
O SkillsMP coletou 1.540 skills de MadewellRD/skills-lab. Abra uma skill para revisar a origem e os detalhes.
MadewellRD/skills-labMostrando 40 de 1.540 skills coletadas.
create connector-grounded maintenance, refactor, dependency-upgrade, dead-code removal, migration, and technical-debt reduction artifacts for software delivery. use when the assistant needs to assess refactor scope, plan safe code cleanup, sequence dependency…
Idioma do texto original: inglês
create connector-grounded observability readiness artifacts for software delivery. use when the assistant needs to design or review logging, metrics, traces, dashboards, alerts, slos, operational runbooks, deployment monitoring checkpoints, telemetry gaps, or…
Idioma do texto original: inglês
create connector-grounded product requirements documents for software work. use when the user needs a prd, requirement ids, acceptance criteria, non-goals, risks, open questions, source facts, stakeholder decision synthesis, or downstream handoff notes before…
Idioma do texto original: inglês
create connector-grounded release readiness, release notes, version and tag plans, rollback plans, deployment handoff notes, and post-release verification artifacts from merged pull requests, changelogs, ci evidence, deployment configuration, issue…
Idioma do texto original: inglês
create connector-grounded retrospectives and continuous-improvement artifacts for software delivery. use when the assistant needs to synthesize sprint, release, incident, pull request, ci, deployment, product, or team evidence into a retrospective report,…
Idioma do texto original: inglês
create connector-grounded pull request review, diff risk, quality gate, missing-test, scope creep, and approve/comment/request-changes recommendations from github prs, changed files, checks, tests, code ownership, issues, and review comments. use when the…
Idioma do texto original: inglês
orchestrate complete software development lifecycle workflows across the SDLC Command Desk suite. use when the user wants an end-to-end workflow, sprint, implementation path, release path, or lifecycle coordination from idea through requirements, discovery,…
Idioma do texto original: inglês
create connector-grounded security and threat-modeling artifacts for software delivery. use when the assistant needs to assess security risk, build threat models, identify trust boundaries, review authentication or authorization surfaces, evaluate dependency…
Idioma do texto original: inglês
create connector-grounded technical discovery memos, repo reconnaissance reports, feasibility assessments, spike plans, risk registers, unknowns lists, and downstream handoff notes before architecture or implementation work. use when the user asks to…
Idioma do texto original: inglês
create connector-grounded test strategies, qa scenario matrices, regression plans, fixture plans, coverage-gap reports, and verification handoff notes from product requirements, architecture specs, issue plans, pull requests, repository tests, ci results, bug…
Idioma do texto original: inglês
create connector-grounded verification and validation artifacts for software delivery. use when the assistant needs to prove implemented work satisfies requirements, build requirements traceability matrices, assess acceptance gates, validate test and ci…
Idioma do texto original: inglês
perform secure code review and analysis triage on application source, covering injection deserialization ssrf path traversal and template injection, cross-site scripting and request forgery, insecure direct object reference and mass assignment, unsafe file…
Idioma do texto original: inglês
build the asset and exposure baseline for a security engagement, covering internet-facing surface enumeration, dns and certificate transparency discovery, cloud account and subdomain inventory, dangling records and subdomain takeover risk, shadow it and…
Idioma do texto original: inglês
specify and review the authorization model, covering rbac abac and relationship-based access, policy decision and enforcement points, multi-tenant isolation, object-level and function-level access rules, tenant identifier provenance, policy-as-code test…
Idioma do texto original: inglês
assess cloud security posture across account and subscription baselines, misconfiguration findings with blast radius, guardrail and organization policy gaps, infrastructure-as-code drift between code and deployed state, cloud entitlement and…
Idioma do texto original: inglês
assemble security compliance evidence across control-to-framework mapping, scope and boundary statements, evidence packages carrying collection method date and population source, control design and operating effectiveness test results, sampling with…
Idioma do texto original: inglês
define and review cryptographic posture, covering the approved algorithm protocol and cipher suite set with dated deprecations, tls and transport configuration, encryption at rest and envelope key hierarchies, password hashing and key derivation, key custody…
Idioma do texto original: inglês
build and assess detection engineering across coverage mapping to named adversary techniques, log source onboarding and field normalization requirements, detection logic as code with unit tests and true-positive samples, backtesting and alert volume…
Idioma do texto original: inglês
assess endpoint and workload hardening across detection and management agent coverage by population, device compliance and enrollment gaps, operating system and browser baseline conformance, patch posture with aging by severity, disk encryption and local…
Idioma do texto original: inglês
review authentication and identity controls, covering single sign-on and federation, mfa strength and phishing resistance, conditional access and its exclusions, session and token lifetime, refresh token revocation, joiner-mover-leaver lifecycle, orphaned and…
Idioma do texto original: inglês
design and assess network security across the zone and segmentation model, east-west and north-south controls, egress filtering and outbound proxy policy, edge protection including web application firewall bot and volumetric defenses, private connectivity and…
Idioma do texto original: inglês
plan and run offensive security work including written authorization and rules of engagement, scope and exclusions, penetration test and red team execution, adversary emulation mapped to techniques a source names, findings with reproduction steps and…
Idioma do texto original: inglês
manage secret exposure and credential handling, covering secret scanning across full repository history, hardcoded credentials in code images build logs and infrastructure state, exposure recorded by locator rather than value, vaulting and dynamic credential…
Idioma do texto original: inglês
define security controls in the delivery pipeline, covering security requirements per change class, design review and threat model triggers, pre-merge gates including branch protection required checks code owners and scanning, pre-release gates,…
Idioma do texto original: inglês
review a system or change design for security control placement, covering trust boundary mapping, data flow analysis, conformance to the reference architecture, deviations and compensating controls, fail-open and fail-closed behavior, blast radius, conditions…
Idioma do texto original: inglês
orchestrate security engagements across attack surface inventory, security architecture review, threat modeling, iam and authorization, cryptography and key management, secrets, secure sdlc, application security, supply chain and dependency risk, cloud…
Idioma do texto original: inglês
run security incident response across triage and severity classification against the org rubric, scoping and timeline reconstruction from evidence, volatile evidence preservation and forensic chain of custody, coordinated containment eradication and recovery,…
Idioma do texto original: inglês
assess software supply chain risk, covering direct and transitive dependency exposure, lockfile and manifest state, reachability analysis and exploitability statements, sbom generation coverage and gaps, dependency confusion and typosquatting, install-time…
Idioma do texto original: inglês
model attacker goals and paths against a system, covering entry points and trust levels, stride categorization, attack trees and chained paths, abuse and misuse cases, business logic and fraud abuse, adversary technique references where a source names them,…
Idioma do texto original: inglês
run third-party security review across vendor tiering and inherent risk rating by data shared and integration depth, attestation and certification review bounded to the stated scope period and exceptions, questionnaire gap analysis against evidence, required…
Idioma do texto original: inglês
run vulnerability management across consolidated and deduplicated findings from every scanner, risk-based prioritization with each severity carrying its scale, asset criticality and exposure weighting, remediation ownership and service level assignment, patch…
Idioma do texto original: inglês
design and review production alerting including symptom-based paging on user impact, multi-window multi-burn-rate rules tied to error budget spend, page versus ticket versus dashboard routing, deduplication grouping inhibition and dependency-aware…
Idioma do texto original: inglês
check backup coverage against the data inventory, record mechanism schedule retention and immutability with their sources, write the restore procedure and its measured time from a dated drill, verify integrity and deletion resistance including ransomware and…
Idioma do texto original: inglês
build the demand model and its drivers, measure headroom against the binding saturation signal rather than average cpu, find quota connection partition thread and licence ceilings, state provisioning lead time, compute failover headroom at real peak, and…
Idioma do texto original: inglês
make production change safe through rollout strategy and staged exposure, canary analysis signals and promotion thresholds, bake time per stage, rollback triggers and whether rollback has ever actually succeeded, freeze policy and its exception path, schema…
Idioma do texto original: inglês
design chaos experiments with an explicit steady-state hypothesis, choose the fault and its scope, contain blast radius with abort criteria written before injection, run game days that exercise responders and runbooks, and promote controls that fail the…
Idioma do texto original: inglês
map the dependency graph along each critical user journey with hard, soft, and degraded-ok coupling, find single points of failure and shared-fate risk across zones clusters datastores identity dns and control planes, analyze failure modes with trigger…
Idioma do texto original: inglês
set rto and rpo per tier with their sources, state the failover mode actually implemented rather than the one designed, define regional evacuation and failback, derive the dependency recovery order across identity dns data tier and control plane, run and…
Idioma do texto original: inglês
run a live production incident with severity declaration, incident commander and operations communications and scribe roles, evidence capture before any mitigating restart, reversible mitigation preferred over diagnosis, internal and customer communication…
Idioma do texto original: inglês
derive a workload model from production traffic, design load stress soak spike and breakpoint profiles with what each proves, state environment fidelity gaps and what they invalidate, measure the saturation point and the behavior past it, and define the…
Idioma do texto original: inglês