hermes-supercode-skills

Designs and implements APIs: REST, GraphQL, gRPC, and WebSocket. Produces OpenAPI 3.1 specs, GraphQL SDL schemas, Protocol Buffer definitions, and working server implementations. Use this skill when the user asks about API design, endpoint structure, schema definition, versioning strategy, pagination, authentication, rate limiting, or any API implementation work. Also triggers on "design an API for," "write an OpenAPI spec," "create a GraphQL schema," "set up gRPC," "REST API best practices," or casual requests like "I need endpoints for my app" or "how should I structure my API."

Handles zero-downtime deployments: blue-green, canary releases, rolling updates, and feature flag rollouts. Covers Kubernetes, Docker, Cloudflare Workers, Terraform, and CI/CD pipeline setup. Use this skill when the user wants to deploy an application, set up a deployment pipeline, implement canary releases, configure rolling updates, manage feature flags, or handle any release automation. Also triggers on "deploy to production," "set up CI/CD," "blue-green deployment," "canary release," "rolling update," "zero-downtime deploy," "rollback," or even casual requests like "push this to prod" or "how do I safely release this."

Extracts structured data from websites — static HTML, JavaScript-rendered SPAs, paginated listings, and API-backed pages. Handles anti-bot detection awareness, rate limiting, and robots.txt compliance. Use this skill whenever the user wants to scrape a website, extract data from a URL, pull product listings, harvest structured data, reverse-engineer a site's API, or deal with dynamic JS-rendered content. Also triggers on "get me data from this site," "extract prices from," "crawl these pages," or any request involving web data extraction, even casual ones like "can you pull info from this URL."

Decomposes complex tasks into subtasks and coordinates multiple tools or agents to execute them. Handles task dependency graphs, parallel execution planning, result merging, and conflict resolution. Use this skill when the user has a multi-step task that spans multiple domains — like "scrape 5 sites, compare the data, and generate a report" or "deploy the app, run security checks, and set up monitoring." Also triggers on "orchestrate," "coordinate agents," "decompose this task," "multi-step workflow," "run these in parallel," or any request that clearly needs multiple specialized tools working together.

Designs and implements data pipelines: ETL/ELT, streaming, batch processing, schema migrations, and data warehouse architecture. Covers Kafka, Airflow, dbt, Spark, ClickHouse, BigQuery, Snowflake, Redis Streams, and more. Use this skill when the user asks about data pipelines, ETL jobs, data transformation, streaming setup, data warehouse design, CDC, schema migrations, data quality checks, or anything involving moving data from source to target. Also triggers on "build a pipeline," "migrate data from X to Y," "set up streaming," "design my data warehouse," or "data quality is bad, help me fix it."

Analyzes prediction markets: Polymarket, Manifold Markets, Kalshi. Calculates implied probabilities, detects cross-platform arbitrage, computes expected value and Kelly fractions. Use this skill when the user mentions prediction markets, Polymarket, Manifold, Kalshi, odds analysis, arbitrage detection, market probability, event contracts, or asks things like "is there edge on this market," "compare odds across platforms," or "analyze this prediction market." Also triggers on "what are the current odds for," "find arbitrage opportunities," or any question about market-implied probabilities.

Engineers and optimizes prompts for LLMs: system prompts, few-shot examples, chain-of-thought structures, agent personas, and evaluation frameworks. Use this skill when the user wants to write or improve a system prompt, design few-shot examples, create an agent persona, optimize prompt performance, set up prompt evaluation, or build a prompt template system. Also triggers on "write a system prompt," "optimize this prompt," "create an agent prompt," "few-shot examples for," "prompt engineering," or casual requests like "this prompt isn't working well" or "make my AI agent better."

Debugs complex, hard-to-reproduce issues: race conditions, memory leaks, deadlocks, performance regressions, heisenbugs, and crash analysis. Uses scientific debugging methodology with hypothesis generation, systematic testing, and root cause isolation. Use this skill when the user reports intermittent crashes, performance degradation, memory leaks, thread-safety issues, deadlocks, or any bug that's hard to reproduce. Also triggers on "debug this," "why is this crashing," "performance regression," "memory leak," "race condition," "segfault," "service hangs intermittently," or even "this works on my machine but not in production."

Performs security audits, vulnerability assessments, SSL/TLS hardening, DNSSEC configuration, and compliance checks. Covers OWASP Top 10, CIS Benchmarks, email security (SPF/DKIM/DMARC), and network reconnaissance. Use this skill when the user asks for a security audit, vulnerability scan, penetration test, SSL hardening, DNSSEC setup, compliance check, or security posture assessment. Also triggers on "is my site secure," "check for vulnerabilities," "harden my server," "audit my domain," "set up DNSSEC," or any request involving security assessment — even vague ones like "I'm worried about my site's security."

Designs and implements authentication and identity systems. Covers OAuth2 and OIDC flows including authorization code, PKCE, and client credentials; JWT design including RS256 vs HS256, key rotation, token blacklisting, and refresh token strategy; RBAC and ABAC modeling; SSO with Google, GitHub, and SAML 2.0; session management; magic links; MFA with TOTP, SMS, and hardware keys; and API key management. Use this skill when the user says "implement OAuth2," "JWT refresh token rotation," "set up SSO with Google," "design RBAC for multi-tenant," "implement magic link auth," "is my JWT secure," "add login to my app," "session management strategy," or "API key auth."

Diagnoses and improves application-layer databases: Postgres, MySQL, SQLite, and MongoDB. Covers EXPLAIN ANALYZE, slow query detection, index strategy, N+1 detection, schema migrations with up/down scripts, connection pooling, replication setup, and vacuum/analyze operations. Use this skill when the user says "this query is slow," "add an index for," "migration for a new column," "N+1 on this ORM," "explain this query plan," "replication lag," "optimize my database," "query is timing out," or "connection pool exhausted."

Manages infrastructure operations: DNS records, SSL certificates, Cloudflare Workers, CDN configuration, and domain provisioning. Use this skill whenever the user mentions Cloudflare, DNS, SSL, Workers, domain setup, CDN config, TLS hardening, zone management, or any infrastructure automation task — even if they just paste a domain name and ask "set this up." Also triggers on requests like "add an A record," "check my SSL," "deploy a Worker," or "audit my domain config."

Builds observability, monitoring, alerting, and incident visibility for production systems. Covers OpenTelemetry instrumentation for traces, metrics, and logs; structured logging with JSON, correlation IDs, and sampling; Prometheus and Grafana scrape configs, dashboards, and recording rules; distributed tracing with Jaeger and Tempo; SLO/SLA definition, error budgets, burn-rate alerts; PagerDuty and OpsGenie alerting rules; and on-call runbook templates. Use this skill when the user says "set up monitoring," "instrument with OpenTelemetry," "add structured logging," "set up Grafana dashboards," "define SLOs," "no visibility into my app," "tracing across microservices," "alerting rules," or "production incident with no logs."