菜单
Use when working on Hushhtech PR checks, CI/CD, branch protection, merge queue, deploys, env parity, or operational verification.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Use when deploying the HushhTech web app to UAT or PROD, triggering the deploy-uat / deploy-prod GitHub Actions workflows, picking a safe "green main" SHA to ship, or when deployments feel slow and you want to cut the CI/CD cycle time. Trigger this whenever the user mentions deploying, shipping, releasing, pushing to UAT / prod / Cloud Run, a slow build or deploy pipeline, or asks how to make deploys faster — even for tiny changes. Covers the exact deploy procedure, the safety gates, the full pipeline anatomy, and a prioritized playbook of levers to reduce deploy time.
Use when deciding which checks are authoritative for a Hushhtech PR and whether the right proof exists for the changed behavior.
Use when auth, env, secrets, fail-closed behavior, or sensitive API routes make a Hushhtech PR risky to patch or merge.
Use whenever a task involves Supabase for this repo — editing or deploying edge functions, changing edge-function secrets, running migrations, or auditing Supabase dashboard config. Prefer the Supabase CLI for writes when the user has explicitly asked for deployment and the target project/ref is confirmed. If CLI is blocked, fall back to the user's Chrome session on port 9223 where ankit@hushh.ai is logged in. Trigger on any mention of Supabase edge functions, secrets, migrations, or "deploy create-link-token / an edge function".
Use whenever a task involves Supabase for this repo — editing or deploying edge functions, changing edge-function secrets, running migrations, or auditing Supabase dashboard config. Prefer the Supabase CLI for writes when the user has explicitly asked for deployment and the target project/ref is confirmed. If CLI is blocked, fall back to the user's Chrome session on port 9223 where ankit@hushh.ai is logged in. Trigger on any mention of Supabase edge functions, secrets, migrations, or "deploy create-link-token / an edge function".
Use when deploying the HushhTech web app to UAT or PROD, triggering the deploy-uat / deploy-prod GitHub Actions workflows, picking a safe "green main" SHA to ship, or when deployments feel slow and you want to cut the CI/CD cycle time. Trigger this whenever the user mentions deploying, shipping, releasing, pushing to UAT / prod / Cloud Run, a slow build or deploy pipeline, or asks how to make deploys faster — even for tiny changes. Covers the exact deploy procedure, the safety gates, the full pipeline anatomy, and a prioritized playbook of levers to reduce deploy time.
| name | repo-operations |
| description | Use when working on Hushhtech PR checks, CI/CD, branch protection, merge queue, deploys, env parity, or operational verification. |
repo-operations-intakeoss-contribution-triage, repo-context, and direct product implementation skills.ownerrepo-operationsOwned repo surfaces:
.github/workflowsscripts/ciscripts/securityscripts/check-production.shscripts/deploy-gcp.shscripts/deploy-location-geocode.shscripts/deploy-ria-intelligence-api.shscripts/gcloud-devops-setup.shscripts/refresh-vertex-ai-token.shscripts/setup-cloud-scheduler-token-refresh.shscripts/setup-token-refresh-cron.shscripts/update-supabase-auth-url.shdocs/reference/operations/README.mddocs/reference/operations/ci-governance.mdNon-owned surfaces:
oss-contribution-triagefrontendbackendsecurity-auditdocs/reference/operations/ci-governance.mddocs/reference/operations/README.md.github/workflows/ci.yml.github/workflows/pr-agent.yml.github/workflows/pr-intake.ymlscripts/ci/orchestrate.shSensitive NDA Gate
PR/queue check and the deployed-host UAT verifier before calling the gate
healthy.oss-contribution-triage once the CI truth is clear.oss-contribution-triage.quality-contracts.security-audit.frontend or backend.npm run env:check
npm run lint:ci
npm run security:audit
npm run verify:sensitive-nda-gate -- --target=uat
bash scripts/ci/orchestrate.sh queue