菜单
SkillsMP 已收集 sawrus/agent-guides 中的 61 个 Skill。打开任一 Skill 可查看来源和详情。
已展示 40 / 61 个已收集 Skill。
Production-grade GitHub Actions workflows — reusable workflows, OIDC cloud auth, caching, matrix builds, and environment protection rules. Use when the user creates, reviews, or debugs CI/CD pipelines in .github/workflows, or asks about GitHub Actions…
原文语言：英语
Systematic diagnosis of Kubernetes pod failures — CrashLoopBackOff, OOMKilled, Pending, ImagePullBackOff, and service connectivity issues. Use when the user encounters pods not starting, container restart loops, scheduling failures, or service unreachability…
原文语言：英语
Implement distributed tracing with OpenTelemetry, Tempo/Jaeger — instrumentation, sampling, and trace-to-log correlation. Use when the user asks about distributed tracing, OpenTelemetry setup, span instrumentation, trace propagation, or connecting traces to…
原文语言：英语
Design reusable React components with compound patterns, controlled/uncontrolled hybrids, typed prop APIs, async state handling, and ARIA accessibility. Use when the user creates, refactors, or reviews React components, or mentions props, hooks, .tsx files,…
原文语言：英语
Apply STRIDE threat modeling to system designs, identify IDOR and authorization vulnerabilities, and build threat matrices for security reviews. Use when the user designs a new system, reviews an architecture, prepares for a security audit, or asks about…
原文语言：英语
Secure CI/CD pipelines with keyless signing, OIDC federation, provenance attestations, policy enforcement, and hardened runners.
原文语言：英语
Manage container images, Helm charts, and build artifacts — registry organization, retention, promotion between environments.
原文语言：英语
Optimize CI build speed — Docker layer caching, dependency caching, multi-stage builds, parallelism, and build matrix strategies.
原文语言：英语
GitLab CI/CD pipelines — include templates, environments, OIDC auth, caching, protected runners, deployment gates.
原文语言：英语
PostgreSQL backup and restore with pgBackRest — full/incremental/WAL, PITR, K8s CronJob scheduling, and restore verification.
原文语言：英语
PostgreSQL query performance — EXPLAIN ANALYZE, index design, pg_stat_statements, slow query detection, connection pool tuning.
原文语言：英语
Safe database migrations in production — expand-and-contract, lock-safe DDL, timing estimation, rollback SQL.
原文语言：英语
PostgreSQL operational runbooks — health checks, vacuum, bloat, locks, PITR, connection pool management.
原文语言：英语
Redis operational runbooks — memory management, eviction policy, persistence config, Sentinel/Cluster, K8s-hosted Redis ops.
原文语言：英语
Harden container images and Kubernetes workload security contexts — distroless, multi-stage, minimal attack surface.
原文语言：英语
Write OPA/Gatekeeper and Kyverno admission policies for Kubernetes security guardrails.
原文语言：英语
Generate, attach, and verify SBOMs (CycloneDX/SPDX) for container images; implement SLSA provenance; harden software supply chain.
原文语言：英语
Detect secrets in code, git history, and running containers — pre-commit hooks, CI scanning, and incident response for exposed credentials.
原文语言：英语
Sign container images and artifacts with cosign (keyless via OIDC and key-based); verify signatures in CD pipelines and admission policies.
原文语言：英语
Write idempotent Ansible playbooks and roles for server configuration, K8s node provisioning, and application bootstrap.
原文语言：英语
Identify and reduce cloud infrastructure costs — right-sizing, reserved capacity, waste detection, tagging for cost attribution.
原文语言：英语
Detect, classify, and automate Terraform drift detection in CI — scheduled plans, drift metrics, cloud-native audit log correlation.
原文语言：英语
Manage Terraform remote state — backend setup, state isolation, locking, import, mv, and state surgery.
原文语言：英语
Design reusable, well-tested Terraform modules with cloud-agnostic interfaces and safe state management.
原文语言：英语
Day-2 cluster operations — node management, etcd backup/restore, certificate rotation, namespace lifecycle.
原文语言：英语
Design, structure, and test production-grade Helm charts with multi-environment overlays.
原文语言：英语
Design and implement Kubernetes NetworkPolicy and Cilium network policies for namespace isolation and service-to-service access control.
原文语言：英语
Design minimal-privilege RBAC for workloads, operators, and human access in multi-tenant clusters.
原文语言：英语
Right-size pod resources, configure HPA/VPA/KEDA, and eliminate resource waste in Kubernetes.
原文语言：英语
DNS management for Kubernetes — CoreDNS tuning, external-dns automation, split-horizon DNS, and bare-metal DNS design.
原文语言：英语
NGINX Ingress Controller patterns — TLS, rate limiting, CORS, rewrites, path-based routing, and MetalLB for bare-metal.
原文语言：英语
Implement service mesh for mTLS, traffic management, and observability — Istio and Linkerd patterns for Kubernetes.
原文语言：英语
Configure TLS termination with cert-manager — Let's Encrypt, internal CA via Vault PKI, wildcard certs, mTLS between services.
原文语言：英语
Design cloud-agnostic private networks — subnet layout, CIDR allocation, zone redundancy, routing, and bare-metal equivalent.
原文语言：英语
Design and maintain Grafana dashboards — service overview panels, SLO tracking, variable templates, dashboard-as-code with Grafonnet/Jsonnet.
原文语言：英语
Set up Loki or ELK log aggregation for K8s workloads — structured logging, log routing, and log-based alerting.
原文语言：英语
Write production-quality Prometheus alert rules, recording rules, and Alertmanager routing configs.
原文语言：英语
Implement SLOs end-to-end in Prometheus — recording rules, burn rate alerts, error budget dashboards, and Sloth/pyrra integration.
原文语言：英语
Forecast infrastructure capacity needs — traffic projection, resource headroom calculations, node pool sizing, K8s cluster capacity.
原文语言：英语
Design and run chaos experiments in Kubernetes — pod failures, network partitions, resource pressure with LitmusChaos and manual chaos.
原文语言：英语