Kiro-SDLC-Scrum-best-practics
Kiro-SDLC-Scrum-best-practics 收录了来自 timwukp 的 32 个 skills，并提供仓库级职业覆盖和站内 skill 详情页。
这个仓库中的 skills
Run chaos security engineering tests — AI agent attempts to hack the Sprint output and reports findings to the team
Validate Java and TypeScript code against banking naming conventions, style rules, quality standards, and secure coding practices
Perform OWASP Top 10 security assessments, vulnerability scanning, and PCI-DSS compliance checks
Design test strategies including security testing, write test plans, and identify test scenarios for banking features with DevSecOps integration
Perform STRIDE threat modeling during Sprint Planning for new features and APIs
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, assess security UX patterns, and review customer interface design
Design, review, and validate API contracts and OpenAPI specifications for banking services
Create ADR documents, run architecture review checklists, and assess compliance impact for banking system designs
Triage Jira issues, refine user stories with acceptance criteria, and manage product backlog grooming sessions
Validate Java and TypeScript code against banking naming conventions, style rules, and quality standards
Write and review Flyway database migration scripts with rollback safety for banking schemas
Verify pre-deployment readiness, release management, and production deployment procedures for banking systems
Handle production incidents, perform root cause analysis, and write blameless post-mortem reports
Prepare and document production change requests for banking CAB approval
Gather, document, and validate business requirements for banking features
Perform security assessments, vulnerability scanning, and OWASP compliance checks for banking applications
Plan sprints, track velocity, identify risks, and allocate resources for banking projects
Design test strategies, write test plans, and identify test scenarios for banking features
Perform STRIDE threat modeling for new features, APIs, and architecture changes
Check React UI components against banking design system rules, accessibility standards, and Radix UI patterns
Run UX review checklist for banking user flows, validate WCAG accessibility compliance, and assess customer interface design
Design secure API contracts with OpenAPI specifications and security-first patterns
Create ADR documents, review architecture designs for Zero Trust compliance, and assess secure-by-design principles
Triage Jira issues, refine user stories with security stories, and manage risk-weighted backlog prioritization
Write safe database migration scripts with data privacy considerations using Flyway
Verify pre-deployment readiness with security gates, compliance sign-off, and rollback planning
Handle security incidents, production incident response, and write blameless post-mortem documentation
Design and optimize DevSecOps CI/CD pipelines with security gates, SAST, DAST, and container scanning
Prepare production change requests with security impact assessment for CAB approval
Run Sprint Retrospective focused on DevSecOps pipeline optimization, security feedback loops, and scan performance
Write security user stories, acceptance criteria, and security-aware requirements for banking features
Conduct Sprint Review security demonstrations, Green Build reports, and security metrics presentation