CI/CD pipelines: GitHub Actions (OIDC federation, permissions hardening, deploy concurrency, reusable workflows, pull_request_target security) and AWS CodePipeline + CodeBuild (pipeline v1/v2, CodeStar Connections, buildspec authoring, IAM service roles, ECR/VPC builds, caching).
24 skills
Analyzes and optimizes CLAUDE.md files following Anthropic's official best practices. Use when reviewing existing CLAUDE.md for improvements, or when user mentions CLAUDE.md is too long or ineffective.
24 skills
Cloud provider operations: GCP IAM inheritance and impersonation; AWS cost investigation (Cost Explorer + CUR, anomaly detection, Savings Plans vs RIs); and Cloudflare platform — DNS zones (REST), Workers configuration, the cf unified CLI (preview), Zero Trust Access for remote MCP servers, and traffic analytics via the GraphQL Analytics API (per-hostname breakdowns, dataset limits, sampling). Ships stdlib validators.
24 skills
draw.io diagram authoring: native .drawio file generation, the draw.io MCP servers, and an architecture/HLA method for infrastructure & Kubernetes topology (semantic edge routing, comb-bus/ladder/rail layouts, icon and color conventions). Ships a reusable Python generator.
24 skills
DigitalOcean operations skills. DNS zones: domain/record CRUD via doctl and the DigitalOcean Terraform provider, apex CNAME / no-flattening trap when migrating from Cloudflare, FQDN trailing-dot semantics, DNS-01 ACME wildcard certs, nameserver delegation. App Platform: lints app specs (app.yaml / doctl apps spec JSON / digitalocean_app Terraform) for plaintext secrets, missing health checks, single-instance services, dev databases in production, port mismatches, overlapping ingress routes, conflicting git/image sources, deprecated routes, unknown instance sizes, and app/database region mismatch. Container Registry: analyze and clean registry images — list repos with tag counts, delete old tags (keep last N), find stale repos, trigger garbage collection, with dry-run support.
24 skills
Infrastructure-as-code workflows: Terraform/OpenTofu plan review, drift detection, state surgery (mv/rm/import) and provider upgrades; Terragrunt CLI-redesign migration, config composition, run --all orchestration and stacks; and S3-compatible object-storage provider identification. Ships stdlib validators.
24 skills