Ansible authoring standards: review and modify roles, collections, playbooks, and tasks, verified through the target repository's own lint and test loop rather than declaring success from the edit alone.
Plugin ansible-standards from marketplace konstruktoid in konstruktoid/agent-instructions-skills. Commands read from the repo's manifest — 7 days ago.
ansible-verification-loopReviews and modifies Ansible roles, collections, playbooks, and tasks, verified through the target repository's own lint/test loop rather than declaring success from the edit alone. Use when reviewing or modifying any Ansible role, collection, playbook, or task.
bash-secure-scriptingAuthors, reviews, and hardens Bash scripts for the stability and security properties a linter cannot verify on its own, including strict-mode semantics and the cases errexit ignores, cleanup and locking on every exit path, injection-safe handling of untrusted input and filenames, PATH and environmen
bash-testingAdds or updates bats-core, shunit2, or plain-script test coverage for a Bash change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new framework, deciding whether the change requires a test at all, making a script testable by separati
github-actions-securityAuthors, reviews, and hardens GitHub Actions workflows, reusable workflows, and composite actions with least-privilege GITHUB_TOKEN permissions, action references pinned by commit SHA to the latest published release, injection-safe handling of untrusted event data, safe trigger and runner choices, a
github-organization-governanceConfigures, reviews, and hardens GitHub organization and enterprise settings that apply across repositories, covering member privileges and base permissions, two-factor and single sign-on requirements, team-based access and periodic access reviews, GitHub App and personal access token policy, the al
github-repository-securityConfigures, reviews, and hardens the security and compliance settings of one GitHub repository, covering rulesets and branch protection, review and CODEOWNERS requirements, secret scanning with push protection, code scanning and dependency alerts, collaborator and deploy key access, tag and release
python-secure-codingAuthors and modifies Python source code with security best practices that static analysis alone does not fully cover, including input handling, deserialization, secrets, subprocess/SQL/crypto usage, SSRF, and dependency hygiene, layered on the ruff/ty quality gate. Use when writing or editing Python
python-testingAdds or updates pytest coverage for a Python change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new structure, deciding whether the change requires a test at all, and running the suite in a bounded verify loop. Use when a Python ch
terraform-secure-iacAuthors and reviews Terraform configuration for the security properties that formatting and validation do not cover, meaning state and secret exposure, least-privilege execution identity, provider and module supply chain, sensitive variables and outputs, and policy-as-code enforcement, verified thro
terraform-testingAdds or updates automated coverage for a Terraform change by first discovering the repository's existing approach, native terraform test HCL, Terratest, or plan-and-policy assertions, matching it rather than imposing a new one, deciding whether the change needs a test at all, and running the suite i
Bash authoring standards: scripts that fail loudly rather than silently, built on strict-mode semantics, cleanup on every exit path, injection-safe handling of untrusted input, controlled PATH and environment, and credentials that stay out of the process table and the logs, plus test coverage that matches the target repository's existing layout. Each skill runs a bounded verify-fix loop with shellcheck and bash -n.
10 skills
GitHub authoring and configuration standards: workflows and actions built on least-privilege GITHUB_TOKEN permissions, dependencies pinned by commit SHA to the latest published release, and injection-safe handling of untrusted event data, plus repository and organization settings that enforce each rule through a mechanism, grant the smallest access the work needs, and leave evidence a reviewer can read. Each skill runs a bounded verify-fix loop, with actionlint and zizmor for workflows and a read-back of the applied state for settings.
10 skills
Python authoring standards: the ruff/ty quality gate, security practices aligned to the OWASP Top 10:2025, and pytest coverage that matches the target repository's existing test layout. Each skill runs a bounded verify-fix loop and reports unresolved findings rather than declaring success unverified.
10 skills
Terraform authoring standards: configuration that passes fmt, validate, and tflint, keeps state and secrets out of version control, runs under a least-privilege execution identity, pins its providers and modules with a committed lock file, and is checked by policy-as-code, plus test coverage that matches the target repository's existing approach. Each skill runs a bounded verify-fix loop with configuration scanning and reports unresolved findings rather than declaring success unverified.
10 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.