Write and rewrite English in ASD-STE100 (Simplified Technical English) style, adapted from the MIT-licensed danyuchn/asd-ste100-skill: short sentences, active voice, one instruction per sentence, no semicolons, one word for one meaning, and hedges kept intact. Use for tool descriptions, error messages, prompts, inter-agent instructions, procedures and status reports, or when the user asks for STE, STE100 or "80% STE". Norwegian domain terms stay Norwegian.
1 skill
Write Norwegian bokmål technical text with the discipline of ASD-STE100 (Simplified Technical English), adapted to Norwegian grammar: imperative and one instruction per sentence, active voice instead of s-passive, sentence length caps, no semicolons, short compounds, one word for one meaning, and hedges kept intact. Use for instructions, error messages, operational notices, procedures and Norwegian field descriptions, or when the user asks for STE in Norwegian. Pairs with norsk-sprakvask, which owns spelling, punctuation and term choice.
1 skill
Write and review Dockerfiles, Helm charts and Kubernetes or OpenShift manifests with rules for the risks in the OWASP Top 10 and the OWASP Kubernetes Top 10: images that run as a user that is not root and with a random user ID, pinned base images, no secrets in layers, a restricted security context, no host access, secrets from Secret objects, least-privilege RBAC, and oc and kubectl commands that do not show secrets or change the cluster. Keeps answers in proportion: minimal fixes, no invented tags, paths or user IDs, and no findings for safe settings.
1 skill
Write and review GitHub Actions workflows, reusable workflows and composite actions so that text, code and artifacts from forks, issues and comments cannot reach the token and the secrets. Covers expression injection, privileged triggers such as pull_request_target and workflow_run, least-privilege permissions, actions pinned to a commit SHA, secrets and OIDC, caches, self-hosted runners and language-model steps. Includes a review mode mapped to the OWASP Top 10 CI/CD Security Risks.
1 skill
Verify the behaviour of a change to a web interface with the component tests of the project, then give the user a short click-through for what tests cannot show, such as layout, styles and visible focus. The agent does not run the app or a browser. It fixes the steps that the user reports as failed.
1 skill
Run a cleanup review, a language pass with the STE100 and Norwegian language skills, a correctness review, and a security review with the security skills on the current branch, round by round, until the project's check passes and a round finds nothing that affects correctness or a stated requirement, or until the round limit (default 3). The run always ends on a correctness review, and on a security review when the diff has files for the security skills. For a change to a web interface, it first writes behaviour tests when the project has component tests, and ends the report with a click-through when tests cannot show everything or a visual decision is open.
1 skill