DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

add-linux-release-target

Load when adding a new Linux distro/version (e.g. Ubuntu 26.04, Alpine 3.24) as a ponyc release target. Covers builder Dockerfile creation, image build dispatch and tag discovery, workflow updates, docs, release notes, and the post-merge Last Week in Pony announcement.

6.14k repo starsObserved in 1 repos
DevOps & Security

create-dragonfly-dev-env

Load when you need to reproduce or validate a gcc-specific or DragonFly-specific ponyc issue on a local VM, or to stand up a local DragonFly BSD development VM that matches ponyc tier-3 CI. Covers the prerequisite check, the sudo-free QEMU/KVM setup, the reused console automation, the in-VM gcc13 build env, and the gotchas (csh, screendump paths, boot timing, detached builds, per-block shells) that make hand-rolling one error-prone.

6.14k repo starsObserved in 1 repos
DevOps & Security

create-freebsd-dev-env

Load when you need to reproduce or validate a FreeBSD-specific ponyc issue on a local VM, or to stand up a local FreeBSD development VM that matches ponyc tier-3 CI. Covers the cloud-init seed, the sudo-free QEMU/KVM boot, the one-time expect/su root bootstrap, the clang build env, and the gotchas (freebsd-user login, no bash in base, growfs auto-resize, detached builds, per-block shells) that make hand-rolling one error-prone.

6.14k repo starsObserved in 1 repos
DevOps & Security

create-openbsd-dev-env

Load when you need to reproduce or validate an OpenBSD-specific ponyc issue on a local VM, or to stand up a local OpenBSD development VM that matches ponyc tier-3 CI. Covers the cloud-init seed (cdrom), the sudo-free QEMU/KVM boot, the doas-via-cloud-init setup (no expect bootstrap), the dedicated /build data disk, the datasize limit, the clang build env, and the gotchas (openbsd-user login, disklabel build disk, raised datasize, static-PIE static linking, pkg_add naming, detached builds, per-block shells) that make hand-rolling one error-prone.

6.14k repo starsObserved in 1 repos
DevOps & Security

deepchat-release

Prepare and publish DeepChat releases in this repository. Use when Codex needs to bump the app version, update CHANGELOG.md, keep release notes bilingual from v1.0.1 onward with English bullets first and Chinese bullets second, run release checks, create or update versioned release branches such as release/v1.0.1, continue a half-finished release, fast-forward main with the documented release flow, create or push version tags, or clean up release branches after publishing.

6.11k repo starsObserved in 2 repos
DevOps & Security

goa-release

Release Goa v3, including preflight tests, dependency updates, semver version bumps, release preparation commits, examples/plugins repo checks, and babysitting make release. Use when the user asks to release Goa, prepare a Goa release, bump the Goa version, or run make release.

6.09k repo starsObserved in 1 repos
DevOps & Security

meta-home-it-rescue

Use this meta-skill instead of answering directly when the user needs help with home, small-team, laptop, browser, printer, Docker, Git, network, UI, or deployment troubleshooting that benefits from multi-skill orchestration across symptom intake, environment capture, web lookup, and repair planning.

6.08k repo starsObserved in 1 repos
DevOps & Security

meta-long-running-build-watchdog

[DEPRECATED] Build watchdog — launches arbitrary commands from the user message in tmux and lets sub-agent auto-apply a fix. Disabled pending the E5 bounded sub-agent contract + Jinja sandbox + side-effect ledger (plan §3.1 A1/A8 / §5.3 E4): the launch task interpolates raw user_message into a shell-bound tmux session and the heal step lets sub-agent mutate state with no rollback. Do not re-enable without `metadata.opensquilla.risk: high` + capabilities {shell, tmux, filesystem-write, subprocess} and a saga-style compensation step.

6.08k repo starsObserved in 1 repos
DevOps & Security

meta-security-review-bundle

Compose three independent security gates over a candidate operation — policy/governance review, secret/credential scan, and audit-log emit — then arbitrate the verdicts with a strict priority rule (governance DENY > scanner WARN > ALLOW). Use when reviewing a proposed code change, script, or environment manipulation for safety.

6.08k repo starsObserved in 1 repos
DevOps & Security

zcf-release

Automate version release and code commit using changeset

6.08k repo starsObserved in 2 repos
DevOps & Security