DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

stack-merge

Bulk-merge a Graphite stack into main via admin-bypass fast-forward push. Replaces the Graphite merge queue for rivet-dev/rivet. Invoke when the user says "merge the stack at <branch>", "ship everything through <branch>", "bulk-merge up to <branch>", "fast-forward main to <branch>", or any request to land multiple stacked PRs at once in one shot. Requires repo admin permissions (bypasses branch protection), Graphite (gt) CLI, and GitHub (gh) CLI. After the FF push, closes all in-scope PRs explicitly with `gh pr close` in parallel — GitHub does not auto-mark them as MERGED because their bases point at sibling stack branches, not main.

5.70k repo starsObserved in 1 repos
DevOps & Security

daft-distributed-scaling

Scale Daft workflows to distributed Ray clusters. Invoke when optimizing performance or handling large data.

5.63k repo starsObserved in 2 repos
DevOps & Security

cve-bump

Patch CVEs surfaced by the kgateway OSV scanner by bumping the affected Go module dependencies (direct, indirect via require, or replace) and curating false-positive entries in osv-scanner.toml. Use this skill whenever the user wants to fix CVEs, address OSV-Scanner alerts, bump deps for security reasons, triage code-scanning findings, "see what CVEs we have", or do anything CVE/security-bump-flavored in this repo — even if they don't name the skill explicitly.

5.63k repo starsObserved in 1 repos
DevOps & Security

czsc-release

规范 czsc 库(混合 Rust + Python,PyO3 + maturin)的版本发布流程。当用户说"发版/发布/release/publish czsc"、"bump 版本"、"出 rc.N+1"、"准备 1.0.0 stable"、要把 Rust crate 推 crates.io 或 wheel 推 PyPI 时使用。本 skill 半自动执行预检 / bump / CHANGELOG / commit,遇 push tag / push master / 真 publish 等不可逆动作时停下来要授权。

5.55k repo starsObserved in 1 repos
DevOps & Security

epic-deployment

Guide on deployment with Fly.io, multi-region setup, and CI/CD for Epic Stack

5.54k repo starsObserved in 6 repos
DevOps & Security

epic-security

Guide on security practices including CSP, rate limiting, and session security for Epic Stack

5.54k repo starsObserved in 5 repos
DevOps & Security

fix-cve

Use when pip-audit (or a CVE/GHSA advisory, Dependabot, or security scan) flags a vulnerable Python dependency in giskard-oss and it needs upgrading to a fixed version in the uv lockfile.

5.54k repo starsObserved in 1 repos
DevOps & Security

pipelines-health-check

Check health of MSBuild CI pipelines, VS repo PR insertion statuses, and VMR codeflow PRs. Use when asked about pipeline health, build failures, infrastructure issues, CI status, insertion PR status, VMR codeflow status, or for periodic health monitoring.

5.54k repo starsObserved in 1 repos
DevOps & Security

dootask-fix-permission

修复 DooTask 可写目录(bootstrap/cache、docker、public、storage)的属主/权限:chown 回当前用户 + 目录 chmod 775,对齐 install 的赋权逻辑,赋权不删数据。

5.53k repo starsObserved in 1 repos
DevOps & Security

dootask-install

首次部署 DooTask:前置检查后执行 `sudo ./cmd install`(建库 + migrate --seed 的重操作),刚性流程、单次确认、失败即停。

5.53k repo starsObserved in 1 repos
DevOps & Security