[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M71R339RV8Z4QX6AV9DF4XM4":3,"skill-same:01M71R339RV8Z4QX6AV9DF4XM4":70},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":22,"publishedAt":42,"linkOnly":43,"markdownContent":44,"markdownBody":45,"frontMatter":46,"refName":50,"commitSha":51,"skillDirectory":52,"forksCount":13,"repositoryHtmlUrl":53,"repositoryHomepageUrl":6,"ownerHtmlUrl":54,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":55,"install":56,"resources":69},"01M71R339RV8Z4QX6AV9DF4XM4","infra-audit",null,"Trigger: infrastructure audit, IaC, Terraform, Kubernetes, CI\u002FCD, Docker, cloud, Helm, Ansible. Audit infra reliability.","LuisAlbertoMK\u002Fgentleman-agent-gh","LuisAlbertoMK","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F96153499?v=4","01M71QZX0CF9KKGQZ8ZN9BME63","01M71QZX11P5X6Z27HE1GQDF71",0,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Finfra-audit\u002FSKILL.md",[17],{"categoryNo":18,"categoryName":19,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000011","运维与部署","SCENARIO","使用场景",[23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41],"infra audit","audit","infra","ansible","CI\u002FCD","trigger","k8s","cd","iac","reliability","helm","docs","ci","cloud","terraform","deployment","infrastructure","kubernetes","docker","2026-11-10 13:02:02",false,"---\nname: infra-audit\ndescription: \"Trigger: infrastructure audit, IaC, Terraform, Kubernetes, CI\u002FCD, Docker, cloud, Helm, Ansible. Audit infra reliability.\"\ntriggers: \"infrastructure audit, IaC, Terraform, Kubernetes, CI\u002FCD, Docker, cloud, deployment, Helm, Ansible, k8s\"\nchangelog: docs\u002Fciclos\u002Fcycle28-20260815.md\ntoken_budget: 2500\n---\n\n## When to Use\nReviewing infrastructure (Terraform, Docker, K8s, CI\u002FCD, Helm, Ansible, CloudFormation). Progressive scan: audit what's present, report what's missing.\n\n## CHECKLIST\n| Check | Sev |\n|-------|-----|\n| No remote state | CRIT |\n| Privileged container | CRIT |\n| Secrets in CI plaintext | CRIT |\n| No resource limits | HIGH |\n| No health checks | HIGH |\n| No NetworkPolicy (multi-tenant K8s) | HIGH |\n| `latest` tag in prod | MED |\n| Unpinned CI actions | MED |\n\n## RISK SCORING\n| Level | Criteria |\n|-------|----------|\n| NONE | All checks pass |\n| LOW | Only MED findings |\n| MED | 1+ HIGH findings |\n| HIGH | 1+ CRIT findings |\n\n## OUTPUT\n```\n### Security Compliance\n| Check | Status | File | Evidence |\n### Reliability\n| Component | SPOF? | Replicas | Health Check |\n### Risk: [NONE\u002FLOW\u002FMED\u002FHIGH] — [why]\n```\n\n## Rules\n1. Audit what's present (progressive).\n2. Remote state FIRST.\n3. Container security before CI.\n4. Pin everything.\n5. Both .yaml and .yml.\n\n## Anti-Rationalization\n\n| Rationalization | Red Flag | Verification |\n|-----------------|----------|--------------|\n| \"IaC drift es cosmético\" | `terraform plan` omitido, drift sin diff | CHECKLIST remote state + `terraform plan` dry-run |\n| \"saltar checksum de módulos\" | Módulos sin pin\u002Fchecksum | Rule Pin everything + `latest`\u002F`unpinned` checks |\n| \"RBAC broad por comodidad\" | RBAC\u002FNetworkPolicy amplio | CHECKLIST NetworkPolicy HIGH + least-privilege review |\n\n## Red Flags\n- No rollback plan → STOP, re-read skill\n- Second occurrence of same rationalization → force RED zone\n\n## Verification\n- infra-audit checklist + dry-run\n- cross-ref-check.ps1 → SKILL.md OK\n## K8s\u002FIaC Playbook (limits + network)\nLimits: resources.requests\u002Flimits cpu+mem on every container (no node OOM)\nNetPol: default-deny ingress+egress - allowlist svc\u002Fns (multi-tenant REQUIRED)\nVolumes: subPath with `..` = host traversal - reject | allowlist values\n> changelog: odd\u002Ftasks\u002Fmejora-security.md (2026-09-18, slice 6)\n> changelog: odd\u002Ftasks\u002Fmejora-security.md (2026-09-18, slice 4)\n## Refs\ncontainer-security · security-scanner · best-practices · auth-hardening · llm-security\n\n## Anti-Patterns\nStop if no Terraform · Ignore .yml extensions · GitHub-only CI checks · Skip NetworkPolicy · Subjective risk scoring\n\n---\n\n> See [reference.md](docs\u002Fskills\u002Finfra-audit\u002Freference.md) for extended details, examples, and detailed patterns.\n\n","## When to Use\nReviewing infrastructure (Terraform, Docker, K8s, CI\u002FCD, Helm, Ansible, CloudFormation). Progressive scan: audit what's present, report what's missing.\n\n## CHECKLIST\n| Check | Sev |\n|-------|-----|\n| No remote state | CRIT |\n| Privileged container | CRIT |\n| Secrets in CI plaintext | CRIT |\n| No resource limits | HIGH |\n| No health checks | HIGH |\n| No NetworkPolicy (multi-tenant K8s) | HIGH |\n| `latest` tag in prod | MED |\n| Unpinned CI actions | MED |\n\n## RISK SCORING\n| Level | Criteria |\n|-------|----------|\n| NONE | All checks pass |\n| LOW | Only MED findings |\n| MED | 1+ HIGH findings |\n| HIGH | 1+ CRIT findings |\n\n## OUTPUT\n```\n### Security Compliance\n| Check | Status | File | Evidence |\n### Reliability\n| Component | SPOF? | Replicas | Health Check |\n### Risk: [NONE\u002FLOW\u002FMED\u002FHIGH] — [why]\n```\n\n## Rules\n1. Audit what's present (progressive).\n2. Remote state FIRST.\n3. Container security before CI.\n4. Pin everything.\n5. Both .yaml and .yml.\n\n## Anti-Rationalization\n\n| Rationalization | Red Flag | Verification |\n|-----------------|----------|--------------|\n| \"IaC drift es cosmético\" | `terraform plan` omitido, drift sin diff | CHECKLIST remote state + `terraform plan` dry-run |\n| \"saltar checksum de módulos\" | Módulos sin pin\u002Fchecksum | Rule Pin everything + `latest`\u002F`unpinned` checks |\n| \"RBAC broad por comodidad\" | RBAC\u002FNetworkPolicy amplio | CHECKLIST NetworkPolicy HIGH + least-privilege review |\n\n## Red Flags\n- No rollback plan → STOP, re-read skill\n- Second occurrence of same rationalization → force RED zone\n\n## Verification\n- infra-audit checklist + dry-run\n- cross-ref-check.ps1 → SKILL.md OK\n## K8s\u002FIaC Playbook (limits + network)\nLimits: resources.requests\u002Flimits cpu+mem on every container (no node OOM)\nNetPol: default-deny ingress+egress - allowlist svc\u002Fns (multi-tenant REQUIRED)\nVolumes: subPath with `..` = host traversal - reject | allowlist values\n> changelog: odd\u002Ftasks\u002Fmejora-security.md (2026-09-18, slice 6)\n> changelog: odd\u002Ftasks\u002Fmejora-security.md (2026-09-18, slice 4)\n## Refs\ncontainer-security · security-scanner · best-practices · auth-hardening · llm-security\n\n## Anti-Patterns\nStop if no Terraform · Ignore .yml extensions · GitHub-only CI checks · Skip NetworkPolicy · Subjective risk scoring\n\n---\n\n> See [reference.md](docs\u002Fskills\u002Finfra-audit\u002Freference.md) for extended details, examples, and detailed patterns.\n\n",{"name":5,"triggers":47,"changelog":48,"description":7,"token_budget":49},"infrastructure audit, IaC, Terraform, Kubernetes, CI\u002FCD, Docker, cloud, deployment, Helm, Ansible, k8s","docs\u002Fciclos\u002Fcycle28-20260815.md",2500,"main","4af6946b30783e2c8f9182082324d530fc28f838",".agents\u002Fskills\u002Finfra-audit","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK","2026-11-10 18:34:27",{"source":8,"skillName":5,"commands":57,"prompt":67,"zipAvailable":68},[58,61,64],{"tool":59,"command":60},"npx","npx skills add LuisAlbertoMK\u002Fgentleman-agent-gh --skill infra-audit",{"tool":62,"command":63},"bunx","bunx skills add LuisAlbertoMK\u002Fgentleman-agent-gh --skill infra-audit",{"tool":65,"command":66},"pnpm","pnpm dlx skills add LuisAlbertoMK\u002Fgentleman-agent-gh --skill infra-audit","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002F.agents\u002Fskills\u002Finfra-audit\u002FSKILL.md",true,[],[71,111,134,154,179,205],{"skillNo":72,"name":73,"nameZh":6,"description":74,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":75,"categories":76,"keywords":91,"publishedAt":42},"01M71R7K35P668DYEPYGDQP2QA","web-quality-audit","Comprehensive web audit: performance, a11y, SEO, responsive, animation, design tokens.","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002Fdocs\u002Fciclos\u002Fc28-w1-backup\u002Fweb-quality-audit\u002FSKILL.md",[77,80,83,88],{"categoryNo":78,"categoryName":79,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000015","视觉设计",{"categoryNo":81,"categoryName":82,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000019","营销推广",{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},"01JBSEEDCAT000000000000032","设计师","PROFESSION","适用职业",{"categoryNo":89,"categoryName":90,"taxonomyType":86,"taxonomyTypeDesc":87},"01JBSEEDCAT000000000000035","市场营销",[92,93,94,24,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110],"quality","quality audit","web quality audit","web","Animation","design audit","design","website","ui","responsive","seo","tokens","ui audit","Lighthouse","performance","review","optimize","a11y","page",{"skillNo":112,"name":113,"nameZh":6,"description":114,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":115,"categories":116,"keywords":118,"publishedAt":42},"01M71R7H1RA7CQ568DHRK37PE2","ui-engine","UI system — Grid\u002FFlexbox\u002F@layer\u002F:has(), container queries, compositor-only animation, OKLCH tokens, component patterns","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002Fdocs\u002Fciclos\u002Fc28-w1-backup\u002Fui-engine\u002FSKILL.md",[117],{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},[119,120,100,96,121,122,123,110,124,103,125,126,127,98,128,129,130,131,132,133],"ui engine","engine","compositor","css","dark","system","mode","hooks","container","only","query","components","dark mode","grid","queries",{"skillNo":135,"name":136,"nameZh":6,"description":137,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":138,"categories":139,"keywords":142,"publishedAt":42},"01M71R7EPMZFKB833WE4B3GTHC","baseline-ui","Anti-slop UI — layout, typography, responsive, animation, tokens. Use for cleanup or polish.","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002Fdocs\u002Fciclos\u002Fc28-w1-backup\u002Fbaseline-ui\u002FSKILL.md",[140,141],{"categoryNo":78,"categoryName":79,"taxonomyType":20,"taxonomyTypeDesc":21},{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},[143,144,100,96,145,146,147,148,103,149,127,98,150,151,152,104,153,129,132,107],"baseline ui","baseline","generic","slop","for","anti-slop","fix","interface","cleanup","design review","use",{"skillNo":155,"name":156,"nameZh":6,"description":157,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":158,"categories":159,"keywords":163,"publishedAt":42},"01M71R7CWK3FBW77Z8WD9GXQFE","skill-creator","Create new AI agent skills following Agent Skills spec -- auto-bootstrap unknown tasks, define structure, register in AGENTS.md","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002F.archive\u002Fskills\u002Fskill-creator\u002FSKILL.md",[160],{"categoryNo":161,"categoryName":162,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000023","Skill与智能体开发",[164,165,166,167,168,169,170,171,172,173,174,175,176,177,178],"skill creator","creator","create","structure","register","2026","spec","new","ai skill","auto","define","ai agent","unknown","tasks","bootstrap",{"skillNo":180,"name":181,"nameZh":6,"description":182,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":183,"categories":184,"keywords":187,"publishedAt":42},"01M71R78DZM1GA16F1KN8ND926","senior-engineer","Apply senior engineering competencies — system design, trade-off analysis, delegation, mentoring, and tech debt strategy","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002F.archive\u002Fskills\u002Fsenior-engineer\u002FSKILL.md",[185,186],{"categoryNo":78,"categoryName":79,"taxonomyType":20,"taxonomyTypeDesc":21},{"categoryNo":84,"categoryName":85,"taxonomyType":86,"taxonomyTypeDesc":87},[188,189,190,191,192,193,194,98,195,196,169,197,198,199,124,200,201,202,203,204],"engineer","senior","senior engineer","system design","trade-offs","senior engineering","delegation","senior architect","analysis","debt","architect","tech","strategy","apply","trade","tech debt","engineering",{"skillNo":206,"name":207,"nameZh":6,"description":208,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":209,"categories":210,"keywords":215,"publishedAt":42},"01M71R74WQTXZMG3219RND96CE","prompt-engineering","Design effective prompts using SPEARS framework — scope, principles, examples, assertions, refinements, with ReAct and multi-agent patterns","https:\u002F\u002Fgithub.com\u002FLuisAlbertoMK\u002Fgentleman-agent-gh\u002Fblob\u002Fmain\u002F.archive\u002Fskills\u002Fprompt-engineering\u002FSKILL.md",[211,214],{"categoryNo":212,"categoryName":213,"taxonomyType":20,"taxonomyTypeDesc":21},"01JBSEEDCAT000000000000009","前端开发",{"categoryNo":161,"categoryName":162,"taxonomyType":20,"taxonomyTypeDesc":21},[216,217,204,218,219,98,220,169,221,222,223,224,225,226,227,228,229,230,231,232],"prompt","prompt engineering","scope","improve","react","security","patterns","multi-agent","framework","agent patterns","assertions","examples","with","multi","principles","improve prompt","prompts"]