DevOps e Infra

Automated API security testing starting from domains. Discovers REST, GraphQL, and SOAP APIs, reconstructs schemas, and tests for BOLA/IDOR, BFLA, mass assignment, JWT attacks, rate limiting bypass, and business logic flaws. Use when user asks to "test API security", "break API", "find API vulnerabilities", "test GraphQL", "test JWT", "API pentest", or provides domains with API endpoints. For auth

pnpm workspace protocol, filtering, catalogs, shared dependencies, publishing, and CI/CD for monorepo management

Run containers with a defensive baseline that survives production. Covers non-root users, read-only filesystems, dropped Linux capabilities, secret mounts instead of build-time bake-in, image scanning with trivy, distroless and minimal base images, and the Docker-bypasses-UFW firewall pitfall. Invoke when adding Docker to a VPS with UFW, writing a new Dockerfile, or pushing an image to a public re

Customize any Cowork skill or workflow to match your specific industry, company, and style. For tuning default skill outputs to your voice, when adapting generic workflows to a specific industry, or during a skill quality review. Use when the user says "customize this skill", "output is too generic", "make this work for my industry", "personalize this workflow", "results do not match my style", or

Serverless GPU compute platform for AI model deployment — web endpoints, GPU functions, model serving, and TypeScript client patterns

GitHub Actions, pipelines, deployment

Esta skill aborda o trabalho com agentes de codificação de IA, focando na soberania do usuário, no acordo como sinal, no enquadramento Karpathy/Willison, em sobreposições por modelo e na regra para medir os ajustes de prompt.

Walks you through pairing your phone with Cowork and sending your first remote task — so you can control your desktop from anywhere. For deploying tasks while commuting or in meetings, when setting up mobile-to-desktop control for the first time, or during a Cowork Max feature exploration session. Use when the user says \"dispatch\", \"control cowork from phone\", \"remote task\", \"phone to deskt

Pressure-test an assumption, decision, or inherited constraint — Socratic cross-examination that forces you to defend or abandon your position

B2B startup strategy advisor grounded in Lenny Rachitsky's 7-part series and April Dunford's positioning framework. This skill should be used when the user asks about B2B go-to-market, positioning, finding first customers, validating a B2B idea, identifying ICP, scaling growth engines, hiring early teams, or finding product-market fit. Also triggers on B2B pricing, or "how do B2B startups" questio

Docker containerization patterns for Node.js/TypeScript development and production

Container-based development for isolated, reproducible environments. Use when running npm commands, installing packages, executing code, or managing project dependencies. Trigger phrases include "npm install", "run the build", "start the server", "install package", or any code execution request.