Development & Agent Automation Skills

Comprehensive Agentspan durable workflow orchestration skill for creating, running, scheduling, monitoring, and debugging AI agent workflows using the Agentspan Python SDK and CLI. Covers agents, tools, multi-agent strategies, guardrails, memory, streaming, human-in-the-loop, testing, and production deployment.

Submit software to antivirus vendors to prevent false positive detections. Use when releasing new software that triggers AV warnings, submitting binaries for whitelisting, or checking VirusTotal detection status.

Enterprise-grade autonomous penetration testing framework for comprehensive web application and API security assessment using CLI tools, specializing in authorization bypass, injection attacks, business logic flaws, and security…

Enterprise-grade penetration testing framework using curl + mitmproxy + playwright + python stack for comprehensive web application and API security assessment with traffic interception, browser automation, automated exploitation, WAF bypass, CVSS scoring, and compliance…

Comprehensive Cisco Catalyst 8000 SD-WAN engineering skill. Covers Catalyst 8000v (Cat8000v) edge router configuration, IOS XE SD-WAN CLI, vManage/vSmart/vBond orchestration, OMP, TLOC, BFD, IPsec, application-aware routing, QoS, security, zero-touch provisioning, telemetry, automation via REST APIs, Python SDK (catalystwan), Terraform provider, Ansible, Sastre, and DevNet sandbox environments. Use when configuring, troubleshooting, or designing Cisco Catalyst SD-WAN networks.

Comprehensive Cisco IOS XR network engineering skill. Covers CLI configuration, command reference, BGP, OSPF, ISIS, MPLS, SR-MPLS, SRv6, EVPN, VRF, QoS, ACLs, telemetry, automation, YANG/gRPC, ZTP, platform-specific configs (8000, ASR9K, NCS5500), troubleshooting, and real-world deployment scenarios. Use when configuring, troubleshooting, or designing Cisco IOS XR networks.

Sign Windows executables (.exe, .dll, .msi) and macOS applications (.app) with code signing certificates. Use when signing binaries for distribution, setting up code signing workflows, or verifying signatures.

Create or update Pi prompt templates and Agent skills from a short user brief. Produces minimal, well-structured SKILL.md or prompt files that follow Agent Skills best practices.

Comprehensive Dagu workflow orchestration skill for creating, managing, and automating workflows with Dagu - a compact portable workflow engine. Covers all step types, scheduling patterns, error handling, and deployment strategies.

Universal database CLI supporting 30+ databases (SQLite, PostgreSQL, MySQL, SQL Server, Oracle, MongoDB, ClickHouse, DuckDB and more). Execute SELECT/DDL/DML, list tables, export schema, backup/restore tables, and run parameterized SQL. Use when the user asks to query, inspect, or modify a database, run SQL, list tables/columns, export data, or compare query results. Sub-skills: dbcli-query, dbcli-tables, dbcli-exec, dbcli-db-ddl, dbcli-export, dbcli-export-schema, dbcli-compare, dbcli-view, dbcli-index, dbcli-procedure, dbcli-interactive.

Compare results of two SQL queries to verify if they produce identical data. Checks structure, record count, and data content using MINUS/EXCEPT operations. Use when user needs to validate query equivalence, compare view logic, verify refactoring, or check data consistency.

Export database schema objects (procedures, functions, triggers, views, indexes) as SQL scripts for…

Manage stored procedures, functions, and triggers (CREATE/ALTER/DROP…

Plays Gandalf, a Capture The Flag prompt security game by Lakera. Extracts guarded secret passwords from AI defenders across 8 levels of increasing difficulty. Competes on a public agent leaderboard. Triggers: "play Gandalf", "play CTF", "play the password game", "prompt challenge", "agent CTF", "test prompt hacking skills".

GOAD (Game of Active Directory) lab environment — AWS-based Active Directory pentest lab with 1 Ubuntu jumpbox and 5 Windows Server VMs (2 forests, 3 domains). Provides SSH/WinRM access, Ansible playbooks, server configs, and credentials for AD security testing, lateral movement practice, and Kerberos attacks.

Use when building, migrating, or debugging Agent Evals on Inngest: scoring AI agent or workflow outcomes, deferred scorers, sessions, traces, step experiments, experiment variant attribution, Insights queries, or production eval loops for prompts, models, tools, providers, and agent behavior. Covers TypeScript SDK v4 scoring beta APIs, scoreMiddleware, step.score, inngest.score, createScorer, defer, group.experiment, experimentRef, meta.sessions, and when to use durable workflow primitives for outcome-based evaluation.

Use when the user explicitly asks for the Inngest REST API v2, raw HTTP, OpenAPI, API docs, API authentication, or an endpoint that the Inngest CLI does not expose. Covers api-docs.inngest.com, llms.txt, the OpenAPI v2 spec, Bearer authentication with API keys or signing keys, production and local base URLs, raw curl/fetch requests, request-shape discovery, pagination, secret redaction, and when to prefer the inngest-api-cli skill instead.

Use when operating Inngest API resources from the terminal with npx inngest-cli@latest api: Cloud/local run debugging, event-run lookup, function traces, function invocation, app syncs, webhooks, environments, keys, account checks, and Insights queries. Provides prescriptive command routing for agents: which CLI command to run for a run ID, event ID, app ID, function ID, Cloud environment, API key, missing ID, or potentially mutating operation. Use inngest-cli for dev server setup/general CLI workflows and inngest-api only when raw REST API v2 docs or OpenAPI fallback are needed.

Use when analyzing an existing TypeScript or JavaScript codebase to decide where and how to introduce Inngest. Covers repository discovery, framework and package detection, finding durability gaps in HTTP handlers, webhooks, cron jobs, queues, long-running jobs, AI agents, Agent Evals, polling loops, eval loops, and side-effect-heavy code, then producing and implementing an incremental integration plan.

Use when building functions that must survive process crashes, retry automatically on failure, run on a schedule, react to events, or maintain state across infrastructure failures — e.g., webhook handlers that drop events, flaky cron jobs, background jobs that fail mid-execution, or workflows that need to resume where they left off. Covers Inngest function configuration, triggers (events, cron, invoke), step execution and memoization, idempotency, cancellation, error handling, retries, logging, and observability.

Use when designing event-driven workflows, decoupling services, implementing fan-out patterns (one trigger, many downstream handlers), implementing idempotent event handling with IDs (24-hour dedupe window), or handling at-least-once delivery from external sources like Stripe webhooks. Covers Inngest event schema, payload format, naming conventions, IDs for idempotency, the ts param, fan-out patterns, and system events like inngest/function.failed.

Use when handling external API rate limits (e.g., OpenAI 429s, HubSpot or Stripe rate limits), preventing duplicate work from rapid event bursts (debouncing user actions), spreading load over time, ensuring per-tenant fairness, processing events in batches, limiting concurrent runs of the same operation, or assigning priority to important runs. Covers Inngest flow control: concurrency limits with keys, throttling, rate limiting, debounce, priority, singleton, and event batching.

Use when adding cross-cutting concerns to durable functions — structured logging or tracing across all functions, error tracking with Sentry, payload encryption for sensitive data, dependency injection of clients (DB, Stripe, etc.) into function handlers, custom telemetry, or behavior that should apply uniformly across many functions. Covers Inngest middleware lifecycle, creating custom middleware, dependencyInjectionMiddleware, @inngest/middleware-encryption, @inngest/middleware-sentry, and custom middleware patterns.

Use when streaming durable workflow updates to a UI in real time — live order status pages that animate as steps complete, AI agent token streaming from a function to the browser, log tailing for long-running jobs, or human-in-the-loop approval flows that publish a prompt and wait for a user reply. Covers Inngest v4 native realtime: defining typed channels, publishing from inside step.run, minting subscription tokens via server actions, and consuming the stream from React/Next.js client components.