Plugins

Vulnerability Management Engineer — Vulnerability management — CVE triage, CVSS prioritization, patching cadence, SLA design

Design a vulnerability management program — SLAs and asset tiers

Audit existing vulnerability management for SLA gaps

Triage CVEs — CVSS + EPSS + KEV scoring and prioritization

Security Awareness Engineer — Security awareness — phishing simulation design, security training programs, social engineering assessment

Design a phishing simulation program — scenarios and measurement

Audit existing security awareness program — coverage and effectiveness

Design a security awareness training curriculum

Data Visualization Engineer — Data visualization — chart design, visualization libraries, exploratory analysis

Design or critique a data visualization

Audit existing visualizations in a codebase or notebook

SDK Design Engineer — SDK design — multi-language SDK architecture, idiomatic patterns, cross-language consistency

Design an SDK architecture for an API

Audit multi-language SDK coverage and consistency

Review an existing SDK for idiomatic quality and consistency

Implement a complete UI screen or feature from a Form visual spec. Use when asked to "build a page", "implement this screen", "build the frontend for this feature", or "create this UI".

AI Operations Team — Prompt: System prompt design, few-shot libraries, chain-of-thought patterns, and prompt versioning for production LLM applications.

Design production prompts — system prompt architecture, instruction clarity, few-shot selection.

Audit prompt library — duplication, quality, coverage gaps, version drift, eval alignment.

Build prompt versioning systems — storage, A/B testing, regression tracking, rollback.

Build API test suites — endpoint testing, contract testing, load testing for REST/GraphQL/gRPC APIs. Use when asked to "test this API", "API tests", "endpoint testing", "contract tests", or "load test".

Audit test suite health — find flaky tests, slow tests, coverage gaps, and testing anti-patterns. Use when asked to "audit tests", "fix flaky tests", "why are tests slow", "test health", or "improve test suite".

|

Build E2E test specs for critical user journeys — Playwright or Cypress, page objects, setup/teardown, CI config. Use when asked to "write E2E tests", "end-to-end testing", "browser tests", "UI tests", or "Playwright tests".

Testing reconnaissance — inventory all tests, frameworks, coverage, CI integration, and assess testing maturity for project takeover. Use when asked to "understand the tests", "testing assessment", "what's tested", or "test inventory".

Produce a test strategy for a project or feature — risk map, test type decisions, coverage targets, CI config. Use when asked to "create test strategy", "what should we test", "testing plan", or "improve test coverage".

Infrastructure Specialist Team — Queue: Message queuing and streaming — Kafka, SQS, RabbitMQ design, consumer group strategy, dead letter queues

Queue skill: queue-design

Queue skill: queue-recon

Queue skill: queue-scale