Plugins

AI Operations Team — Rank: Retrieval reranking, relevance scoring, learning-to-rank pipelines, and result quality evaluation for search and RAG.

Design ranking pipelines — reranker selection, score fusion, cross-encoder patterns, latency trade-offs.

Build ranking evaluation — NDCG/MRR measurement, human relevance labeling, offline eval harness.

Audit ranking quality — metric trends, failure modes, dataset coverage, reranker performance.

Offensive Security Engineer — Red team operations — penetration testing, attack simulation, vulnerability exploitation

Design a penetration testing plan — scope, methodology, and rules of engagement

Design a reconnaissance plan — OSINT and attack surface mapping

Write a penetration test finding report with CVSS scores and remediation

Audit an existing CI/CD pipeline for slowness, security issues, and reliability gaps. Use when asked to "audit pipeline", "why is CI slow", "pipeline review", or "deployment review".

Set up a complete deployment configuration — Dockerfile, deployment manifest, environment config, and rollback procedure. Use when asked about "deployment setup", "how do I deploy this", "deployment strategy", or "rollback plan".

Build production-ready Dockerfiles with multi-stage builds, security hardening, and docker-compose for local dev. Use when asked to "create Dockerfile", "optimize container", or "dockerize this".

Build a full CI/CD pipeline from scratch. Use when asked to "set up CI/CD", "create pipeline", or "automate deploys".

Map the full CI/CD pipeline — triggers, build, test, deploy flow — with risk assessment. Use when asked "how does this deploy", "map the pipeline", or "understand CI/CD".

End-to-end ship workflow — merge base, run tests, review diff, bump version, commit, push, create PR. Use when asked to "ship", "push to main", "create a PR", "get this merged", or "deploy this branch".

Incident Response Engineer — Incident response — playbook design, containment procedures, DFIR, post-incident review

Design containment procedures for an active incident

Write an incident response playbook for a threat scenario

Audit existing incident response capability and playbook coverage

Code Sample Engineer — Code samples and tutorials — working examples, quickstarts, and language-specific guides

Survey existing code samples — coverage, language parity, and freshness

Review existing code samples for correctness and developer experience

Write a working code sample or tutorial for an API feature

Application Security Engineer — Application security — SAST/DAST scanning, code security review, secure SDLC design

Analyze and fix a SAST finding with secure code alternative

Audit application security tooling for OWASP Top 10 coverage

Design a SAST/DAST scanning pipeline — tooling and CI integration

API Schema Engineer — API schema design — OpenAPI, GraphQL, gRPC schema quality and design standards

Design an API schema — OpenAPI, GraphQL, or gRPC proto

Audit existing API schemas for inconsistencies and coverage gaps

Review an API schema for consistency and completeness