agent-skills

Scaffolds production-grade CI/CD pipelines and audits existing ones for structure, security, speed, reproducibility, progressive delivery, and release documentation. Use when setting up CI/CD for a new project, hardening or reviewing an existing pipeline, improving release automation, or generating/checking changelogs and release notes.

Reviews a live PostgreSQL database across health, schema integrity, indexing, workload, maintenance, security, and hygiene via MCPg (required), producing a scored domain report with severity-ordered findings and suggested (not applied) remediations. Use when auditing or health-checking Postgres, preparing for production, investigating performance or security posture, or when MCPg is available against a database under review.

Reviews a local change set or open PR for pre-submit readiness — local quality gates (hooks, lint, tests), intent and blast radius, test coverage for the change, docs/changelog hygiene, CI readiness, and diff-scoped security footguns — producing a merge-readiness report. Use before opening or updating a PR, when reviewing someone else's PR, or when you want to catch rework triggers before CI does.

Sets up a new project (software, or documentation/research) with a best-practice repo structure, common architecture principles, and — for software — a tech-stack-appropriate architecture template, then re-audits an existing repo against that baseline over its lifecycle. Use when starting a new repository, scaffolding a new project, or checking an existing repository's structure, architecture, or dependencies against the conventions it was set up with.

Reviews Python code across 11 domains — standards compliance, code quality, security, dependency/supply-chain security, performance, concurrency & async correctness, idioms & patterns, architecture, observability, scalability & resilience, and testing — producing a scored report. Use when reviewing Python code for quality, security, or production-readiness, before a commit or PR, or for a periodic project health check.

Maps researched privacy regimes — GDPR plus full EU-27 and EEA overlays, UK GDPR/DPA 2018, and selected Americas/Asia/ME/AU packs plus fintech/healthcare domains — to repo evidence. Declines missing packs. Not legal advice or certification.

Audits an existing project for UI system consistency — design tokens, shared components, themes, icon/media libraries, and form-factor adaptation (responsive web; Apple SwiftUI; Android Compose) — with a scored report and severity-ordered remediation suggestions. Use when reviewing frontend UI consistency, design-system adherence, token drift, mixed component libraries, or responsive/tablet layout discipline.