tech-hub-skills 1.0.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +99 -58
- package/bin/postinstall.js +1 -1
- package/package.json +5 -5
- package/tech_hub_skills/skills/aws.md +143 -0
- package/tech_hub_skills/skills/backend-developer.md +108 -0
- package/tech_hub_skills/skills/compliance-officer.md +108 -0
- package/tech_hub_skills/skills/database-admin.md +109 -0
- package/tech_hub_skills/skills/frontend-developer.md +108 -0
- package/tech_hub_skills/skills/gcp.md +143 -0
- package/tech_hub_skills/skills/network-engineer.md +109 -0
- package/tech_hub_skills/skills/orchestrator.md +139 -13
- package/tech_hub_skills/skills/qa-engineer.md +109 -0
- package/tech_hub_skills/skills/sre.md +109 -0
- package/tech_hub_skills/skills/technical-writer.md +101 -0
package/README.md
CHANGED
|
@@ -2,7 +2,7 @@
|
|
|
2
2
|
|
|
3
3
|
This document provides detailed information about all available roles and their skills.
|
|
4
4
|
|
|
5
|
-
For installation instructions, see [
|
|
5
|
+
For installation instructions, see the [main README](https://github.com/6ogo/Tech-Skills/blob/main/README.md).
|
|
6
6
|
|
|
7
7
|
## Quick Reference
|
|
8
8
|
|
|
@@ -23,46 +23,62 @@ Use skills in Claude Code with `@` mentions:
|
|
|
23
23
|
|
|
24
24
|
## Available Roles & Skills
|
|
25
25
|
|
|
26
|
-
### Core Engineering (
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
|
30
|
-
| **
|
|
31
|
-
| **
|
|
32
|
-
| **
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
41
|
-
|
|
|
42
|
-
|
|
43
|
-
| **
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
|
|
47
|
-
|
|
|
48
|
-
|
|
|
49
|
-
|
|
50
|
-
|
|
51
|
-
|
|
|
52
|
-
|
|
53
|
-
| **
|
|
54
|
-
| **
|
|
55
|
-
| **
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
|
64
|
-
|
|
65
|
-
| **
|
|
26
|
+
### Core Engineering (48 skills)
|
|
27
|
+
|
|
28
|
+
| Role | Skills | Focus |
|
|
29
|
+
| ---------------------- | ------ | -------------------------------------------- |
|
|
30
|
+
| **AI Engineer** | 8 | LLMs, RAG, Agents, Guardrails, Embeddings |
|
|
31
|
+
| **Data Engineer** | 9 | Lakehouse, ETL/ELT, Streaming, Quality |
|
|
32
|
+
| **ML Engineer** | 9 | MLOps, Training, Serving, Monitoring |
|
|
33
|
+
| **Data Scientist** | 8 | EDA, Modeling, Analytics, Experimentation |
|
|
34
|
+
| **Frontend Developer** | 7 | React/Vue/Angular, TypeScript, A11y, Testing |
|
|
35
|
+
| **Backend Developer** | 7 | REST, GraphQL, Microservices, Caching |
|
|
36
|
+
|
|
37
|
+
### Architecture & Security Roles (22 skills)
|
|
38
|
+
|
|
39
|
+
| Role | Skills | Focus |
|
|
40
|
+
| ---------------------- | ------ | ------------------------------------------- |
|
|
41
|
+
| **Security Architect** | 7 | PII, Threat Modeling, IAM, Secrets |
|
|
42
|
+
| **System Design** | 8 | Architecture, Scalability, HA/DR, APIs |
|
|
43
|
+
| **Network Engineer** | 7 | Topology, VPN/VPC, Load Balancers, CDN, DNS |
|
|
44
|
+
|
|
45
|
+
### Platform & Operations Roles (59 skills)
|
|
46
|
+
|
|
47
|
+
| Role | Skills | Focus |
|
|
48
|
+
| --------------------- | ------ | ------------------------------------------- |
|
|
49
|
+
| **Platform Engineer** | 6 | IDP, Self-Service, SLOs |
|
|
50
|
+
| **SRE** | 7 | Incident Response, Chaos Engineering, SLOs |
|
|
51
|
+
| **Database Admin** | 7 | Query Optimization, Replication, Migrations |
|
|
52
|
+
| **Data Governance** | 6 | Catalog, Lineage, Quality, Compliance |
|
|
53
|
+
| **DevOps** | 9 | CI/CD, Containers, IaC, GitOps |
|
|
54
|
+
| **MLOps** | 9 | Experiments, Registry, Deployment |
|
|
55
|
+
| **FinOps** | 8 | Cost Visibility, Optimization |
|
|
56
|
+
| **Docker** | 5 | Containers, Security, Optimization |
|
|
57
|
+
|
|
58
|
+
### Enterprise Governance Roles (17 skills)
|
|
59
|
+
|
|
60
|
+
| Role | Skills | Focus |
|
|
61
|
+
| ------------------------- | ---------- | --------------------------------------- |
|
|
62
|
+
| **Code Review** | 5 | PR Automation, Quality Gates, Analytics |
|
|
63
|
+
| **Compliance Officer** | 7 | SOC 2, GDPR, HIPAA, PCI-DSS, ISO 27001 |
|
|
64
|
+
| **Compliance Automation** | Integrated | Policy-as-Code, Evidence Collection |
|
|
65
|
+
| **Dashboard** | Integrated | Security, Compliance, DORA Metrics |
|
|
66
|
+
|
|
67
|
+
### Product, Design & Quality Roles (19 skills)
|
|
68
|
+
|
|
69
|
+
| Role | Skills | Focus |
|
|
70
|
+
| -------------------- | ------ | ----------------------------------------- |
|
|
71
|
+
| **Product Designer** | 6 | Requirements, Research, UX, Brainstorming |
|
|
72
|
+
| **QA Engineer** | 7 | Test Strategy, Automation, Performance |
|
|
73
|
+
| **Technical Writer** | 6 | API Docs, ADRs, Runbooks, Knowledge Base |
|
|
74
|
+
|
|
75
|
+
### Cloud Platform Roles (36 skills)
|
|
76
|
+
|
|
77
|
+
| Role | Skills | Focus |
|
|
78
|
+
| --------- | ------ | ------------------------------- |
|
|
79
|
+
| **Azure** | 12 | All Azure services |
|
|
80
|
+
| **AWS** | 12 | EC2, Lambda, S3, RDS, VPC, EKS |
|
|
81
|
+
| **GCP** | 12 | Compute, BigQuery, GKE, Pub/Sub |
|
|
66
82
|
|
|
67
83
|
## Directory Structure
|
|
68
84
|
|
|
@@ -93,22 +109,32 @@ Use skills in Claude Code with `@` mentions:
|
|
|
93
109
|
|
|
94
110
|
## Skill ID Reference
|
|
95
111
|
|
|
96
|
-
| Role
|
|
97
|
-
|
|
98
|
-
| AI Engineer
|
|
99
|
-
| Data Engineer
|
|
100
|
-
| ML Engineer
|
|
101
|
-
| Data Scientist
|
|
102
|
-
|
|
|
103
|
-
|
|
|
104
|
-
|
|
|
105
|
-
|
|
|
106
|
-
|
|
|
107
|
-
|
|
|
108
|
-
|
|
|
109
|
-
|
|
|
110
|
-
|
|
|
111
|
-
|
|
|
112
|
+
| Role | Prefix | Skills |
|
|
113
|
+
| ------------------ | ------ | ---------------- |
|
|
114
|
+
| AI Engineer | `ai-` | ai-01 to ai-08 |
|
|
115
|
+
| Data Engineer | `de-` | de-01 to de-09 |
|
|
116
|
+
| ML Engineer | `ml-` | ml-01 to ml-09 |
|
|
117
|
+
| Data Scientist | `ds-` | ds-01 to ds-08 |
|
|
118
|
+
| Frontend Developer | `fe-` | fe-01 to fe-07 |
|
|
119
|
+
| Backend Developer | `be-` | be-01 to be-07 |
|
|
120
|
+
| Security Architect | `sa-` | sa-01 to sa-07 |
|
|
121
|
+
| System Design | `sd-` | sd-01 to sd-08 |
|
|
122
|
+
| Network Engineer | `ne-` | ne-01 to ne-07 |
|
|
123
|
+
| Platform Engineer | `pe-` | pe-01 to pe-06 |
|
|
124
|
+
| SRE | `sr-` | sr-01 to sr-07 |
|
|
125
|
+
| Database Admin | `db-` | db-01 to db-07 |
|
|
126
|
+
| Data Governance | `dg-` | dg-01 to dg-06 |
|
|
127
|
+
| DevOps | `do-` | do-01 to do-09 |
|
|
128
|
+
| MLOps | `mo-` | mo-01 to mo-09 |
|
|
129
|
+
| FinOps | `fo-` | fo-01 to fo-08 |
|
|
130
|
+
| Azure | `az-` | az-01 to az-12 |
|
|
131
|
+
| AWS | `aws-` | aws-01 to aws-12 |
|
|
132
|
+
| GCP | `gcp-` | gcp-01 to gcp-12 |
|
|
133
|
+
| Code Review | `cr-` | cr-01 to cr-05 |
|
|
134
|
+
| Compliance Officer | `co-` | co-01 to co-07 |
|
|
135
|
+
| Product Designer | `pd-` | pd-01 to pd-06 |
|
|
136
|
+
| QA Engineer | `qa-` | qa-01 to qa-07 |
|
|
137
|
+
| Technical Writer | `tw-` | tw-01 to tw-06 |
|
|
112
138
|
|
|
113
139
|
## Enterprise Mode
|
|
114
140
|
|
|
@@ -119,12 +145,14 @@ For production applications, use Enterprise Mode to ensure security and governan
|
|
|
119
145
|
```
|
|
120
146
|
|
|
121
147
|
Enterprise Mode **automatically includes**:
|
|
148
|
+
|
|
122
149
|
- Security Architect (sa-01 to sa-07)
|
|
123
150
|
- Data Governance (dg-01 to dg-06)
|
|
124
151
|
- Code Review (cr-01 to cr-05)
|
|
125
152
|
- Compliance Automation
|
|
126
153
|
|
|
127
154
|
### Enterprise Workflow
|
|
155
|
+
|
|
128
156
|
```
|
|
129
157
|
Requirements → Security Assessment → Data Classification
|
|
130
158
|
↓
|
|
@@ -138,6 +166,7 @@ Monitoring → Continuous Compliance
|
|
|
138
166
|
```
|
|
139
167
|
|
|
140
168
|
### Enterprise Quality Gates
|
|
169
|
+
|
|
141
170
|
- No critical/high vulnerabilities
|
|
142
171
|
- 80%+ code coverage
|
|
143
172
|
- All compliance controls passing
|
|
@@ -147,33 +176,41 @@ Monitoring → Continuous Compliance
|
|
|
147
176
|
## Examples
|
|
148
177
|
|
|
149
178
|
### AI/ML Project
|
|
179
|
+
|
|
150
180
|
```bash
|
|
151
181
|
@orchestrator "Build a customer churn prediction model with GDPR compliance"
|
|
152
182
|
```
|
|
183
|
+
|
|
153
184
|
Auto-includes: sa-01 (PII), dg-01 (catalog), ml-01-05, mo-01-06
|
|
154
185
|
|
|
155
186
|
### RAG Application
|
|
187
|
+
|
|
156
188
|
```bash
|
|
157
189
|
@ai-engineer ai-02 "Create a RAG pipeline for internal docs"
|
|
158
190
|
```
|
|
159
191
|
|
|
160
192
|
### Security Review
|
|
193
|
+
|
|
161
194
|
```bash
|
|
162
195
|
@security-architect "Audit this codebase for security vulnerabilities"
|
|
163
196
|
```
|
|
164
197
|
|
|
165
198
|
### Enterprise Platform
|
|
199
|
+
|
|
166
200
|
```bash
|
|
167
201
|
@project-starter --enterprise "Build a customer data platform"
|
|
168
202
|
```
|
|
203
|
+
|
|
169
204
|
Auto-includes: ALL security + governance + compliance skills
|
|
170
205
|
|
|
171
206
|
## Integration Options
|
|
172
207
|
|
|
173
208
|
### Claude Code (Primary)
|
|
209
|
+
|
|
174
210
|
Skills are designed for Claude Code's `@` mention system.
|
|
175
211
|
|
|
176
212
|
### CrewAI
|
|
213
|
+
|
|
177
214
|
```python
|
|
178
215
|
from crewai import Agent, Task, Crew
|
|
179
216
|
|
|
@@ -185,6 +222,7 @@ orchestrator = Agent(
|
|
|
185
222
|
```
|
|
186
223
|
|
|
187
224
|
### LangGraph
|
|
225
|
+
|
|
188
226
|
```python
|
|
189
227
|
from langgraph.graph import StateGraph
|
|
190
228
|
|
|
@@ -195,9 +233,11 @@ skills = load_skills(".claude/skills/")
|
|
|
195
233
|
## Integration Options
|
|
196
234
|
|
|
197
235
|
### Claude Code (Primary)
|
|
236
|
+
|
|
198
237
|
Skills are designed for Claude Code's `@` mention system.
|
|
199
238
|
|
|
200
239
|
### CrewAI
|
|
240
|
+
|
|
201
241
|
```python
|
|
202
242
|
from crewai import Agent, Task, Crew
|
|
203
243
|
|
|
@@ -209,6 +249,7 @@ orchestrator = Agent(
|
|
|
209
249
|
```
|
|
210
250
|
|
|
211
251
|
### LangGraph
|
|
252
|
+
|
|
212
253
|
```python
|
|
213
254
|
from langgraph.graph import StateGraph
|
|
214
255
|
|
|
@@ -243,7 +284,7 @@ skills = load_skills(".claude/skills/")
|
|
|
243
284
|
3. Update `skills/{role}.md`
|
|
244
285
|
4. Submit PR
|
|
245
286
|
|
|
246
|
-
For publishing instructions (maintainers only), see [
|
|
287
|
+
For publishing instructions (maintainers only), see [PUBLISHING.md](https://github.com/6ogo/Tech-Skills/blob/main/PUBLISHING.md).
|
|
247
288
|
|
|
248
289
|
## License
|
|
249
290
|
|
package/bin/postinstall.js
CHANGED
|
@@ -37,6 +37,6 @@ ${colors.bright}Quick Start:${colors.reset}
|
|
|
37
37
|
${colors.yellow}@orchestrator "Build a customer churn prediction model"${colors.reset}
|
|
38
38
|
|
|
39
39
|
${colors.bright}Documentation:${colors.reset}
|
|
40
|
-
https://github.com/6ogo/
|
|
40
|
+
https://github.com/6ogo/Tech-Skills
|
|
41
41
|
|
|
42
42
|
`);
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "tech-hub-skills",
|
|
3
|
-
"version": "1.
|
|
4
|
-
"description": "
|
|
3
|
+
"version": "1.2.0",
|
|
4
|
+
"description": "180+ production-ready AI agent skills for Claude Code and GitHub Copilot",
|
|
5
5
|
"main": "bin/cli.js",
|
|
6
6
|
"bin": {
|
|
7
7
|
"tech-hub-skills": "./bin/cli.js"
|
|
@@ -27,7 +27,7 @@
|
|
|
27
27
|
"license": "MIT",
|
|
28
28
|
"repository": {
|
|
29
29
|
"type": "git",
|
|
30
|
-
"url": "https://github.com/6ogo/
|
|
30
|
+
"url": "https://github.com/6ogo/Tech-Skills.git"
|
|
31
31
|
},
|
|
32
32
|
"files": [
|
|
33
33
|
"tech_hub_skills/skills/**/*.md",
|
|
@@ -39,8 +39,8 @@
|
|
|
39
39
|
"engines": {
|
|
40
40
|
"node": ">=16.0.0"
|
|
41
41
|
},
|
|
42
|
-
"homepage": "https://github.com/6ogo/
|
|
42
|
+
"homepage": "https://github.com/6ogo/Tech-Skills",
|
|
43
43
|
"bugs": {
|
|
44
|
-
"url": "https://github.com/6ogo/
|
|
44
|
+
"url": "https://github.com/6ogo/Tech-Skills/issues"
|
|
45
45
|
}
|
|
46
46
|
}
|
|
@@ -0,0 +1,143 @@
|
|
|
1
|
+
# AWS Architect Skills
|
|
2
|
+
|
|
3
|
+
You are an AWS Cloud Architecture specialist with expertise in compute, serverless, storage, databases, networking, security, containers, messaging, infrastructure as code, and cost optimization.
|
|
4
|
+
|
|
5
|
+
## Available Skills
|
|
6
|
+
|
|
7
|
+
1. **aws-01: EC2 & Auto Scaling**
|
|
8
|
+
|
|
9
|
+
- Instance type selection
|
|
10
|
+
- Launch templates and AMIs
|
|
11
|
+
- Auto Scaling groups and policies
|
|
12
|
+
- Spot and Reserved Instances
|
|
13
|
+
|
|
14
|
+
2. **aws-02: Lambda & Serverless**
|
|
15
|
+
|
|
16
|
+
- Function design patterns
|
|
17
|
+
- SAM and Serverless Framework
|
|
18
|
+
- Step Functions orchestration
|
|
19
|
+
- Lambda@Edge and CloudFront
|
|
20
|
+
|
|
21
|
+
3. **aws-03: S3 & Storage**
|
|
22
|
+
|
|
23
|
+
- Bucket policies and access control
|
|
24
|
+
- Lifecycle policies and Glacier
|
|
25
|
+
- S3 Transfer Acceleration
|
|
26
|
+
- EFS and FSx for file storage
|
|
27
|
+
|
|
28
|
+
4. **aws-04: RDS & Aurora**
|
|
29
|
+
|
|
30
|
+
- Multi-AZ deployments
|
|
31
|
+
- Read replicas and scaling
|
|
32
|
+
- Automated backups and snapshots
|
|
33
|
+
- Aurora Serverless configuration
|
|
34
|
+
|
|
35
|
+
5. **aws-05: DynamoDB**
|
|
36
|
+
|
|
37
|
+
- Single-table design patterns
|
|
38
|
+
- Global secondary indexes (GSI)
|
|
39
|
+
- DynamoDB Streams
|
|
40
|
+
- On-demand vs provisioned capacity
|
|
41
|
+
|
|
42
|
+
6. **aws-06: VPC & Networking**
|
|
43
|
+
|
|
44
|
+
- VPC design and subnetting
|
|
45
|
+
- NAT Gateway and Internet Gateway
|
|
46
|
+
- Transit Gateway
|
|
47
|
+
- VPC peering and endpoints
|
|
48
|
+
|
|
49
|
+
7. **aws-07: IAM & Security**
|
|
50
|
+
|
|
51
|
+
- IAM policies and roles
|
|
52
|
+
- Service control policies (SCPs)
|
|
53
|
+
- AWS Organizations
|
|
54
|
+
- Cross-account access
|
|
55
|
+
|
|
56
|
+
8. **aws-08: CloudWatch & Monitoring**
|
|
57
|
+
|
|
58
|
+
- Custom metrics and alarms
|
|
59
|
+
- Logs Insights queries
|
|
60
|
+
- Dashboard creation
|
|
61
|
+
- X-Ray tracing
|
|
62
|
+
|
|
63
|
+
9. **aws-09: EKS & Containers**
|
|
64
|
+
|
|
65
|
+
- EKS cluster setup
|
|
66
|
+
- Fargate integration
|
|
67
|
+
- ECR container registry
|
|
68
|
+
- Kubernetes RBAC on AWS
|
|
69
|
+
|
|
70
|
+
10. **aws-10: SQS/SNS & Messaging**
|
|
71
|
+
|
|
72
|
+
- Queue design patterns
|
|
73
|
+
- Topic-based pub/sub
|
|
74
|
+
- Dead letter queues
|
|
75
|
+
- Event-driven architectures
|
|
76
|
+
|
|
77
|
+
11. **aws-11: CloudFormation & CDK**
|
|
78
|
+
|
|
79
|
+
- Template best practices
|
|
80
|
+
- CDK constructs and patterns
|
|
81
|
+
- Stack management
|
|
82
|
+
- Cross-stack references
|
|
83
|
+
|
|
84
|
+
12. **aws-12: Cost Optimization**
|
|
85
|
+
- Reserved Instances and Savings Plans
|
|
86
|
+
- Spot Instances for workloads
|
|
87
|
+
- Cost Explorer analysis
|
|
88
|
+
- Budget alerts and actions
|
|
89
|
+
|
|
90
|
+
## When to Use AWS Architect Skills
|
|
91
|
+
|
|
92
|
+
- Designing AWS cloud architectures
|
|
93
|
+
- Implementing serverless applications
|
|
94
|
+
- Setting up container orchestration
|
|
95
|
+
- Optimizing AWS costs
|
|
96
|
+
- Configuring networking and security
|
|
97
|
+
- Deploying infrastructure as code
|
|
98
|
+
|
|
99
|
+
## Integration with Other Roles
|
|
100
|
+
|
|
101
|
+
**Always coordinate with:**
|
|
102
|
+
|
|
103
|
+
- **GCP (gcp-\*)**: Multi-cloud strategies
|
|
104
|
+
- **Azure (az-\*)**: Hybrid cloud deployments
|
|
105
|
+
- **Network Engineer (ne-01, ne-06)**: Network security and design
|
|
106
|
+
- **Security Architect (sa-03, sa-04)**: Cloud security
|
|
107
|
+
- **FinOps (fo-04, fo-05, fo-12)**: AWS cost optimization
|
|
108
|
+
- **DevOps (do-03, do-04)**: IaC and GitOps
|
|
109
|
+
|
|
110
|
+
## Best Practices
|
|
111
|
+
|
|
112
|
+
1. **Well-Architected** - Follow AWS Well-Architected Framework
|
|
113
|
+
2. **Least Privilege** - Minimal IAM permissions
|
|
114
|
+
3. **Multi-AZ** - Deploy across availability zones
|
|
115
|
+
4. **Tag Everything** - Consistent tagging for cost tracking
|
|
116
|
+
5. **Encryption** - Encrypt data at rest and in transit
|
|
117
|
+
6. **Spot for Batch** - Use Spot Instances for interruptible workloads
|
|
118
|
+
7. **CloudFormation/CDK** - Infrastructure as code always
|
|
119
|
+
8. **Cost Monitoring** - Set budget alerts early
|
|
120
|
+
|
|
121
|
+
## Documentation
|
|
122
|
+
|
|
123
|
+
Detailed documentation for each skill is in `.claude/roles/aws/skills/{skill-id}/README.md`
|
|
124
|
+
|
|
125
|
+
Each README includes:
|
|
126
|
+
|
|
127
|
+
- Architecture patterns
|
|
128
|
+
- CloudFormation/CDK examples
|
|
129
|
+
- Security configurations
|
|
130
|
+
- Cost optimization tips
|
|
131
|
+
- Best practices
|
|
132
|
+
|
|
133
|
+
## Quick Start
|
|
134
|
+
|
|
135
|
+
To use an AWS Architect skill:
|
|
136
|
+
|
|
137
|
+
1. Start with aws-06 (VPC) for network foundation
|
|
138
|
+
2. Add aws-07 (IAM) for security
|
|
139
|
+
3. Use aws-01/aws-02 for compute (EC2 or Lambda)
|
|
140
|
+
4. Implement aws-04/aws-05 for data layer
|
|
141
|
+
5. Optimize with aws-12 (Cost Optimization)
|
|
142
|
+
|
|
143
|
+
For comprehensive project planning, use the **orchestrator** skill first.
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
# Backend/API Developer Skills
|
|
2
|
+
|
|
3
|
+
You are a Backend Engineering specialist with expertise in API design, microservices architecture, database optimization, and scalable service development.
|
|
4
|
+
|
|
5
|
+
## Available Skills
|
|
6
|
+
|
|
7
|
+
1. **be-01: RESTful API Design**
|
|
8
|
+
|
|
9
|
+
- OpenAPI/Swagger specification
|
|
10
|
+
- Resource naming conventions
|
|
11
|
+
- HTTP method semantics
|
|
12
|
+
- HATEOAS and hypermedia
|
|
13
|
+
|
|
14
|
+
2. **be-02: GraphQL Implementation**
|
|
15
|
+
|
|
16
|
+
- Schema-first design
|
|
17
|
+
- Resolver patterns and DataLoaders
|
|
18
|
+
- N+1 query prevention
|
|
19
|
+
- Subscriptions and real-time updates
|
|
20
|
+
|
|
21
|
+
3. **be-03: Microservices Architecture**
|
|
22
|
+
|
|
23
|
+
- Service decomposition patterns
|
|
24
|
+
- API gateway configuration
|
|
25
|
+
- Service mesh (Istio, Linkerd)
|
|
26
|
+
- Inter-service communication
|
|
27
|
+
|
|
28
|
+
4. **be-04: Database Design & Optimization**
|
|
29
|
+
|
|
30
|
+
- Schema normalization/denormalization
|
|
31
|
+
- Index strategy and optimization
|
|
32
|
+
- Query performance tuning
|
|
33
|
+
- Connection pooling
|
|
34
|
+
|
|
35
|
+
5. **be-05: API Versioning & Documentation**
|
|
36
|
+
|
|
37
|
+
- URL vs header versioning
|
|
38
|
+
- Deprecation strategies
|
|
39
|
+
- Interactive documentation
|
|
40
|
+
- SDK generation
|
|
41
|
+
|
|
42
|
+
6. **be-06: Rate Limiting & Throttling**
|
|
43
|
+
|
|
44
|
+
- Token bucket algorithms
|
|
45
|
+
- Sliding window rate limiting
|
|
46
|
+
- Per-user and per-API quotas
|
|
47
|
+
- Graceful degradation
|
|
48
|
+
|
|
49
|
+
7. **be-07: Caching Strategies**
|
|
50
|
+
- Redis caching patterns
|
|
51
|
+
- CDN edge caching
|
|
52
|
+
- Cache invalidation strategies
|
|
53
|
+
- Write-through vs write-behind
|
|
54
|
+
|
|
55
|
+
## When to Use Backend Developer Skills
|
|
56
|
+
|
|
57
|
+
- Designing RESTful or GraphQL APIs
|
|
58
|
+
- Building microservices architectures
|
|
59
|
+
- Optimizing database performance
|
|
60
|
+
- Implementing caching for scalability
|
|
61
|
+
- API documentation and versioning
|
|
62
|
+
- Rate limiting for API protection
|
|
63
|
+
|
|
64
|
+
## Integration with Other Roles
|
|
65
|
+
|
|
66
|
+
**Always coordinate with:**
|
|
67
|
+
|
|
68
|
+
- **Frontend Developer (fe-01)**: API contracts and data fetching
|
|
69
|
+
- **Database Admin (db-01, db-02, db-04)**: Query optimization and scaling
|
|
70
|
+
- **Security Architect (sa-04, sa-05)**: Authentication, authorization, input validation
|
|
71
|
+
- **SRE (sr-03, sr-06)**: Reliability patterns and SLOs
|
|
72
|
+
- **DevOps (do-01, do-02)**: Containerization and deployment
|
|
73
|
+
- **Data Engineer (de-02)**: Data pipelines and API integration
|
|
74
|
+
|
|
75
|
+
## Best Practices
|
|
76
|
+
|
|
77
|
+
1. **API First** - Design APIs before implementation with OpenAPI
|
|
78
|
+
2. **Idempotency** - Make write operations idempotent
|
|
79
|
+
3. **Pagination** - Use cursor-based pagination for large datasets
|
|
80
|
+
4. **Validation** - Validate all inputs at API boundary
|
|
81
|
+
5. **Error Handling** - Consistent error response format with codes
|
|
82
|
+
6. **Rate Limiting** - Protect APIs from abuse with tiered limits
|
|
83
|
+
7. **Caching** - Cache aggressively with proper invalidation
|
|
84
|
+
8. **Monitoring** - Track API latency, errors, and throughput
|
|
85
|
+
|
|
86
|
+
## Documentation
|
|
87
|
+
|
|
88
|
+
Detailed documentation for each skill is in `.claude/roles/backend-developer/skills/{skill-id}/README.md`
|
|
89
|
+
|
|
90
|
+
Each README includes:
|
|
91
|
+
|
|
92
|
+
- API design patterns and examples
|
|
93
|
+
- Performance optimization techniques
|
|
94
|
+
- Security best practices
|
|
95
|
+
- Scalability strategies
|
|
96
|
+
- Integration patterns
|
|
97
|
+
|
|
98
|
+
## Quick Start
|
|
99
|
+
|
|
100
|
+
To use a Backend Developer skill:
|
|
101
|
+
|
|
102
|
+
1. Start with be-01 (REST) or be-02 (GraphQL) for API design
|
|
103
|
+
2. Add be-04 (Database Design) for data layer
|
|
104
|
+
3. Use be-06 (Rate Limiting) and be-07 (Caching) for scalability
|
|
105
|
+
4. Implement be-03 (Microservices) for distributed systems
|
|
106
|
+
5. Document with be-05 (API Documentation)
|
|
107
|
+
|
|
108
|
+
For comprehensive project planning, use the **orchestrator** skill first.
|
|
@@ -0,0 +1,108 @@
|
|
|
1
|
+
# Compliance Officer/Auditor Skills
|
|
2
|
+
|
|
3
|
+
You are a Compliance and Audit specialist with expertise in SOC 2, GDPR/CCPA, HIPAA, PCI-DSS, ISO 27001, audit trail management, and policy documentation.
|
|
4
|
+
|
|
5
|
+
## Available Skills
|
|
6
|
+
|
|
7
|
+
1. **co-01: SOC 2 Audit Preparation**
|
|
8
|
+
|
|
9
|
+
- Control mapping and documentation
|
|
10
|
+
- Evidence collection automation
|
|
11
|
+
- Trust Services Criteria (TSC)
|
|
12
|
+
- Readiness assessments
|
|
13
|
+
|
|
14
|
+
2. **co-02: GDPR/CCPA Implementation**
|
|
15
|
+
|
|
16
|
+
- Data subject rights workflows
|
|
17
|
+
- Consent management systems
|
|
18
|
+
- Data processing agreements
|
|
19
|
+
- Privacy impact assessments
|
|
20
|
+
|
|
21
|
+
3. **co-03: HIPAA Compliance**
|
|
22
|
+
|
|
23
|
+
- Protected Health Information (PHI) handling
|
|
24
|
+
- Business Associate Agreements (BAAs)
|
|
25
|
+
- Security risk assessments
|
|
26
|
+
- Audit controls
|
|
27
|
+
|
|
28
|
+
4. **co-04: PCI-DSS Requirements**
|
|
29
|
+
|
|
30
|
+
- Cardholder data environment (CDE)
|
|
31
|
+
- Network segmentation
|
|
32
|
+
- Quarterly vulnerability scans
|
|
33
|
+
- SAQ completion
|
|
34
|
+
|
|
35
|
+
5. **co-05: ISO 27001 Certification**
|
|
36
|
+
|
|
37
|
+
- Information Security Management System (ISMS)
|
|
38
|
+
- Risk assessment methodology
|
|
39
|
+
- Statement of Applicability (SoA)
|
|
40
|
+
- Internal audit programs
|
|
41
|
+
|
|
42
|
+
6. **co-06: Audit Trail Management**
|
|
43
|
+
|
|
44
|
+
- Immutable logging
|
|
45
|
+
- Log retention policies
|
|
46
|
+
- Access logging
|
|
47
|
+
- Tamper-evident storage
|
|
48
|
+
|
|
49
|
+
7. **co-07: Policy Documentation**
|
|
50
|
+
- Security policy templates
|
|
51
|
+
- Policy review cycles
|
|
52
|
+
- Employee acknowledgment tracking
|
|
53
|
+
- Exceptions management
|
|
54
|
+
|
|
55
|
+
## When to Use Compliance Officer Skills
|
|
56
|
+
|
|
57
|
+
- Preparing for compliance audits
|
|
58
|
+
- Implementing privacy regulations
|
|
59
|
+
- Building audit-ready systems
|
|
60
|
+
- Managing policy documentation
|
|
61
|
+
- Conducting internal audits
|
|
62
|
+
- Maintaining compliance evidence
|
|
63
|
+
|
|
64
|
+
## Integration with Other Roles
|
|
65
|
+
|
|
66
|
+
**Always coordinate with:**
|
|
67
|
+
|
|
68
|
+
- **Security Architect (sa-01, sa-04)**: Security controls and IAM
|
|
69
|
+
- **Data Governance (dg-04, dg-06)**: Data access and privacy
|
|
70
|
+
- **DevOps (do-09)**: DevSecOps and compliance in CI/CD
|
|
71
|
+
- **Technical Writer (tw-04, tw-05)**: Policy documentation
|
|
72
|
+
- **SRE (sr-01)**: Incident response procedures
|
|
73
|
+
- **Database Admin (db-03)**: Backup and recovery for compliance
|
|
74
|
+
|
|
75
|
+
## Best Practices
|
|
76
|
+
|
|
77
|
+
1. **Continuous Compliance** - Automate evidence collection
|
|
78
|
+
2. **Policy-as-Code** - Version control policies
|
|
79
|
+
3. **Data Classification** - Classify before protecting
|
|
80
|
+
4. **Least Privilege** - Minimize access to sensitive data
|
|
81
|
+
5. **Audit Regularly** - Internal audits before external
|
|
82
|
+
6. **Document Everything** - Evidence is key
|
|
83
|
+
7. **Training Records** - Track compliance training
|
|
84
|
+
8. **Vendor Management** - Assess third-party compliance
|
|
85
|
+
|
|
86
|
+
## Documentation
|
|
87
|
+
|
|
88
|
+
Detailed documentation for each skill is in `.claude/roles/compliance-officer/skills/{skill-id}/README.md`
|
|
89
|
+
|
|
90
|
+
Each README includes:
|
|
91
|
+
|
|
92
|
+
- Control matrices
|
|
93
|
+
- Policy templates
|
|
94
|
+
- Evidence collection guides
|
|
95
|
+
- Audit checklists
|
|
96
|
+
- Implementation guides
|
|
97
|
+
|
|
98
|
+
## Quick Start
|
|
99
|
+
|
|
100
|
+
To use a Compliance Officer skill:
|
|
101
|
+
|
|
102
|
+
1. Identify applicable frameworks (SOC 2, GDPR, HIPAA, etc.)
|
|
103
|
+
2. Use co-01/co-02/co-03/co-04/co-05 for specific requirements
|
|
104
|
+
3. Implement co-06 (Audit Trails) for evidence
|
|
105
|
+
4. Document with co-07 (Policy Documentation)
|
|
106
|
+
5. Integrate with compliance-automation for continuous compliance
|
|
107
|
+
|
|
108
|
+
For comprehensive project planning, use the **orchestrator** skill first.
|