techtideohio/techtide-harness-kit

techtide-gcp-cost-anomaly-watch-coordinator

Detect and coordinate response to GCP cost anomalies - BigQuery on-demand query cost spikes ($5/TB scanned), Cloud Run scaling runaway, unattached Persistent Disks, idle GCE instances, budget alert → notification channel → remediation playbook.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-cloud-run-functions-operator

Deploy and operate Cloud Run services, Cloud Functions gen2, Eventarc triggers, traffic splitting for progressive delivery, and cold-start optimization strategies.

by github: TechTide · v0.2.0

2 findings: 0 critical, 1 medium

techtide-alibaba-security-center-hardening

Harden Alibaba Cloud security posture via Security Center (threat detection, vulnerability scanning, baseline checks), WAF, Anti-DDoS Pro, Cloud Firewall, and Network Traffic Analysis (NTA).

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-serverless-production-readiness

Review FunctionGraph production readiness on Huawei Cloud - VPC access configuration, concurrency limits and reserved instances, cold-start optimization, observability via LTS and AOM, timeout configuration, dependency package size, custom vs managed runtimes, and ServiceStage application lifecycle.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-scaleway-live-kapsule-rollout-guard

Gate and execute Scaleway Kapsule live mutations - Kubernetes version upgrades, node pool creation/deletion/scaling, and cluster configuration changes - with mandatory PDB audit, cluster health verification, explicit approval, and a documented rollback plan. Use when a live Kapsule cluster or node pool mutation is requested. Hard-stops when target cluster ID, region/zone, approval, or rollback plan is absent or ambiguous.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-marketing-conversion-flow-dark-pattern-review

Use this skill when reviewing marketing conversion flow specifications - subscription sign-up, upsell interstitial, free-trial enrollment, and cancellation path - for dark-pattern practices that invalidate consent or constitute unfair or deceptive acts under FTC Section 5 and state privacy laws. Trigger when a user provides a UX flow specification including step-by-step page descriptions, annotated wireframes, CTA labels, pre-checked options, visual weight of accept vs decline paths, countdown timer specs, or cancellation flow step counts. Scope is limited to marketing conversion flows; consent banner review is handled by a separate skill.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-fetch-foundation-model-pricing

Fetch live per-token, per-image, and per-GPU-hour prices for foundation models across Anthropic, OpenAI, Google, AWS Bedrock, Azure OpenAI, OCI Generative AI, and Vertex AI. Supports single-model lookup and comparative multi-provider tables. Every price is labeled with source URL and ISO 8601 fetch timestamp. No credentials accepted.

by github: TechTide · v0.1.1

2 findings: 0 critical, 1 medium

techtide-finops-cloud-price-advisor

Fetch live public prices and build cost estimates for AWS, Azure, OCI, Scaleway, Gandi, Alibaba Cloud, and Tencent Cloud using each provider's public pricing API or official documentation. Supports live-environment cost analysis and prototype cost planning. Currency defaults to USD; EUR and CNY supported natively.

by github: TechTide · v0.2.1

2 findings: 0 critical, 1 medium

techtide-alibaba-certificate-manager-issuer-review

Review Alibaba Cloud SSL Certificate Service - DV/OV/EV certificate lifecycle, auto-renewal configuration, certificate deployment to SLB/ALB/CDN/OSS, domain validation status, CAA record compliance, and expiry monitoring.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-cost-anomaly-watch-coordinator

Coordinate Huawei Cloud cost anomaly detection - CBC Cost Center delta analysis (>15% day-over-day threshold), budget alert configuration via Budget Management, ECS/GaussDB Yearly/Monthly vs On-Demand mode cost anomalies, OBS request cost spikes, unattached EVS volume waste, DWS idle cluster detection, and reserved instance coverage gaps.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-secmaster-security-operations

Operate Huawei SecMaster (integrated SIEM/SOAR/threat intelligence), HSS (Host Security Service) host intrusion detection, CFW (Cloud Firewall), WAF (Web Application Firewall), Anti-DDoS, and VSS (Vulnerability Scan Service) for comprehensive cloud security operations.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-programmatic-supply-chain-integrity-review

Use this skill when reviewing ads.txt, app-ads.txt, and sellers.json files for a publisher or advertiser's programmatic supply chain to detect unauthorized resellers, domain-spoofing exposure, and SupplyChain Object gaps. Trigger when a user provides an ads.txt file, an app-ads.txt file, a sellers.json endpoint response, or asks whether their programmatic supply chain has unauthorized intermediaries, IVT exposure, domain-spoofing risk, or whether their supply chain declaration satisfies IAB Tech Lab, MRC, or DSP procurement requirements.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-gemini-api-developer

Build, integrate, and debug Gemini API applications on Google Cloud Agent Platform (formerly Vertex AI) using the unified google-genai SDK. Covers text generation, multimodal inputs, function calling, structured output, embeddings, context caching, batch prediction, streaming, Live API (bidirectional voice/video), and model tuning across Python, TypeScript/JavaScript, Go, Java, and C#. Use when building Gemini-powered applications, migrating from deprecated Vertex AI or google-generativeai SDKs, or integrating Gemini capabilities into a GCP-hosted service.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-ram-iam-review

Audit Alibaba Cloud RAM users, groups, roles, and policies; review STS token lifecycle and scope; assess Resource Directory permission boundaries; review Control Policy statements for org-wide gaps or over-privilege.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-alloydb-ai-developer

Design and build AI-powered applications on AlloyDB for PostgreSQL using AlloyDB AI - covering vector search, hybrid search (vector + full-text), AI SQL functions (ai_generate, ai_classify, ai_score, ai_embed), model endpoint management, and the AlloyDB Omni edge runtime. Prefer techtide-gcp-alloydb-cloudsql-dba for cluster operations, backup, HA, and DBA tasks; use this skill when the request is primarily about AlloyDB AI search, SQL AI functions, or embedding pipelines.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-waf-security-review

Review Azure workload security posture against the Well-Architected Framework Security pillar: identity and access, network boundaries, data protection, threat detection, DevSecOps maturity, and policy compliance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-marketing-gpc-signal-honoring-review

Use this skill when reviewing the technical path by which a Global Privacy Control opt-out signal travels through the tag stack and CMP to determine whether ad tags, server-side forwarding, and conversion APIs actually cease firing. Trigger when a user provides a tag-manager container export, a CMP opt-out configuration, a server-side tag configuration, or asks whether their GPC implementation actually stops ad tags from firing, whether CPRA opt-out obligations are met technically, or whether the CMP acknowledges GPC but fails to suppress downstream tag execution.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-iam-least-privilege-review

Audit GCP IAM bindings across the resource hierarchy (org/folder/project), identify overprivileged Service Accounts, review Workload Identity Federation configurations, evaluate org policy conditions, and recommend least-privilege remediation. Prefer techtide-gcp-secret-kms-lifecycle-steward for KMS/Secret Manager lifecycle design and techtide-gcp-vpc-service-controls-architect for perimeter access policy posture unless the request is primarily IAM binding surgery.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-serverless-production-readiness

Review Function Compute 3.0 (FC3), SAE (Serverless App Engine), and EDAS for production readiness - cold start optimization, VPC binding, RAM role injection, ARMS distributed tracing, security group rules, concurrency limits, and SLA-readiness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-marketing-email-list-retention-review

Use this skill when reviewing marketing email list segment metadata, consent-record completeness, suppression-list coverage, and documented data-retention schedules for GDPR storage-limitation, CASL record-keeping, and CCPA deletion-right compliance. Trigger when a user provides a CRM or ESP export of list segment metadata fields - consent source, consent timestamp, last-engagement date, subscription status, suppression-list entries - plus the organization's documented email data-retention policy, and asks whether the stored list inventory and retention posture meets regulatory obligations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-email-sender-authentication-review

Use this skill when reviewing DNS sender-authentication records for a marketing domain to identify policy gaps exposing campaigns to rejection, spoofing, or inbox displacement. Trigger when a user provides DNS TXT record exports for SPF, DKIM, DMARC, or BIMI, or asks whether their email authentication posture meets Google/Yahoo bulk-sender requirements, DMARC enforcement standards, CISA BOD 18-01 obligations, PCI DSS v4.0 Req 5.3.3, or whether their transactional or marketing emails are at risk of spoofing or bulk-sender quarantine.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-azure-entra-id-specialist

Use this skill for Microsoft Entra ID specialist work, especially Conditional Access, authentication methods, MFA and SSPR registration, identity protection, workload identities, app registrations, external identities, agent identities, break-glass posture, and tenant identity control reviews.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-china-compliance

Advise on MLPS 2.0 grading and technical controls, DSL Article 31 cross-border data transfer, CSL network operator obligations, PIPL personal data requirements, and ICP Beian filing for mainland China CN-* region workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-cost-anomaly-watch-coordinator

Detect and coordinate response to Alibaba Cloud cost anomalies - MaxCompute CU vs on-demand billing mismatch, ECS spot instance interruption cascades, CDN traffic spike billing, OSS API request cost explosions, budget alert → DingTalk notification → remediation playbook.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-live-cost-budget-action-guard

Gate Huawei Cloud CBC budget threshold changes, Reserved Instance purchases, and CUD commitments - budget threshold reduction can trigger service suspension and RI/CUD are non-refundable committed spend.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-certificate-manager-issuer-review

Review Huawei Cloud SSL certificate management - SCM certificate lifecycle, ELB SSL certificate binding, DEW-managed certificate storage, renewal automation, wildcard vs SAN cert selection, certificate expiry alerting via CES, and HTTPS enforcement on ELB listeners.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-security-posture-hardening

Review GCP security posture via Security Command Center findings, CIS GCP Benchmark gaps, org policy enforcement baseline, Assured Workloads controls, Binary Authorization, and CSPM recommendations. Prefer techtide-gcp-iam-least-privilege-review for IAM binding surgery and techtide-gcp-vpc-service-controls-architect for VPC-SC perimeter design unless the request is primarily broad posture hardening.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-focus-spec-normalizer

Normalize vendor-specific billing rows (AWS CUR, Azure Cost Management, GCP Billing Export, OCI) into FOCUS v1.2 columns from user-pasted CSV or JSON input. Refuses to invent column values not derivable from the input. No credentials accepted; operates on user-supplied data only.

by github: TechTide · v0.1.1

2 findings: 0 critical, 1 medium

techtide-contabo-live-instance-lifecycle-guard

Live-guard skill for Contabo VPS and VDS lifecycle operations including instance creation with product selection and region, reinstallation with image and Cloud-Init userData, and cancellation. Requires mandatory contract period acknowledgment (1, 3, 6, or 12 months), billing impact confirmation, and a rollback plan before any mutation. Hard-stops any lifecycle action that lacks explicit period acknowledgment or rollback documentation.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-contabo-live-storage-operations-guard

Live-guard skill for Contabo Object Storage (S3-compatible) bucket operations including inventory audit, access policy review, retention policy enforcement, and deletion workflows. Hard-stops any bucket deletion requested without verified backup evidence and a documented rollback plan. Use when the user needs to manage, audit, or delete Contabo Object Storage buckets or objects.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-marketing-consent-data-collection-review

Use this skill when reviewing a marketing site's consent and data-collection posture - cookie/consent banner (CMP) configuration, tag-manager container exports, Google Consent Mode wiring, or a cookie policy. Trigger when a user provides a CMP configuration, a tag manager container JSON, a consent-banner screenshot description, or asks whether their marketing tracking is GDPR/CCPA/ePrivacy compliant, whether tags fire before consent, or whether their opt-out path is valid.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-martech-access-governance-review

Use this skill when reviewing access governance across a marketing technology stack - OAuth grants and connected apps, API keys and tokens, CRM and marketing-automation role assignments, and integration scopes. Trigger when a user provides an OAuth connected-app inventory, an integration scope list, a CRM/MAP role matrix, an API-key inventory, or asks whether their martech integrations are over-permissioned, whether stale connectors still hold live tokens, or how to apply least privilege to their marketing stack.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-load-balancer-traffic-engineer

Traffic engineering for GCP load balancers - Global HTTPS LB, Regional HTTPS LB, TCP/SSL Proxy LB, Network LB (passthrough), Internal TCP/UDP LB - type selection, health check configuration, Cloud Armor integration, and traffic distribution.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-oss-storage-steward

Manage OSS lifecycle policies, bucket policy and ACL governance, NAS/CPFS shared file storage, cross-region replication, and access control hardening for Alibaba Cloud object and file storage.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-serverless-production-readiness

Review Cloud Run and Cloud Functions gen2 for production readiness - min-instances cold start, memory and CPU allocation, VPC connector configuration, Secret Manager injection, CMEK encryption, concurrency limits, and traffic splitting safety.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-daily-operations-briefing-coordinator

Coordinate the daily Alibaba Cloud operations standup - cost delta from Cost Manager, ActionTrail anomaly review, ACK pod failure triage, quota utilization warnings, Security Center finding review, and action item assignment.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-event-driven-architecture-review

Review Alibaba Cloud EventBridge, MNS (Message Notification Service), RocketMQ, and MSE event-driven designs - dead-letter queues, message ordering, idempotency, retry storm prevention, schema registry, and consumer group lag monitoring.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-functiongraph-serverless-operator

Deploy and operate Huawei FunctionGraph functions (event triggers, cold start optimization, concurrency), ServiceStage application lifecycle management, and CSE (Cloud Service Engine) Spring Cloud/ServiceComb microservice governance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-certificate-manager-issuer-review

Review GCP Certificate Manager and classic Google-managed TLS certificates - certificate map configuration, DNS authorization, CAA record validation, certificate rotation automation, wildcard vs SAN design, and expiry monitoring.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-cloud-auth-advisor

Advise on Google Cloud authentication and authorization patterns - covering Application Default Credentials (ADC), service account best practices, Workload Identity Federation (for GKE pods and external workloads), human user auth (gcloud, IAP, Identity Platform), service-to-service auth (OIDC ID tokens, short-lived credentials), and anti-patterns like service account key downloads. Use when designing auth flows, debugging GCP auth failures, implementing least-privilege SA setup, or migrating from SA keys to keyless authentication.

by github: TechTide · v0.1.0

3 findings: 0 critical, 2 medium

techtide-azure-app-service-production-readiness

Review Azure App Service and Web Apps for production readiness across plan tier fit, slots, networking, private ingress, identities, secrets, scaling, diagnostics, resilience, backup, rollback, and operator readiness. Use when a team wants a real go/no-go decision instead of shallow reassurance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-support-incident-coordinator

Coordinate Alibaba Cloud support incidents - case creation with correct severity (紧急/高/中/低), Enterprise Support SLA enforcement, account manager escalation path, status page monitoring for CN-* and international, internal stakeholder communication, and post-incident evidence packaging.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-modelarts-mlops-engineer

Manage Huawei ModelArts training jobs (GPU and Ascend NPU cost governance), Pangu foundation model deployment, AI Gallery model management, and MLOps pipeline automation for AI/ML workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-oss-data-perimeter-governor

Govern Alibaba Cloud OSS data perimeters - bucket ACL and policy conflict resolution, Block Public Access configuration, cross-account access via RAM role, VPC endpoint binding for private access, WORM (Object Lock), and MLPS 2.0 data residency compliance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-gaussdb-rds-dba

Manage Huawei GaussDB (MySQL, PostgreSQL, Oracle-compatible), RDS instances, DDS (Document Database Service, MongoDB-compatible), database proxy connection pooling, and HA/backup architecture with CBR integration.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-marketing-pixel-data-leakage-review

Use this skill when reviewing advertising pixels and event-tracking for personal-data leakage to third-party ad networks. Trigger when a user provides a tag-manager container, a Meta/TikTok/Google/LinkedIn pixel snippet, a conversion-event payload, a dataLayer specification, or asks whether their tracking pixels leak email, phone numbers, health, or financial data to ad platforms, or whether pixels on sensitive pages create a breach or HIPAA exposure.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-mse-microservice-engine

Configure and operate Alibaba MSE (Microservice Engine) - Nacos service discovery and configuration management, Sentinel rate limiting and circuit breaking, Seata distributed transactions, and ARMS APM for microservices observability.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-cost-finops-analyst

Analyze Alibaba Cloud spend via Cost Manager, optimize Savings Plans and Reserved Instance coverage, design resource tagging strategy, investigate budget drift, and right-size over-provisioned ECS, RDS, and MaxCompute resources.

by github: TechTide · v0.1.0

17 findings: 0 critical, 1 medium

techtide-huawei-obs-storage-steward

Manage Huawei OBS lifecycle policies, bucket ACL and policy governance, SFS (Scalable File Service) NFS shares, EVS (Elastic Volume Service) block storage, and CBR (Cloud Backup and Recovery) backup strategy for data protection compliance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ionos-live-database-lifecycle-guard

Execute and advise on IONOS DBaaS lifecycle operations for PostgreSQL, MariaDB, and MongoDB managed databases. Covers failover initiation, replica promotion, horizontal and vertical scaling, backup schedule review, point-in-time recovery, cluster deletion protection, and regional endpoint validation. Requires current backup verification, explicit RPO and RTO targets, and human approval before any mutation. Hard-stop when target, approval, or rollback plan is ambiguous.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-load-balancer-traffic-engineer

Engineer and review Huawei Cloud ELB traffic configurations - dedicated vs shared ELB type selection, HTTP/HTTPS/TCP/UDP protocol listener setup, health check configuration, WAF integration on ELB, backend server group routing, connection draining, and TLS policy enforcement on Dedicated ELB.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-event-driven-architecture-review

Review Huawei Cloud event-driven architecture designs - DMS Kafka dead-letter configuration, ROMA Connect integration flow capacity, FunctionGraph event trigger idempotency, SMN delivery retry policy, consumer group lag monitoring, cross-region event replication, and retry storm prevention.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-vertex-ai-mlops-engineer

Manage Vertex AI Training jobs (GPU/TPU cost governance), Vertex AI Pipelines, Model Registry, Feature Store, Endpoints, and Gemini API integration for production MLOps.

by github: TechTide · v0.2.0

17 findings: 0 critical, 1 medium

techtide-alibaba-observability-incident-responder

Respond to Alibaba Cloud incidents using CloudMonitor alarms, SLS log analytics, ARMS APM distributed tracing, and alert governance for ECS, RDS, ACK, and network services.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-observability-incident-responder

Respond to Huawei Cloud incidents via CES (Cloud Eye) metric alarms, LTS (Log Tank Service) log analytics, AOM (Application Operations Management) service topology, APM distributed tracing, and SMN notification governance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-opentelemetry-collector-config-review

Use this skill for OpenTelemetry Operator review covering OpenTelemetryCollector deployment modes (Deployment, StatefulSet, DaemonSet, Sidecar), Instrumentation CR auto-instrumentation across Java/Node/Python/.NET/Go, Target Allocator for distributed Prometheus scraping, and pipeline correctness across receivers, processors, and exporters. Trigger when the user asks whether a collector configuration will lose telemetry, whether the right deployment mode is used, whether memory_limiter and batch are present, whether tail_sampling is safe to change, or whether auto-instrumentation will cover a workload after restart.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-iac-change-safety-review

Review Terraform and ROS (Resource Orchestration Service) changes targeting Alibaba Cloud - blast radius analysis, resource deletion detection, cross-stack dependency impact, Resource Directory scope, and rollback plan completeness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-kubernetes-live-rbac-mutation-guard

Guard live kubectl apply, create, or delete operations on Kubernetes RBAC objects - Roles, ClusterRoles, RoleBindings, ClusterRoleBindings - with privilege-escalation verb detection, scope assessment, current-state diff, and explicit approval before any write. Use only when an intentional RBAC mutation is requested against a confirmed cluster target.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-event-driven-architecture-review

Review GCP Pub/Sub, Eventarc, Cloud Tasks, Cloud Scheduler, and Workflows designs - dead-letter topics, message ordering, idempotency, fan-out blast radius, schema registry, and retry storm risk.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-scaleway-network-architect

Review and design Scaleway network topology for security and high availability: VPC layout, Private Network attachment across zones, security group rules, Load Balancer configuration, placement group policy selection (max_availability vs enforced), and multi-zone resilience patterns. Use when the user asks to design a Scaleway VPC, audit security group rules, configure a Load Balancer, or plan HA across zones fr-par-1/2/3, nl-ams-1, or pl-waw-1/2/3.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-migration-architect

Plan migrations to Huawei Cloud via MgC (Migration Center), SMS (Server Migration Service) for P2V/V2V, DRS for database replication, and OMS (Object Migration Service) for object storage, with cutover sequencing and rollback design.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-compliance-sovereignty

Advise on Huawei Cloud MLPS 2.0 Level 3 technical controls mapping, China data localization requirements, Trusted Cloud (CAICT) certification controls, and government cloud configuration requirements for sovereignty-aware workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-ticket-triage-escalation-coordinator

Triage Alibaba Cloud operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, Alibaba Cloud Support SLA enforcement, account manager escalation, DingTalk war room coordination, evidence collection from CloudMonitor and SLS, and safe escalation paths.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-registry-artifact-governor

Govern Alibaba Cloud Container Registry (ACR) - Enterprise Edition vs Personal Edition selection, image vulnerability scanning, namespace IAM least privilege, image retention policies, cross-region replication, and supply chain security posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-load-balancer-traffic-engineer

Traffic engineering for Alibaba Cloud load balancers - CLB (Classic, legacy), ALB (Application Load Balancer, Layer 7 advanced routing), NLB (Network Load Balancer, Layer 4 high throughput), and GA (Global Accelerator) - type selection, health check design, WAF integration, and traffic distribution.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-devops-cicd-operator

Build CI/CD pipelines with RDC (Research and Development Collaboration), Cloud Build, Flow pipeline automation, ACR (Container Registry) image lifecycle, and environment promotion strategies.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-migration-architect

Plan Alibaba Cloud migrations using SMC (Server Migration Center), DTS (Data Transmission Service) for data sync, OSSImport for object storage migration, and design cutover sequencing with rollback paths.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-landing-zone-architect

Set up Huawei Cloud Organizations with SCP baseline, IAM fine-grained permission structure, Enterprise Projects governance model, and master account structure for multi-account/multi-project governance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-dew-kms-lifecycle-steward

Manage Huawei DEW (Data Encryption Workshop) - KMS key lifecycle and rotation, CSMS secret rotation automation, CBH (Cloud Bastion Host) privileged access session management, and DBSS database encryption and SQL audit.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-ecs-compute-operator

Manage Huawei ECS (Elastic Cloud Server) instance lifecycle, AS (Auto Scaling) group configuration and health, IMS (Image Management Service) golden image management, DeH (Dedicated Host) tenancy, and CSBS backup snapshot governance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

provider-skill-name

Use this skill for a specific cloud workflow. Mention provider, trigger phrases, expected inputs, and when not to use it.

1 finding: 0 critical, 0 medium

techtide-scaleway-cost-optimizer

Review and optimize Scaleway cost posture across Instance type rightsizing, reserved instance utilization, idle Object Storage buckets and SBS block volumes, Serverless function invocation cost, RDB instance sizing, and Cockpit observability spend. Use when the user asks to reduce Scaleway spend, audit bill composition, identify idle resources, or evaluate reserved instance commitments.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-resilience-bcdr-review

Review Alibaba Cloud workload HA and BCDR designs - RDS High-Availability Edition failover, PolarDB Global Database Network, ACK multi-zone, ECS disaster recovery cross-region, RTO/RPO target analysis, and HBR (Hybrid Backup Recovery) coverage.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-hetzner-live-server-lifecycle-guard

Guard Hetzner Cloud server creation, destruction, type changes (rescale), and power operations with mandatory server ID, region, explicit human approval, target confirmation, account, and rollback plan. Server deletion is irreversible without a prior snapshot. Use only when live server lifecycle operations are required and all pre-flight checks are confirmed.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-istio-ambient-mesh-review

Use this skill for Istio service mesh review across both sidecar mode and ambient mode (ztunnel L4 + optional waypoint L7). Covers PeerAuthentication, AuthorizationPolicy, RequestAuthentication, Gateway, VirtualService, DestinationRule, Sidecar, and waypoint placement. Trigger when the user asks whether an Istio policy is correct, whether mTLS is strict, whether L7 AuthorizationPolicy will actually be enforced in ambient mode, or whether a mesh-wide PeerAuthentication change is safe.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-actiontrail-audit-analyst

Query Alibaba Cloud ActionTrail management API call history, build governance audit reports, create SLS-based compliance evidence trails, and detect anomalous admin activity patterns.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-argocd-gitops-review

Use this skill for Argo CD GitOps review across Application, AppProject, ApplicationSet, sync windows, RBAC, sync impersonation, and Argo CD Agent multi-cluster topologies. Trigger when the user asks whether an Argo CD configuration is safe for production, whether automated sync should be enabled, whether prune+selfHeal is appropriate, whether AppProject scope is too wide, or how to enforce least-privilege sync identity.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-networking-observability

Investigate GCP network issues by analyzing VPC Flow Logs, firewall logs, Cloud NAT logs, threat logs, and networking metrics. Diagnose connectivity, packet loss, top talkers, and firewall block events using BigQuery-first methodology and Cloud Monitoring fallback. Use when investigating VPC traffic anomalies, firewall DENY events, NAT port exhaustion, latency spikes, or running Connectivity Tests for path diagnostics.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-support-incident-coordinator

Coordinate Huawei Cloud support incidents - case creation with correct severity (紧急/高/中/低), Premium Support SLA enforcement, Account Manager and TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-dws-dli-data-analyst

Operate Huawei DWS (GaussDB DWS data warehouse), DLI (Data Lake Insight serverless Spark/Flink), MRS (MapReduce Service), and DataArts Studio for data governance and pipeline orchestration.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-firebase-developer

Build, configure, and operate Firebase-powered web and mobile applications - covering Firestore, Firebase Auth, Firebase Hosting, Cloud Functions for Firebase, Firebase Storage, App Check, Firebase Remote Config, and Firebase Analytics. Use when building mobile/web apps with Firebase, setting up authentication flows, designing Firestore data models, deploying Firebase Hosting, or configuring Firebase security rules.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-daily-operations-briefing-coordinator

Coordinate the daily Huawei Cloud operations standup - CBC cost delta by Enterprise Project, AOM anomaly alert review, CCE pod failure triage, CES quota utilization warnings, LTS log error spike detection, SecMaster security finding triage, and action item assignment.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-agentcore

Build, test, migrate, integrate, and deploy Amazon Bedrock AgentCore agents. Use for AgentCore runtime, local development, import/migration, deployment, Memory, Gateway/MCP tools, Identity, Observability, Browser, Code Interpreter, policy, and harness-vs-code-path decisions. Load references only when that component is needed.

by github: TechTide · v0.1.6

3 findings: 1 critical, 1 medium

techtide-oci-live-network-security-rule-guard

Guard live OCI Security List and Network Security Group (NSG) rule changes with current-state capture, open-internet and sensitive-port detection, stateful/stateless assessment, and explicit approval before ingress or egress rule mutation. Use only when an intentional network rule change targets a confirmed VCN component.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-cost-finops-analyst

Analyze Huawei Cloud CBC (Customer Business Console) spend, optimize Reserved Instance and CUD (Committed Use Discount) coverage, manage Cost Center allocation tags, and govern budget alert thresholds.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-analyticdb-realtime

Operate AnalyticDB for MySQL and PostgreSQL, Hologres real-time OLAP analytics, and DAS real-time diagnostics for sub-second interactive analytics workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-contabo-capacity-planner

Advisory skill for Contabo resource planning across regions (EU, US-central, US-east, US-west, SIN, UK, AUS, JPN, IND), instance tiers (VPS, VDS, Storage VPS), and add-ons (Private Networking, Additional IPs, Extra Storage, Custom Images). Includes Cloud-Init userData strategy and SSH key management via secret IDs. Use when the user needs to plan new deployments, evaluate region coverage, or compare instance tiers.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-compliance-assured-workloads

Configure Assured Workloads for regulated workloads (FedRAMP High/Moderate, HIPAA, PCI-DSS, ITAR, IL4/IL5), audit controls implementation, and gather compliance evidence using Security Command Center and Asset Inventory.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-iam-least-privilege-review

Audit Huawei Cloud IAM fine-grained policies, SCP (Service Control Policy) at Organizations level, agency trust relationships (cross-account delegation), and enterprise project permission boundaries.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-gcs-data-perimeter-governor

Govern Google Cloud Storage data perimeters - uniform bucket-level access enforcement, public access prevention, VPC Service Controls perimeter coverage, IAM Conditions for time-bounded access, Object Lifecycle policies, and data residency compliance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-registry-artifact-governor

Govern Huawei Cloud SWR (Software Repository for Container) - image retention policy, vulnerability scanning via VSS (Vulnerability Scan Service) integration, namespace permission least privilege, cross-region image replication, and supply chain security posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-drs-data-replication-operator

Plan and execute Huawei DRS (Data Replication Service) migration and real-time sync tasks, CDM (Cloud Data Migration) batch ETL jobs, and DMS (Distributed Message Service) Kafka cluster operations with safe cutover sequencing.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-obs-data-perimeter-governor

Govern Huawei Cloud OBS (Object Storage Service) data perimeters - bucket policy and ACL public exposure, Block Public Access configuration, VPC endpoint binding for private access, WORM (Object Lock), cross-region replication compliance, and MLPS 2.0 data residency enforcement.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-change-impact-advisor

Pre-change blast radius analysis for Alibaba Cloud - Resource Directory OU scope mapping, RAM policy cascade effects, VPC peering and CEN impact, SLB backend pool changes, RDS connection pool disruption, and safe change sequencing.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-external-secrets-operator-review

Use this skill when reviewing External Secrets Operator (ESO) configuration, including SecretStore, ClusterSecretStore, ExternalSecret, and PushSecret resources. Trigger when a user provides ESO YAML manifests, asks about secret rotation interval compliance, questions whether ClusterSecretStore scope is too broad, or wants to audit the auth method used to reach an external secret store (AWS Secrets Manager, Azure Key Vault, GCP Secret Manager, HashiCorp Vault, 1Password).

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-kyverno-policy-review

Use this skill for Kyverno policy review across the stable policies.kyverno.io/v1 API surface - ValidatingPolicy, MutatingPolicy, GeneratingPolicy, DeletingPolicy, and ImageValidatingPolicy. Trigger when the user asks whether an admission policy is safe, whether a PolicyException is justified, whether a policy should be enforced or audited, whether a Kyverno policy should be replaced by a native ValidatingAdmissionPolicy (CEL), or whether image signature verification is correctly configured.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-ief-edge-computing-operator

Manage IEF (Intelligent Edge Fabric) edge node lifecycle, edge application deployment as container workloads, IoT device twin management, and cloud-edge-device unified control plane with offline operation support.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-kubernetes-pod-security-admission-review

Use this skill for Kubernetes Pod Security Admission (PSA) review covering namespace labels for the three profiles (privileged, baseline, restricted), enforce/audit/warn modes, version pinning, and the migration path from deprecated PodSecurityPolicy. Trigger when the user asks whether a namespace label flip is safe, whether a workload meets a stricter profile, whether the audit/warn modes should be promoted to enforce, or whether an exemption is justified.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-cce-container-platform-operator

Operate Huawei CCE (Cloud Container Engine) Kubernetes clusters, SWR container image registry lifecycle, ASM service mesh traffic policies, and IEF edge node management for cloud-native and hybrid workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-ticket-triage-escalation-coordinator

Triage Huawei Cloud operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, Huawei Cloud Premium Support SLA enforcement, Account Manager escalation, AOM alert routing, war room coordination, evidence collection from CES and LTS, and safe escalation paths.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-entra-role-assignment-guard

Guard live permanent Microsoft Entra ID and Azure RBAC role assignments with scope audit, principal-type risk classification, dangerous-role detection, and explicit approval gates before write. Use only when a direct (non-PIM) role assignment is intentionally requested against a confirmed target.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-platform-automation-devops

Design and review Azure platform automation and DevOps delivery for landing zones, shared platform services, and safe infrastructure rollout flows. Use for IaC approach selection, Bicep versus Terraform positioning, bootstrap/run phase separation, pipeline control design, secret-handling posture, and rollout validation gates.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-resource-health-incident-triage

Use this skill for Azure Resource Health, Service Health, activity-log alert, and first-pass incident triage when the question is whether Azure platform health is part of the problem.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-contabo-security-hardening

Advisory skill for hardening Contabo infrastructure security: SSH key management via secret IDs, default root and admin user policy, firewall posture review, OAuth2 credential hygiene including token short TTL and environment variable storage, and x-request-id UUIDv4 traceability for audit compliance. Use when the user needs to assess or improve Contabo instance or API security posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-function-serverless-operator

Deploy and operate Function Compute 3.0, SAE (Serverless App Engine) applications, and EDAS microservice apps. Guide the serverless vs. PaaS vs. container platform choice for each workload type.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-support-incident-coordinator

Coordinate GCP support incidents - case creation with correct severity, Premium/Enhanced Support SLA enforcement, TAM escalation path, status page monitoring, internal stakeholder communication, and post-incident evidence packaging.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-maestro

Route NVIDIA tasks to the narrowest specialist or team of specialists from the NVIDIA agent catalog. Use when you do not already know the specialist. Not for direct NVIDIA answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches the live-runtime promotion gatekeeper - requires explicit human confirmation with blast-radius and rollback before routing to any runtime-evidence specialist.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-iac-change-safety-review

Review Terraform and Deployment Manager changes targeting GCP - blast radius analysis, destroy-operation detection, cross-project impact, state file conflicts, org policy drift, and rollback plan completeness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-hetzner-live-firewall-rule-guard

Guard Hetzner Cloud Firewall rule mutations and server attachment changes with mandatory pre-mutation snapshot of current rules, blast-radius review, explicit human approval, target confirmation, account, region, and rollback plan. Use only when live Firewall rule changes are required and all pre-flight checks are confirmed.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-scaleway-kapsule-platform-operator

Review and advise on Scaleway Kapsule managed Kubernetes cluster readiness: node pool sizing and autoscaling, CNI plugin selection (Cilium, Calico, Kilo), placement group policy (max_availability vs enforced), Kubernetes version currency, PodDisruptionBudget coverage, and workload scheduling posture. Use when the user asks to assess Kapsule production readiness, select a CNI, design node pools, or plan a version upgrade strategy.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-change-impact-advisor

Pre-change blast radius analysis for Huawei Cloud - Organizations SCP cascade scope, IAM agency dependency chain, VPC route table and VPC Peering impact, GaussDB instance class change disruption, CCE node pool resize safety, and Enterprise Project boundary clarity.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-kms-secret-lifecycle-steward

Audit and govern Alibaba Cloud KMS key lifecycles, Certificate Manager, SSM (Secrets Manager), and HSM key operations. Ensure encryption-at-rest coverage and rotation compliance across CMKs, envelope encryption, and certificate lifecycle.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-daily-operations-briefing-coordinator

Coordinate the daily GCP operations standup - cost delta from previous day, quota warning review, failed deployment detection, Security Command Center finding triage, SLO burn rate alert review, and action item assignment.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-registry-artifact-governor

Govern GCP Artifact Registry - container image signing via Binary Authorization, vulnerability scanning via Container Analysis, repository IAM least privilege, artifact retention policies, and supply chain security posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-change-impact-advisor

Pre-change blast radius analysis for GCP - cross-project resource dependency mapping, org policy cascade effects, Shared VPC peering impact, Service Account impersonation chain analysis, and safe change sequencing.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-resilience-bcdr-review

Review Huawei Cloud workload HA and BCDR designs - GaussDB High Availability (HA) instance failover, CBR (Cloud Backup and Recovery) cross-region vault, CCE multi-AZ deployment, DRS (Data Replication Service) for DR, RTO/RPO target analysis, and runbook completeness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-private-endpoint-adoption-planner

Use this skill for Azure Private Link and private endpoint adoption planning, including hub-versus-spoke placement, private DNS zone linkage, route implications, centralized versus workload-local endpoint trade-offs, and safe rollout validation.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-live-deployment-guarded-operator

Operate guarded live AWS deployment changes with explicit account, region, profile, approval, dry-run, rollback, and verification gates. Use only when the target environment is confirmed and a live deployment action is intentionally requested.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-subscription-resource-organization

Use this skill for Azure management-group hierarchy, subscription placement, resource-group boundary, and platform-versus-workload ownership decisions that affect governance, operations, and landing-zone scale.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-identity-governance-review

Review Microsoft Entra identity governance posture for Azure operators, with focus on standing versus eligible access, Privileged Identity Management, access reviews, entitlement management, ownership gaps, and least-privilege control patterns.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-ngc-nim-supply-chain-governor

Use this skill when reviewing NVIDIA NGC and NIM supply chain posture - NGC org and team boundaries, API key scope and rotation, NIM container cosign verification against NVIDIA's published identity, model card and weights provenance, AI Enterprise entitlement posture, and air-gap mirror integrity. Trigger when the user asks whether NIM images are verified before deployment, whether NGC keys are scoped per environment, or whether the deployment is procurement-defensible for a regulated tenant.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-alibaba-maxcompute-dataworks-analyst

Manage MaxCompute CU package governance, DataWorks scheduling, Quick BI reporting, and PAI ML platform. Optimize query cost and job scheduling efficiency for big data workloads.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-iac-change-safety-review

Review Terraform and RFS (Resource Formation Service) changes targeting Huawei Cloud - blast radius analysis, resource deletion detection, Organizations SCP cascade scope, cross-stack dependency impact, state file security, and rollback plan completeness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-cost-optimization-governor

Review Azure spend governance, budgets, alerts, cost analysis visibility, reservation and savings-plan awareness, tagging for cost allocation, exports, and FinOps ownership with official Microsoft documentation and Azure MCP evidence where available.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-cert-manager-issuer-trust-review

Use this skill when reviewing cert-manager PKI configuration for Kubernetes clusters. Trigger when the user asks about Issuer or ClusterIssuer scope, CertificateRequestPolicy coverage, certificate SAN or duration risks, trust-manager bundle distribution, SPIFFE mesh CA integration, cert-manager webhook health, or cloud CA authentication method.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-resilience-bcdr-review

Review GCP workload HA and BCDR designs - multi-region architectures, Cloud SQL HA failover, Spanner global instances, GKE multi-cluster, RTO/RPO target analysis, and runbook completeness.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-falco-runtime-threat-rules-review

Use this skill when reviewing Falco rules files, falco.yaml configuration, or runtime security posture for a Kubernetes workload. Trigger when a user provides Falco rules YAML, asks whether their Falco setup covers a specific threat, questions rule exception scope, or wants to validate that Falco alert output reaches their SIEM or incident response pipeline.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-fluxcd-kustomization-helmrelease-review

Use this skill when reviewing FluxCD Kustomization, HelmRelease, GitRepository, HelmRepository, or OCIRepository resources. Trigger when the user asks whether a Flux configuration is safe for production, whether SOPS encryption is required, whether prune is safe on a given workload, whether commit signature verification is enabled, or whether a Flux multi-tenant setup uses least-privilege ServiceAccounts.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-resource-inventory-analyst

Query Asset Inventory API for resource discovery, audit resource label/tag coverage, detect stale or orphaned resources, review change history, and build inventory reports across projects and folders.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-generative-ai-developer

Build Amazon Bedrock and serverless generative AI applications using Lambda, API Gateway, Step Functions, EventBridge, S3, DynamoDB, SQS, Guardrails, and IAM. Prefer this for serverless GenAI app design and implementation; prefer techtide-aws-agentcore for AgentCore runtime, techtide-aws-bedrock-agent-security-governor for deep Bedrock security, and techtide-aws-serverless-production-readiness for final operational hardening.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-alloydb-cloudsql-dba

Operate AlloyDB clusters and Cloud SQL instances - HA configuration, read replicas, connection pooling, maintenance windows, backup strategy, and performance diagnostics.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-codearts-devops-operator

Build and operate Huawei CodeArts CI/CD pipelines across CodeHub (Git), Build, Deploy, TestPlan, and Pipeline modules, managing SWR image lifecycle, deployment automation, and environment promotion with rollback gates.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-ack-container-platform-operator

Operate ACK clusters (managed/dedicated/serverless), ACR container registries, ASM service mesh, and container workload placement. Guide ACK type selection, OIDC workload identity, and image vulnerability posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-cloudbuild-deploy-cicd-operator

Build and operate CI/CD pipelines using Cloud Build, Cloud Deploy delivery pipelines, Artifact Registry, SLSA provenance generation, and release gating with approval workflows.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-solution-architect

Design Huawei Cloud solutions - product selection, enterprise-project model design, region selection for MLPS/sovereignty requirements, architecture patterns, multi-zone and multi-region HA. Covers region mapping (China and international), GaussDB vs RDS selection, ModelArts/Ascend NPU considerations, and the six-pillar Huawei Cloud Architecture Framework including the Trusted pillar.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-cosmosdb-performance-investigator

Use this skill for Azure Cosmos DB performance investigation, especially RU spikes, query latency, throttling, hot partitions, indexing inefficiency, partition-skew analysis, request-charge profiling, diagnostic-log review, and evidence-driven remediation planning.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-network-topology-review

Use this skill for Azure network architecture review, hub-spoke critique, routing and DNS dependency analysis, shared-services boundary decisions, firewall placement review, and landing-zone connectivity guidance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-anthos-multicloud-architect

Design and operate Anthos / GKE Enterprise fleet management, Config Management (GitOps with Policy Controller), multi-cloud Kubernetes across GCP, AWS, and Azure.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-aks-platform-operator

Operate Azure Kubernetes Service with an adversarial production posture. Use for AKS architecture sanity checks, upgrade safety, node-pool strategy, workload identity, network policy, scaling, observability, and operator-readiness reviews.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-resilience-bcdr-review

Use this skill for Azure resilience, business continuity, and disaster recovery reviews covering RTO/RPO realism, failover and failback assumptions, shared-responsibility gaps, and recovery runbook or drill quality.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ionos-datacenter-designer-reviewer

Review IONOS Data Center Designer (DCD) topology for resource organization, multi-availability-zone placement, private LAN segmentation, volume layout, NIC configuration, and firewall posture. DCD is unique to IONOS as a graphical infrastructure orchestrator where topology changes carry datacenter-wide blast radius. Use when the user asks to review, redesign, or assess the safety of an IONOS datacenter topology or resource layout.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-scaleway-iam-policy-review

Review Scaleway IAM policies, API key governance, service account bindings, and organization/project-level permission sets for least-privilege posture. Use when the user asks to audit API key scopes, review IAM policy breadth, assess service account access, or tighten Scaleway identity controls. Surfaces overly broad access, missing expiry, and key sprawl risks with actionable remediation paths.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-migration-cutover-architect

Plan and execute migrations to GCP using Migrate to Virtual Machines, Database Migration Service, Storage Transfer Service, and design cutover sequencing with rollback plans.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-ai-foundry-ops-governor

Use this skill for Microsoft Foundry and Azure AI Foundry operations governance: resource-versus-project boundary design, RBAC review, quota planning, network isolation, logging, and safe MCP-backed read or write execution. Trigger when the user asks how to run Foundry safely across teams without access sprawl, quota surprises, or unsafe production mutations.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-ai-infrastructure-operations

Use this skill when reviewing NVIDIA AI infrastructure deployments - DGX, HGX, MGX systems, GPU server install posture, BMC and out-of-band exposure, BIOS/firmware levels, vGPU host configuration, and rack-scale power/cooling/networking readiness. Trigger when the user asks whether a GPU host is provisioned per NVIDIA reference architecture, whether the BMC is segmented, whether driver/firmware versions match the AI Enterprise support matrix, or whether the deployment is in scope for NCA-AIIO or NCP-AII certification expectations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-alibaba-network-architect

Design Alibaba Cloud network topology - VPC peering, CEN for multi-VPC/multi-region connectivity, Express Connect for private circuits, SLB/ALB/NLB/CLB load balancer selection, and Smart Access Gateway for branch offices.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-scaleway-maestro

Classify and route Scaleway tasks to the narrowest qualified specialist agent. Use when a user presents a Scaleway request that spans IAM, cost, Kapsule/Kubernetes, networking, or live-guard domains, and the correct specialist is not yet identified. Produces a domain verdict, recommended specialist, and routing rationale without answering specialist questions directly.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-hetzner-maestro

Route and classify Hetzner Cloud tasks to the narrowest qualified specialist - cost optimization, infrastructure review, capacity planning, firewall guard, or server lifecycle guard. Use when the user's Hetzner request spans multiple domains or needs triage before specialist engagement.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-maestro

Route AWS tasks to the narrowest specialist or team of specialists from the 42-agent catalog. Use when you do not already know the specialist. Not for direct AWS answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents - requires explicit human confirmation with blast-radius and rollback before routing to any live deployment or production-change specialist.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-argo-rollouts-progressive-delivery-review

Use this skill when reviewing Argo Rollouts progressive delivery configuration. Trigger when the user asks about canary or blue-green Rollout strategy correctness, AnalysisTemplate success/failure conditions, traffic weighting provider alignment, canaryService isolation, PDB deadlock risk with Rollout maxSurge settings, automated rollback posture, or manual vs automated promotion configuration.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ai-tool-decision-router

Route development work to Cursor, Claude Code, Codex, Lovable, v0, Replit, or a human approval lane based on scope, blast radius, context size, and verification needs. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-alibaba-ecs-compute-operator

Operate ECS instances, Auto Scaling groups, ECI serverless containers, and Cloud Assistant O&M automation. Handle instance lifecycle, image management, placement groups, spot/preemptible instances, and scheduled scaling.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

techtide-contabo-maestro

Router skill for classifying Contabo tasks and delegating to the narrowest specialist for cost analysis, capacity planning, security hardening, VPS/VDS lifecycle operations, or Object Storage management. Use when the user asks a Contabo question that spans multiple domains or needs triage before specialist engagement.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-huawei-network-architect

Design Huawei Cloud network architecture - VPC, ELB type selection (dedicated/shared), VPN and DC Gateway (Direct Connect), Cloud Connect for inter-VPC, CFW (Cloud Firewall), Anti-DDoS, DNS. Covers Dedicated vs Shared ELB trade-offs, DC Gateway VBC connectivity, Cloud Connect cross-region/cross-account peering, and CFW east-west firewall policy.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-key-vault-secret-lifecycle-auditor

Audit Azure Key Vault secret lifecycle posture across RBAC, soft delete, purge protection, rotation, expiration, metadata hygiene, Event Grid notifications, and recovery readiness. Use when the question is whether secret management is actually safe, not just present.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-hetzner-capacity-planner

Plan Hetzner Cloud capacity across resource limits (servers, Volumes, Networks, Load Balancers, Floating IPs per project), region distribution across fsn1, nbg1, and hel1, quota exhaustion risk, growth trajectory, and server type upgrade paths from shared to dedicated compute. Use when the user asks about Hetzner resource limits, quota, or growth planning.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-ticket-triage-escalation-coordinator

Triage GCP operational alerts, incidents, and support tickets - P0/P1/P2/P3 classification, GCP Premium/Enhanced Support SLA enforcement, war room coordination, evidence collection from Cloud Monitoring and Cloud Logging, and safe escalation paths.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-polardb-rds-dba

Operate PolarDB (MySQL/PG/Oracle) clusters and RDS instances - DAS diagnostics, database proxy, Global Database Network, backup strategy, and performance tuning.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-lovable-self-heal-debugger

Diagnose Lovable app failures with a repeatable wait, inspect, isolate, prompt, and verify loop for dependency, iframe, auth, routing, and preview-cache issues. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-alibaba-solution-architect

Design Alibaba Cloud solutions - product selection (PolarDB vs RDS, ACK vs ASK vs SAE, MaxCompute vs AnalyticDB), architecture patterns, landing zone design, and disaster recovery strategies aligned to the Alibaba Well-Architected Framework.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-hetzner-infrastructure-reviewer

Review Hetzner Cloud infrastructure posture including Firewall inbound and outbound rules and server attachment, Load Balancer health check configuration and target pool design, private Network topology, Floating IP and Primary IP exposure, and region distribution across fsn1, nbg1, and hel1. Use when the user asks to audit or improve Hetzner Cloud network security or architecture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-migrate-landing-zone-cutover

Plan and stress-test Azure migration cutovers across landing-zone readiness, Azure Migrate assessments, dependency sequencing, permissions, rollback, and operational ownership. Use when a migration plan needs a go/no-go verdict instead of vague optimism.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-prometheus-alerting-cardinality-review

Use this skill when reviewing Prometheus or AlertManager configuration for cardinality, alerting correctness, scrape security, remote_write safety, or retention adequacy. Trigger when a user provides prometheus.yml, alertmanager.yml, recording rules YAML, alerting rules YAML, or asks whether their Prometheus setup is production-ready.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-triton-inference-serving-review

Use this skill when reviewing Triton Inference Server deployments statically - `model_repository/` layout and `config.pbtxt` files, dynamic batching configuration, ensemble and BLS pipelines, custom backend (Python, C++, ONNX, OpenVINO, vLLM) trust posture, gRPC and HTTP endpoint authentication, response cache configuration, rate-limit and metrics exposure. Trigger when the user asks whether a Triton model repository or `tritonserver` invocation follows NVIDIA's published guidance and security expectations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-sigstore-cosign-supply-chain-review

Use this skill when reviewing Sigstore Cosign supply chain security for Kubernetes workloads. Trigger when the user asks whether images are properly signed, whether Kyverno imageVerify policy is correctly scoped, whether SLSA provenance attestations exist, whether SBOM attestations are present, whether keyless signing is in use, or whether Rekor transparency log posture is appropriate for private images.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ionos-security-compliance-reviewer

Audit IONOS Cloud security and compliance posture covering GDPR data residency and data sovereignty, ISO 27001 control alignment, encryption at rest and in transit, private LAN isolation, IAM role and bearer token hygiene, regional endpoint correctness, audit trail coverage, and vulnerability posture. Use when the user asks to assess, improve, or evidence IONOS Cloud security or GDPR compliance.

by github: TechTide · v0.1.0

17 findings: 0 critical, 1 medium

techtide-kubecost-chargeback-allocation-review

Use this skill when reviewing a Kubecost or OpenCost installation for enterprise chargeback readiness. Trigger when the user asks whether cost allocation is accurate, whether label taxonomy is complete enough for chargeback, whether idle cost is properly attributed, whether the cost API is secured, or whether savings recommendations are being actioned.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ionos-cost-optimization-analyst

Analyze IONOS Cloud cost posture and identify optimization opportunities across compute, storage, and managed services. Covers idle server and volume identification, CPU and memory utilization rightsizing, snapshot and backup cost review, managed service tier evaluation, contract and pricing strategy, cross-region consolidation feasibility, and cost showback. Use when the user asks to reduce, explain, or attribute IONOS Cloud spending.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-cost-estimation-review

Review Azure cost estimates, pricing calculator assumptions, SKU and region choices, environment sizing realism, and uncertainty handling using official Microsoft cost-management and Azure MCP pricing documentation only.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ovhcloud-live-kms-key-destruction-guard

Gate and audit OVHcloud KMS key version destruction requests by enforcing five mandatory checks: confirmed key ID and KMS service URN, named approving identity, usage audit confirming zero active references within the retention window, documented waiting period, and a rollback or data-recovery plan. Use when a user requests destruction or rotation of an OVHcloud KMS key version. Hard-stop if any gate is absent or ambiguous.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-lovable-production-handoff

Convert a Lovable prototype into a repo-owned production candidate by extracting code, documenting assumptions, replacing mocks, and adding tests and deployment gates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-contabo-cost-optimization-analyst

Advisory skill for analyzing Contabo cost posture across contract periods, VPS/VDS product tiers, Storage VPS options, and add-ons including Private Networking, Additional IPs, Extra Storage, and Custom Images. Use when the user asks to reduce, explain, or optimize Contabo spending or when evaluating billing impact of period or sizing changes.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-apigee-api-platform-operator

Design and operate Apigee X API proxies - rate limiting, OAuth/JWT security policies, quota plans, developer portal setup, and API product management.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-replit-fullstack-bootstrap

Bootstrap Replit projects with a clear app contract, environment variable model, test loop, deployment boundary, and migration path back into a durable repository. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-nvidia-tensorrt-llm-deployment-review

Use this skill when reviewing TensorRT or TensorRT-LLM deployment artifacts statically - ONNX/PyTorch export pipelines, precision selection (FP16/BF16/INT8/FP8/INT4), calibration cache integrity, dynamic shape profiles, custom plugin loading, engine cache and serialized engine provenance, runtime memory pool sizing. Trigger when the user asks whether a TensorRT build script, calibration pipeline, or trtexec invocation follows NVIDIA's published guidance.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-live-serverless-release-guard

Guard live Lambda and serverless release actions with lambda alias, codedeploy, canary, linear, alarms, rollback, and approval gates. Use only for intentional live serverless rollout actions against confirmed targets.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-alibaba-landing-zone-architect

Design Alibaba Cloud landing zone - Resource Management org tree, Cloud SSO, Control Policy (SCP equivalent), multi-account governance baseline, billing account structure, and ActionTrail centralization.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-context-packaging-onboarding

Package a project for agent harnesses by preparing concise context files, command maps, architecture summaries, guardrails, and local override boundaries. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-windows-local-automation-guard

Run local Windows automation safely by checking resolved paths, shell boundaries, destructive command risk, background process visibility, and approval needs. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-knowledge-ingestion-guardrail-review

Review knowledge ingestion pipelines for source provenance, chunking, embedding, search behavior, redaction, access control, and evidence traceability. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-data-pipeline-engineer

Design and troubleshoot data pipelines using Dataflow (Apache Beam), Pub/Sub messaging, Dataproc (Spark/Hadoop), Cloud Composer (Apache Airflow), and Dataplex data governance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-lovable-build-loop-operator

Operate the Lovable build loop from prompt setup through scaffold, iteration, preview verification, export, and repo handoff while keeping app output inspectable. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-nvidia-cuda-kernel-performance-review

Use this skill when reviewing CUDA C/C++ kernel sources statically against NVIDIA's published performance guidance - global-memory coalescing, shared-memory bank conflicts, warp divergence, occupancy and register pressure, stream/event concurrency, kernel launch parameter selection. Trigger when the user asks whether a `.cu` or `.cuh` file follows NVIDIA's published performance and correctness guidance, or asks for the exact `nsight-compute` or `nsight-systems` invocation to run themselves.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-ai-generated-code-security-hardener

Harden untrusted code by reviewing authentication, authorization, injection surfaces, dependency risk, secret exposure, unsafe defaults, and data handling. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-human-approval-gate-designer

Design explicit human approval gates for agent workflows that can mutate production, spend money, contact external recipients, delete data, or change security posture. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-live-iac-change-guard

Guard live CloudFormation, SAM, CDK, and Terraform-backed AWS infrastructure changes with change set, drift, stack policy, rollback trigger, approval, and execute gates. Use only for intentional live IaC execution with confirmed targets.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-cost-aware-model-routing

Choose models and coding tools with cost, latency, quota, context size, and task risk in mind while preserving verification and quality requirements. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-ionos-kubernetes-platform-operator

Review IONOS managed Kubernetes cluster and node pool configuration covering cluster readiness, node pool sizing and autoscaling, workload placement strategies, PodDisruptionBudget coverage, control-plane upgrade safety, kubeconfig management, LAN attachment, and GDPR-compliant cluster region selection. Use when the user asks to assess, configure, or troubleshoot IONOS managed Kubernetes clusters or node pools.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

techtide-azure-observability-investigator

Use this skill for Azure Monitor, Log Analytics, Application Insights, alerting, KQL triage, telemetry-gap analysis, workbooks, or operator-grade incident and posture investigations.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-production-readiness-audit

Audit rapidly built applications for production readiness across auth, secrets, data, tests, observability, rollback, deployment, and operational ownership. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-spanner-architect

Design Cloud Spanner schemas with hotspot avoidance, interleaving strategies, optimal indexing, processing-unit sizing, and global write patterns for distributed OLTP at scale.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-skill-extraction-promotion

Extract new TechTide skills from local work safely by inventorying curated sources, scoring privacy and quality risk, generating candidates, and promoting only validated assets. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-agent-autopsy-report

Perform post-run analysis of failed or risky agent work by reconstructing goal, context, tool calls, failure mode, missing guardrails, and preventive skill updates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-v0-ui-prompt-hardener

Shape v0 UI prompts into implementable, accessible, responsive interface specifications with explicit data states, constraints, and handoff checks. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-non-destructive-task-automation-advisor

Design AWS non-destructive task automation using EventBridge, Step Functions, Lambda, Systems Manager Automation, SNS, SQS, approvals, notifications, reporting, and evidence gathering. Use only for read-only or coordination-safe automation; do not use for destructive remediation or mutation-heavy runbooks.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-backstage-scaffolder-template-review

Use this skill when reviewing Backstage Scaffolder software templates. Trigger when the user asks whether a template is safe for developer self-service, whether template RBAC gates are in place, whether input parameters are validated, whether a step action has excessive blast radius, or whether template outputs expose secrets.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-marketing-automation-skill-distiller

Extract reusable marketing automation and site-governance workflows into guarded skills without importing private lead lists, campaign exports, or customer data. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-cursor-claude-codex-workflow-router

Coordinate Cursor, Claude Code, and Codex across a coding task so inline edits, repo reasoning, tests, and final review happen in the right lane. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-design-stack-research-synthesizer

Synthesize design-tool research into practical app-building guidance across Stitch, Figma, Claude Code, v0, Lovable, and repo-native frontend implementation. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-gcp-observability-incident-responder

Respond to incidents and set up observability using Cloud Monitoring, Cloud Logging, Error Reporting, Cloud Trace, and SLO burn rate alerting.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-keyvault-certificate-issuer-review

Use this skill when reviewing Azure Key Vault certificate issuer configurations for cert-manager on AKS. Trigger on any request to audit Key Vault certificate policies, Managed Identity role assignments, exportability settings, private endpoint connectivity, integrated CA credentials, or rotation policy alignment.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-mcp-tool-trust-review

Review MCP servers, tool connectors, and agent tool surfaces for trust boundaries, credential scope, network egress, mutation risk, logging, and approval gates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-live-pipeline-approval-operator

Handle live CodePipeline approval and gated resume decisions with pipeline, stage, approver, SNS, approval, blast radius, and rollback checks. Use only when a real pipeline execution is paused or about to be approved.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ionos-maestro

Classify incoming IONOS Cloud requests and route them to the narrowest applicable specialist agent. Covers DCD topology review, security and GDPR compliance, managed Kubernetes, cost optimization, and DBaaS lifecycle operations. Use this skill when the task domain is not yet identified or spans multiple IONOS Cloud areas.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-change-impact-advisor

Assess AWS change impact using change sets, deployment blast radius, rollback readiness, dependency mapping, risk, go/no-go context, approval context, and stakeholder communication. Prefer this for non-destructive pre-change advisory work; prefer IaC or platform-specific skills for deep implementation review.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-test-generation-validation-debt

Turn implementation work into durable test coverage by mapping claims to unit, integration, smoke, visual, and residual-risk checks. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-s3-data-perimeter-governor

Review Amazon S3 data perimeter and exposure posture across Block Public Access, Object Ownership, ACL removal, bucket/access point policies, TLS-only access, encryption, replication, lifecycle, logging, cross-account access, and prefix boundaries. Prefer this for S3 data exposure; prefer IAM skill for generic policy surgery.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-deployment-hotfix-operator

Patch AWS deployment hotfix config, release parameters, manifest mistakes, environment drift, rollback blockers, and rollout blockers in-repo. Use for rapid non-destructive deployment corrections; do not use for live deploy/apply/destroy actions.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-daily-operations-briefing-coordinator

Prepare AWS daily operations briefings using CloudWatch, Personal Health Dashboard, Trusted Advisor, cost signals, deployment timelines, incidents, risks, and action backlog. Prefer this for non-destructive business and engineering status coordination; prefer observability, cost, or incident skills for deeper domain investigation.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-landing-zone-architect

Design and review GCP landing zone foundations including organization setup, folder hierarchy, org policy baseline, Shared VPC, billing account structure, Security Command Center, and audit logging.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-ecs-service-remediation-operator

Correct AWS ECS and Fargate service definitions, task definition config, deployment parameters, health checks, environment settings, and rollout wiring in-repo. Use for non-destructive repo fixes only; do not force deployments or mutate live services from this role.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-live-ecs-rollout-guard

Guard live Amazon ECS and Fargate rollout actions with ecs service, task definition, deployment circuit breaker, alarms, rollback, health check, and approval gates. Use only for intentional live ECS rollout actions against confirmed targets.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-landing-zone-architect

Use this skill for Azure landing-zone design, management-group and subscription hierarchy reviews, platform-versus-application boundary decisions, or multi-subscription Azure platform architecture critiques that span governance, identity, networking, security, and operations.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-multi-agent-worktree-dispatch

Split substantial engineering work across agents or worktrees with disjoint ownership, clear contracts, validation checkpoints, and integration review. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-ovhcloud-network-architect

Design and review OVHcloud network topology including vRack private network segmentation, VLAN configuration, Public Cloud private network attachment, dedicated server connectivity, load balancer placement, DNS zone design, security group rules, and blast-radius scoping for topology changes. Use when the user needs vRack design guidance, network isolation review, or Terraform IaC review for `ovh_vrack` and related resources.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-api-edge-delivery-review

Review AWS API and edge delivery posture across API Gateway, CloudFront, AWS WAF, Shield, ALB, custom domains, TLS policies, authentication, authorization, throttling, quotas, caching, origin protection, logging, and abuse controls. Use when public APIs, web entry points, or edge delivery can affect security and availability.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-ecs-fargate-platform-operator

Review Amazon ECS and Fargate platform operations across services, task definitions, task roles, execution roles, capacity providers, load balancers, deployment circuit breakers, blue/green, autoscaling, health checks, logs, secrets, networking, and rollback. Use only for ECS/Fargate; prefer EKS operator for Kubernetes.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-cross-harness-export-hygiene

Prepare skills and agents for cross-harness export by separating canonical SKILL.md assets from Cursor rules, Kiro steering, and prompt-kit adapters. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-ovhcloud-kubernetes-platform-operator

Review and advise on OVHcloud Managed Kubernetes (MCK) cluster lifecycle, node pool sizing, autoscaling configuration, version upgrade planning, workload placement via taints and tolerations, network policies, RBAC hardening, and cluster security posture. Use when the user needs MCK operational guidance, Terraform IaC review for `ovh_cloud_project_kube` resources, or upgrade risk assessment.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-solution-architect

Design GCP solutions aligned with the Google Cloud Architecture Framework when the request spans resource hierarchy, product selection, or multi-service architecture decisions. Prefer narrower GCP skills for single-domain network, GKE, Cloud Run, data pipeline, database, or landing zone asks.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-rds-aurora-performance-investigator

Investigate Amazon RDS and Aurora-specific incidents involving latency, connection exhaustion, slow queries, lock waits, storage pressure, CPU/I/O saturation, replica lag, failover behavior, Performance Insights, and database capacity. Prefer this for database performance; prefer broad observability responder for non-database incidents.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-iam-least-privilege-review

Review AWS IAM identity policies, trust policies, resource policies, permission boundaries, SCPs, session policies, role design, pass-role, federation, and Access Analyzer findings for least-privilege risk. Prefer KMS/secrets steward for key/secret lifecycle design and S3 perimeter governor for S3 exposure/data-perimeter posture unless the request is primarily policy surgery.

by github: TechTide · v0.1.2

17 findings: 0 critical, 1 medium

techtide-aws-security-posture-hardening

Review broad AWS security posture across Security Hub CSPM, GuardDuty, Inspector, Macie, Config, CloudTrail, IAM, public exposure, vulnerability findings, and remediation governance. Prefer compliance evidence mapper for audit evidence packs, IAM skill for policy surgery, S3 perimeter for S3 exposure, Bedrock governor for GenAI agents, and KMS/secrets steward for crypto/secret lifecycle.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-prompt-to-architecture-extractor

Convert rough prompts, transcripts, and prototype notes into architecture decisions, constraints, interfaces, data flows, and implementation-ready work packages. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-iac-change-safety-review

Review AWS infrastructure-as-code changes across CDK, CloudFormation, SAM, Terraform, Serverless Framework, generated templates, plans, stack updates, change sets, and drift. Use when the user asks whether an AWS IaC deployment is safe, what a change set will do, why a resource replacement will happen, or how to validate before production.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-nvidia-gpu-operator-kubernetes-hardening

Use this skill when reviewing NVIDIA GPU Operator deployments on Kubernetes - device plugin, MIG manager, NFD labels, time-sliced GPU configuration, container toolkit, securityContext posture, namespace tenancy, and admission policy coverage. Trigger when the user asks whether GPUs are being shared safely across tenants, whether MIG profiles are enforced, or whether the GPU Operator is deployed per NVIDIA hardening guidance.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-pipeline-fix-operator

Repair AWS pipeline configuration, buildspecs, workflow files, deployment steps, artifact wiring, release guardrails, and CodeDeploy integration in-repo. Use for non-destructive CI/CD corrections; do not trigger live pipeline runs or mutate cloud state.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-network-architect

Design and review GCP network architecture including global VPC topology, Shared VPC patterns, Cloud Interconnect/VPN hybrid connectivity, Cloud NAT, DNS, Cloud Armor, and Traffic Director service mesh.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-gcp-compute-engine-operator

Operate GCE instances, manage Managed Instance Groups (MIGs), configure OS patch management via VM Manager, design preemptible/spot VM strategies, and manage startup/shutdown scripts.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-ec2-compute-operations-steward

Review Amazon EC2 compute operations across instances, Auto Scaling groups, Launch Templates, AMIs, Systems Manager, Patch Manager, Session Manager, EBS volumes, snapshots, health checks, instance refresh, lifecycle hooks, patch compliance, and fleet reliability. Use for EC2 day-2 operations and legacy workload stewardship.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-hetzner-cost-optimization-analyst

Review Hetzner Cloud cost posture across server type selection, idle Volumes, unattached Floating IPs and Primary IPs, underutilized Load Balancers, Storage Box consumption, and snapshot accumulation. Use when the user asks to reduce or explain Hetzner Cloud spend.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-ci-cd-release-engineer

Review AWS CI/CD and release safety across CodePipeline, CodeBuild, CodeDeploy, GitHub Actions, GitLab, artifact provenance, deployment gates, approvals, tests, progressive delivery, rollback, change correlation, and incident-prevention recommendations. Use when AWS releases or pipelines can affect production reliability or security.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-kms-secrets-lifecycle-steward

Review AWS KMS and Secrets Manager lifecycle posture across key policies, grants, rotation, multi-Region keys, imported key material, aliases, secret rotation, replication, caching, endpoint conditions, recovery, and break-glass access. Prefer this for cryptography/secret lifecycle; prefer IAM skill for general permissions review.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-live-coding-session-retro

Turn a live coding session into reusable engineering memory by extracting decisions, failed paths, tool choices, verification evidence, and skill candidates. Use when an agent needs Alex Cinovoj / TechTide live-coding patterns, tool routing, guarded prototype-to-production workflows, or cross-harness prompt/skill adapters.

by Alex Cinovoj / TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-ticket-triage-escalation-coordinator

Triage AWS tickets and alerts using priority, owner, evidence, incident context, escalation path, OpsCenter, health signals, and safe next steps. Prefer this for non-destructive request coordination and escalation; prefer deep domain skills for implementation or root-cause investigation.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-event-driven-architecture-review

Review AWS event-driven system design across EventBridge, event buses, Pipes, SQS, SNS, Step Functions, event schemas, filtering, cross-account routing, retries, DLQs, replay, idempotency, monitoring, and event-loop risk. Prefer serverless production readiness for Lambda runtime/deployment readiness.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-network-architect

Design, review, and troubleshoot AWS network, hybrid, and multi-cloud connectivity across VPCs, Transit Gateway, Direct Connect, VPN, Cloud WAN, Route 53 Resolver, private DNS, CIDRs, route tables, endpoints, segmentation, ingress, egress, inspection, and failover. Prefer this for connectivity and routing; prefer API/edge, S3, or security skills for those specialized surfaces.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-serverless-production-readiness

Review AWS Lambda-centered serverless workloads for production readiness across execution roles, event sources, retries, DLQs/destinations, concurrency, idempotency, observability, deployment safety, performance, cost, and rollback. Prefer event-driven architecture for EventBridge/SNS/SQS/Step Functions system design, and DynamoDB/RDS skills for data-store performance.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-oci-certificates-issuer-review

Use this skill when reviewing OCI Certificates Service issuer configurations for cert-manager on OKE. Trigger on any request to audit OCI CA hierarchy, issuance rules, OKE Workload Identity vs Instance Principal auth, IAM policy scope, OCSP reachability, or certificate version management.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-serverless-rollout-corrector

Patch AWS serverless rollout definitions across Lambda, API Gateway, EventBridge, SQS, SNS, event source wiring, aliases, versions, and deployment config. Prefer this for repo-side rollout corrections; do not perform live rollout actions or destructive operations.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-data-protection-backup-steward

Review AWS backup and data protection implementation across AWS Backup, EBS/RDS/EFS/S3 recovery patterns, vaults, vault lock, retention, encryption, cross-account/cross-Region copy, restore testing, lifecycle, and recovery evidence. Prefer resilience BCDR review for broader RTO/RPO, failover, and business continuity design.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-azure-cosmosdb-application-developer

Use this skill for Azure Cosmos DB application development work, especially NoSQL data modeling, document structure, partition-aware access patterns, point reads, query design, SDK usage, transactional batch scope, consistency-aware reads, change feed integration, and Cosmos DB development guidance.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-velero-backup-restore-guard

Use this skill when guarding Velero backup schedule changes, restore operations, BackupStorageLocation mutations, or volume snapshot configuration. Trigger on any request to run a velero restore, delete a Schedule, change a BSL default, or modify backup retention.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-nvidia-generative-ai-platform-review

Use this skill when reviewing NVIDIA generative-AI platforms - NeMo training and customization pipelines, NIM inference microservices, NeMo Guardrails, model card and weights provenance, evaluation/eval-harness posture, and tenant data isolation. Trigger when the user asks whether NIM containers are correctly verified before deployment, whether NeMo Guardrails are configured, or whether the deployment meets NCA-GENL, NCA-GENM, or NCP-GENL expectations.

by github: TechTide · v0.1.0

14 findings: 0 critical, 0 medium

techtide-aws-observability-incident-responder

Investigate broad AWS incidents and observability gaps using CloudWatch metrics, logs, alarms, traces, EventBridge events, service health, runbooks, timelines, blast radius, root-cause discipline, and post-incident actions. Prefer RDS/Aurora investigator for database-specific performance incidents.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-compliance-evidence-mapper

Map AWS compliance evidence for audits across Security Hub controls, AWS Config rules/conformance packs, Audit Manager assessments, evidence folders, manual evidence, AWS Artifact reports, CloudTrail, and control narratives. Use for evidence packaging and audit readiness, not general security hardening.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-cost-anomaly-watch-coordinator

Review AWS cost anomalies using Cost Explorer, Cost Anomaly Detection, Budgets, usage spikes, commitments, and tagging gaps. Prefer this for proactive FinOps watch and non-destructive escalation; prefer techtide-aws-cost-optimization-governor for broader optimization strategy.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-devops-agent-skill-designer

Design, review, and improve AWS DevOps Agent-compatible skills, investigation workflows, learned skills, tool-use best practices, agent type targeting, frontmatter descriptions, reference materials, and operational output contracts. Use when creating or adapting skills for AWS DevOps Agent or AWS-style incident agents.

by github: TechTide · v0.1.2

17 findings: 0 critical, 1 medium

techtide-aws-eks-platform-operator

Review Amazon EKS Kubernetes platform operations across cluster access, IRSA, IAM roles for service accounts, pod identity, node groups, Karpenter, autoscaling, CNI/network policy, upgrades, reliability, observability, and cost. Use only for EKS/Kubernetes; prefer ECS/Fargate operator for ECS services.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-aws-iac-patch-executor

Edit AWS IaC files including CloudFormation, SAM, CDK config, and Terraform to patch defects, prepare change set review, or unblock rollout work. Prefer this for bounded repo changes only; do not use for apply, deploy, or destructive infrastructure execution.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-migration-cutover-architect

Plan, review, and de-risk AWS migrations and cutovers across discovery, dependency mapping, wave planning, AWS Application Migration Service, Migration Hub, test launches, acceptance tests, downtime windows, rollback, DNS, data consistency, and post-cutover validation. Use for migration planning and cutover readiness.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-marketing-maestro

Route marketing-governance review tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know which marketing-governance specialist you need. Not for direct answers; Maestro classifies, dispatches, and synthesizes only. Dispatches a single agent for focused tasks or a parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard or mutating agents - requires explicit human confirmation with blast-radius and rollback before any live mutation.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-finops-maestro

Route FinOps tasks to the narrowest specialist or team of specialists from the catalog. Use when you do not already know the specialist. Not for direct FinOps answers; Maestro classifies, dispatches, and synthesizes only. Dispatches single agent for focused tasks, parallel team (max 4) for multi-domain tasks. Never auto-dispatches live-guard agents - requires explicit human confirmation with blast-radius and rollback before routing to any live mutation specialist.

by github: TechTide · v0.1.1

1 finding: 0 critical, 0 medium

techtide-azure-security-posture-hardening

Use this skill for Azure security posture review, baseline hardening, managed identity adoption, Key Vault posture, private access decisions, Azure Policy guardrails, and logging or audit gap analysis. Trigger when the user asks how to harden an Azure workload or platform without defaulting to broad access or public exposure.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-handoff-readiness-review

Review agent session output before it enters the durable TechTide repo by checking provenance, tests, security, deployment boundaries, and rollback expectations. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-kubernetes-pod-spec-review

Use this skill when reviewing a Kubernetes Pod spec, Deployment spec, or StatefulSet spec for correctness, security posture, and production-readiness. Trigger on any request to audit, validate, or score a workload manifest.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-oci-live-autonomous-db-lifecycle-guard

Guard Autonomous Database lifecycle changes - scale, start, stop, clone, terminate - with protection-tag enforcement, backup verification, and connection-string impact analysis before any mutation.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-dynamodb-data-modeling-performance-review

Review Amazon DynamoDB data modeling and performance across access patterns, partition keys, sort keys, secondary indexes, GSI/LSI design, hot partitions, query versus scan behavior, capacity mode, adaptive capacity, global tables, TTL, DAX, item size, transactions, and cost. Use when DynamoDB correctness, latency, scaling, or cost depends on table design.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-azure-cosmosdb-platform-operator

Use this skill for Azure Cosmos DB platform operations and design review, especially accounts, databases, containers, partition-key design, throughput and RU posture, consistency choices, indexing, throttling, multi-region replication, private connectivity, and Cosmos DB MCP-guided discovery.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-oci-live-iam-policy-compartment-guard

Guard OCI IAM policy writes and dynamic group changes with verb-hierarchy audit, compartment scope enforcement, anti-pattern detection (any-user/any-group), and rollback via statement restore.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-ai-operations-day2

Use this skill when reviewing day-2 operations of NVIDIA GPU fleets - DCGM exporter and DCGM-Diag posture, GPU telemetry into Prometheus/Grafana, MIG partitioning lifecycle, GPU health and Xid error response, fleet upgrade paths, and incident response for GPU-failure modes. Trigger when the user asks how a GPU fleet is monitored, whether DCGM is wired, whether Xid signatures map to runbooks, or whether the deployment meets NCP-AIO certification expectations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-ovhcloud-cost-finops-analyst

Analyze OVHcloud Public Cloud cost posture across projects and regions: identify idle instances and unattached volumes, review Savings Plans and commitment coverage, recommend rightsizing and tagging improvements, and surface forecast risks. Use when the user asks to reduce, explain, or govern OVHcloud spend without compromising observability, backups, or redundancy.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-governance-policy-guardrails

Use this skill for Azure Policy guardrails, initiatives, assignment scope, management-group inheritance, exclusions, remediation risk, tag governance, allowed regions or SKUs, and staged governance rollout reviews.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-app-service-slot-swap-guard

Guard live App Service slot swaps with sticky-settings audit, warmup probe verification, swap-with-preview staging, and instant rollback posture.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-nvidia-agentic-ai-platform-review

Use this skill when reviewing agentic-AI platforms built on the NVIDIA stack - NeMo Agent Toolkit, NIM-as-tool patterns, retrieval-augmented generation pipelines, tool-call safety, agent memory boundaries, and per-tenant audit logging. Trigger when the user asks whether agent tool calls are sandboxed, whether agent memory is tenant-scoped, whether tool definitions are signed, or whether the deployment meets NCP-AAI expectations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-private-ca-issuer-review

Use this skill when reviewing AWS ACM Private CA (Private Certificate Authority) issuer configurations for cert-manager. Trigger on any request to audit AWSPCAIssuer, AWSPCAClusterIssuer, IRSA policy for cert-manager, certificate template ARNs, CRL configuration, or cross-account PCA usage.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-solution-architect

Design and stress-test AWS cross-domain solution architectures when the request spans multiple AWS domains or needs an architecture decision record. Prefer narrower AWS skills for single-domain IAM, network, EKS, ECS, serverless, RDS, DynamoDB, S3, Bedrock, IaC, cost, security, migration, compliance, or incident asks.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

core-source-trust-gate

Verify skill, rule, and agent sources before installation or reuse by checking primary docs, repository identity, license, native surface, and privacy risk. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-keyvault-rotation-purge-guard

Guard Key Vault key rotation, rotation policy changes, soft-delete enforcement, and purge-protection enablement with irreversibility warnings and rollback evidence.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ovhcloud-iam-policy-review

Review OVHcloud IAM policies for overly permissive allow rules, missing deny blocks, unscoped URNs, absent condition blocks (IP CIDR, resource tag, expiration), and identity-group hygiene. Use when the user needs to audit access control, review `ovh_iam_policy` Terraform resources, assess OAuth2 service account scopes, or validate conditional access configuration against the principle of least privilege.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-oci-live-vault-key-destruction-guard

Guard Vault master encryption key scheduled-deletion and HSM rotation with data-association audits, key-usage reference checks, deletion-window enforcement, and cancellation playbooks.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-ovhcloud-maestro

Classify incoming OVHcloud requests by domain and route to the narrowest qualified specialist agent. Use when the user's task spans or is unclear across IAM, FinOps, Kubernetes, networking, or live-guard KMS domains. Does not answer specialist questions directly; produces a routing verdict with evidence and hands off with a clear scope statement.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-aws-resilience-bcdr-review

Review AWS resilience and business continuity strategy across RTO/RPO, dependency maps, multi-AZ, multi-Region, failover/failback, game days, runbooks, drift, and recovery validation. Prefer data protection backup steward for backup-plan/vault/restore implementation details.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

techtide-nvidia-ai-networking-fabric-review

Use this skill when reviewing NVIDIA AI networking fabrics - Spectrum-X Ethernet or InfiniBand topology, NCCL collective tuning, RoCEv2 lossless DCQCN/PFC config, adaptive routing, congestion control, and east-west isolation between training jobs. Trigger when the user asks whether the fabric is non-blocking, whether NCCL chooses the right transport, whether PFC/ECN is configured correctly, or whether the deployment meets NCP-AIN expectations.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium

techtide-aws-landing-zone-governor

Review and design AWS landing zones, AWS Control Tower environments, Organizations structures, OUs, account vending patterns, guardrails, central logging, security/audit accounts, and multi-account governance. Use when the user asks how to structure AWS accounts or govern a cloud estate.

by github: TechTide · v0.1.2

2 findings: 0 critical, 1 medium

vercel-frontend-review

Review Vercel Agent Skills frontend output for accessibility, responsiveness, state coverage, design-token discipline, and production handoff quality. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

techtide-oci-live-resource-manager-stack-guard

Guard OCI Resource Manager stack plan, apply, and destroy jobs with drift detection, state-version rollback, stack auto-lock awareness, and approval gates.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-role-selector

Use this skill when the user asks which Azure role to assign, how to grant minimum access, whether a built-in role is sufficient, or when a custom role may be required.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-context-management

Keep agent sessions from drifting by packaging concise project context, current state, decisions, and verification results. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-aks-rollout-guard

Guard live AKS deployment rollouts with PDB audit, maxUnavailable/surge validation, rollout pause/undo gates, and post-rollout health verification.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

gemini-gemini-api-dev

Build Gemini API integrations with verified source evidence, environment separation, request/response validation, safety settings, and testable examples. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

17 findings: 0 critical, 1 medium

core-native-packaging-bridge

Translate TechTide-authored workflows into the documented packaging surface without pretending every agent uses the same activation model. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

vercel-test-generation

Use Vercel Agent Skills to convert implementation claims into focused unit, integration, smoke, and regression tests without padding the suite. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

core-multi-agent-orchestration

Coordinate agents with each other by splitting work into bounded scopes, clear contracts, integration checks, and review gates. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-prompt-hardening

Harden agent prompts so the work has explicit scope, constraints, data states, guardrails, and validation evidence. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-debugging-strategy

Run a disciplined agent debugging loop that captures symptoms, isolates reproduction, tests hypotheses, patches narrowly, and verifies the fix. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

gemini-interactions-api

Design Gemini interaction flows with explicit conversation state, tool boundaries, safety review, and reproducible request traces. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

techtide-oci-live-oke-rollout-guard

Guard OKE deployment rollouts via DevOps Service approval stages with canary and blue-green evidence, rollout health verification, and kubectl rollout undo gates.

by github: TechTide · v0.1.0

3 findings: 0 critical, 2 medium

techtide-azure-live-arm-deployment-stack-guard

Guard live ARM, Bicep, and Deployment Stack changes with what-if evidence, denySettings review, changeset diff, rollback posture, and approval gates.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-kubernetes-rbac-review

Use this skill for Kubernetes RBAC, Role, ClusterRole, RoleBinding, ClusterRoleBinding, ServiceAccount, workload identity, or least-privilege review tasks. Trigger when the user asks whether cluster access is too broad, how to grant workload permissions safely, or how to audit RBAC state.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-repo-reconnaissance

Use the agent to map an unfamiliar repository before implementation by finding entrypoints, commands, ownership boundaries, risks, and tests. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-oci-live-cost-budget-runaway-guard

Gate OCI budget mutations and GPU/HPC shape provisioning against compartment spend limits, with inventory searches, quota audits, and emergency spend-stop playbooks.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-mcp-tool-safety

Review agent tool and MCP usage for credential scope, network egress, mutation risk, logging, and human approval gates. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-deployment-readiness

Use the agent to decide whether an app, feature, or prototype is ready for deployment, rollback, and operational ownership. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

core-cost-aware-routing

Route agent and companion tool work by task risk, context size, model cost, latency, and verification needs. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

vercel-tdd-red-green-refactor

Guide Vercel Agent Skills through red, green, and refactor cycles for risky changes where tests need to drive the implementation. Use when expanding, reviewing, or operating Vercel Agent Skills skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

16 findings: 0 critical, 1 medium

techtide-azure-rbac-review

Use this skill for Azure RBAC, Entra-backed access, role assignment, custom role, scope, subscription, management group, or least-privilege review tasks. Trigger when the user asks whether Azure access is too broad or how to grant access safely.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

gemini-live-api-dev

Build Gemini Live API experiences with streaming-state checks, connection recovery, media boundary review, and safe logging. Use when expanding, reviewing, or operating Gemini CLI skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

17 findings: 0 critical, 1 medium

core-security-review

Review agent code changes for auth, authorization, injection, secrets, dependency risk, and unsafe defaults. Use when expanding, reviewing, or operating skills, rules, prompt kits, provider lanes, or generated-code handoffs in the TechTide skill library.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-pim-jit-activation-guard

Gate Entra ID PIM eligible role activations with justification, MFA, ticket binding, time-bound scope, and approval workflow gates before any privileged Azure role becomes active.

by github: TechTide · v0.1.0

2 findings: 0 critical, 1 medium

techtide-azure-live-cost-budget-action-guard

Gate Azure budget action changes and GPU/HPC SKU provisioning against approved spend limits, with quota audits and emergency spend-stop playbooks.

by github: TechTide · v0.1.0

3 findings: 0 critical, 2 medium

techtide-oracle-oci-mcp-grounded-advisor

Use this skill when the user asks about Oracle MCP servers, SQLcl MCP, OCI MCP, Oracle Database agent access, OCI automation, or cloud/database advice that must be grounded in official Oracle sources.

by github: TechTide · v0.1.0

1 finding: 0 critical, 0 medium