data219
@data219
Public Skills
secrets-management
by data219
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
error-handling-patterns
by data219
Master error handling patterns across languages including exceptions, Result types, error propagation, and graceful degradation to build resilient applications. Use when implementing error handling, designing APIs, or improving application reliability.
security-threat-model
by data219
"Repository-grounded threat modeling that enumerates trust boundaries, assets, attacker capabilities, abuse paths, and mitigations, and writes a concise Markdown threat model. Trigger only when the user explicitly asks to threat model a codebase or path, enumerate threats/abuse paths, or perform AppSec threat modeling. Do not trigger for general architecture summaries, code review, or non-security design work."
glab
by data219
Use when the user asks to work with GitLab from the terminal using glab, including authentication, issues, merge requests, CI/CD pipelines, releases, repositories, variables, tokens, Kubernetes agent workflows, Duo, or direct REST/GraphQL API calls.
code-review-master
by data219
Perform senior-level code and pull request reviews with explicit checks for architecture and design fit, security and performance risks, code quality, and functional correctness. Use when asked to review a PR, commit diff, patch, or code snippet and provide a structured decision with actionable findings.
enterprise-readiness
by data219
"Assess and enhance software projects for enterprise-grade security, quality, and automation. Use when evaluating projects for production readiness, implementing supply chain security (SLSA, signing, SBOMs), hardening CI/CD pipelines, or establishing quality gates. Aligned with OpenSSF Scorecard, Best Practices Badge (all levels), SLSA, and S2C2F. By Netresearch."