Skills

Diagnoses failing Kubernetes workloads from symptoms, events, logs, and manifests. Works through a systematic checklist (pod status, events, resource limits, probes, scheduling, networking) to identify the root cause of issues like CrashLoopBackOff, ImagePullBackOff, OOMKilled, and pending pods, then recommends concrete fixes and verification steps.

Analyzes Terraform plan output and state to find configuration drift between declared infrastructure and what actually exists. Explains each drifted resource in plain language, flags risky or destructive changes, and recommends whether to reconcile in code, import, or apply, so teams can keep state and reality aligned safely.

Guides containment, evidence collection, root-cause analysis, customer communication, and remediation when an AI agent takes an unsafe, incorrect, or unauthorized action.

Designs traces, metrics, structured events, privacy controls, dashboards, and alerts for LLM applications so teams can diagnose quality, cost, latency, and tool-use behavior.

Reviews cloud and AI infrastructure spend to identify measurable savings while preserving reliability, performance, security, ownership, and product requirements.

Produces blameless, actionable incident postmortems with a precise timeline, contributing factors, impact, decisions, corrective actions, owners, and measurable follow-through.

Optimizes prompts and agent workflows for finite context windows by prioritizing evidence, compressing history, managing retrieval budgets, and measuring token-cost trade-offs.

Produces production-ready nginx configuration for common scenarios: reverse proxy, load balancing, TLS termination, static file serving, HTTP/2, gzip/brotli, caching, rate limiting, and security headers. Explains each directive, warns about risky defaults, and includes a validation step so the config can be tested before reload.

Writes idempotent Ansible playbooks and roles from a described target state. Structures tasks with proper handlers, variables, and templates; favors modules over shell commands; applies role-based layout and inventory grouping; and adds check-mode safety and tags. Produces playbooks that are re-runnable without unintended side effects.

Produces operational runbooks for services and common incidents. Documents prerequisites, step-by-step diagnosis and remediation, exact commands, verification checks, rollback steps, and escalation paths. Structures each runbook so an on-call engineer can follow it under pressure, and keeps destructive steps clearly flagged with safeguards.

Writes reusable, well-structured Terraform modules with clean input/output interfaces, sensible defaults, validation rules, and examples. Covers module composition, variable typing and validation, remote state and backends, provider version pinning, and testing with terraform validate/plan and tools like Terratest. Emphasizes least-privilege IAM and safe defaults.

Adds production-grade observability to a codebase by instrumenting it with structured logs, metrics, and distributed traces. Recommends span boundaries, cardinality-safe labels, and OpenTelemetry conventions, then generates the wiring code and dashboards needed to make a service debuggable in production.

Reviews and rewrites Dockerfiles for smaller images, faster builds, and better security. Applies multi-stage builds, optimal layer ordering and caching, minimal base images, non-root users, and .dockerignore tuning, and flags vulnerabilities and bloat while keeping the build reproducible.

Generates and refactors Helm charts to package Kubernetes applications. Produces templated manifests, values.yaml with sensible defaults, helpers, chart dependencies, and hooks, and parameterizes images, resources, probes, and ingress so a workload can be deployed consistently across environments.

Designs feature-flagging and progressive-delivery strategies and generates the integration code. Covers flag naming and lifecycle, targeting and segmentation rules, percentage rollouts, kill switches, and cleanup of stale flags across providers like LaunchDarkly, Unleash, Flagsmith, or a homegrown config service.

Generates production-ready Kubernetes manifests — Deployments, Services, Ingresses, ConfigMaps, Secrets, HPAs, and more — from a plain-language description of the workload. Applies best practices for resource limits, health probes, security contexts, and rolling update strategies, with optional Kustomize overlays or Helm chart scaffolding.

Parses and analyzes application, system, and access logs to surface errors, anomalies, and root causes. Correlates events across services, identifies recurring patterns and spikes, extracts structured fields from unstructured lines, and produces a prioritized summary with likely causes and recommended next steps.

Generates production-ready infrastructure as code (IaC) configurations for cloud deployments. Supports Terraform, Pulumi, CloudFormation, and CDK. Creates modular, reusable infrastructure components with proper networking, security groups, IAM policies, and monitoring configurations.

Generates and assists with incident response procedures for production systems. Helps with root cause analysis, creates runbooks for common failure modes, builds communication templates for stakeholders, and produces post-incident review documents. Supports SRE and on-call workflows.

Generates Docker Compose configurations from application requirements. Handles service dependencies, networking, volumes, health checks, environment variables, and multi-stage builds. Supports development and production profiles.

Builds and explains cron expressions from natural language schedules. Supports standard cron (5-field), extended cron (6-field with seconds), and cloud-specific formats (AWS EventBridge, Google Cloud Scheduler). Validates expressions and shows next run times.