api-documentation
Generate, validate, and maintain API endpoint documentation including OpenAPI specs, request/response examples, and versioned API references.
#ship
24 skills tagged ship · lifecycle axis.
changelog-generation
Generate changelogs from commit history using semantic versioning and conventional commits, including release notes and breaking change notices.
ci-pipeline
Generate CI/CD pipeline configurations for GitHub Actions, GitLab CI, or Azure Pipelines.
code-review
Perform structured code reviews with checklists, PR feedback, defect categorization, and severity classification.
dependency-scanning
Scan project dependencies for known CVEs and license compliance issues. Works with npm, pip, go mod, Maven, NuGet.
docker-containerization
Write optimized Dockerfiles with multi-stage builds, security best practices, and minimal image sizes.
git-workflow
Guide branching strategies, commit conventions, merge vs rebase decisions, and conflict resolution workflows for consistent version control practices.
integration-testing
Test across component boundaries using real databases, HTTP clients, and message queues via Docker containers.
kubernetes-helm
Generate Kubernetes manifests and Helm charts for deploying containerized applications to K8s clusters.
mutation-testing
Verify test suite quality by injecting faults (mutants) into the code and checking if tests catch them.
openapi-specs
Generate or update OpenAPI (Swagger) specifications from existing code, or validate code against existing specs.
performance-review
Identify performance bottlenecks through complexity analysis, profiling review, caching strategy evaluation, and resource utilization assessment.
pr-management
Manage pull request lifecycle including templates, reviewer assignment, merge criteria, and stale PR handling for efficient code integration.
pr-review-flow
Master workflow for a thorough PR review. Orchestrates code review, security review, and performance review in parallel, then routes the findings into PR management for triage and merge decisioning. No implementation logic.
readme-generation
Create comprehensive README files with installation instructions, usage examples, API reference, and contribution guidelines.
release-notes
Parse git history to generate changelogs and release notes following Conventional Commits and Keep a Changelog formats.
release-pipeline
Master workflow for cutting a release. Orchestrates test strategy selection, changelog generation, and CI pipeline invocation as a single named sequence ending in an audit. Contains no implementation logic.
secure-coding-review
Review code for OWASP Top 10 vulnerabilities, common security anti- patterns, and language-specific pitfalls.
security-review
Perform security-focused code review covering OWASP Top 10, vulnerability scanning, secret detection, and input validation.
terraform-iac
Generate Infrastructure as Code using Terraform (or OpenTofu). Modules, state management, and environment separation.
test-strategy
Define the testing pyramid for a project: unit, integration, E2E. Set coverage targets and testing conventions.
testing-strategy
Define test pyramid structure, coverage analysis, test type selection, and boundary condition identification for comprehensive quality assurance.
two-pass-analysis
Decouple metric collection from pass/fail gating. Pass 1 gathers raw data. Pass 2 applies thresholds. Enables trend analysis without blocking, while still enforcing standards.
unit-testing
Generate unit tests following AAA pattern (Arrange-Act-Assert). Supports Jest, JUnit, Go Test, PyTest, and more.