DevOps

Diagnose Hermes messaging gateway failures by inspecting process state, adapters, credentials, logs, delivery evidence, and conflicts without automatic repair.

Performs a comprehensive read-only health audit of a Hermes agent stack, covering installation, gateways, cron jobs, profiles, skills, and persistence, producing a GREEN/YELLOW/RED verdict.

Diagnose stuck, contradictory, or incomplete Hermes updates by inspecting Git state, processes, caches, and installed versions before recovery. Evidence-first, read-only by default.

Scans your project’s codebase (Maven/Gradle, Docker, Spring, Python/Node routes) to generate Mermaid architecture diagrams including system context, service dependencies, request flows, and deploy flows, saved under .pm/architecture/.

Analyzes Rails applications and generates comprehensive upgrade reports with breaking changes, deprecations, and step-by-step migration guides for Rails 7.0 through 8.1.1. Use when upgrading Rails applications, planning multi-hop upgrades, or querying version-specific changes.

A legacy Linux command reference with DirSkills safety notes for emergency reboot, memory, I/O, background jobs, and older GRUB configurations.

Container Image Hardening reduces the attack surface of Docker and OCI images by using minimal bases, multi-stage builds, and non-root runtime settings. Use it when preparing production images and validating their security posture.

DevSecOps Security Scanning implements repeatable secrets, SAST, SCA, container, and optional DAST checks in CI/CD. Use it to enforce policy-based security gates before merge or deploy and to publish audit artifacts.

IaC Workflow manages infrastructure changes with validated plans, policy checks, controlled apply steps, and drift-aware verification. Use it for Terraform, OpenTofu, or similar infrastructure workflows that need review and auditability.

Infra Operations runs infrastructure changes with baseline checks, evidence capture, and rollback checkpoints. Use it for controlled operational work that needs clear handoffs and incident-safe execution.

Kubernetes Cis Benchmark runs kube-bench to assess a cluster against CIS controls and produce structured findings. Use it to prioritize remediation, retain evidence, and re-test fixes over time.

Kubernetes Network Policies implements default-deny, least-privilege ingress and egress rules for namespaces and workloads. Use it when you need to segment traffic, preserve required dependencies, and validate blocked and allowed paths before rollout.