devton/agentic-workflow-blueprint

Scaffolds agent-oriented documentation structures with progressive disclosure and executable contracts, enabling AI agents to load only relevant context for each task.

Analyzing Kubernetes Audit Logs parses audit events to find suspicious API activity such as exec, secret access, and RBAC changes. Use it to build timelines, detection rules, and SOC handoff notes for Kubernetes investigations.

Brainstorming uses structured Socratic questions to uncover requirements, trade-offs, scope boundaries, and edge cases before implementation. Use it for ambiguous requests, new features, or complex architecture changes.

C4 Architecture produces audience-appropriate architecture documentation using the C4 model and Mermaid diagrams. Use it to document context, container, component, deployment, or dynamic views with narrative context and traceable evidence.

Changelog generates a concise changelog entry after a documentation review passes. Use it to capture approved, user-relevant changes in a stable, easy-to-scan format.

Changelog Generator creates customer-facing release notes from git commits and PR diffs. Use it after implementation or PR completion to group user-visible changes into features, fixes, and improvements.

Container Image Hardening reduces the attack surface of Docker and OCI images by using minimal bases, multi-stage builds, and non-root runtime settings. Use it when preparing production images and validating their security posture.

DevSecOps Security Scanning implements repeatable secrets, SAST, SCA, container, and optional DAST checks in CI/CD. Use it to enforce policy-based security gates before merge or deploy and to publish audit artifacts.

Document creates or updates project documentation from implementation evidence such as a diff or related files. Use it to write handoff notes, validation, and behavior summaries that stay aligned with the code changes.

HTML Manual generates standalone interactive HTML versions of skills, workflows, reference docs, and runbooks. Use it when you want a readable visual manual with theme toggle, file tree navigation, and Mermaid diagrams.

IaC Workflow manages infrastructure changes with validated plans, policy checks, controlled apply steps, and drift-aware verification. Use it for Terraform, OpenTofu, or similar infrastructure workflows that need review and auditability.

Infra Operations runs infrastructure changes with baseline checks, evidence capture, and rollback checkpoints. Use it for controlled operational work that needs clear handoffs and incident-safe execution.

Kubernetes Cis Benchmark runs kube-bench to assess a cluster against CIS controls and produce structured findings. Use it to prioritize remediation, retain evidence, and re-test fixes over time.

Kubernetes Network Policies implements default-deny, least-privilege ingress and egress rules for namespaces and workloads. Use it when you need to segment traffic, preserve required dependencies, and validate blocked and allowed paths before rollout.

Kubernetes Rbac Hardening tightens cluster access by reducing overprivileged bindings, service account permissions, and cluster-admin sprawl. Use it to audit RBAC, apply least-privilege roles, and validate access changes.

Linear Sync executes a prevalidated MCP plan to create or update Linear milestones and issues. Use it after planning when you need controlled writes, dry runs, and a sync report.

Linear Workflow Blueprint turns a technical plan into a tracked Linear project with milestones, parent issues, sub-issues, and status updates. Use it for multi-step initiatives that need progress visibility and acceptance criteria.

MCP Linear Planner validates Linear MCP prerequisites and produces a deterministic action plan before any external writes. Use it to check tools, auth, context, and safety gates for planned Linear operations.

Nessus Vulnerability Scanning runs authorized Nessus assessments, validates findings, and produces prioritized remediation guidance. Use it for authenticated scans, false-positive triage, and rescan verification.

Network Engineering defines and executes network changes with explicit design evidence, validation steps, and rollback readiness. Use it for routing, DNS, firewall, load balancing, segmentation, and connectivity updates.

OS Platform defines and executes operating system baseline, hardening, and patching workflows with health checks. Use it for Linux or Windows server changes that need impact assessment, verification, and rollback readiness.

Plan To Blueprint turns a technical plan into a project skill blueprint with command routing, workflow contracts, manifests, and runbook links. Use it when you need persistent, rerunnable agent instructions from an implementation plan.

Plan Writing generates structured implementation plans from decisions and requirements. Use it to break work into tasks with dependencies, file targets, and verification criteria before execution.

Pod Security Admission implements Kubernetes PSA labels and defaults to roll out audit, warn, and enforce modes safely. Use it to migrate namespaces from PodSecurityPolicy or tighten pod security without disrupting workloads.

Syslog Centralization With Rsyslog implements centralized log collection with encrypted rsyslog forwarding, per-host routing, and durable queues. Use it to set up and validate secure, reliable syslog ingestion.

Trivy Container Security Scanning runs Trivy against images, filesystems, and config artifacts to find vulnerabilities, misconfigurations, secrets, and license issues. Use it to generate SBOMs, enforce severity gates, and publish findings for triage.