Hit the Cloudflare REST API directly for operations that wrangler and MCP can't handle well. Bulk DNS, custom hostnames, email routing, cache purge, WAF rules, redirect rules, zone settings, Worker routes, D1 cross-database queries, R2 bulk operations, KV bulk read/write, Vectorize queries, Queues, and fleet-wide resource audits. Produces curl commands or scripts. Triggers: 'cloudflare api', 'bulk dns', 'custom hostname', 'email routing', 'cache purge', 'waf rule', 'd1 query', 'r2 bucket', 'kv bulk', 'vectorize query', 'audit resources', 'fleet operation'.
Execute raw GraphQL queries and mutations against the Linear API. Use for advanced operations not covered by other commands.
- 📄 error-handling-guide.md
- 📄 examples.md
- 📄 SKILL.md
Creates RPC-style endpoint following layered architecture (Controller → Manager → Repository). Use when creating new API endpoints or CRUD operations.
- 📁 evals/
- 📁 references/
- 📄 SKILL.md
Use this skill whenever the user needs to manage VMs in VMware/vSphere/ESXi — it's the entry point for all VM operations.
- 📄 error-handling-guide.md
- 📄 examples.md
- 📄 SKILL.md
Creates RPC-style endpoint following layered architecture (Controller → Manager → Repository). Use when creating new API endpoints or CRUD operations.
- 📄 index.js
- 📄 package.json
- 📄 SKILL.md
ZIP file operations for creating and extracting archives.
- 📁 references/
- 📁 scripts/
- 📄 SKILL.md
Alarm operations skill. List alerts, analyze alert rule context with datasource-enriched resource facts, and perform alert status operations with remediation guidance.
Zephyr Scale CLI - manage test resources, run test cycles interactively, and automate test operations
- 📁 .github/
- 📁 docs/
- 📁 python/
- 📄 .gitignore
- 📄 AGENTS.md
- 📄 Cargo.lock
Use when about to run git branching, commit, push, or PR operations in a repo managed by ez-stack. Provides the complete command reference and agent-specific usage patterns.
- 📁 references/
- 📄 .gitkeep
- 📄 SKILL.md
Playbook for authoring, running, evaluating, and improving Gina sandbox workflows with safe defaults and repeatable operations.
Use when working with gh CLI. Provides patterns for PRs, issues, reviews, and repository operations.
Structured code review methodology for PRs. Prioritizes correctness, flags common anti-patterns, enforces scope discipline, checks test coverage, and provides actionable feedback. Language-agnostic. --- ## Skill: Code Reviewer You are running with the code-reviewer skill active. Apply a structured, evidence-based review methodology to every PR you review. ### Review Priorities Review in this order. Stop blocking on lower priorities if higher ones are clean. 1. **Correctness** — Does it solve the stated problem? Does it break existing behavior? 2. **Security** — Injection, auth issues, secret exposure 3. **Reliability** — Error handling, failure modes, edge cases 4. **Performance** — N+1 patterns, unnecessary allocations, algorithmic complexity 5. **Maintainability** — Readability, naming, patterns consistency 6. **Style** — Formatting, conventions (never block on style alone) ### Common Patterns to Flag #### Silent error swallowing - Empty `catch`/`except`/`rescue` blocks or ones that only log and continue - Ignored return values from fallible operations - Suppressed errors: `|| true`, `2>/dev/null`, bare `except: pass`, `_ = err` #### N+1 and loop inefficiency - API calls, database queries, or file reads inside loops - Missing eager loading / batch operations (e.g., `prefetch_related`, `include`, `DataLoader`, `JOIN`, batch API calls) - Repeated expensive computations that could be hoisted out of the loop #### Race conditions - Shared mutable state accessed from async or concurrent contexts without guards - Check-then-act patterns without atomicity (TOCTOU) - Missing locks, mutexes, or atomic operations on concurrent data access #### Boundary issues - Missing input validation at trust boundaries (user input, API responses) - Unsafe type casts or assertions without runtime checks - Off-by-one errors in range, slice, or index operations #### Backwards compatibility - Renamed or removed public APIs without migration path - Changed function signatures that break existi