LLM Mart Basic
@llm-mart · Joined Jun 2026
Cleans up a worktree after its branch has been merged: removes the worktree directory and deletes the local branch. Use when the user says '/worktree-merge' or asks to clean up a merged worktree.
Audits and optionally prunes git worktrees: current repo by default, cross-repo scan under ~/dev/ with --all. Use when the user says '/worktrees', 'audit worktrees', or 'prune worktrees'.
Provides the reference and principles for writing and editing skills well - the vocabulary that makes a skill predictable. Use when creating, writing, editing, reviewing, or refactoring an agent skill.
Designs and reviews ArgoCD Applications, ApplicationSets, AppProjects, sync policies, and Argo Rollouts progressive delivery. Use when the task involves ArgoCD manifests, sync behavior, GitOps repo layout, or canary/blue-green rollouts. General Kubernetes and CI pipeline work bel
Designs and reviews AWS architecture, IAM, networking, and cloud cost. Use when the task involves AWS services, Terraform targeting AWS, a Well-Architected review, or AWS cost optimization. Not for GCP work (use GCP Expert); cross-provider IaC and pipeline concerns belong to DevO
Designs and reviews Node.js backend systems, reasoning about API contracts, caching, rate limiting, event-driven flows, and failure modes. Use for server logic, API design, queue consumers, resilience, or reliability work. Pairs with PostgreSQL Expert, who owns database internals
Threat-models code and architecture changes across trust boundaries, authn/authz flows, secrets handling, and injection surfaces, returning severity-ranked findings with concrete attack scenarios. Use when a change touches authentication, sessions, tokens, user-input processing,
Builds and reviews infrastructure-as-code, CI/CD pipelines, containers, and Kubernetes deployments. Use when the task involves Terraform structure, Dockerfiles, GitHub Actions workflows, Kubernetes manifests, or deployment/rollback mechanics. Provider-specific IAM and cost questi
Implements and reviews React/TypeScript frontend work covering component architecture, state management, rendering strategy, and web performance. Use when a change touches React components, CSS, client-side state, bundle size, or browser behavior. Full-access writer; pairs with U
Designs and reviews Google Cloud architecture, IAM, networking, and cloud cost. Use when the task involves GCP services, Terraform targeting GCP, gcloud operations, or GCP cost optimization. Not for AWS work (use AWS Expert); cross-provider IaC and pipeline concerns belong to Dev
Assesses data-handling changes for EU data subjects, judging lawful basis, DPIA triggers, PII flows, consent quality, retention, and data subject rights implementability, and returning severity-ranked findings that bridge legal obligations to engineering fixes. Use when a change
Designs and audits Google Tag Manager setups, covering server-side tagging on Cloud Run, Consent Mode v2, GA4, data layer schemas, and conversion APIs. Use for tag migrations, data layer design, consent-aware measurement, or tracking data quality issues. Pairs with GDPR Expert, w
Diagnoses and designs DNS, TLS, load balancing, CDN caching, and protocol-level behavior (TCP, HTTP, gRPC, WebSocket). Use when the task involves DNS records, certificates, LB or proxy configuration, CORS, timeouts, or intermittent connectivity issues. Cloud-provider resource pro
Designs and optimizes PostgreSQL schemas, queries, indexes, and migrations, reasoning from EXPLAIN plans and pg_stat data. Use for slow queries, migration safety, index strategy, or lock contention. Pairs with Backend Staff Engineer, who owns the application layer.
Reviews a pull request or working diff for correctness, security, and maintainability, returning severity-ranked findings with file:line references and a verdict. Use when asked to review a PR, code-review a diff, or given a PR number/URL. Read-only; pairs with Cybersecurity Expe
Reviews feature plans, specs, and user stories for problem framing, scope boundaries, and measurable success criteria. Use when planning a feature, writing user stories, prioritizing work, or defining how success will be measured. Advisory and read-only; pairs with the technical
Designs test strategy and writes tests at the right level, from unit to E2E, including diagnosing flaky suites. Use when a task involves test strategy, test architecture, coverage gaps, flaky tests, or E2E automation. Full-access writer; pairs with the implementing engineer whose
Shapes system architecture, reasoning about module boundaries, dependency direction, domain modeling, and long-term maintainability trade-offs. Use for system design, DDD, cross-module refactors, or architecture review. Pairs with Backend and Frontend Staff Engineers, who own imp
Reviews usability, accessibility, and interaction design of UI changes, returning severity-ranked findings. Use when a change touches user-facing UI, WCAG compliance, or interaction flows. Advisory and read-only; pairs with Frontend Staff Engineer, who implements.
Audits views for compliance with Apple's Sufficient Contrast accessibility nutrition label (WCAG 2.1 contrast ratios). Use when the user asks to check color contrast, audit contrast ratios, verify the Sufficient Contrast nutrition label, or review a view for accessibility.
Every VM came back. The cluster did not. Declarative systems converge on config, and the datapath isn't config.
A surprising share of AI-in-the-terminal failures aren't the AI. They're zsh, and a version of bash from 2006.
A Claude Code plugin turns standalone project configuration into a namespaced, installable extension that teams and communities can update as one unit.
None of the safety came from the model. It came from six boring habits.
Skills package instructions and references. Subagents run work in a separate context and return results. They solve different problems and can be composed deliberately.
Six hours in, one step left, everything green, and the incident that didn't happen
CLAUDE.md carries persistent project context. Skills load reusable procedures when relevant. Separating stable facts from task-specific workflows keeps both easier to maintain.
Twenty minutes recovering secrets that never existed, and the one sentence from a human that ended it
An API request routing a model's tool call through an approval gate to a remote MCP server
31 config keys, two audits, and why the first one was wrong in both directions
The official MCP Registry stores standardized server metadata rather than package code. Publishers verify a namespace, describe installation or remote access, and submit immutable versions.
Everyone looks at the Dockerfile. The file that actually leaked the key was the project file.
Remote MCP authorization uses established OAuth standards, but secure integration still requires issuer validation, least-privilege scopes, protected token handling, and server-side enforcement.
"Copy it over and switch the reference" is two steps, and the outage lives in the one nobody checks
stdio fits local processes and prototypes. Streamable HTTP fits hosted services and shared integrations. The right choice follows where the capability runs and who must reach it.
The most important rule wasn't about what I could change. It was about what I was allowed to display.
Tools perform operations, resources expose readable context, and prompts provide reusable templates. Choosing the correct primitive makes an MCP server easier to understand and govern.
Use MCP Inspector to connect to local or remote servers, inspect capabilities, call tools, read resources, test prompts, and diagnose failures before release.
Build an MCP server in TypeScript with focused tools, validated schemas, local and remote transports, Inspector tests, and production security controls.
An MCP server exposes tools, resources, or prompts through a standard protocol so an AI application can discover and use external capabilities.
/finding-triage
Finding triage
Triage open Blumira findings by severity, presenting a prioritized list for review
/investigate-finding
Investigate finding
Deep investigation of a specific Blumira finding with details, context, and comment history
/msp-overview
Msp overview
MSP dashboard showing all managed accounts with open finding counts and severity breakdown
/resolve-finding
Resolve finding
Resolve a Blumira finding with the appropriate resolution type and notes
/security-posture
Security posture
Overall security posture review including open findings by severity, agent coverage, and trends
/offboard-user
Offboard user
Run the complete CIPP M365 offboarding workflow for a departing user — capture audit state, revoke access, handle mailbox, reclaim licenses
/secure-score-report
Secure score report
Generate a portfolio-wide M365 security posture report — Secure Score equivalents, MFA enrollment, conditional access coverage, and domain authentication across all managed tenants
/standards-drift
Standards drift
Find tenants that have drifted from the MSP's configured CIPP standards baseline — missing standards, standards in Report-only mode, recent compliance failures
/tenant-health
Tenant health
Quick health snapshot for a single tenant — BPA failures, conditional access enforcement, MFA gaps, domain authentication, standards compliance
/log-time
Log time
Log a time entry (billable activity) against a Clio matter
/matter-summary
Matter summary
Consolidated view of one Clio matter — contacts, open tasks, recent activities, recent communications, and bills
/search-contacts
Search contacts
Search Clio contacts by name, company, or email
/search-matters
Search matters
Search or list Clio matters by name/client and status
/capacity-check
Capacity check
Capacity forecast for cloud resources, scoped to a resource type or covering everything connected
/cost-report
Cost report
Cloud cost anomaly and reclaimable-spend report for a given window
/network-sweep
Network sweep
Full network health sweep across all connected network-monitoring tools — devices down, degraded links, and topology changes
/drift-report
Drift report
Report control and configuration drift since the last known-good baseline for a client or the whole portfolio
/evidence-pack
Evidence pack
Build a source-cited compliance evidence package for a client against a named framework
/questionnaire
Questionnaire
Draft evidence-backed answers to the standard cyber-insurance questionnaire for a client
/list-computers
List computers
List computers in ConnectWise Automate with optional filters
AI coding platform for teams
19 views 0 likesAI Multi-Agent Framework in .NET
13 views 0 likesProduction-ready code examples for Telnyx AI Communications Infrastructure — Voice AI, SMS, SIP, and IoT APIs
12 views 0 likesUltraGameStudio - AI coding agent for game development: engine workflows, gameplay code, and asset generation.
12 views 0 likes🦞 ResearchClawBench: Evaluating AI Agents for Automated Research from Re-Discovery to New-Discovery
11 views 0 likesThe context-aware model router that learns & adapts to your long-horizon coding agent workflows. Lightweight & extensible, works with any harnesses, any models,…
19 views 0 likesOpen-source sandboxes where coding agents build and deploy. Spin up isolated environments where Claude Code, Cursor, and other agents code and deploy software.
22 views 0 likesNative desktop UI for Claude Code with orchestration, streaming, background agents, and multi-provider support. Built with Tauri + React.
21 views 0 likesOpenCode mobile client via Telegram: run and monitor AI coding tasks from your phone while everything runs locally on your machine. Scheduled tasks support.
16 views 0 likesTerminal session manager for AI coding agents. One TUI for Claude, Gemini, OpenCode, Codex, and more.
22 views 0 likesExposes internet search tools for use by LLM-backed Assist in Home Assistant
14 views 0 likesTemplates and workflow for generating PRDs, Tech Designs, and MVP and more using LLMs for AI IDEs
8 views 0 likesVersus Incident is the self-hosted AI SRE agent. It learns what your system normally look like and escalates only what is new or unexpected issues — routing to…
13 views 0 likesBrowser-native side panel for Hermes Agent — connect web context to your local Hermes runtime.
5 views 0 likesAgentic-friendly CLI generator for APIs: turn Swagger, OpenAPI, and google.api.http protos into single-binary CLIs with catalogs and generated Skills.
10 views 0 likesOpen-source agent platform for Global × China enterprises — wire every system through one agent core. Self-hosted, any LLM.
7 views 0 likesOfficial python implementation of UTCP. UTCP is an open standard that lets AI agents call any API directly, without extra middleware.
11 views 0 likesAn agent small enough to run anywhere. A minimal agentic runtime in C — ~380 lines, 54KB binary, ~2MB RAM. A skill file + an LLM + a shell loop, no framework.
9 views 0 likesAgentiLoop Agent! An Autonomous Agentic Agent for Mac, and exclusive Apple only harnesss. Suppprtd automation, scripting, coding, build anything and more. Power…
9 views 0 likes微信公众号 AI 运营助手 | 选题、写稿、审稿、排版、配图、发布全流程 Skill,支持 OpenClaw / Claude Code / Cursor / Codex
15 views 0 likes