est-skills

Drop-in OpenCode skill definitions for engineering, security, and infrastructure workflows. Markdown-only — each skill auto-loads via trigger keywords.

📁 Repository Structure

est-skills/
├── README.md
├── LICENSE                            # CC BY 4.0
├── engineering-expert/                # Architecture, DevOps, databases, AI/ML, code quality
│   └── SKILL.md
├── security-expert/                   # AppSec, cloud security, compliance, incident response
│   └── SKILL.md
└── technical-infrastructure-expert/   # Developer tooling, data ops, AI governance, automation
    └── SKILL.md

🎯 Quick Start

Installation

# Clone to your OpenCode skills directory
git clone https://github.com/mdev34-lab/est-skills.git \
  ~/.config/opencode/skills/est

Usage

Skills auto-load when their trigger conditions match. Explicitly load with:

opencode skill load est/engineering-expert
opencode skill load est/security-expert
opencode skill load est/technical-infrastructure-expert

🏷️ Skills Overview

Skill	Description	Key Domains
engineering-expert	Architecture, DevOps, SRE, databases, AI/ML, prompt engineering, MCP, code quality.	DDD, Hexagonal, C4, ADRs, Terraform, Docker, Kubernetes, PostgreSQL, RAG, MLOps, Prompt Engineering
security-expert	Application security, cloud security, blockchain auditing, compliance, incident response, threat intelligence.	OWASP Top 10, AWS/Azure/GCP, SOC 2, GDPR, HIPAA, Penetration Testing, SIEM, Threat Intelligence
technical-infrastructure-expert	Developer tooling, platform engineering, data operations, AI governance, business process automation.	MCP, LSP, Semantic Indexing, Salesforce, Workflow Automation, AI Governance, IaC

📋 Trigger Keywords

engineering-expert

• "architecture", "DDD", "C4", "ADR", "hexagonal"
• "DevOps", "Terraform", "Kubernetes", "SLO", "monitoring"
• "PostgreSQL", "index", "query plan", "migration"
• "RAG", "MLOps", "vector DB", "fine-tuning"
• "MCP server", "LSP", "semantic index"
• "code review", "defensive coding", "git hygiene"
• "system prompt", "prompt test suite", "injection defense"

security-expert

• "OWASP", "injection", "XSS", "CSRF"
• "cloud security", "AWS security", "Azure security", "GCP security"
• "blockchain security", "smart contract audit", "Slither", "Mythril"
• "compliance", "SOC 2", "GDPR", "HIPAA", "PCI DSS"
• "incident response", "SEV1", "post-mortem", "runbook"
• "penetration testing", "vulnerability assessment", "threat modeling"
• "threat intelligence", "SIEM", "detection engineering"

technical-infrastructure-expert

• "MCP server", "Model Context Protocol"
• "LSP", "Language Server Protocol", "code intelligence"
• "semantic indexing", "code embeddings"
• "Salesforce", "workflow automation", "Zapier", "n8n"
• "data operations", "identity resolution", "data consolidation"
• "AI governance", "model quality", "agentic identity"
• "business process automation", "RPA", "process mining"
• "IaC", "Terraform", "CloudFormation", "CDK"

🔧 Skill Anatomy

Each skill follows a consistent structure:

---
name: skill-name
description: Dense, routing-optimized use case description
license: CC BY 4.0
metadata:
  author: mdev34-lab
  works_with: Any LLM
  tldr: One-line capability summary
---

# Skill Name

## Core Capabilities
## Deliverables
## Success Metrics

📜 License

All skills licensed under CC BY 4.0 — free to use, modify, distribute with attribution.

🤝 Contributing

1. Fork the repo
2. Add/modify skills
3. Follow the skill anatomy structure
4. Update this README with new skills/triggers
5. Submit PR

📞 Attribution

Author: mdev34-lab
GitHub: github.com/mdev34-lab/est-skills