Skills

• SkillUSD 2

  Postmortem Write-up

  Writes the blameless post-incident document that is actually worth reading: the honest timeline, the causes past the convenient one, what went well, and actions that would have changed this incident — not a compliance artefact.

  Best for: Incidents that deserve learning, getting a template instead

• SkillUSD 2

  On-call Handover

  Structures the on-call shift change so nothing falls through the gap: active situations with their state and next steps, the week's pattern, landmines ahead — written, consistent, five minutes to read.

  Best for: Rotations where the new shift learns by surprise

• SkillUSD 2

  Incident Timeline

  Reconstructs what actually happened during an incident, minute by minute, from the scattered evidence — logs, alerts, chat, deploys — into the single sequenced record that the postmortem, the customer notice and the lawyers can all trust.

  Best for: Post-incident confusion about what happened when

• SkillUSD 2

  Alert Tuning

  Audits your alerting against what actually happened: which alerts fire and get ignored, which incidents arrived unannounced, which thresholds are folklore — then retunes so a page means something again.

  Best for: Alert channels the team muted in self-defence

• SkillUSD 2

  SLO Definition

  Defines service-level objectives that mean something: the user journeys that matter, the indicators that measure them honestly, targets set from reality — and the error budget that turns reliability into a decision instead of an argument.

  Best for: Teams arguing reliability by anecdote ('it feels flaky')

• SkillUSD 2

  Backup Restore Drill

  Designs and runs the drill that proves your backups are real: restore from actual backup media to a working system, measure the time, verify the data — because an unrestored backup is a hope, not a plan.

  Best for: Backups that have never once been restored

• SkillUSD 2

  Secrets Rotation Plan

  Plans the rotation of your credentials — API keys, database passwords, signing secrets, tokens — without the outage that makes teams scared to rotate: inventory, order, overlap windows, verification, and the emergency version for the day one leaks.

  Best for: Secrets unchanged since the person who set them left

• SkillUSD 2

  Lightweight Threat Model

  Runs a threat-modelling session sized for real teams: what you are building, what can go wrong, what you will do about it — a structured hour that finds the design-level flaws code review cannot see.

  Best for: New features touching money, data or access

• SkillUSD 2

  Pre-release Security Pass

  Runs the security checklist a release deserves: the authentication and authorization checks, input handling, secrets, headers, dependencies — the systematic pass that catches the common holes before the internet does.

  Best for: Releases shipping without any security review at all

• SkillUSD 2

  Dependency Update

  Executes a dependency update properly: reads what actually changed, maps the breaking changes to your real usage, upgrades in testable steps, and proves nothing broke — the difference between updating and gambling.

  Best for: The major-version bump everyone has been postponing

Also see the Agents.