Crow Executive Report
Bundles the executive report workflow, templates, schema, dashboard assets, and renderer. Use with the Crow Executive Summary Report Agent.
Crow Sonar Scan
Triggers when the user asks for a code analysis, quality scan, or SonarQube / SonarCloud scan using the sonar-mcp server.
Crow Architecture Review
Bundles the architecture review workflow and document template. Use with the Crow Architecture Review Agent when creating or updating architecture documentation.
Skill Author
Scaffolds a new skill profile in this repo and fills in the required SKILL.md structure when a contributor wants to add a skill.
N8n Runbook Parser
Tangle code out of prose runbooks and wikis into version-controlled snippets, per source and losslessly, and detect doc/code drift. Use it to author or extend a RunbookParser config.yaml, run the parser (ingest, check, seal, diff), turn raw snippets into safe parameterized building blocks for n8n, or backport a snippet fix to the source doc.
Openshift Deployment
BC Gov Private Cloud OpenShift workload-manifest guidance: picking the right controller (Deployment, StatefulSet, DaemonSet, Job, CronJob) and shaping it for the platform — container resources and QoS, namespace LimitRange defaults, pod and container securityContext hardening (runAsNonRoot, drop ALL capabilities, no privilege escalation, read-only root filesystem) for the restricted-v2 SCC, liven…
Github Repo Setup
Assess GitHub repository maturity against BC Gov DevOps and security standards. Generates a MATURITY_REPORT.md scorecard covering branch protection rulesets, TypeScript strictness, Renovate preset tracing, vulnerability SLAs, CI/CD quality gates, and OpenShift container security. Use when onboarding repos, running compliance reviews, or evaluating vendor conformance.
N8n Workflow Builder
Compose and chain cleaned snippets into n8n operational triage workflows — a webhook trigger, read-only idempotent triage steps in order, and a markdown-to-HTML response served back to the caller. Produces n8n workflow JSON in tools/n8n/workflows/ ready to POST to the n8n API (you post it, not the skill), plus a local_workflow.sh equivalent a developer can run without n8n. Use when building or it…
Github Actions
BC Gov hardening patterns for GitHub Actions workflows — deny-all `permissions: {}` baseline with per-job step-ups, first-party tag vs third-party SHA pinning, fork-gate, single results-aggregator required check, pinned ubuntu-24.04 runners, script-injection-safe env handling, and signed-commit ruleset interaction. Covers `.github/workflows/*.yml`, `dependabot.yml`, and the branch-protection / re…
Azure Networking
Azure subnet, NSG, and private-endpoint patterns for adding subnets inside an existing VNet — atomic NSG-at-creation, per-service delegation, PE subnet layout, ARM write serialization, and reference NSG layouts for PE, APIM, App Gateway, and Container Apps subnets. Tool-agnostic guidance with Terraform (azapi_resource), Bicep, and az CLI examples. Use when adding subnets, debugging delegation or…
Skill Validator
Validates skill profiles against the spec and explains how to fix failures before a PR is opened or merged.
Crow Security Review
Provides language- and framework-specific detection pattern modules that guide manual security code review — authorization gaps, framework misconfigurations, cross-file data-flow tracing, secrets in infrastructure files, deserialization risks, crypto/transport issues, API/session security flaws, and frontend SPA security. Use with the Crow Security & Dependency Review Agent or Crow Security Remed…