Notre avis
Cette compétence effectue une revue de code axée sur l'infrastructure en utilisant six listes de vérification spécialisées pour évaluer l'IaC, les pipelines CI/CD, les migrations, la journalisation et l'observabilité.
Points forts
- Couverture complète de plusieurs domaines (IaC, CI/CD, migrations, logging, observabilité)
- Listes de vérification structurées pour une analyse systématique
- Accent sur la sécurité et les risques opérationnels
- Évaluation de la préparation à la production avec des recommandations claires
Limites
- Nécessite l'agent senior-review-specialist qui peut ne pas être disponible dans tous les environnements
- La qualité de la revue dépend de la complétude des listes de vérification
- Peut manquer des problèmes spécifiques à certains frameworks ou outils non couverts
À utiliser lors de la revue de modifications d'infrastructure avant un déploiement en production.
À éviter pour des changements de configuration simples ou des revues de code applicatif sans impact sur l'infrastructure.
Analyse de sécurité
SûrThe skill only instructs spawning a review agent to run read-only operations (git diff, reading files) and apply checklists. There is no command execution, network access, or data exfiltration risk. It is a purely analytical template.
Aucun point d'attention détecté
Exemples
Run an infrastructure-focused review on the current branch. Apply all six checklists: infra, CI, release, migrations, logging, and observability. Generate a full report with blocker issues, high/medium priorities, infrastructure map, and operational readiness assessment.Perform a pre-deployment infrastructure review for the changes in this pull request. Focus on deployment safety, security misconfigurations, and rollback capabilities. Use the senior-review-specialist agent with the infrastructure checklists.name: review:infra description: Infrastructure-focused review covering IaC, CI/CD, releases, migrations, logging, and observability. Spawns the senior-review-specialist agent for infrastructure analysis.
Infrastructure Code Review
Run an infrastructure-focused review using 6 infrastructure checklists via the senior-review-specialist agent.
Instructions
Spawn the senior-review-specialist agent to perform this review.
Checklists to Apply
Load and apply these review checklists:
commands/review/infra.md- Deployment config, least privilege, operational claritycommands/review/ci.md- Pipeline security, deployment safetycommands/review/release.md- Versioning, rollout, migration, rollbackcommands/review/migrations.md- Database migration safetycommands/review/logging.md- Secrets exposure, PII leaks, wide-eventscommands/review/observability.md- Logs, metrics, tracing, alertability
Agent Instructions
The agent should:
- Get working tree changes: Run
git diffto see all changes - Identify infrastructure files:
- Terraform, CloudFormation, Kubernetes manifests
- CI/CD pipelines (GitHub Actions, GitLab CI, etc.)
- Migration files, deployment scripts
- Logging and monitoring configuration
- For each changed file:
- Read the full file content
- Go through each diff hunk
- Apply all 6 infrastructure checklists
- Look for security misconfigurations and operational risks
- Cross-reference related files: Check environment configs, secrets handling
- Assess blast radius: What could go wrong in production?
Output Format
Generate an infrastructure review report with:
- Critical Issues (BLOCKER): Security misconfigurations, deployment risks
- High Priority Issues: Missing guardrails, cost explosions
- Medium Priority Issues: Observability gaps, operational hazards
- Infrastructure Map: Components, dependencies, deployment topology
- Operational Readiness: Logging, alerting, rollback capabilities
- File Summary: Infrastructure issues per file
- Overall Assessment: Production readiness recommendation
Architecte Docker Compose
DevOps
Concoit des configurations Docker Compose optimisees.
Rapport de Post-Mortem
DevOps
Rédige des rapports post-mortem d'incidents structurés et blameless.
Créateur de Runbooks
DevOps
Crée des runbooks opérationnels clairs pour les procédures DevOps courantes.