# The Skills Barn

> 326 open, production-ready Agent Skills across 10 engineering domains, in the SKILL.md open format. Free and open source (Apache 2.0). Built for the tasks language models cannot do reliably from training alone — live data, heavy compute, or deterministic validation against a standard.

Skills are free. Skills that need live data or heavy compute call a metered API endpoint with a free tier and agent-native x402 payment (pay per call in USDC).

- [GitHub repository](https://github.com/Zero-Human-Corp/the-skills-barn): all 326 skills, cloneable
- [Machine-readable manifest](https://the-skills-barn.pages.dev/manifest.json): every skill indexed

## Catalogs

### DevOps & Infrastructure (50 skills)
Threat modeling, CI/CD, cloud security, IaC, and monitoring skills for infrastructure teams. — [page](https://the-skills-barn.pages.dev/catalogs/devops-infrastructure.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/devops-infrastructure)

- Anomaly Detection (live-data): Use machine learning to identify unusual patterns in infrastructure metrics or system behavior.
- Automated Error Diagnosis (free): Parse build logs and runtime errors to provide contextual explanation and automated fixes.
- Automated Mitigation Strategy Formulation (free): Generate actionable technical safeguards and configuration changes that address specific infrastructure threats.
- Automated Pipeline Deployment (free): Standardize the sequence of building, testing, and deploying software changes across environments.
- Automated Testing Integration (free): Embed unit, integration, and end-to-end tests into the delivery chain to validate code quality.
- Behavioral Tracking & Monitoring (free): Track system-level behavioral patterns and operational activity for efficiency analysis.
- CIA Triad Impact Assessment (free): Evaluate threats against the Confidentiality, Integrity, and Availability of data and services.
- Configuration Management (free): Automated management of software state and configuration so systems hold a defined desired state.
- Container Security Hardening (live-data): Secure container images, runtimes, and orchestration platforms against vulnerabilities and misconfiguration.
- Cross-Platform Integration (free): Ensure pipeline compatibility and data flow between disparate development tools and cloud providers.
- Data Flow Diagram (DFD) Analysis (free): Track how data moves through architectural services and storage points to find leakage risks.
- Deployment Strategy Management (free): Implement release patterns such as blue-green, canary, or rolling updates to minimize downtime.
- Distributed Tracing (live-data): Track and profile requests as they move across multiple distributed services and components.
- Drift Detection & Remediation (live-data): Identify and fix discrepancies between the state defined in code and the actual live environment.
- Environment Provisioning (free): Automatically set up transient or permanent environments required by specific pipeline stages.
- Environment Templating (free): Create reusable modules for standardized staging, production, and development environments.
- Ephemeral Environment Orchestration (free): Spin up and tear down temporary environments automatically for feature testing or pull-request previews.
- IaC Risk Assessment (live-data): Evaluate infrastructure definitions for security risk, syntax error, and configuration drift before deployment.
- Identity & Access Management (IAM) (live-data): Configure and audit granular permissions, roles, and trust boundaries for human and machine identities.
- Immutable Infrastructure Design (free): Create server images that are never modified after deployment and are replaced entirely for updates.
- Incident Response Playbook Generation (free): Create actionable, role-specific response steps for scenarios such as ransomware or data breach.
- Infrastructure Cost Estimation (live-data): Pre-deployment analysis of code that predicts monthly expenditure changes from proposed infrastructure shifts.
- Infrastructure Cost Optimization (live-data): Analyze resource utilization patterns to identify waste and produce rightsizing recommendations.
- MITRE ATT&CK Mapping (live-data): Align identified system threats to known adversary tactics and techniques for better defensive alignment.
- Multi-Provider Adapter Management (free): Standardize interfaces across cloud or tool providers for consistent API interaction inside a pipeline.
- PII Exposure Scanning (live-data): Identify personally identifiable information in logs or codebases to maintain data-privacy compliance.
- Performance Reporting (free): Generate structured reports on system health and latency against organizational standards.
- Pipeline Performance Analytics (live-data): Analyze build times and failure patterns to optimize developer velocity and DORA metrics.
- Pipeline Security Scanning (live-data): Integrate security audits and vulnerability scanning directly into the CI/CD pipeline.
- Policy as Code (PaC) Enforcement (live-data): Automate compliance rules inside IaC templates to prevent non-compliant resources being created.
- Predictive System Assessment (live-data): Use scoring systems and historical data to predict system failure or critical process mortality.
- Privilege Access Auditing (live-data): Audit agent permission boundaries so autonomous agents cannot exceed their intended authorization level.
- Real-time Log Aggregation (live-data): Collect, stream, and query logs from distributed systems for centralized debugging.
- Resource Metrics Monitoring (live-data): Track and visualize CPU, memory, and network usage at container or instance level.
- Resource Provisioning (free): Define and deploy cloud infrastructure using declarative, machine-readable configuration files.
- Rollback Automation (free): Implement automated procedures that revert to a previous stable state on deployment failure.
- SSL Certificate Lifecycle Monitoring (live-data): Track certificate expiry dates and automate renewal to prevent avoidable downtime.
- STRIDE Threat Classification (free): Map identified vulnerabilities to Spoofing, Tampering, Repudiation, Information disclosure, Denial of service, and Elevation of privilege.
- Secret Management (live-data): Secure handling, storage, and rotation of API keys, passwords, and certificates in cloud environments.
- Security Boundary Identification (free): Define the trust boundaries and perimeters within an infrastructure architecture to isolate sensitive components.
- Security Compliance Auditing (live-data): Automated scanning of infrastructure against regulatory frameworks such as PCI DSS, HIPAA and SOC 2, and against security best practice.
- Security Control Mapping (NIST 800-53) (live-data): Identify the specific regulatory controls and mitigations required by an identified system threat profile.
- Self-Healing Pipeline Repair (free): Automatically fix minor structural errors in pipeline task arguments or malformed headers to prevent workflow halts.
- Service Level Objective (SLO) Tracking (live-data): Calculate real-time error budgets and availability metrics against defined infrastructure targets.
- Software Supply Chain Security (live-data): Detect vulnerable, outdated, or malicious packages in the project dependency tree.
- State File Management (live-data): Securely store and lock infrastructure state files to enable collaborative and safe updates.
- System Architecture Decomposition (free): Break complex system diagrams or descriptions into granular components for security evaluation.
- Threat Scenario Enumeration (free): Generate comprehensive lists of potential attack scenarios from identified infrastructure components.
- Vulnerability Identification (live-data): Automated discovery and triage of security weaknesses in network systems, applications, or cloud configurations.
- Vulnerability Prioritization (live-data): Rank potential system threats by risk level and business impact to guide remediation effort.

### Systems Engineering (94 skills)
Requirements, architecture, verification, and safety-critical engineering skills. — [page](https://the-skills-barn.pages.dev/catalogs/systems-engineering.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/systems-engineering)

- API Analytics and Telemetry (live-data): Monitor usage patterns, error rates and latency percentiles in real time.
- API Discovery and Cataloging (live-data): Automate visibility of internal and external APIs and map remote endpoints to agent connector protocols.
- API Governance and Audit (live-data): Enforce design standards and keep immutable logs of every tool call for compliance.
- API Monetization Execution (live-data): Implement billing, tiered pricing and pay-per-call settlement for API access.
- API Sandboxing (live-data): Create isolated environments for testing integrations without touching production data.
- AST Structural Mapping (deterministic): Generate and update abstract syntax trees to hold a live structural map of codebase relationships.
- Ansible Playbook Validation (deterministic): Check server orchestration playbooks deterministically for syntax and logic errors.
- Attack Tree Modeling (deterministic): Structure attack methods as trees and propagate cost, probability and difficulty metrics up to the root goal.
- Audio Chapter Generation (live-data): Identify logical topic shifts in audio and produce chaptered timestamps.
- Audio Language Detection (live-data): Identify the primary spoken language in an audio file before transcription runs.
- Automated Test Execution (live-data): Run unit and integration suites in isolated sandboxes and interpret the failure logs.
- BOM Structural Validation (live-data): Check a bill of materials against manufacturing constraints, component lifecycle status and the logical design.
- Bounding Box Region Search (deterministic): Search document content by spatial region and proximity rather than by text order.
- CI CD Pipeline Architecture (free): Map and automate deployment pipelines to surface security bottlenecks and failure points.
- Change Impact Evaluation (deterministic): Predict downstream and ripple effects of a requirement change through graph-based reachability analysis.
- Chart Data Extraction (live-data): Parse charts and graphs to recover the underlying numerical series as structured data.
- Cloud Cost Anomaly Detection (live-data): Monitor cloud billing in real time to find idle resources and unexpected spend spikes against a learned baseline.
- Cloud Disaster Recovery Testing (live-data): Verify cloud disaster-recovery protocols procedurally to confirm resilience against regional outage.
- Cloud Security Posture Management (live-data): Continuously monitor cloud configuration to prevent insecure storage, ports and network settings.
- Communication Protocol Translation (deterministic): Map and verify data packets between industrial and aerospace communication standards.
- Conflict Detection Logic (deterministic): Verify specifications algorithmically to find contradictory parameters and constraints across engineering disciplines.
- Containerized Orchestration (free): Configure, harden and deploy Docker and OCI images, including MCP servers, across local and cloud environments.
- Database Migration Guardian (deterministic): Check database migrations for locking behaviour and schema constraints to guarantee zero-downtime changes.
- Document Alignment Validation (deterministic): Verify that generated documentation stays aligned with the technical implementation and its references.
- EMI EMC Shielding Specification (deterministic): Calculate electromagnetic interference thresholds and specify shielding materials against signal integrity standards.
- Execution Log Streaming (live-data): Capture and redirect process output from model-driven processes to monitoring in real time.
- External File Injection (free): Mount specific datasets and volumes into isolated sandboxes programmatically.
- Failure Mode Effects Analysis (deterministic): Execute structured failure propagation and risk priority scoring over a component dependency graph.
- Feature Rollout Control (live-data): Manage staged feature rollouts and experiments through tokenized flag systems.
- File System Dependency Tracing (deterministic): Trace architectural dependencies across files using graph-based relationship modeling.
- Formal Methods and Model Checking (live-data): Use mathematical proof to verify a system meets safety specifications without exhaustive testing.
- Formal Specification Synthesis (deterministic): Translate natural-language requirements into mathematically verifiable formal methods or machine-readable ReqIF and XML.
- GDPR Contract Review (live-data): Identify risky data-processing clauses in contracts against GDPR requirements.
- Go Concurrency Pattern Auditing (deterministic): Trace lock acquisition order to find deadlocks and race conditions in channel-based logic.
- HIPAA Readiness Audit (live-data): Check infrastructure and data handling against US healthcare privacy requirements including protected health information handling.
- Hardware in the Loop Testing (live-data): Integrate physical hardware with simulated environments to exercise real-time control logic.
- High Availability Setup (free): Configure service replication and health checking to hold a stated uptime target.
- Interface Control Document Generation (deterministic): Create and format structured data-exchange protocols and interface standards between system modules.
- Invoice Schema Auto Discovery (live-data): Determine the structure of unfamiliar invoice formats programmatically for field extraction and validation.
- Kubernetes Configuration Auditing (deterministic): Analyze manifests and Helm charts to find configuration errors, insecure RBAC and single points of failure.
- LINDDUN Privacy Analysis (free): Apply the LINDDUN privacy threat taxonomy to find linkability, identifiability, and disclosure risks in a system design.
- Latency Path Analysis (deterministic): Calculate worst-case execution time and end-to-end data latency across distributed or heterogeneous designs.
- Latency and Throughput Benchmarking (live-data): Measure requests per second and tail latency percentiles to locate bottlenecks.
- Layout Preserved Extraction (live-data): Extract text and tables while preserving physical structure and spatial relationships using vision models.
- MBSE Modeling Validation (deterministic): Validate SysML and model-based systems engineering models against logical consistency and structural integrity rules.
- MISRA Static Code Analysis (live-data): Analyze source for vulnerabilities and non-conformance to MISRA and AUTOSAR safety coding standards.
- Mathematical Formula Recognition (live-data): Convert visual mathematical notation into structured LaTeX with high precision.
- Memory Leak Binary Forensics (live-data): Analyze heap allocation and pointer errors at trace level in low-level language binaries.
- Monolith Refactoring (free): Break monolithic code into multi-file module structures with clear separation.
- Multi Document Splitting (live-data): Split batch-scanned files into constituent documents using detected visual boundaries.
- Multi Gateway Management (free): Consolidate multiple API gateways into a single control plane.
- Multilingual Audio Pipeline (live-data): Run multi-stage transcription, translation and localized reformatting across languages.
- Network Egress Control (live-data): Define and enforce granular network access policy and proxying for execution environments.
- Network Topology Optimization (deterministic): Determine efficient data pathing and addressing layers for complex physical or private clusters.
- OCTAVE Risk Evaluation (free): Conduct operationally critical threat, asset and vulnerability evaluation for organizational risk management.
- OWASP Security Review (live-data): Audit web applications against OWASP guidance and produce specific remediation steps.
- OpenAPI to MCP Transformation (deterministic): Convert standard API specifications into agent-callable Model Context Protocol servers.
- PASTA Attack Simulation (free): Run the risk-centric PASTA process to analyze threats from an attacker's perspective against defined business value.
- PCI DSS Payment Audit (live-data): Verify payment processing workflows and tokenization against the PCI Data Security Standard.
- PDF A Archival Conversion (deterministic): Convert documents to the PDF/A standard deterministically for long-term preservation.
- Parallel Execution Scheduling (live-data): Orchestrate multiple agent sandboxes and subprocesses across distributed clusters.
- Parameter Sensitivity Analysis (deterministic): Calculate how variable changes propagate through a system requirement set and its technical performance measures.
- Power and Thermal Budgeting (deterministic): Calculate peak current draw, voltage drop, heat dissipation and cooling paths for hardware subsystems.
- Prompt Injection Defense (live-data): Filter and block hidden instructions in model inputs before any tool executes.
- Python Type Annotation Enforcement (deterministic): Check type completeness and unused imports deterministically, with structural refactoring applied automatically.
- Quality Scoring and Ambiguity Filtering (deterministic): Apply quantitative metrics and syntax patterns to flag non-deterministic words and weak phrases in engineering text.
- Quota Management and Rate Limiting (live-data): Implement technical caps and traffic shaping to prevent abuse and allocate capacity.
- Readability Benchmarking (deterministic): Evaluate code and document readability against rule-based hygiene metrics.
- Readiness Gate Enforcement (deterministic): Enforce explicit gates requiring named artifacts to exist before execution is allowed to proceed.
- Redundancy Logic Verification (deterministic): Verify failover mechanisms and standby configurations through state-machine simulation and mathematical modeling.
- Regression Suite Optimization (deterministic): Identify the minimum set of tests giving maximum coverage after a system change.
- Regulatory Compliance Mapping (live-data): Align design documents with ISO, IEC and NIST standards through deterministic checklists and cross-referencing.
- Resource Quota Enforcement (live-data): Enforce hard limits on CPU, resident memory and execution time to prevent resource exhaustion.
- Rust Borrow Checker Diagnostics (free): Explain ownership and borrow violations with memory diagrams and safety invariant analysis.
- Rust Lifetime Annotation Mapping (free): Design explicit lifetime relationships and elision rules for complex ownership trees.
- SOC2 Compliance Package Builder (live-data): Collect and format the evidence required for a SOC 2 Type I or Type II audit.
- Safety Goal Allocation (deterministic): Distribute safety integrity levels across subsystems from hazard analysis, following the governing functional-safety standard.
- Schema Drift Detection (live-data): Monitor external API responses for changes that break downstream parsing without raising an error.
- Segment Based Audio Processing (deterministic): Split long-form audio into chunks for parallelized or high-throughput inference.
- Stakeholder Mapping Analysis (free): Identify interface points and technical owners between engineering stakeholder groups.
- Standardized Templating (free): Manage Docker and Nix-style configurations so tool execution stays consistent between environments.
- State Cleansing and Sanitization (deterministic): Ensure a workspace is fully wiped of credentials and sensitive data before it is reused.
- Structural Hygiene Enforcement (deterministic): Check documents and code against mandatory baselines for structure and formatting.
- Symbolic Execution (live-data): Explore program state symbolically to target specific functions for verification.
- Traceability Matrix Automation (deterministic): Maintain bilateral mapping between requirements, design elements and components through unique identifiers and structured metadata.
- Unit Test Generation (free): Generate happy paths, edge cases and parameterized tests from functional logic analysis.
- Unsafe Rust Code Auditing (deterministic): Verify raw pointer arithmetic and safety invariants, rating unsafe blocks as sound or unsound.
- VAST Collaborative Modeling (free): Produce data-flow and process-flow diagrams that let engineering and operations teams model threats together.
- Verification Loop Auditing (free): Implement human-in-the-loop checkpoints and evidence requirements before an agent advances state.
- Voice Activity Detection (live-data): Filter non-speech noise and segment audio streams by speech presence.
- Voice Commanded Execution (live-data): Map vocal intent to executable function calls through grammar-constrained decoding.
- Weight and Balance Integration (deterministic): Track component physical properties to maintain equilibrium constraints and centre of gravity.
- Whisper Hallucination Suppression (deterministic): Detect and remove repetitive or fabricated output from speech transcription.
- World Context Injection (free): Handle environment parameters and reflection metadata for engine-specific calls.

### Project Management (54 skills)
Planning, decomposition, resourcing, and delivery skills for agentic project work. — [page](https://the-skills-barn.pages.dev/catalogs/project-management.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/project-management)

- API-First Design Blueprinting (deterministic): Design the API contract as a project blueprint before any backend development starts.
- Agent Email Dispatch (free): Send outbound messages on a user's behalf with deduplication, idempotency keys, and an explicit send gate.
- Agent Sandbox Isolation (live-data): Provision secure execution environments so agent-generated code runs without touching external systems.
- Agentic Observability (live-data): Log and trace agent decisions to diagnose behavior and satisfy audit requirements in regulated settings.
- Agentic Prompt Translation (free): Translate vague project instructions into precise prompts for specific downstream tools.
- Agile Ceremony Facilitator (free): Structure standups, retrospectives, and planning sessions automatically from current team data.
- Automated Code and PR Review (live-data): Enforce coding standards, style compliance, and security scanning on project pull requests, and gate merges on the result.
- Automated Performance Monitoring (live-data): Track project health metrics such as response times and error rates in real time using analytics.
- Automated Skill Evolution (live-data): Improve and update skills automatically in response to recurring errors or model behavior changes.
- Branded Report Formatting (deterministic): Apply organization-specific brand guidelines and styling to generated project documents.
- Browser Agent Navigation (free): Evaluate screenshots and parse the document object model to locate and interact with page elements reliably.
- Budget Risk Auditor (live-data): Scan project spending and resource allocation to flag deviations from the baseline budget.
- CRM Record Operations (free): Search, read, and modify customer and contact records safely, keeping retrieval strictly separate from modification.
- Complexity Deconstruction (deterministic): Define and check for over-complexity in project findings so scope creep is caught before it is committed to.
- Conditional Workflow Orchestration (deterministic): Manage multi-step project tasks where each step depends on the validation outcome of the one before it.
- Context Compaction (live-data): Trim or summarize older conversation history so reasoning quality does not degrade as the session grows.
- Context Engineering (free): Curate what the model sees and when, by designing retrieval pipelines and memory architecture.
- Critical Task Sequencing (deterministic): Ensure critical project tasks execute in the specific order their dependencies require.
- Dependency Mapper (deterministic): Analyze project tasks to identify critical path overlaps and potential resource bottlenecks.
- Deterministic Data Sorting (deterministic): Sort and rank project data lists by priority, date, or allocation using executable code instead of token generation.
- Dynamic Asset Blueprint Injection (free): Supply specific templates at the moment a skill activates so output format is guided rather than guessed.
- ETL Content Transformation (free): Manage the extraction, transformation, and loading of content across project integrations.
- Execution Gap Management (free): Standardize how tasks get executed regardless of the underlying model's default habits.
- Feature Request Breaker (deterministic): Break vague one-liner feature requests into atomic, dependency-sorted engineering tickets ready to import into Jira or Linear.
- Governance and Access Policy Enforcement (live-data): Define and enforce security protocols and user permissions within a project ecosystem.
- Guardrail Enforcement (live-data): Build rules that block unsafe agent actions or require human approval before high-stakes tasks proceed.
- Harness Engineering (free): Design the full system around a model — tools, sandboxes, loops, and guardrails — so workflows actually complete.
- Incremental Plan Creation (free): Craft structured project plans covering research phases, sequencing, and delegation strategy.
- Intelligent Document Processing (live-data): Automate the processing and validation of project documentation through OCR and structured extraction.
- Knowledge Gap Bridging (live-data): Gather domain-specific knowledge from documentation and URLs to inform project context.
- Legal and Medical Reference Retrieval (live-data): Retrieve and cite primary legal or clinical source material for project decisions, with mandatory human professional review.
- Location-Based Task Execution (free): Manage the physical or logical location where project tasks must be performed.
- Low-Code Process Automation (free): Build and manage project workflows through visual drag-and-drop tooling instead of hand-written code.
- Meeting Synthesizer (live-data): Extract action items from transcripts, assign them to the right people from context, and draft follow-up messages.
- Multi-Step ReAct Coordination (free): Manage the reason-act-observe cycle so agents can handle long-running tasks that span sessions.
- PDF Project Form Manipulation (deterministic): Extract fields, validate required data, and programmatically fill PDF forms for project documentation.
- Payment History and Refund Handling (live-data): Retrieve transaction history for audit, and execute refunds only behind an explicit confirmation gate.
- Plan Structure Review (deterministic): Audit plans automatically so they follow consistent organizational templates and rules.
- Project Data Pipeline Ingestion (deterministic): Load and validate project input data from external files before downstream tasks consume it.
- Project Financial Compliance Validation (live-data): Validate project financial reports against specific regulatory standards using documented procedural knowledge.
- Project Risk Security Scanning (live-data): Scan project scripts and deliverables for vulnerabilities and malicious code execution risk.
- Prompt Engineering (free): Word inputs to get better responses and shape agent behavior through system instructions.
- Resource Allocator (deterministic): Optimize the distribution of human capital across multiple concurrent projects by skill set and availability.
- Scope Creep Detector (live-data): Compare new requirements against the original project charter to surface unauthorized scope expansion.
- Self-Verification Loop Design (free): Implement feedback loops where the harness checks its own work before declaring a task complete.
- Sprint Velocity Predictor (live-data): Calculate estimated completion dates from historical team performance and current backlog complexity.
- Stakeholder Sentiment Analyzer (live-data): Evaluate project communication logs to gauge stakeholder satisfaction and engagement.
- Structured Feedback Generation (deterministic): Produce parseable JSON results from complex project audits so downstream consumers can rely on them.
- Sub-agent Task Delegation (free): Split work across sub-agents and assign tasks so each context window stays clean and focused.
- Technical Debt Estimator (live-data): Analyze code review and ticket history to quantify technical debt incurred during a development cycle.
- Tool Orchestration (free): Manage how a model calls external APIs, databases, and search functions to execute real-world tasks.
- VPS Infrastructure Hardening (free): Configure and secure servers step by step using fixed scripts and templates rather than improvised commands.
- WBS Atomic Decomposition (deterministic): Ingest vague feature requests and break them into mutually exclusive, collectively exhaustive agile tickets following PMBOK work-breakdown p
- Workstream Resource Assignment (deterministic): Map the right people to the correct workstreams based on documented project requirements.

### Geospatial & Mapping (35 skills)
Routing, geocoding, isochrones, terrain, imagery, and spatial-join skills. — [page](https://the-skills-barn.pages.dev/catalogs/geospatial-mapping.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/geospatial-mapping)

- Automated Land Use and Feature Extraction (live-data): Infer land use, building footprints and countable assets from high-resolution imagery using computer vision.
- Batch Address Normalization (deterministic): Clean and standardize unstructured international address strings into canonical form against authoritative postal databases.
- Change Detection Monitoring (live-data): Detect construction progress, deforestation or structural damage by comparing temporal imagery sequences.
- Climate-Safe Service Area Analysis (live-data): Compute reachable areas within a time limit that also stay outside extreme heat, flood-hazard or disaster boundaries.
- Demographic Overlay Enrichment (live-data): Spatially join localized census, income and socioeconomic data onto user-defined trade areas.
- Detour-Minimizing POI Search (live-data): Find points of interest along an existing route, ranked by the minimal detour time each adds.
- Dynamic Multimodal Pathfinding (live-data): Calculate optimal routes across road, rail and pedestrian networks using real-time traffic, transit schedules and logistics constraints.
- EV Range-Aware Routing (live-data): Route electric vehicles using elevation change, ambient temperature, battery consumption models and live charging-station availability.
- Emergency Response Radius Calculation (live-data): Determine coverage areas for emergency services factoring siren-enabled speeds, priority signals and specialized road networks.
- Environmental and Proximity Risk Attribution (live-data): Join asset coordinates with licensed flood, fire, seismic and hazard layers to produce risk scores.
- H3 Hexagonal Grid Aggregation (deterministic): Encode geometry into the H3 index to perform high-speed spatial aggregation and joins without heavy geometry payloads.
- Hazardous Material Routing (live-data): Route hazardous-goods vehicles around restricted zones, tunnels and residential areas subject to licensed municipal regulations and bridge h
- High-Precision Reverse Geocoding (live-data): Convert precise coordinates into parcel-level addresses and tax-lot identifiers using licensed cadastral and government databases.
- Historical Place-Name Resolution (live-data): Match fuzzy, archaic or historical location strings to current high-precision coordinates using specialized gazetteer data.
- Hydrological Flow and Runoff Prediction (live-data): Simulate water movement over high-resolution terrain to predict runoff, flood risk and watershed boundaries.
- Indoor Micro-Positioning (live-data): Transform internal building signals such as BLE and WiFi into precise indoor floorplan coordinates where GPS is unavailable.
- LIDAR Surface Mesh and Slope Generation (live-data): Process raw LIDAR point clouds and high-resolution DEMs into structured 3D meshes for civil engineering and slope-stability assessment.
- Last-Mile Delivery Optimization (deterministic): Sequence multi-stop delivery routes to minimize fuel and time under fleet constraints and curb-access data.
- Massive Point-in-Polygon Attribution (live-data): Execute billions of joins between moving telemetry and licensed administrative, commercial or risk boundaries.
- N-by-M Travel-Time Matrix (live-data): Compute travel times and distances between every source-destination pair for dispatch and assignment optimization.
- Noisy GPS Snap-to-Road (deterministic): Map-match fragmented or noisy GPS recordings to a known road network to produce corrected paths with segment attributes.
- POI Semantic Enrichment (live-data): Link geocoded addresses to commercial metadata including brand, category, foot-traffic scores and building entrance points.
- Pedestrian Walkability Scoring (live-data): Generate reachability polygons from sidewalk connectivity, pavement quality and terrain slope for urban planning.
- Public Transit Reachability Analysis (live-data): Compute travel-time polygons from multi-agency transit schedules, live GTFS feeds and pedestrian delays.
- Real-Time Asset Intersection Tracking (live-data): Perform spatial joins between high-frequency GPS asset streams and static geofences using log-based capture.
- Retail Site Selection and Catchment Analysis (live-data): Intersect travel-time buffers with population density and competitor locations to estimate customer reach and market saturation.
- SAR Subsidence and Displacement Monitoring (live-data): Use synthetic-aperture radar to detect millimetre-level ground movement and structural stability regardless of cloud cover.
- Service Radius Validation (deterministic): Determine whether a customer location falls within a merchant's service isochrone for immediate fulfillment and pricing.
- Shadow-Based Building Height Estimation (deterministic): Calculate structure heights from satellite shadows using licensed sun-angle and orbital ephemeris data.
- Solar Irradiance and PV Potential (live-data): Estimate annual photovoltaic yield from roof pitch, terrain shading and aspect for renewable planning.
- Spatio-Temporal Cluster Analysis (live-data): Identify statistically significant clusters of events across both space and time.
- Time-Dependent Accessibility Mapping (live-data): Generate travel-time polygons using historical traffic to determine facility coverage at specific times of day or future timestamps.
- VPN and Proxy Geofencing Detection (live-data): Determine whether a coordinate or IP originates from a data center or proxy to validate location authenticity for compliance.
- Vegetation Health Indexing (NDVI) (live-data): Apply spectral analysis to multispectral feeds to monitor crop productivity, stress and wildfire fuel load.
- Viewshed and Line-of-Sight Modeling (deterministic): Calculate visibility across high-resolution elevation models for telecom, urban planning and site assessment.

### Web3 & Financial Ops (20 skills)
Smart-contract audit and DeFi liquidity skills with strict funds-safety controls. — [page](https://the-skills-barn.pages.dev/catalogs/web3-financial-ops.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/web3-financial-ops)

- Access Control Validation (deterministic): Test ownership, administrative roles, and permission structures to prevent unauthorized function calls.
- Arbitrage Opportunity Detection (live-data): Identify price discrepancies for the same asset across venues and quantify whether the spread survives costs.
- Automated Fuzzing (live-data): Inject randomized and edge-case inputs into contract functions to surface crashes and broken invariants.
- Bytecode Analysis (live-data): Decompile and analyze deployed bytecode when source is unavailable or unverified.
- Collateral Health Monitoring (live-data): Assess loan-to-value ratios and distance to liquidation thresholds across lending positions in real time.
- Contract Vulnerability Identification (live-data): Detect security flaws and logic errors such as reentrancy, integer overflow, and exploitable state transitions in contract code.
- Cross-Chain Bridge Routing (live-data): Compare bridge paths for moving assets between networks, weighting security model and trust assumptions alongside cost.
- Dependency Security Check (live-data): Audit external libraries, inherited contracts, and third-party oracles for known risk.
- Flash Loan Orchestration (live-data): Structure single-block uncollateralized loans for legitimate refinancing, collateral swaps, and liquidation participation.
- Formal Verification (live-data): Prove contract correctness mathematically against a written logic specification so intended behavior is guaranteed rather than sampled.
- Gas Optimization Analysis (deterministic): Evaluate and refine contract code to reduce computational steps and on-chain transaction cost.
- Impermanent Loss Analysis (deterministic): Calculate and project the opportunity cost of providing liquidity versus simply holding the underlying assets.
- Liquidity Pool Rebalancing (live-data): Propose and, on explicit confirmation, execute adjustments to asset ratios and price ranges in automated market makers.
- Logic Flow Mapping (free): Visualize and audit functional transitions and business-logic sequences within a contract.
- MEV Protection (live-data): Reduce exposure to front-running and sandwich attacks through private routing and transaction structuring.
- Oracle Price Validation (live-data): Verify that price feeds are fresh, internally consistent, and resistant to manipulation before anything depends on them.
- Slippage Monitoring (live-data): Predict and track the gap between expected and executed trade prices based on current pool depth.
- Static Analysis (live-data): Scan source without executing it to detect insecure patterns and coding-standard violations.
- Upgradeability Audit (deterministic): Assess proxy pattern security and implementation transitions for storage collisions and initialization gaps.
- Yield Harvesting Automation (live-data): Claim and reinvest protocol rewards on a schedule, netting gas and tax consequences against the compounding benefit.

### Observability & SRE (20 skills)
Incident correlation and alert-fatigue reduction skills for on-call engineers. — [page](https://the-skills-barn.pages.dev/catalogs/observability-sre.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/observability-sre)

- Alert Actionability Scoring (live-data): Score alerts by their historical likelihood of needing manual intervention, to filter noise-only alerts.
- Alert-to-Runbook Auto-Linking (live-data): Attach the specific relevant troubleshooting guide or runbook section to every alert automatically.
- Change-Event Impact Scoring (live-data): Correlate recent deployments, code diffs and config changes with sudden error-rate or latency spikes during an incident.
- Contextual Alert Enrichment (live-data): Append relevant logs, dashboard links and recent commit history to an alert so the responder does not have to dig for context.
- Database Lock-Contention Analysis (live-data): Correlate application timeouts and SQL wait times with specific database row and table locks and deadlocks during an incident.
- Dependency-Aware Alert Muting (deterministic): Suppress downstream alerts when an upstream dependency has already failed and paged, so one root cause does not produce a flood.
- Distributed Trace Stitching (live-data): Reconstruct broken or incomplete trace IDs and spans across microservices to recover a full request lifecycle during debugging.
- Dynamic Threshold Auto-Tuning (live-data): Adjust alert thresholds automatically from historical seasonal variance and traffic patterns to remove false positives.
- External Provider Health Sync (live-data): Correlate internal application failures with real-time status and outages from third-party API providers and cloud vendors.
- Flapping Alert Suppression (deterministic): Detect and silence alerts that rapidly cycle between states without material change, and suppress the flap.
- Graph-Based Root Cause Mapping (deterministic): Analyze dependencies between microservices to trace a failure's origin across a distributed system during an active incident.
- Historical Incident Pattern Matching (live-data): Compare current incident telemetry signatures against a database of resolved tickets and post-mortems to surface known fixes.
- Infrastructure-to-App Correlation (live-data): Link low-level hardware events such as hypervisor jitter and CPU or memory saturation to specific application latency spikes.
- Maintenance Window Auto-Silencing (deterministic): Interface with change-management schedules to silence alerts automatically during planned maintenance or scheduled batch jobs.
- Multi-Source Event Normalization (deterministic): Map and standardize disparate error formats from different cloud platforms and gateways into one schema for cross-stack incident analysis.
- On-Call Load-Balanced Dispatch (deterministic): Route each alert to the least-burdened qualified engineer based on active ticket count, expertise and current load.
- Predictive Burn-Rate Alerting (live-data): Alert only when error budgets or SLOs are predicted to exhaust within a defined window, protecting the budget proactively.
- Semantic Alert Deduplication (live-data): Merge alerts describing the same underlying issue despite different source IDs or wording, into a single incident.
- Semantic Log Clustering (live-data): Group semantically similar log lines using embeddings despite differences in timestamps and variable fields, to collapse an incident's log v
- User-Impact Quantification (live-data): Correlate backend errors with real-user monitoring or session data to count the unique users an incident actually affected.

### Data Engineering (15 skills)
Pipeline, warehouse, and data-quality skills that run on live warehouse state. — [page](https://the-skills-barn.pages.dev/catalogs/data-engineering.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/data-engineering)

- Backfill Orchestration (deterministic): Manage automated re-processing of historical data partitions after a logic change or failure, enforcing idempotency and warehouse state cons
- Change Data Capture Sync (live-data): Capture row-level inserts, updates and deletes from source database transaction logs and synchronize downstream warehouse state in near real
- Data Lineage Tracking (live-data): Build and maintain a persistent graph of data flow from source through transformations to consumption, using warehouse metadata and query lo
- Incremental Loading Logic (deterministic): Compute delta sets from warehouse high-water marks or snapshots so each run processes only new or changed records.
- Metadata Cataloging (live-data): Discover, index and sync technical metadata and schemas from live warehouse tables into an enterprise data catalog.
- Pipeline Performance Monitoring (live-data): Measure source-to-sink latency, throughput and replication lag against SLAs using live warehouse health metrics.
- Schema Evolution Management (deterministic): Detect, version and apply structural changes — added columns, type drift, renames — from source data to the warehouse schema before they bre
- State-Aware Reliability and Recovery (deterministic): Manage dual-layer checkpoints, transactional consistency checks and idempotent write enforcement so a failed pipeline run resumes without du
- Transactional State Management (live-data): Manage data objects through lifecycle states such as challenged, initiated and settled while keeping persistent, queryable snapshots of curr
- Warehouse Access Governance (live-data): Enforce role-based access control and audit user permissions against live security policy for warehouse datasets and endpoints.
- Warehouse Cost Observability (live-data): Attribute compute and storage cost to specific pipelines and users from live query logs and metadata, and flag oversized or idle clusters.
- Warehouse Data-Quality Validation (live-data): Run assertion-based tests — null checks, range bounds, referential integrity, distribution checks — against live warehouse tables as data ar
- Warehouse PII Masking and Detection (live-data): Scan and obfuscate sensitive personal data inside warehouse tables and pipelines using deterministic pattern matching or cryptographic salti
- Warehouse Statistical Anomaly Detection (live-data): Identify statistical outliers in warehouse data volume and distribution against learned historical baselines for proactive alerting.
- dbt Model Testing (live-data): Run unit and integration tests against SQL transformation models in the live warehouse to verify business logic before materialization.

### Localization & i18n (20 skills)
Deterministic i18n validation against CLDR, ICU, and Unicode standards. — [page](https://the-skills-barn.pages.dev/catalogs/localization-i18n.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/localization-i18n)

- Address Format Validation (deterministic): Apply regional address-layout rules — field order, postal-code position and required fields — across more than 200 countries.
- Bidi Algorithm Verification (deterministic): Test the Unicode Bidirectional Algorithm to ensure mixed LTR and RTL text displays in correct logical and visual order without character fli
- Character Encoding Sanitization (deterministic): Scan and convert resource files to UTF-8, remove byte-order marks and fix mojibake corruption from legacy encodings.
- Character Limit and Width Enforcement (deterministic): Calculate pixel or character width to ensure localized text does not overflow UI containers or database field constraints.
- Collation and Sorting Rules (deterministic): Apply language-specific alphabetical order and collation, handling accents and special characters correctly.
- Concatenation Detection (deterministic): Identify code patterns that build strings by programmatic concatenation, which breaks grammar and word order in non-English languages.
- Gender Agreement Validation (deterministic): Verify that localized strings and grammatical selectors for adjectives and verbs match the grammatical gender of their variables.
- Glossary and Term-Base Enforcement (deterministic): Check localized segments against an approved project glossary and term-base, flagging and correcting non-compliant terminology.
- Hardcoded String Detection (deterministic): Scan source code with static analysis to find user-facing text literals not wrapped in i18n functions or resource bundles.
- ICU Message Validation (deterministic): Validate ICU MessageFormat strings for balanced braces, correct variable nesting and valid plural, select and ordinal syntax before they cra
- Line Break Rule Validation (deterministic): Ensure text wrapping follows language-specific rules, such as forbidding breaks before punctuation or inside words in Thai and Japanese.
- Locale-Aware Formatting (deterministic): Apply and validate regional formatting for dates, times, currencies, numbers and units against CLDR and ISO standards.
- Placeholder Integrity Check (deterministic): Ensure every dynamic variable from the source string is preserved, correctly placed and untranslated in the target.
- Pluralization Rules Enforcement (deterministic): Apply and verify plural forms — zero, one, two, few, many, other — across language families using the Unicode CLDR plural rule tables.
- Pseudo-localization Testing (deterministic): Generate pseudo-localized strings with expanded accented characters and brackets to expose UI expansion, hard-coding and encoding issues bef
- RTL Layout Checking (deterministic): Verify UI alignment, mirroring and directional symmetry for right-to-left languages, including flipped margins, paddings and icons.
- Resource File Parsing (deterministic): Extract and re-inject translatable strings across JSON, XML, XLIFF and PO formats while preserving structure and metadata.
- Tag Consistency Check (deterministic): Validate that HTML and XML tags inside localized strings are correctly opened, closed and nested according to the source.
- Translation Memory Fuzzy Matching (live-data): Index a translation-memory database and return fuzzy matches for new segments, with deduplication and reuse scoring across projects.
- Vertical Text Alignment (deterministic): Validate layout integrity for scripts written vertically — Japanese, Chinese, Mongolian — ensuring correct character rotation and stacking.

### Cybersecurity (9 skills)
Malware sandboxing, forensics, and authorized-scope security skills. — [page](https://the-skills-barn.pages.dev/catalogs/cybersecurity.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/cybersecurity)

- Advanced Malware Sandbox Orchestration (live-data): Coordinate isolated environments to execute and analyze suspicious files, covering dynamic binary analysis, kernel-level monitoring, anti-VM
- Agent Identity and Multi-Factor Attestation (live-data): Verify human presence or authorized device status during critical agentic flows, covering biometric inherence, device-possession proof, beha
- Authorized Penetration Test Planning (live-data): Plan and document a penetration test against a target the caller is authorized to assess, producing scoped methodology, a lateral-movement a
- Cryptographic Protocol Auditing (live-data): Formally analyze cryptographic implementations for logical flaws and implementation bugs, covering entropy-source validation, constant-time 
- Deep Packet Inspection and Traffic Forensics (live-data): Analyze network packets beyond metadata to find malicious payloads and protocol anomalies, covering signature matching, fragmented-packet re
- Digital Forensics and Incident Response (live-data): Reconstruct attack timelines through deep data recovery and log correlation, covering deleted-file recovery, memory-dump analysis, registry 
- Hardware and Firmware Vulnerability Scanning (live-data): Identify flaws at the firmware and silicon layer, covering firmware reverse engineering, secure-boot verification, TPM state attestation, su
- Industrial Control Systems and OT Security (live-data): Protect operational-technology environments such as SCADA, covering Modbus and DNP3 traffic analysis, PLC logic integrity verification, safe
- Threat Intelligence Synthesis and Attribution (live-data): Ingest, correlate and prioritize external threat data and indicators of compromise to identify threat-actor activity, covering IOC normaliza

### Software Engineering (9 skills)
Migration, spec compilation, and architecture-audit skills for dev teams. — [page](https://the-skills-barn.pages.dev/catalogs/software-engineering.html) · [source](https://github.com/Zero-Human-Corp/the-skills-barn/tree/main/skills/software-engineering)

- Architectural Spec Compilation (deterministic): Convert business logic and product requirements into executable technical specifications, covering domain-driven design, service boundary de
- Architecture Security Audit (live-data): Evaluate architecture diagrams and solution descriptions for security boundaries, entry points and storage security, covering multi-modal di
- Compliance and Framework Cross-Walk (live-data): Translate technical threat scenarios into standardized controls and regulatory requirements, covering NIST 800-53, MITRE ATT&CK, SOC 2, and 
- Compliance and Regulatory Engineering (live-data): Map technical implementations to legal frameworks including GDPR, the EU AI Act, DORA, HIPAA, PCI DSS and CCPA, producing readiness findings
- Deterministic Data Transformation Modeling (deterministic): Design procedural data flows that preserve integrity and availability across boundaries, covering CIA-triad enforcement, encryption-protocol
- Infrastructure and DevOps Hardening (live-data): Advanced configuration, hardening and cost optimization of cloud resources and pipelines, covering disaster-recovery testing, Kubernetes and
- Legacy to Cloud Migration Security Review (live-data): Transform legacy system representations into secure cloud-native patterns, covering monolith decomposition, on-prem-to-cloud threat translat
- Scientific Synthesis and Methodology Critique (live-data): Cross-reference experimental designs and statistical validity across primary sources, covering effect-size verification, p-value and power a
- Strategic Business and Financial Intelligence (live-data): Analyze business models, revenue leaks and investment theses, covering token-economics modelling, SaaS pricing strategy, churn analysis and