Skill do Especialista SEO para otimização de páginas e sistemas para motores de busca tradicionais e também para otimização para ser citado por LLMs (ChatGPT, Claude, Perplexity, Google AI Overviews). Use quando precisar otimizar meta tags, Open Graph, sitemap, schema markup, Core Web Vitals, performance, imagens, fontes, acessibilidade para SEO, fazer pesquisa de palavra-chave (keyword research, intent, cauda longa), priorizar termos por volume/dificuldade, ou planejar estratégia de backlinks e autoridade de domínio, ou qualquer decisão de ranqueamento e citação por motores generativos. Trigger em: "SEO", "meta tags", "Open Graph metadata", "sitemap", "schema markup", "Core Web Vitals", "performance", "LCP", "CLS", "ranking", "canonical", "robots.txt", "GEO", "AEO", "Answer Engine", "LLM citation", "AI Overview", "llms.txt", "generative engine optimization", "answer engine optimization", "keyword research", "pesquisa de palavra-chave", "palavra-chave", "keyword", "cauda longa", "long tail", "search intent", "volume de busca", "KEI", "link building", "backlink", "off-page", "guest posting", "autoridade de domínio", "anchor text", "nofollow".

Queries Certificate Transparency logs via crt.sh and pycrtsh to detect phishing domains, unauthorized certificate issuance, and shadow IT. Monitors newly issued certificates for typosquatting and brand impersonation using Levenshtein distance. Use for proactive phishing domain detection and certificate monitoring.

Queries Azure Monitor activity logs and sign-in logs via azure-monitor-query to detect suspicious administrative operations, impossible travel, privilege escalation, and resource modifications. Builds KQL queries for threat hunting in Azure environments. Use when investigating suspicious Azure tenant activity or building cloud SIEM detections.

DEPRECATED — superseded by /paper-poster-html. Kept only as a redirect for muscle memory; do not use for new posters.

Analyzes structured and unstructured threat intelligence feeds to extract actionable indicators, adversary tactics, and campaign context. Use when ingesting commercial or open-source CTI feeds, evaluating feed quality, normalizing data into STIX 2.1 format, or enriching existing IOCs with campaign attribution. Activates for requests involving ThreatConnect, Recorded Future, Mandiant Advantage, MISP, AlienVault OTX, or automated feed aggregation pipelines.

Use when main results pass result-to-claim (claim_supported=yes or partial) and ablation studies are needed for paper submission.

Drives development with tests. Use when implementing any logic, fixing any bug, or changing any behavior. Use when you need to prove that code works, when a bug report arrives, or when you're about to modify existing functionality.

When the user needs to set up or improve CI/CD pipelines — GitHub Actions, GitLab CI, deployment automation, or says "set up CI", "automate deployment", "add tests to pipeline", "fix my build".

When the user needs to design, write, or optimize email sequences -- including welcome series, nurture campaigns, re-engagement flows, onboarding emails, or newsletter strategy.

DEPRECATED: Use testing-best-practices instead. This skill has been retired.

Analyzes job descriptions and generates tailored resumes that highlight relevant experience, skills, and achievements to maximize interview chances