Operating Safely
by riekelte67b7af9ac74No license5 starsListed Oct 8, 2026Updated Oct 8, 2026Repository updated 3 weeks ago
Use when an action touches live systems, shared state, or things that do not come back - deleting, overwriting, restarting, killing processes, editing shared config, handling secrets, or working beside concurrent sessions. Encodes the destructive-op guards, secrets hygiene, and concurrent-session safety. Use before the destructive command, not after, even when the command looks routine.
Only the file list is public. File contents are available once the skill is installed in a workspace.
| Path | Size | Type |
|---|---|---|
| SKILL.md | 4.4 KB | text/markdown |
Source and attribution
Source:riekelt/principal-engineerinplugins/principal-engineer/skills/operating-safelyat commite67b7af
License: No license
Content belongs to its original authors. SourceWeft indexes it from a public repository.
More from riekelt/principal-engineer
Writing Unit Tests
riekelt
Guides writing and refactoring unit tests around behavior-first principles: one behavior per test, deterministic setup, boundary-only mocks.
Verifying Before Done
riekelt
Encodes verification as the definition of done: drive the change at its surface, run the verify command, and report results faithfully.
Testing Changes
riekelt
Guides which tests a behavior change owes, including regression tests, discriminating assertions and red-test handling.
Scoping Changes
riekelt
Guides agents on sizing fixes to their trigger, decomposing oversized work visibly, and driving approved plans to completion.
Principal Engineering
riekelt
Encodes evidence-over-theory engineering discipline, safety rules, and a pre-change checkpoint for non-trivial software work.
Keeping One Source Of Truth
riekelt
Encodes a one-fact-one-source doctrine for code and data, covering derivation, duplicate absorption and disagreement handling.
More in Security
Compliance Tracking
anthropics
Tracks compliance requirements, audit readiness, and evidence for frameworks such as SOC 2, ISO 27001, GDPR, HIPAA, and PCI DSS.
Dpop Adoption
Guides implementation of OAuth 2.0 DPoP (RFC 9449) sender-constrained refresh tokens for Google's OAuth platform.
Secops Triage
Guides SOC analysts through triaging Google SecOps security alerts, from investigation to closure or escalation.
Secops Investigate
Guides SOC analysts through deep security incident and entity investigations in Google SecOps using UDM queries and timelines.
Secops Hunt
Guides proactive threat hunting in Google SecOps using UDM queries, IoC lookback, prevalence and outlier analysis.
Secops Cases
Manages Google Security Operations SOAR cases across their lifecycle via MCP tools.