Ricardo Domingues
Community@ricardoo022
Ricardo Domingues maintains a 42-skill registry spanning phased web application penetration testing, LangChain/LangGraph agent engineering, and PR review/documentation pipelines.
Agent Skills by Ricardo Domingues
Showing 41 vetted skills indexed across 2 GitHub repositories.
langgraph-human-in-the-loop
Implement interrupt-based human approval and resume workflows in LangGraph agents.
langchain-dependencies
Guides package selection and version pinning for LangChain, LangGraph, and Deep Agents projects.
test-us
Generate and run real-infrastructure pytest tests from User Story acceptance criteria.
langgraph-persistence
Configure LangGraph checkpointers, thread state, time travel, and cross-thread memory stores.
document-release
Updates project documentation files to match shipped code changes after a release.
langchain-middleware
Implements human-in-the-loop approval and custom middleware for LangChain agents.
langchain-fundamentals
Create LangChain agents with create_agent, tools, middleware, and structured output.
deep-agents-orchestration
Configure subagent delegation, todo planning, and human approval interrupts in Deep Agents.
lint-format-typecheck
Runs ruff lint, ruff format, and mypy type checks on Python projects following CI/CD standards.
deep-agents-memory
Configure pluggable memory and filesystem backends for Deep Agents across threads and sessions.
langchain-rag
Build retrieval-augmented generation pipelines with LangChain document loaders, text splitters, embeddings, and vector stores.
review
Analyzes pull request diffs against the base branch for structural issues and scope drift.
framework-selection
Selects the appropriate LangChain, LangGraph, or Deep Agents framework layer for agent projects.
langgraph-fundamentals
Guides writing LangGraph code covering StateGraph, nodes, edges, Command, Send, streaming, and error handling.
obsidian-cli
Controls Obsidian vaults from the terminal via the official Obsidian CLI over IPC.
approve-pr
Reviews pull requests against user stories, tests, and code quality checklists.
deep-agents-core
Configure Deep Agents applications with create_deep_agent, middleware, and SKILL.md format.
create-pr
Creates GitHub pull requests following the LusitAI project template and branch conventions.
document-us
Generates detailed EXPLAINED.md documentation for User Stories from git diffs.
scan-fase-17
Test GraphQL endpoints for introspection, authorization, and denial-of-service vulnerabilities.
scan-fase-10
Extract third-party service integrations and exposed API keys from frontend JS bundles and network traffic.
scan-fase-19
Map external and internal attack surfaces with infrastructure reconnaissance.
scan-fase-21
Fuzz target URLs with wordlists to discover hidden API endpoints and parameters.
scan-fase-20
Identifies Supabase RLS weaknesses via REST and GraphQL probes, delivering vulnerability findings and remediation steps.
Frequently Asked Questions About Ricardo Domingues
FAQPage SchemaWhat security testing tasks do ricardoo022's scan-fase skills cover?▼
The scan-fase 0-21 series covers backend fingerprinting, JS bundle secret extraction, GraphQL introspection and DoS testing, JWT algorithm analysis, Supabase RLS and Realtime WebSocket probing, IDOR and privilege escalation, HTTP header misconfigurations, and URL fuzzing, orchestrated end-to-end via scan-full.
Who should use the LangChain, LangGraph, and Deep Agents skills?▼
Engineers building agent applications in Python or TypeScript. Skills cover framework selection, create_agent fundamentals, StateGraph nodes and edges, checkpointer persistence, human-in-the-loop interrupts, middleware, RAG with Chroma/FAISS/Pinecone, and Deep Agents memory backends and subagent orchestration.
How does the test-us skill validate a User Story?▼
It reads acceptance criteria from docs/USER-STORIES.md, selects the deepest testable layer (integration over agent over unit), presents a test plan for approval, then writes and runs pytest tests against real PostgreSQL, Docker, and HTTP infrastructure, rejecting synthetic mocks when real services are available.
What does the approve-pr skill check before merging code?▼
It fetches the PR diff, maps it to a User Story, enforces real-infrastructure test evidence over mocks, reviews SQL safety, LLM trust boundaries, shell injection, and async/sync mixing, reads every changed source file, then issues a structured APPROVE or REQUEST CHANGES verdict.
Are these skills open source and what do they require?▼
The skill-creator references a LICENSE.txt for complete terms; other skills carry no explicit license. Prerequisites include Python with ruff and mypy for lint-format-typecheck, LangChain/LangGraph packages for agent skills, and Docker, PostgreSQL, Neo4j, and the gh CLI for testing and PR skills.