Designs and operates the corporate network — segmentation, remote access, wireless, DNS and addressing, and diagnosing network problems. Use this to segment a network, set up or fix remote access, diagnose intermittent connectivity, plan addressing or DNS, or assess whether the network's trust assumptions still hold.
インストール方法を見るインストールする前に、エージェントに与えられる指示の中身を確認できます。
The network is the substrate everything else assumes works. It gets attention when it fails and is otherwise expected to be invisible, which is why its design debts persist for years.
A flat network means one compromised laptop reaches the finance server. Segmentation is the highest- value structural control available and the most commonly deferred.
Separate at minimum: user devices, servers, management interfaces, guest, and anything unmanaged — printers, cameras, building systems, contractor equipment. That last category is the recurring entry point, because it is rarely patched and rarely owned.
Default deny between segments, and permit specific flows. Rules that accumulate without review become an allow-all with extra steps; review them on a cadence and remove what no longer has a reason.
The perimeter stopped being a perimeter when the workforce and the workloads left it. Treat network location as weak evidence of trust: being on the corporate network should not by itself grant access to anything sensitive.
Prefer per-application access over full network access. A remote user needing one internal application does not need a route to the entire internal estate, which is what a traditional VPN grants by default.
Authentication and authorization policy belongs to security:access-and-identity; this skill
implements the network path.
DNS failure presents as everything being broken, which is why it is misdiagnosed for the first twenty minutes of many incidents. Run it redundantly, monitor resolution from the client's perspective rather than the server's, and keep records under change control.
Plan addressing with room to grow and document it. Overlapping private ranges is the problem that surfaces years later during an acquisition or a site merge and is expensive at exactly that moment.
Work bottom-up and prove each layer before moving on: physical, then addressing, then routing, then name resolution, then the application. Most misdiagnosis comes from starting at the application because that is where the complaint originated.
Intermittent problems are the hard case and need data over time, not a test at the moment someone complains. Capture continuously at the affected point; a test that passes while nobody is suffering proves nothing.
A second location does not double the network; it introduces a class of problem the first site never had. Traffic now crosses a link you do not own, and every service the remote site depends on becomes a question of where it lives.
Decide deliberately what is central and what is local. Authentication, name resolution, and print are the three that hurt most when a site link drops — a location that cannot log in because the domain controller is elsewhere is offline for every purpose, not just the one that failed. Local survivability for those three is usually worth the cost; centralizing everything else usually is.
Site links fail partially more often than completely. A circuit that is up but degraded is harder than one that is down, because nothing alerts and everything is slow. Monitor the link from both ends and on the path rather than trusting the provider's portal, which reports their view of their equipment.
Where a software-defined WAN is in use, it makes the degraded case survivable by steering traffic between circuits, and it makes the topology something you configure centrally rather than per site. That is a real gain and a real concentration of risk: the controller becomes a thing whose failure is everyone's failure, so treat it as production infrastructure rather than a management tool.
Small sites accumulate exceptions. A closet without cooling, a switch nobody has patched, an address range someone reused. Budget for a periodic physical visit — remote management does not show you the cable run someone added, and the sites without permanent IT staff are exactly the ones that drift furthest from the standard.
references/sources.md in this skill lists the outside authorities that settle the questions
here — what each one is authoritative for, and what you may do with it. Check them before
answering on anything they cover, and cite what you used. Most are free to read and not free
to reproduce; the use note on each is binding.
まだレビューはありません。使ってみた感想をお寄せください。
概要と使いどころ
Designs and audits who can reach what — authentication, authorization models, privileged access, service credentials, and joiner-mover-leaver process. Use this to design a permissions model, run an access review, reduce standing privilege, handle offboarding, set up SSO or MFA, manage service and machine credentials, or diagnose why permissions have sprawled.
日本語の概要は準備中です。原文の説明を表示しています。
Concentrates marketing and sales effort on a named set of accounts rather than on volume — qualifying whether the model fits your economics at all, building the account list and the buying group inside each, tiering effort against account value, coordinating so the account experiences one campaign rather than several, and measuring account progression instead of leads. Use this to decide whether to run an account-based program, build one, or work out why an existing one produces activity and no pipeline.
日本語の概要は準備中です。原文の説明を表示しています。
Gets new users from signup to first real value — signup flow, onboarding, time-to-value, and the early experience that determines whether someone becomes a user or a lapsed account. Use this to design or fix signup and onboarding, diagnose why signups do not convert to active use, reduce time-to-value, or decide what a new user must accomplish first.
日本語の概要は準備中です。原文の説明を表示しています。
Designs orchestrator-and-subagent hierarchies for a repository — splitting agents by exclusive write surface, pairing every producer with an independent auditor, and enforcing the split with a script that runs in CI. Use this whenever the user wants to set up, expand, audit, or fix a multi-agent or subagent structure for a codebase; asks how to divide work between agents; wants agent charters, roles, or a surface map written; or is hitting agents that collide on the same files, review their own work, or drift from their remit. Also use when sizing a roster or deciding whether a new agent is justified.
日本語の概要は準備中です。原文の説明を表示しています。
Governs models and AI systems in production — intended use, evaluation, monitoring, human oversight, documentation, and the decision to deploy or retire. Use this before deploying a model or AI feature, when defining evaluation criteria, when a model's behavior has drifted, when assessing AI risk or regulatory exposure, or when deciding whether an AI system is fit for a consequential decision.
日本語の概要は準備中です。原文の説明を表示しています。
Produces executive-level research — market sizing, competitor mapping, trend analysis, and strategic intelligence — grounded in cited sources with the confidence in each claim made explicit. Use this to analyze a market or industry, map competitors, evaluate a market-entry or build-versus-buy decision, produce a research brief, or assemble evidence for a decision. Also use when comparing options that need a structured, evidence-based verdict rather than an opinion.
日本語の概要は準備中です。原文の説明を表示しています。