Back to Dashboard

Capability map · 78 modules

Skills, organized by the work they make possible.

Explore the universe, then scan the actual tools and practices by the production outcome they support.

initializing universe…

How the work connects

The planets are the detail. These three tracks show how those capabilities connect when the work has to ship, stay safe, and be explainable.

$ track --secure

Secure the boundary

Research, testing, and verification that make risk visible before it becomes production impact.

Security

Find the risky assumption before it ships

Security Engineer

Expertise in application security, penetration testing, and security architecture

Penetration Testing

Identifying and exploiting security vulnerabilities in systems

CTF Player

Participating in and solving Capture The Flag security challenges

OWASP

Applying OWASP security principles and best practices

SAST

Static Application Security Testing to identify vulnerabilities in code

DAST

Dynamic Application Security Testing to find runtime vulnerabilities

API Security

Securing APIs against common vulnerabilities and attacks

OSINT

Open Source Intelligence gathering and analysis for security research and threat intelligence

Digital Forensics

Investigating digital artifacts and recovering evidence for security incident analysis

Networking

Understanding network protocols, architecture, and security to identify and mitigate network-based threats

WordPress Security

Notable

Plugin vulnerability research and exploitation: auditing WordPress plugins, reproducing CVEs and responsible disclosure. Got multiple CVEs and PoCs accepted.

Threat Modeling

Mapping attack paths, trust boundaries, and failure modes before a system reaches production

Authorization & Access Control

Reviewing identity, ownership, permissions, and privilege boundaries in application workflows

Responsible Vulnerability Disclosure

Reproducing findings, documenting impact, and coordinating safer remediation with maintainers

Testing

Verify from code to live behavior

Playwright

End-to-end testing of web applications using Playwright automation framework

Selenium

Browser automation for testing web applications

Production Validation

Combining browser checks, API evidence, logs, and rollback awareness before calling a release ready

$ track --operate

Build and operate the platform

Application development, infrastructure, and data systems that keep a release path understandable.

Development

Product systems with inspectable delivery

Web Developer

Building modern web applications with Node, Express, React, Next.js, and other frameworks

Node.js

Building scalable backend services and APIs with Node.js runtime

React

Building user interfaces with React and related libraries

Next.js

Creating full-stack React applications with Next.js framework

TypeScript

Writing type-safe JavaScript code with TypeScript

Python

Building applications, scripts, and automation tools with Python

Git

Version control and collaborative development using Git

Laravel Platform Engineering

Building and maintaining Laravel application flows, queued jobs, APIs, and production recovery paths

Infrastructure & Cloud

Size, deploy, diagnose, and recover production systems

Web Servers

Configuring and optimizing web servers including Nginx and OpenLiteSpeed (OLS)

Docker

Containerizing applications for consistent deployment across environments

CI/CD

Building and maintaining continuous integration and deployment pipelines

Terraform

Infrastructure as Code for provisioning and managing cloud resources

Cloud Platforms

Managing servers and services across multiple cloud platforms including AWS, Azure, Digital Ocean, and Vultr

Linux

Linux system administration and shell scripting

Monitoring

Setting up monitoring and alerting systems for applications and infrastructure

Cloudflare Enterprise Operations

Notable

Managing enterprise domain activation, DNS verification, cache, analytics, security events, and edge controls across production sites

Mail Delivery & SMTP

Configuring and managing mail servers, SMTP relay, email deliverability, SPF, DKIM, DMARC, and transactional email infrastructure

Release Engineering

Making deployments repeatable with build checks, environment awareness, rollback context, and clear handoffs

Observability & Incident Response

Using logs, health signals, and failure context to diagnose production symptoms and restore service safely

Multi-Cloud Provisioning

Notable

Designing and operating server lifecycles across cloud providers through a managed hosting control plane

One-Click App Platforms

Packaging repeatable application installs, configuration flows, and managed lifecycle operations

Docker Template Engineering

Turning Docker Compose and repository-based application requirements into deployable templates

Node.js Hosting Operations

Supporting Node.js application deployment, domain changes, SSL, logs, and operational recovery

Queue & Background Job Operations

Designing observable queued work, retries, status reporting, and recovery for long-running platform tasks

Infrastructure Capacity Planning

Notable

Matching application workloads to practical server CPU, memory, storage, and operational requirements

Server Lifecycle Management

Provisioning, configuring, re-provisioning, monitoring, and retiring managed server environments

Production Deployment Debugging

Tracing failed builds, service configuration, logs, networking, and upstream errors to restore a live application

Reverse Proxy & Traffic Routing

Configuring Nginx and edge-facing routing so applications, domains, SSL, and upstream services connect safely

WireGuard VPN Integration

Integrating private network access and VPN workflows into a managed server platform

Self-Hosted Service Operations

Deploying and maintaining owned services from application setup through updates, monitoring, and incident recovery

Database

Data systems and ownership boundaries

MySQL

Designing, optimizing, and managing relational databases with MySQL

MongoDB

Working with NoSQL databases using MongoDB for flexible, document-oriented data storage

Database Management

Database administration, optimization, and security across different database systems

Supabase Platform Operations

Working with backend services, authentication, database workflows, and production-aware operational boundaries

$ track --automate

Automate with control

AI workflows, automation, and human coordination for repeated technical work with clear approval points.

AI

Harness models with tools, context, and boundaries

Applied AI Systems

Integrating models into real technical workflows with bounded inputs, evaluation, and human control

AI Bot/Assistant

Building intelligent AI bots and virtual assistants using LLMs, conversational AI frameworks, and custom integrations

AI Agent Harnessing

Notable

Coordinating coding agents, tool access, context, and verification without treating autonomy as a substitute for review

Model & Tool Integration

Connecting Claude, Codex, and other model runtimes to practical tools and scoped workflows

Context & Prompt Design

Structuring instructions, evidence, and task context so model outputs remain useful and inspectable

Multi-Agent Orchestration

Coordinating specialized AI agents, scoped responsibilities, and review checkpoints across a larger delivery workflow

MCP & Tool Protocols

Giving AI runtimes controlled access to browser, terminal, search, and application tools through explicit interfaces

Agent Runtime & Bot Operations

Deploying and operating OpenClaw, Hermes, and personal agent bots with scoped tools, observability, and human checkpoints

Agent Memory & Skills

Designing reusable skills, project memory, and context boundaries so agent work remains consistent over time

Self-Hosted AI Platforms

Deploying private AI interfaces and model services such as Ollama, Open WebUI, and LibreChat on owned infrastructure

Local LLM Operations

Managing local model availability, pulls, service health, and practical resource constraints for self-hosted LLMs

Automation

Automate the repeatable; keep impact reviewable

n8n Automation

Designing and orchestrating automated workflows and integrations with n8n for data pipelines and business processes

AI Workflow Automation

Designing reviewable LLM workflows for research, development, QA, documentation, and operations

Agent Workflow Orchestration

Sequencing agent tasks, approval gates, and handoffs for repeatable technical delivery

QA & Regression Automation

Automating repeatable checks while keeping live verification and release decisions visible

Documentation Automation

Turning delivery context, runbooks, and decisions into maintainable technical documentation

Terminal Workflow Automation

Building persistent terminal workflows that make coding sessions, checks, and recovery steps repeatable

SSL & Domain Automation

Automating domain verification, certificate workflows, status checks, and recovery-aware updates

Browser & Computer-Use Automation

Building controlled browser and desktop workflows for repeatable validation and operator-assist tasks

Workflow Automation Hosting

Deploying, updating, and operating workflow tools such as n8n with service-level visibility

Business

Turn real needs into sequenced delivery

Aspiring Entrepreneur

Building innovative solutions to solve real-world problems

Financial Intelligence

Understanding financial principles, investment strategies, and economic decision-making

Technical Delivery & Scrum

Breaking work into observable milestones, coordinating stakeholders, and keeping delivery moving without losing technical rigor

Soft Skills

Explain, coordinate, and decide clearly

Leadership

Leading teams and projects to successful outcomes

Communication

Effectively communicating complex technical concepts

Problem Solving

Analytical thinking and creative problem-solving skills

Management

Managing projects, teams, events and resources effectively to achieve organizational goals

ARAFAT © 2026 - ALL RIGHTS RESERVED