ci-cd-security
Analyzes GitHub Actions YAML directly without external tools or shell execution. Covers risky triggers, token permissions, action pinning, injection, cache poisoning, secret exfiltration, and supply chain threats.
Your agent can do more. Find the skill that makes it happen.
Find your next superpower If you are an agent, refer to our llms.txt for full access."..." for exact phrases · Try typography, debugging or spreadsheetAnalyzes GitHub Actions YAML directly without external tools or shell execution. Covers risky triggers, token permissions, action pinning, injection, cache poisoning, secret exfiltration, and supply chain threats.
Provides patterns for diagnosing common CI failures, encoding issues, and dependency problems. Also explains how to add new steps to the AegisNex GitHub Actions pipeline.
Adds diff-scoped AI penetration testing to GitHub Actions, GitLab CI, or other pipelines to block vulnerable changes before merging. Supports the self-hosted CLI and managed Strix platform, with PR comments and SARIF uploads.
You are a workflow automation expert specializing in creating efficient CI/CD pipelines, GitHub Actions workflows, and automated development processes. Design automation that reduces manual work, improves consistency, and accelerates delivery while maintaining quality and security.
Use when hunting CI/CD bot comment command vulnerabilities where issue_comment or pull_request_review_comment triggers invoke privileged workflows without verifying the commenter's identity or authorization. Trigger on: "bot command injection", "issue_comment trigger", "@github-actions", "slash command CI", "CI bot command", "comment triggered workflow", "unauthenticated bot", "github-actions publ…
Builds motion systems for editorial websites and creative portfolios. Covers smooth scroll reveals, staggered text, parallax, pinned sections, magnetic hover states, custom cursors, and mouse-reactive layered movement.
Creates editorial scroll experiences with linked progression, text reveals, sticky card stacks, parallax, and scroll-scrubbed transitions. Also covers footer reveals, preloaders, kinetic typography, and section-by-section storytelling.
Supports quantum computing with Google's Cirq framework. Focuses on Google hardware, noise modeling, low-level circuit design, and quantum characterization experiments.
Searches Google Scholar and PubMed, extracts publication metadata, and validates citation information. Supports DOI-to-BibTeX conversion and reference accuracy in scientific writing.
Searches OpenAlex, PubMed, and Google Scholar for academic sources. Extracts and validates metadata, converts DOIs to BibTeX, and checks reference accuracy for scientific writing.
Harvests missing citations from drafts through Semantic Scholar and validates citation keys against bibliography files. Deduplicates BibTeX entries and formats the bibliography.
Provides verification principles and common citation error patterns for academic writing. Supports checking references and preventing fake citations, including use alongside ml-paper-writing.
A growing collection of real, public skills. Descriptions and instructions indexed 25 Sept 2026.
Skills give your agent reusable instructions for a specific job. Pick one, read what it does, and bring it into your workflow.
A name only tells half the story. Search the full description and instructions to find the right fit.
Read the skill, visit its source, and see exactly what you’re adding to your agent.
Copy the install command from a skill page and run it in your project.
npx skillycli add owner/repo --skill name