workflow-security-review
Guide for reviewing GitHub Actions for security vulnerabilities.
Discover devops cicd skills, compare source repositories and read the instructions for each workflow.
Guide for reviewing GitHub Actions for security vulnerabilities.
When checking if skill content matches current library/framework version.
Apply when setting up CI/CD pipelines: automated testing, linting, building, and deployment with GitHub Actions.
Apply when containerizing applications: writing Dockerfiles, docker-compose configurations, and multi-stage builds.
Apply when establishing team branching strategy, PR workflows, and release management.
Apply when reviewing pull requests, conducting code reviews, or self-reviewing code before submission.
Perform and apply code reviews (UACRP + application protocol) and coordinate artifacts via mpcr.
Review code changes for quality, bugs, security, and performance issues. Use when the user asks to review code, check a PR, do a code quality check, security review, find bugs, or requests code inspection.
Generate comprehensive, maintainable test suites through code analysis. Use when the user asks to write tests, create unit tests, add test cases, test a function, or improve test coverage.
Defines the standard output format for aggregated PR review reports. Use this skill to format the combined output from all review agents into a unified, actionable report.
Manages Python library releases including semantic versioning, changelog maintenance (Keep a Changelog format), release automation with GitHub Actions, and deprecation workflows. Use when planning releases, wri...
Orchestrates project plan state management and execution. Manages ROADMAP.md state tracking, task dispatch, phase transitions, and handoff protocols. PROACTIVELY Use when managing project plans, executing phase...
Orchestrates end-to-end testing workflows coordinating browser automation with server verification. Use when validating complete user flows, testing multi-step scenarios, or verifying browser-server integration...
Provides Universal Standard for TDD, Security, and Code Quality. PROACTIVELY Use when writing code, debugging errors, or reviewing PRs. Modes: debug, review, refactor, implement.
Publishing Nethercore games. Triggers on "publish game", "release", "upload", "ROM packaging", "nether pack", "CI/CD", "GitHub Actions". **Load references when:** - ROM packaging details -> `references/rom-pac...
Use when you have a spec or requirements for a multi-step task, before touching code
Use when creating new skills, editing existing skills, or verifying skills work before deployment
Perform code review, analyze code quality, find bugs, suggest improvements, check best practices and coding standards.
Use when about to claim work is complete, fixed, or passing, before committing or creating MRs. Requires running verification commands and confirming output before making any success claims; evidence before ass...
Expert guidance for Python testing that analyzes your existing setup and provides evidence-based recommendations. I'll examine your current tests, configurations, and dependencies before suggesting changes. Use...
Meta-orchestrator for managing ~/.claude as a private git repository with automatic versioning, branch orchestration, and DAG-based issue tracking. Use when initializing the config repo, committing configuratio...
Routes infrastructure, MCP, and tooling tasks. Triggers on mcp, server, deploy, orchestrate, pipeline, tools, docker, ci/cd, hook, config, setup.
Meta-cognitive architecture optimization skill. Use when the user asks to "refactor the architecture", "optimize claude code", "evaluate components", or "run architecture audit". Also triggers automatically eve...
Use when executing implementation plans with independent tasks in the current session or facing 3+ independent issues that can be investigated without shared state or dependencies - dispatches fresh subagent fo...
The default order uses GitHub repository stars from our indexed data. Stars belong to the source repository and may be shared by multiple skills. They indicate repository interest, not skill installs or an independent quality score.