Plugins

2 plugins

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · plugin

Publish Open Source Project

Sanitizes secrets, prepares repository, and publishes to GitHub with CI/CD and documentation.

3 skills · plugin

Results for “secrets”

7 skills

Gmail経由でメールを送信するスキル。ユーザーが「メールで送って」「email送信」「メール送信」または /send-email を呼び出した時にトリガーする。 ~/.secrets.env の GMAIL_SMTP_USER / GMAIL_SMTP_PASSWORD を使用。

Set up and use 1Password CLI (op) for signing in, reading, and injecting secrets, with a required tmux session to manage authentication.

More results

Convert local Hermes operator workflows into sanitized ECC skills and release-pack artifacts, removing private state, credentials, and local paths.

Gws Gmail Triage

Shows a summary of unread Gmail messages, including sender, subject, and date, with optional search query and label display.

Saves, retrieves, and organizes personal notes locally as Markdown files in ~/.synapse/notes/.

Deploying To Github

General GitHub workflow — branching, commits, pull requests, code review, secrets hygiene, submodules, and git worktrees. Use when the user wants to save changes, push to GitHub, open a PR, work with a submodule, set up a worktree, or perform any git/GitHub operation.

Use when hunting Pwn Request vulnerabilities where pull_request_target workflows checkout attacker-controlled PR code and execute it in a privileged context with access to repository secrets. Trigger on: "pwn request", "pull_request_target", "checkout PR head", "npm install in CI", "lifecycle scripts in CI", "preinstall script", "postinstall script", "package.json scripts CI", "npm ci ignore-scripts false", "actions/checkout ref pull request head sha", privileged workflow running PR code, "Gato-X", supply chain via PR lifecycle scripts.