Plugins

12 plugins

Circleci from ConcertoNotes/codex-plugins.

4 skills · plugin

Plugin full-stack de contencioso civel brasileiro (Civil Litigation Master) — 64 skills em 9 camadas: procedimento comum (inicial, contestacao, replica, saneamento, instrucao, sentenca), tutelas de urgencia/evidencia, a gama de acoes civeis (indenizatoria, obrigacao de fazer/nao fazer, resolucao/revisional contratual, cobranca/monitoria, consignacao, declaratoria, anulatoria, possessorias, usucapi

64 skills · plugin

Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.

24 skills · plugin

Deep Research Report

For analysts and researchers needing comprehensive, evidence-backed reports with citations.

11 skills · plugin

Optimize .NET Build

Generates binary logs, diagnoses bottlenecks, and optimizes build configuration for faster CI.

4 skills · plugin

GDPR Audit Pipeline

Pressure-test GDPR compliance with article-cited questions and generate audit readiness evidence.

9 skills · plugin

Publish Open Source Project

Sanitizes secrets, prepares repository, and publishes to GitHub with CI/CD and documentation.

3 skills · plugin

Ship Production Deployment

Sets up CI/CD pipeline, deploys with staged rollout, configures observability, and enforces safety checks.

5 skills · plugin

DotNet Test Migration to MTP

Migrate .NET test projects from VSTest to MTP, updating project files, CLI, and CI/CD pipelines.

3 skills · plugin

AI-powered wiki generator for code repositories. Generates comprehensive, Mermaid-rich structured documentation with architecture diagrams, component analysis, and source citations.

10 skills · plugin

E2E Test Setup with Playwright

Set up an end-to-end test suite with Playwright, including real flows, layered assertions, and CI integration.

10 skills · plugin

@alirezarezvani

37 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator (with semantic version bumper and hotfix/rollback procedures), API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor

33 skills · plugin

Results for “ci”

131 skills

implementing-nerc-cip-compliance-controls

Categorize BES cyber systems and implement NERC CIP compliance controls for high, medium, and low impact assets, including electronic security perimeters, configuration management, and supply chain risk management.

24.6k · bundle

implementing-secrets-scanning-in-ci-cd

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

24.6k · bundle

agentskillexchange

circleci-orb-auditor

Audits CircleCI orb versions and configurations using the CircleCI v2 API, flags deprecated orbs, provides pinning recommendations, and checks security advisories from the orb registry.

hardening-windows-endpoint-with-cis-benchmark

Hardens Windows endpoints using CIS Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements.

24.6k · bundle

auditing-cloud-with-cis-benchmarks

Conduct cloud security audits using CIS benchmarks for AWS, Azure, and GCP, including automated assessments, remediation, and continuous compliance monitoring.

24.6k · bundle

audit-gate-logic

Read-only audit of CI gate logic — silent bypass, ratchet gaming, conflicting conditions, required checks that are not, and accreted duplicate gates. Use when "can CI be bypassed", "why did a regression pass CI", "we have too many overlapping checks". Cost/speed → audit-cicd. Consolidation → housekeep-gates.

More results

integrating-dast-with-owasp-zap-in-pipeline

Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.

24.6k · bundle

scanning-docker-images-with-trivy

Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.

24.6k · bundle

building-devsecops-pipeline-with-gitlab-ci

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

24.6k · bundle

hardening-linux-endpoint-with-cis-benchmark

Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements.

24.6k · bundle

scanning-containers-with-trivy-in-cicd

Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.

24.6k · bundle

performing-kubernetes-cis-benchmark-with-kube-bench

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

24.6k · bundle

cisco-ios-patterns

Review Cisco IOS and IOS-XE configurations, choose read-only show commands, check ACL wildcard masks and interface direction, and build safe change-window verification checklists.

implementing-cisa-zero-trust-maturity-model

Assess and implement the CISA Zero Trust Maturity Model v2.0 across identity, devices, networks, applications, and data pillars to achieve progressive zero trust maturity.

24.6k · bundle

release-marketingclaw-ci

Run, watch, debug, and summarize MarketingClaw full release CI, release checks, live provider gates, install/update proofs, and release-secret preflights.

detecting-supply-chain-attacks-in-ci-cd

Scans GitHub Actions workflows and CI/CD pipeline configurations for supply chain attack vectors including unpinned actions, script injection via expressions, dependency confusion, and secrets exposure.

24.6k · bundle

implementing-fuzz-testing-in-cicd-with-aflplusplus

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

24.6k · bundle

benchmarking-kubernetes-with-kube-bench

Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.

24.6k · bundle

implementing-network-access-control-with-cisco-ise

Deploy Cisco Identity Services Engine for 802.1X wired and wireless authentication, MAC Authentication Bypass, posture assessment, and dynamic VLAN assignment for network access control.

24.6k · bundle

azure-smart-city-iot-solution-builder

Design and plan end-to-end Azure IoT and Smart City solutions: requirements, architecture, security, operations, cost, and a phased delivery plan with concrete implementation artifacts.

36.2k · bundle

github-actions-efficiency

Audit GitHub Actions workflow efficiency and recommend fixes to reduce CI minutes and costs.

36.2k · bundle

building-ransomware-playbook-with-cisa-framework

Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework, covering preparation, detection, containment, eradication, recovery, and post-incident phases with actionable checklists.

24.6k · bundle

brycewang-stanford

reference-verify

Verify references in an academic paper: check whether each BibTeX entry is real, whether in-text citations match the cited paper's actual content, and produce a structured verification report. Use when user says "验证参考文献", "ref verify", "check references", "核实引用", "引用是否正确", or wants to audit citations in a LaTeX manuscript.

Implements service mesh with Istio or Linkerd, covering traffic management, mTLS, circuit breakers, and observability for microservices on Kubernetes.

triaging-vulnerabilities-with-ssvc-framework

Triage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.

24.6k · bundle

Chief Security Officer mode. (gstack)

security-compliance-automation

Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.

Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.

scanning-iac-and-images-with-trivy

Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.

24.6k · bundle

performing-docker-bench-security-assessment

Audits Docker host and daemon configuration against the CIS Docker Benchmark, generating compliance reports with pass/fail/warn results and remediation steps.

24.6k · bundle

security-scanning

CI security scanning: secrets, deps, SAST, triage, expiring exceptions

supply-chain-security

Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.

12.8k · bundle

Runs Semgrep static analysis to find bugs and security vulnerabilities, with guidance on installation, rule selection, custom rule writing, and CI/CD integration.

implementing-devsecops-security-scanning

Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.

24.6k · bundle

implementing-semgrep-for-custom-sast-rules

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

24.6k · bundle

prioritizing-vulnerabilities-with-cvss-scoring

Calculate CVSS scores, interpret vector strings, and prioritize vulnerabilities using CVSS alongside EPSS and CISA KEV for effective risk-based remediation.

24.6k · bundle