Packs

12 packs

Feature Development Pipeline

Plan, execute, and verify a feature using structured planning, gated pipeline, and issue tracking.

10 skills · pack

Project Verification Pipeline

For developers running comprehensive verification pipelines for Laravel or Quarkus projects before PRs or releases.

4 skills · pack

Secure Code Review Pipeline

Installs a pipeline to validate, plan, execute, and enforce a secure code review on PRs.

12 skills · pack

Build RAG Pipeline with Pinecone

Build a production RAG pipeline and persistent agent memory using Pinecone as the vector database backend.

6 skills · pack

Deploy Azure ML Pipeline

Manage Azure Machine Learning resources including workspaces, jobs, models, data, compute, and pipelines using the SDK v2 for Python.

3 skills · pack

Agent Governance Pipeline

Implement policy enforcement, intent classification, and audit trails for AI agents.

9 skills · pack

Cloudflare One Deployment Pipeline

Design, configure, and migrate to Cloudflare One Zero Trust and SASE.

3 skills · pack

Build Feature with TDD Pipeline

Research, plan, implement with TDD, review, and commit a new feature.

5 skills · pack

GDPR Audit Pipeline

Pressure-test GDPR compliance with article-cited questions and generate audit readiness evidence.

9 skills · pack

Code Security Review Pipeline

Audit code changes for bugs, security flaws, and quality issues before merging.

15 skills · pack

MCP Security Audit Pipeline

Audit MCP servers for secrets exposure, shell injection, and supply chain risks.

12 skills · pack

Secure Django Deployment

Installs a pipeline to harden, audit, verify, and deploy a Django app securely.

5 skills · pack

Results for “pip”

56 skills

competition-supply-chain

Traces software supply chain provenance from source to runtime, identifying divergence points in dependency resolution, build, packaging, and release pipelines.

12.8k · bundle

opensource-pipeline

Fork, sanitize, and package private projects for safe public release through a three-stage pipeline.

Guides compliance with China's Personal Information Protection Law (PIPL, effective 1 November 2021). Covers consent requirements, cross-border transfer mechanisms (CAC security assessment, standard contracts, certification), separate consent triggers, and critical information infrastructure obligations. Keywords: PIPL, China data protection, CAC security assessment, cross-border transfer, separate consent, CIIO.

integrating-dast-with-owasp-zap-in-pipeline

Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.

24.6k · bundle

vss-manage-alerts

Operate the VSS alert pipeline for real-time monitoring, Alert-Bridge subscriptions, Slack notifications, incident queries, and camera onboarding.

implementing-secrets-scanning-in-ci-cd

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

24.6k · bundle

More results

implementing-devsecops-security-scanning

Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.

24.6k · bundle

building-devsecops-pipeline-with-gitlab-ci

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

24.6k · bundle

building-ioc-enrichment-pipeline-with-opencti

Build an automated IOC enrichment pipeline using OpenCTI's connector ecosystem to enrich indicators with context from VirusTotal, Shodan, AbuseIPDB, GreyNoise, and other sources.

24.6k · bundle

performing-supply-chain-attack-simulation

Simulate and detect software supply chain attacks including typosquatting via Levenshtein distance, dependency confusion testing, package hash verification, and vulnerability scanning with pip-audit.

24.6k · bundle

implementing-security-chaos-engineering

Deliberately disables or degrades security controls to verify detection and response capabilities, including WAF bypass, firewall rule removal, log pipeline disruption, and EDR disablement scenarios using boto3 and subprocess.

24.6k · bundle

building-ioc-defanging-and-sharing-pipeline

Build an automated pipeline to defang indicators of compromise (URLs, IPs, domains, emails) for safe sharing and distribute them in STIX format through TAXII feeds and threat intelligence platforms.

24.6k · bundle

Designing GitHub Actions workflows in depth: trigger strategy, security hardening, performance optimization, PR automation, and Reusable Workflow design.

detecting-aws-credential-exposure-with-trufflehog

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.

24.6k · bundle

integrating-sast-into-github-actions-pipeline

Integrates Static Application Security Testing (SAST) tools—CodeQL and Semgrep—into GitHub Actions CI/CD pipelines, configuring automated code scanning, tuning rules, uploading SARIF results, and establishing quality gates that block merges on high-severity vulnerabilities.

24.6k · bundle

performing-oil-gas-cybersecurity-assessment

Conduct cybersecurity assessments for oil and gas facilities, covering upstream, midstream, and downstream operations, including SCADA, DCS, and safety systems, with compliance mapping to API 1164, TSA Pipeline Security Directives, IEC 62443, and NIST CSF.

24.6k · bundle

testing-prompt-injection-in-rag-pipelines

Probe RAG applications for prompt injection via poisoned retrieved context and embedding manipulation.

24.6k · bundle

infrastructure-drift-detection

Detect and triage infrastructure drift by comparing declared Terraform state against live cloud resources using scheduled pipelines and audit logs.

Audita infraestrutura e pipeline em busca de vulnerabilidades, credenciais vazadas, IAM excessivo e exposição pública, com recomendações de hardening e classificação de severidade.

age file encryption reference — the modern, simple alternative to GPG. Covers key generation, X25519 encryption, SSH key support, passphrase mode, pipe patterns, SOPS integration, YubiKey plugins, and security considerations. By Filippo Valsorda.

age file encryption reference — the modern, simple alternative to GPG. Covers key generation, X25519 encryption, SSH key support, passphrase mode, pipe patterns, SOPS integration, YubiKey plugins, and security considerations. By Filippo Valsorda.

homelab-pihole-dns

Install and configure Pi-hole as a network-wide DNS ad blocker on a Raspberry Pi or Linux host, manage blocklists, set up DNS-over-HTTPS, integrate DHCP, create local DNS records, and troubleshoot DNS issues.

laravel-verification

Runs a multi-phase verification pipeline for Laravel projects including environment checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

expert-security

安全专家入口。用于 Codex CLI 的 $expert-security 调用。适用于威胁建模、漏洞评估、安全代码审查、安全架构设计、DevSecOps、安全运营、事件响应、合规审计和完整安全健康评估。触发词：安全专家、威胁建模、STRIDE、OWASP、SAST、DAST、SBOM、漏洞评估、代码审计、事件响应、合规审计、SOC、等保、GDPR、PIPL、隐私政策审查

collecting-threat-intelligence-with-misp

Deploy MISP, configure threat feeds, use the PyMISP API for programmatic access, and build automated collection pipelines that aggregate IOCs from multiple community and commercial sources.

24.6k · bundle

performing-arp-spoofing-attack-simulation

Simulates ARP spoofing attacks in authorized lab or pentest environments using arpspoof, Ettercap, and Scapy to demonstrate man-in-the-middle risks, test network detection capabilities, and validate ARP inspection countermeasures.

24.6k · bundle

hipaa-compliance

Ensure HIPAA compliance when handling PHI (Protected Health Information). Use when writing code that accesses user health data, check-ins, journal entries, or any sensitive information. Activates for audit logging, data access, security events, and compliance questions.

django-verification

Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.

building-threat-intelligence-enrichment-in-splunk

Build automated threat intelligence enrichment pipelines in Splunk Enterprise Security using lookup tables, modular inputs, and the Threat Intelligence Framework.

24.6k · bundle

supply-chain-security

Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.

12.8k · bundle

dependency-auditor

Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.

20.4k · bundle

Provides regulatory compliance assessments across data privacy, AI ethics, and localization laws, producing structured outputs with risk scores and remediation status.

implementing-semgrep-for-custom-sast-rules

Write custom Semgrep SAST rules in YAML to detect application-specific vulnerabilities, enforce coding standards, and integrate into CI/CD pipelines.

24.6k · bundle

azure-identity-java

Authenticate Java applications with Azure services using Microsoft Entra ID, supporting credential types for local development, managed identities, service principals, and CI/CD pipelines.

static-application-security-testing

Analyze source code for security vulnerabilities using static analysis tools, custom rules, and CI-integrated scanning pipelines. Use when the user requests static application security testing or provides relevant inputs for this workflow.

quarkus-verification

Runs a comprehensive verification pipeline for Quarkus projects including build, static analysis, tests with coverage, security scans, native compilation, and diff review before PRs or releases.