Plugins

12 plugins

Circleci from ConcertoNotes/codex-plugins.

4 skills · plugin

Plugin full-stack de contencioso civel brasileiro (Civil Litigation Master) — 64 skills em 9 camadas: procedimento comum (inicial, contestacao, replica, saneamento, instrucao, sentenca), tutelas de urgencia/evidencia, a gama de acoes civeis (indenizatoria, obrigacao de fazer/nao fazer, resolucao/revisional contratual, cobranca/monitoria, consignacao, declaratoria, anulatoria, possessorias, usucapi

64 skills · plugin

Docker, Kubernetes, CI/CD and cloud (AWS/Azure/GCP) automation.

24 skills · plugin

Deep Research Report

For analysts and researchers needing comprehensive, evidence-backed reports with citations.

11 skills · plugin

Optimize .NET Build

Generates binary logs, diagnoses bottlenecks, and optimizes build configuration for faster CI.

4 skills · plugin

GDPR Audit Pipeline

Pressure-test GDPR compliance with article-cited questions and generate audit readiness evidence.

9 skills · plugin

Publish Open Source Project

Sanitizes secrets, prepares repository, and publishes to GitHub with CI/CD and documentation.

3 skills · plugin

Ship Production Deployment

Sets up CI/CD pipeline, deploys with staged rollout, configures observability, and enforces safety checks.

5 skills · plugin

DotNet Test Migration to MTP

Migrate .NET test projects from VSTest to MTP, updating project files, CLI, and CI/CD pipelines.

3 skills · plugin

AI-powered wiki generator for code repositories. Generates comprehensive, Mermaid-rich structured documentation with architecture diagrams, component analysis, and source citations.

10 skills · plugin

E2E Test Setup with Playwright

Set up an end-to-end test suite with Playwright, including real flows, layered assertions, and CI integration.

10 skills · plugin

@alirezarezvani

37 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator (with semantic version bumper and hotfix/rollback procedures), API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor

33 skills · plugin

Results for “ci”

43 skills

agentskillexchange

Circleci Orb Auditor

Audits CircleCI orb versions and configurations using the CircleCI v2 API, flags deprecated orbs, provides pinning recommendations, and checks security advisories from the orb registry.

Integrating Dast With Owasp Zap In Pipeline

Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.

24.6k · bundle

Scanning Docker Images With Trivy

Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.

24.6k · bundle

Building Devsecops Pipeline With Gitlab CI

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

24.6k · bundle

Scanning Containers With Trivy In Cicd

Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.

24.6k · bundle

Performing Kubernetes Cis Benchmark With Kube Bench

Audit Kubernetes cluster security posture against CIS benchmarks using kube-bench with automated checks for control plane, worker nodes, and RBAC.

24.6k · bundle

More results

Implementing Fuzz Testing In Cicd With Aflplusplus

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

24.6k · bundle

Benchmarking Kubernetes With Kube Bench

Run CIS Kubernetes Benchmark checks and remediate findings with kube-bench.

24.6k · bundle

Triaging Vulnerabilities With Ssvc Framework

Triage and prioritize vulnerabilities using CISA's Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree framework to produce actionable remediation priorities.

24.6k · bundle

Security Compliance Automation

Automates security and compliance checks using OPA policies, Trivy vulnerability scanning, AWS CIS benchmark verification, and Kubernetes remediation scripts.

Parse, analyze, and process SARIF files from static analysis tools like CodeQL and Semgrep, including filtering, deduplication, aggregation, and CI/CD integration.

Scanning Iac And Images With Trivy

Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.

24.6k · bundle

Performing Docker Bench Security Assessment

Audits Docker host and daemon configuration against the CIS Docker Benchmark, generating compliance reports with pass/fail/warn results and remediation steps.

24.6k · bundle

Supply Chain Security

Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.

12.8k · bundle

Runs Semgrep static analysis to find bugs and security vulnerabilities, with guidance on installation, rule selection, custom rule writing, and CI/CD integration.

Implementing Devsecops Security Scanning

Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.

24.6k · bundle

Prioritizing Vulnerabilities With Cvss Scoring

Calculate CVSS scores, interpret vector strings, and prioritize vulnerabilities using CVSS alongside EPSS and CISA KEV for effective risk-based remediation.

24.6k · bundle

Performing Cve Prioritization With Kev Catalog

Integrate the CISA Known Exploited Vulnerabilities catalog with EPSS and CVSS to prioritize CVE remediation based on real-world exploitation evidence.

24.6k · bundle

Performing Power Grid Cybersecurity Assessment

Conduct cybersecurity assessments of electric power grid infrastructure, including NERC CIP compliance verification, substation automation security, and IEC 61850 protocol analysis.

24.6k · bundle

Performing Sca Dependency Scanning With Snyk

Scan open-source dependencies for known vulnerabilities using Snyk, including CI/CD integration, automated fix PRs, license compliance, and continuous monitoring.

24.6k · bundle

Implementing Aqua Security For Container Scanning

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.

24.6k · bundle

Gov Cybersecurity

Queries real-time vulnerability intelligence from NIST NVD, CISA KEV, EPSS, and MITRE ATT&CK via a remote MCP server, offering seven tools for CVE lookup, search, and trending analysis.

Performing Ssl Tls Security Assessment

Assess SSL/TLS server configurations using the sslyze Python library to evaluate cipher suites, certificate chains, protocol versions, HSTS headers, and known vulnerabilities like Heartbleed and ROBOT.

24.6k · bundle

Agentic Actions Auditor

Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.

Performing GCP Security Assessment With Forseti

Audit Google Cloud Platform environments for security misconfigurations using Forseti, Security Command Center, and gcloud CLI to evaluate IAM policies, firewall rules, storage permissions, and CIS compliance.

24.6k · bundle

Performing Container Security Scanning With Trivy

Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.

24.6k · bundle

Building Vulnerability Scanning Workflow

Establishes recurring vulnerability scanning workflows using Nessus, Qualys, or OpenVAS, prioritizes findings with risk scoring and CISA KEV data, integrates with SIEM for exploitation detection, and tracks remediation via SLA-based dashboards and automated ticketing.

24.6k · bundle

Detecting AWS Credential Exposure With Trufflehog

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.

24.6k · bundle

Performing Android App Static Analysis With Mobsf

Automates static analysis of Android APK/AAB files using MobSF to identify hardcoded secrets, insecure permissions, vulnerable components, and weak cryptography for pre-deployment security assessments or CI/CD integration.

24.6k · bundle

Continuous LLM Red Teaming With Promptfoo

Wire Promptfoo and DeepTeam into CI/CD for automated regression red-teaming of LLM apps against OWASP LLM Top 10 and OWASP Agentic presets, failing the build when jailbreak or injection vulnerabilities regress.

24.6k · bundle

Audit Claude Code configuration files for security vulnerabilities, misconfigurations, and injection risks using AgentShield.

Gha Security Review

Audits GitHub Actions workflows for exploitable vulnerabilities with concrete attack scenarios.

Authorized security assessment of REST, GraphQL, WebSocket, and SOAP APIs covering discovery, authentication, authorization, rate-limiting, and CI/CD integration.

12.8k · bundle

Discovers, classifies, protects, and governs API keys, tokens, secrets, and credentials across all providers with enterprise-grade security auditing and governance.

leandrobenjaminl

Security Auditor

Automated security auditing covering SAST, DAST, dependency scanning, secret detection, container hardening, and compliance checks before deployments or when integrating new dependencies.

Performing Kubernetes Etcd Security Assessment

Assess the security posture of Kubernetes etcd clusters by evaluating encryption at rest, TLS configuration, access controls, backup encryption, and network isolation.

24.6k · bundle