Plugins
12 pluginscurated
Feature Development Pipeline
Plan, execute, and verify a feature using structured planning, gated pipeline, and issue tracking.
10 skills · plugin
curated
Project Verification Pipeline
For developers running comprehensive verification pipelines for Laravel or Quarkus projects before PRs or releases.
4 skills · plugin
curated
Secure Code Review Pipeline
Installs a pipeline to validate, plan, execute, and enforce a secure code review on PRs.
12 skills · plugin
curated
Build RAG Pipeline with Pinecone
Build a production RAG pipeline and persistent agent memory using Pinecone as the vector database backend.
6 skills · plugin
curated
Deploy Azure ML Pipeline
Manage Azure Machine Learning resources including workspaces, jobs, models, data, compute, and pipelines using the SDK v2 for Python.
3 skills · plugin
curated
Agent Governance Pipeline
Implement policy enforcement, intent classification, and audit trails for AI agents.
9 skills · plugin
curated
Cloudflare One Deployment Pipeline
Design, configure, and migrate to Cloudflare One Zero Trust and SASE.
3 skills · plugin
curated
Build Feature with TDD Pipeline
Research, plan, implement with TDD, review, and commit a new feature.
5 skills · plugin
curated
GDPR Audit Pipeline
Pressure-test GDPR compliance with article-cited questions and generate audit readiness evidence.
9 skills · plugin
curated
Code Security Review Pipeline
Audit code changes for bugs, security flaws, and quality issues before merging.
15 skills · plugin
curated
MCP Security Audit Pipeline
Audit MCP servers for secrets exposure, shell injection, and supply chain risks.
12 skills · plugin
curated
Secure Django Deployment
Installs a pipeline to harden, audit, verify, and deploy a Django app securely.
5 skills · plugin
Results for “pip”
23 skills
mukul975 Integrating Dast With Owasp Zap In Pipeline
Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.
24.6k · bundle
mukul975 Implementing Devsecops Security Scanning
Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.
24.6k · bundle
mukul975 Building Devsecops Pipeline With Gitlab CI
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
24.6k · bundle
mukul975 Performing Supply Chain Attack Simulation
Simulate and detect software supply chain attacks including typosquatting via Levenshtein distance, dependency confusion testing, package hash verification, and vulnerability scanning with pip-audit.
24.6k · bundle
mukul975 Detecting AWS Credential Exposure With Trufflehog
Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.
24.6k · bundle
mukul975 Performing Oil Gas Cybersecurity Assessment
Conduct cybersecurity assessments for oil and gas facilities, covering upstream, midstream, and downstream operations, including SCADA, DCS, and safety systems, with compliance mapping to API 1164, TSA Pipeline Security Directives, IEC 62443, and NIST CSF.
24.6k · bundle
More results
mukul975 Testing Prompt Injection In RAG Pipelines
Probe RAG applications for prompt injection via poisoned retrieved context and embedding manipulation.
24.6k · bundle
pwdev-solucoes Devsecops
Audita infraestrutura e pipeline em busca de vulnerabilidades, credenciais vazadas, IAM excessivo e exposição pública, com recomendações de hardening e classificação de severidade.
2
zhaoxuya520 Supply Chain Security
Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.
12.8k · bundle
alirezarezvani Dependency Auditor
Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.
20.4k · bundle
affaan-m Quarkus Verification
Runs a comprehensive verification pipeline for Quarkus projects including build, static analysis, tests with coverage, security scans, native compilation, and diff review before PRs or releases.
226k
mukul975 Detecting Data And Model Poisoning
Detect poisoned training data and backdoored models across the ML pipeline using statistical analysis, activation clustering, and spectral signatures.
24.6k · bundle
mukul975 Performing Malware Triage With Yara
Rapidly classify malware samples against known family signatures using YARA rules, covering rule writing, scanning, and integration with analysis pipelines.
24.6k · bundle
mukul975 Scanning Containers With Trivy In Cicd
Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.
24.6k · bundle
zhaoxuya520 Firmware Pentest
End-to-end firmware and IoT penetration testing pipeline following OWASP FSTM methodology. Extracts, emulates, and exploits router, camera, and smart-home firmware using binwalk, EMBA, Firmadyne, and AFL++.
12.8k · bundle
mukul975 Implementing Aqua Security For Container Scanning
Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
24.6k · bundle
mukul975 Analyzing Supply Chain Malware Artifacts
Investigate supply chain attack artifacts including trojanized software updates, compromised build pipelines, and sideloaded dependencies to identify intrusion vectors and scope of compromise.
24.6k · bundle
trailofbits Agentic Actions Auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations, detecting attack vectors where attacker-controlled input reaches AI agents in CI/CD pipelines.
6k · bundle
mukul975 Securing Container Registry Images
Scan container images for vulnerabilities with Trivy and Grype, generate SBOMs, sign images with Cosign and Sigstore, configure registry access controls, and enforce security gates in CI/CD pipelines.
24.6k · bundle
mukul975 Building Automated Malware Submission Pipeline
Automates the collection of suspicious files from endpoints and email gateways, submission to sandbox and multi-engine scanners, and generation of verdicts with IOCs for SIEM integration.
24.6k · bundle
mukul975 Implementing Fuzz Testing In Cicd With Aflplusplus
Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.
24.6k · bundle
mukul975 Hunting For Cobalt Strike Beacons
Detect Cobalt Strike beacon network activity using TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP C2 profile matching, beacon jitter analysis, and named pipe detection via Zeek, Suricata, and Python PCAP analysis.
24.6k · bundle
mukul975 Performing Android App Static Analysis With Mobsf
Automates static analysis of Android APK/AAB files using MobSF to identify hardcoded secrets, insecure permissions, vulnerable components, and weak cryptography for pre-deployment security assessments or CI/CD integration.
24.6k · bundle