Catch agent-era CI/CD and permission misconfigurations before shipping with Ship Safe
Run Ship Safe before a release when an agent needs one pre-ship pass for CI/CD misconfigurations, permission risks, secrets exposure, MCP-related hazards, and dependency issues.
Prerequisites
Node.js or package runner, repository or CI config to scan
Installation
Choose whichever fits your setup:
- Copy this skill folder into your local skills directory.
- Clone the repo and symlink or copy the skill into your agent workspace.
- Add the repo as a git submodule if you manage shared skills centrally.
- Install it through your internal provisioning or packaging workflow.
- Download the folder directly from GitHub and place it in your skills collection.
Install command or upstream instructions:
Install Ship Safe from its published package or run it from the repo, then execute a scan against the target repository before merge or deployment and review the findings as a release gate.