← all publishers

konstruktoid

@konstruktoid source repo

Report this profile Claim this profile

• 10 skills
• 0 followers
• 6 hours ago last updated

1. ▌
   Bash Testing · konstruktoid

   Adds or updates bats-core, shunit2, or plain-script test coverage for a Bash change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new framework, deciding whether the change requires a test at all, making a script testable by separating logic into functions from the entry point, and running the suite in a bounded verify loop. Use when a shell script's behavior changes and that change should be locked in, including fixing a bug so it cannot regress, pinning an exit code or output that is currently wrong, adding behavior, or covering input validation, cleanup, privilege, or destructive paths, and when deciding where a new shell test belongs in an unfamiliar repository. Not for test work in other languages, and not for documenting, explaining, or tuning CI for a script whose behavior is unchanged.
   0
   installs
2. ▌
   Python Testing · konstruktoid

   Adds or updates pytest coverage for a Python change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new structure, deciding whether the change requires a test at all, and running the suite in a bounded verify loop. Use when a Python change adds behavior, fixes a bug, changes a public interface, or touches security-relevant logic, and when deciding where a new test belongs in an unfamiliar repository.
   0
   installs
3. ▌
   Bash Secure Scripting · konstruktoid bundle

   Authors, reviews, and hardens Bash scripts for the stability and security properties a linter cannot verify on its own, including strict-mode semantics and the cases errexit ignores, cleanup and locking on every exit path, injection-safe handling of untrusted input and filenames, PATH and environment control, temporary files and permissions, and credential handling, verified with shellcheck, bash -n, and the repository's formatter in a bounded loop. Use when creating or editing a shell script, a sourced shell library, or shell embedded in CI steps, container entrypoints, systemd units, cron jobs, or git hooks, and when reviewing quoting, eval, set -euo pipefail, traps, temporary files, privilege or sudo use, or secrets in shell code.
   0
   installs
4. ▌
   Python Secure Coding · konstruktoid bundle

   Authors and modifies Python source code with security best practices that static analysis alone does not fully cover, including input handling, deserialization, secrets, subprocess/SQL/crypto usage, SSRF, and dependency hygiene, layered on the ruff/ty quality gate. Use when writing or editing Python, and especially for changes touching user input, subprocess/OS calls, SQL or other query construction, templating, cryptography, secrets/credentials, or access control.
   0
   installs
5. ▌
   Terraform Testing · konstruktoid

   Adds or updates automated coverage for a Terraform change by first discovering the repository's existing approach, native terraform test HCL, Terratest, or plan-and-policy assertions, matching it rather than imposing a new one, deciding whether the change needs a test at all, and running the suite in a bounded verify loop. Use when a Terraform change adds or changes a module input or output, changes resource behavior, fixes a bug, or touches variable validation, and when deciding where a new test belongs in an unfamiliar Terraform repository.
   0
   installs
6. ▌
   Github Actions Security · konstruktoid bundle

   Authors, reviews, and hardens GitHub Actions workflows, reusable workflows, and composite actions with least-privilege GITHUB_TOKEN permissions, action references pinned by commit SHA to the latest published release, injection-safe handling of untrusted event data, safe trigger and runner choices, and a structure that scales across many repositories, verified with actionlint and zizmor in a bounded loop. Use when creating or editing anything under .github/workflows/, an action.yml or action.yaml, or a dependabot.yml covering actions, and when reviewing workflow permissions, secrets, OIDC, action pinning or versions, triggers such as pull_request_target or workflow_run, self-hosted runners, caching, or organization-wide workflow governance, and when a workflow runs an AI coding agent, covering the trigger that starts it and the token, tools, and network it holds.
   0
   installs
7. ▌
   Terraform Secure Iac · konstruktoid bundle

   Authors and reviews Terraform configuration for the security properties that formatting and validation do not cover, meaning state and secret exposure, least-privilege execution identity, provider and module supply chain, sensitive variables and outputs, and policy-as-code enforcement, verified through the target repository's own fmt, validate, tflint, and configuration-scanning loop rather than from the edit alone. Use when creating or modifying Terraform configuration, backends, or provider blocks, and when reviewing state handling, secrets, execution credentials, module sources, or version pinning.
   0
   installs
8. ▌
   Ansible Verification Loop · konstruktoid bundle

   Reviews and modifies Ansible roles, collections, playbooks, and tasks, verified through the target repository's own lint/test loop rather than declaring success from the edit alone. Use when reviewing or modifying any Ansible role, collection, playbook, or task.
   0
   installs
9. ▌
   Github Repository Security · konstruktoid bundle

   Configures, reviews, and hardens the security and compliance settings of one GitHub repository, covering rulesets and branch protection, review and CODEOWNERS requirements, secret scanning with push protection, code scanning and dependency alerts, collaborator and deploy key access, tag and release protection, and the agent-facing content a repository ships such as skills, hooks, and MCP server definitions, verified by reading the applied state back through the GitHub API in a bounded loop. Use when creating or hardening a repository, changing rulesets, branch protection, visibility, collaborator access, secret or code scanning, SECURITY.md, CODEOWNERS, environments, deploy keys, or release and tag protection, and when auditing one repository against a security or compliance baseline.
   0
   installs
10. ▌
    Github Organization Governance · konstruktoid bundle

    Configures, reviews, and hardens GitHub organization and enterprise settings that apply across repositories, covering member privileges and base permissions, two-factor and single sign-on requirements, team-based access and periodic access reviews, GitHub App and personal access token policy, the allowed-actions and self-hosted runner policy, organization rulesets targeted by custom properties, and audit log retention, streaming, and evidence, verified by reading the applied state back and measuring coverage across repositories in a bounded loop. Use when setting organization or enterprise policy, rolling a ruleset out across repositories, designing or populating custom properties, reviewing member, team, app, or token access, restricting which actions and runners repositories may use, or assembling evidence for a compliance framework such as SOC 2, PCI DSS, HIPAA, or FedRAMP.
    0
    installs