Skill UI

Generates production-ready CI/CD configurations for GitHub Actions, GitLab CI, and Jenkins, covering testing, security, build, and deployment stages to automate software delivery pipelines and multi-environment releases.

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

Automates searching the web for technical insights and packing them into clear GitHub issues so teams can immediately act on findings. Trigger it when you need research translated into tracked work or security/feature tickets.

Validates Vertex AI Agent Engine GitHub Actions workflows, enforcing Workload Identity Federation, least-privilege IAM, OIDC permissions, and security scanning so GCP deployments stay automated and secure.

A collection of production-ready GitHub Actions workflow patterns designed for automating the entire software development lifecycle (SDLC). Use these templates to streamline continuous integration (CI), build Docker images, deploy to Kubernetes clusters, perform security scans, and execute matrix testing across various tech stacks.

Runs AgentShield to audit Claude Code configuration files and MCP components for secrets, injection risks, and overly permissive settings, offering CLI, JSON/Markdown/HTML reports, auto-fix, Opus deep analysis, and CI-ready GitHub Action hooks to harden new or existing projects.

Provides Terraform and OpenTofu best-practice guidance for module design, testing selection, CI/CD pipeline setup, security scanning, and architecture decisions in production infrastructure-as-code projects.

This skill provides AI-assisted capabilities for creating and managing Continuous Integration/Continuous Deployment (CI/CD) workflows using GitHub Actions. It can generate new workflows from project requirements, optimize existing pipelines, debug failures, and implement industry-standard security best practices, streamlining the entire development and deployment process.

Systematically examines project dependencies, using GitHub data to highlight single-maintainer, unmaintained, unpopular, or otherwise risky packages before audits so teams can focus security efforts and propose better-maintained alternatives.

Structured PR/MR review workflow that analyzes blast radius, security, breaking changes, and test coverage delta to deliver prioritized findings for GitHub/GitLab pull requests.

Performs static security analysis on GitHub Actions workflows that incorporate AI coding agents (e.g., Claude, Gemini, OpenAI). This skill helps identify critical data flow vulnerabilities, such as where attacker-controlled input can reach AI agent prompts or internal systems via CI/CD pipelines, going beyond simple expression checks.