Skill UI

Parses SARIF files from scanners like CodeQL or Semgrep, offering filtering, deduplication, format conversion, and CI/CD integration without running scans itself.

Guides teams through setting up and tuning SAST tools like Semgrep, SonarQube, and CodeQL, integrating scans into CI/CD, creating custom rules, and managing false positives to maintain secure codebases across languages.

A comprehensive guide to implementing secure secrets management practices for Continuous Integration/Continuous Deployment (CI/CD) pipelines. It covers using industry-leading tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager to securely store, retrieve, and automatically rotate credentials (API keys, database passwords, TLS certificates) without hardcoding them into source code. Includes best practices for least-privilege access and audit logging.

Comprehensive DevOps toolkit automating CI/CD pipelines, infrastructure-as-code scaffolding, and container deployments with monitoring and rollback support.

Provides a Senior SecOps engineer toolkit for running SAST/DAST, dependency CVE scans, policy checks, and compliance automation (SOC2/PCI-DSS/HIPAA/GDPR) during audits, CVE response, or CI/CD hardening.

Automate Sentry release handling inside CI/CD pipelines by configuring auth tokens, org/project env vars, release steps, source-map uploads, commit association, deploy notifications, and workflow verification for GitHub Actions, GitLab CI, CircleCI, and similar systems.

A comprehensive guide to configuring and utilizing ShellCheck for static analysis of shell scripts (Bash, sh, POSIX). This tool detects common programming pitfalls, enforces best practices, and helps ensure script reliability and portability. Ideal for setting up linting in CI/CD pipelines, pre-commit hooks, or maintaining code quality standards across a development team.

Validates and scores Claude skills through automated structure, script, and documentation checks, providing CI/CD-friendly quality gates and pre-commit confidence.

Integrates Speak language learning validation into CI/CD pipelines via GitHub Actions, running automated tests for pronunciation, lesson content, and API response formats to guard regressions.

Automates SSH key manager workflows within DevOps Basics, offering guided best practices, code/config generation, and validation for foundational workflows such as git, containers, CI/CD, and infrastructure.

Set up Supabase CI/CD workflows in GitHub Actions to automate testing, PR checks, coverage uploads, and releases while validating builds before deployment.

This expert specializes in guiding systematic bug investigation, feature implementation, and collaborative development workflows using GitHub. It covers the entire lifecycle, from initial issue triage and root cause analysis to professional Pull Request creation. Use it to ensure fixes are thoroughly tested, proper branching is maintained, and modern CI/CD best practices are followed, transforming vague reports into production-ready code.