Skill UI

This skill enables Claude to generate production-ready CI/CD pipeline configurations for major platforms, including GitHub Actions, GitLab CI, and Jenkins. It automates the entire software development lifecycle, supporting best practices for testing, building, security scanning, and multi-environment deployment. Use this when setting up automated software delivery workflows.

This skill functions as an expert in workflow automation, specializing in designing and implementing robust CI/CD pipelines and GitHub Actions workflows. It guides users through automating the entire development lifecycle—from building and testing to secure deployment. By establishing clear stages, handling secrets, and defining rollback strategies, it ensures consistency, reduces manual effort, and accelerates delivery while maintaining high quality and security standards.

This skill provides AI-assisted capabilities for creating and managing Continuous Integration/Continuous Deployment (CI/CD) workflows using GitHub Actions. It can generate new workflows from project requirements, optimize existing pipelines, debug failures, and implement industry-standard security best practices, streamlining the entire development and deployment process.

This skill assists developers in understanding, writing, and validating EAS workflow YAML files for Expo projects. It provides comprehensive guidance on CI/CD pipelines, job definitions, triggers, and expression syntax, ensuring configurations are accurate and up-to-date by referencing official Expo schemas. Use this when automating builds or deployments via EAS.

This guide details how to implement coverage-guided fuzz testing using AFL++ within CI/CD pipelines. It covers building the fuzzing harness, utilizing advanced instrumentation (like AddressSanitizer), and configuring automated runs to discover memory corruption and input handling vulnerabilities in compiled applications. Ideal for strengthening DevSecOps practices and ensuring code reliability.

Integrates Aqua Security's Trivy scanner into CI/CD pipelines to perform automated vulnerability scanning on Docker images and related artifacts. It detects OS package CVEs, application dependency issues, and Dockerfile misconfigurations. This ensures that only secure, compliant images can proceed to registry push or production deployment by enforcing strict quality gates.

This skill generates a complete, actionable CI/CD playbook, thoroughly documenting the entire software deployment lifecycle. It covers essential stages like build & linting, unit/integration testing, security scanning, and phased deployment to staging and production. The output provides clear guidelines on required inputs, automated gates, manual approvals, and necessary rollback procedures, which is crucial for engineering documentation and team onboarding.

Generate comprehensive, ready-to-use CI/CD pipeline configurations for running automated API tests using Newman. This skill provides templates for major platforms like GitHub Actions, GitLab CI, Jenkins, and Azure DevOps. It ensures seamless integration of Postman collections into automated build processes, including setting up environment variables, running tests, and publishing detailed JUnit and HTML reports.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

Specialize in creating efficient CI/CD pipelines and GitHub Actions workflows to automate development processes. This skill reduces manual work, improves consistency, and accelerates delivery while maintaining quality and security. Ideal for designing multi-stage build, test, and deploy flows, replacing manual steps with reliable automation.

Helps understand and write EAS workflow YAML files for Expo projects. Use for CI/CD or workflows in an Expo/EAS context, .eas/workflows/, EAS build pipelines, or deployment automation.