Skill UI

This tool provides comprehensive automation for core GitLab operations, streamlining the entire development lifecycle. Users can manage projects, track issues, review merge requests, manage branches, and monitor CI/CD pipelines. It leverages a unified API interface to handle complex workflows, ensuring efficiency in version control and collaborative development environments.

A comprehensive guide for configuring and troubleshooting Jenkins when embedded within KubeSphere DevOps. Learn how to manage Jenkins via Configuration as Code (CasC), integrate advanced authentication methods like LDAP and OIDC, customize agent images, and connect to external sources such as GitLab. Covers everything from initial access to backup and recovery.

Use the Composio CLI to automate the entire Pull Request review and Continuous Integration (CI) triage process for GitHub and GitLab. This tool fetches code diffs, analyzes failure logs, posts detailed inline review comments, and iteratively patches and re-runs CI checks until the code passes, significantly enhancing code quality and developer efficiency.

Generate comprehensive, ready-to-use CI/CD pipeline configurations for running automated API tests using Newman. This skill provides templates for major platforms like GitHub Actions, GitLab CI, Jenkins, and Azure DevOps. It ensures seamless integration of Postman collections into automated build processes, including setting up environment variables, running tests, and publishing detailed JUnit and HTML reports.

Automates the entire Continuous Integration (CI) workflow, crucial before opening a Pull Request (PR). It systematically runs local unit tests for multiple languages (Python, Node, Rust), performs type checking, pushes the current branch to the remote repository, and finally provides the direct URL and status check for the CI platform (GitHub Actions/GitLab). This single command replaces multiple manual steps.

This script automates the Git push process, ensuring safety checks (e.g., preventing direct pushes to main branches) and verifying uncommitted changes. Upon successful push, it dynamically generates and displays direct tracking links for CI pipelines on major platforms like GitLab and GitHub Actions, providing immediate status updates for development teams.

Quickly retrieve and display the current Continuous Integration/Continuous Deployment (CI/CD) pipeline status for the active branch or a specific Pull/Merge Request. This tool supports major Git platforms including GitLab CI and GitHub Actions, providing developers with an immediate snapshot of build and test results.

A comprehensive methodology for exploiting modern Continuous Integration/Continuous Delivery (CI/CD) pipelines. This skill covers advanced attack vectors across major platforms, including GitHub Actions expression injection, Jenkins RCE, GitLab YAML abuse, and Azure DevOps compromise. Techniques focus on privilege escalation, credential theft, and supply chain poisoning, mapping to MITRE ATT&CK T1195.002.

A comprehensive methodology for offensive security, detailing how to systematically extract secrets from Continuous Integration/Continuous Deployment (CI/CD) pipelines. Techniques covered include dumping environment variables, exploiting misconfigurations in HashiCorp Vault, AWS Secrets Manager, and cloud platform tokens (GitHub, GitLab, etc.). It also guides attackers on OIDC federation abuse, build log analysis, and advanced exfiltration methods, mapping to MITRE ATT&CK T1552.

Provides a comprehensive setup for Playwright End-to-End (E2E) testing. This skill automatically analyzes your project structure (framework detection, TypeScript/JavaScript) and generates all necessary files: the core playwright.config.ts, standardized folder structure, initial test examples, and full CI/CD workflows (GitHub Actions/GitLab). It ensures your testing environment is production-ready, supporting modern frameworks like Next.js, React, Vue, and Angular.