Skill UI

This skill simulates a senior engineer's final, deep audit of an entire codebase before committing or pushing to a remote repository. It systematically checks for junk files, dead code, security vulnerabilities (secrets, injection flaws), and performance bottlenecks (N+1 queries). Use this pre-flight check before any major release or public deployment to ensure maximum code quality and production readiness.

Scans cryptographic implementations to flag operations whose timing decisions leak secrets, offering language-specific guides, architecture/optimization options, and output modes so teams can enforce constant-time practices across reviews and CI.

This comprehensive guide details how to establish secure and robust API endpoints using Expo Router and EAS Hosting. Learn best practices for handling server-side secrets (API keys, credentials), proxying third-party services (like OpenAI), executing secure database operations, and implementing complex business logic entirely on the server. It covers file structure, HTTP methods, and deployment to Cloudflare Workers.

A comprehensive, multi-phase security audit tool designed to evaluate AI agent skills before deployment. It detects critical vulnerabilities, including prompt injection, malicious code, excessive permissions, secret exposure, and supply chain risks, ensuring the integrity and safety of your agent environment.

Varlock provides secure, default environment variable management, ensuring that sensitive secrets (like API keys and passwords) are never exposed in logs, terminal output, or the AI context. It validates environments, reads schemas, and executes commands in a secure manner, promoting best practices for handling secrets in modern development workflows.

A comprehensive enterprise-grade security engine designed to discover, classify, protect, and govern all credentials, API keys, and secrets across the entire application lifecycle. It provides continuous governance by auditing code repositories, CI/CD pipelines, runtime logs, and infrastructure configurations to prevent exposure and enforce least privilege principles. Ideal for implementing DevSecOps best practices.

Executes a deep security audit via Centinela (QA), covering OWASP Top 10 checks, dependency CVEs, secrets scans, and delivers structured findings and handoff reports.

Analyzes Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC changes, privileged pod creation, and anonymous access. Use it to investigate cluster compromises, recreate adversary behavior, or create SIEM detection rules for Kubernetes-specific threats.

A comprehensive guide detailing how to integrate DevSecOps best practices into a GitLab CI/CD pipeline. It automates multiple security checks, including Static Analysis (SAST), Dynamic Analysis (DAST), container scanning, dependency scanning, and secret detection. This approach enforces 'shift-left' security, finding and fixing vulnerabilities early in the development lifecycle to ensure compliance and robust security.

A comprehensive solution for identifying and preventing the accidental commitment of exposed AWS credentials, API keys, and session tokens within source code, configuration files, and git history. It integrates TruffleHog and git-secrets into CI/CD pipelines and pre-commit hooks, providing critical protection against credential theft and unauthorized cloud access in a DevSecOps environment. Essential for security auditing and compliance.

A robust security auditing tool designed to scan CI/CD pipeline configurations, such as GitHub Actions YAML, for critical supply chain vulnerabilities. It automatically detects issues like unpinned dependencies, script injection risks, secrets exposure, and dependency confusion, helping teams harden their build systems and maintain secure software development lifecycles.

Learn how to implement robust container security by integrating the open-source Trivy scanner (from Aqua Security) into your CI/CD pipelines. This guide covers scanning container images, Kubernetes manifests, IaC files, and code repositories to detect critical vulnerabilities, misconfigurations, secrets, and generating Software Bill of Materials (SBOM) for comprehensive supply chain security.