407 skills ・ Works with: GitLab · sorted by popularity
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret Tespit.
The English summary is being prepared. Showing the original description.
bu skill covers integrating OWASP ZAP (Zed Attack Proxy) for Dynamic Application Security Testing in CI/CD pipelines. It addresses configuring baseline, full, and API scans against running applications, interpreting ZAP Bul:ings, tuning scan policies, and establishing DAST quality gates in GitHub Actions and GitLab CI.
The English summary is being prepared. Showing the original description.
Dağıt: Aqua Security's Trivy scanner to tespit etmevulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.
The English summary is being prepared. Showing the original description.
Tespit etme exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native Tespit mechanisms to prevent credential theft and unauthorized account access.
The English summary is being prepared. Showing the original description.
Webhook subscriptions: event-driven agent runs.
The English summary is being prepared. Showing the original description.
Accessibility audit skill for scanning, fixing, and verifying WCAG 2.2 Level A and AA compliance across React, Next.js, Vue, Angular, Svelte, and plain HTML codebases. Use when auditing accessibility, fixing a11y violations, checking color contrast, generating compliance reports, or integrating accessibility checks into CI/CD pipelines.
The English summary is being prepared. Showing the original description.
ScalarDBサイジング見積もりエージェント - Enterprise/OSSエディション別のインフラ構成・Pod数・コストを対話形式で見積もり。/scalardb-sizing-estimator で呼び出し。
The English summary is being prepared. Showing the original description.
uv (Astral 製 高速 Python パッケージ / プロジェクトマネージャー) のリファレンス。 pyproject.toml, uv.lock, uv init / add / sync / run / lock, uv pip, uv venv, uvx / uv tool, uv python install / pin, PEP 723, tool.uv.sources, uv build / publish, uv_build, uv.toml, UV_* 環境変数, uv auth, Docker / GitHub Actions / PyTorch 連携。
The English summary is being prepared. Showing the original description.
Detecting exposed AWS credentials in source code repositories, CI/CD pipelines, and configuration files using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.
The English summary is being prepared. Showing the original description.
Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.
The English summary is being prepared. Showing the original description.
Use when writing, reviewing, or debugging Terraform/OpenTofu modules, tests, CI, scans, or state ops - diagnoses failure mode (identity churn, secrets, blast radius, CI drift, state corruption) with version-aware guards.
The English summary is being prepared. Showing the original description.
Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before first use of the other engineering skills.
The English summary is being prepared. Showing the original description.
Find external documentation, web sources, or remote code with citations. Local code navigation uses the configured code tools.
The English summary is being prepared. Showing the original description.
Turborepo (高速モノレポビルドシステム) リファレンス。 turbo.json、turbo run、dependsOn、task tags、キャッシュ (local / remote)、 workspaces (pnpm / npm / yarn / bun / nub / aube)、Rust / Python / Go ワークスペース (実験的)、 --filter、turbo query affected、turbo prune、turbo gen、watch、parallel 実行、 Remote Cache (Vercel / 自前ホスト Remote Cache API)、devEngines.packageManager、 エラー診断 (recursive turbo invocations, missing root task, invalid env prefix)。
The English summary is being prepared. Showing the original description.
Kubb (OpenAPI / Swagger コードジェネレーター) リファレンス。 kubb.config.ts、TypeScript 型・TanStack Query フック・Zod・Faker・MSW モック生成プラグイン、 Fetch / Axios / SWR / React Query クライアント、plugin-client (自前クライアント)。 CLI 8 コマンド、拡張レジストリ (kubb add)、Kubb Studio、Kit (kubb/kit)、 parser-ts / parser-md、adapter-oas、diagnostics、プラグインベース、モノレポ対応。 TanStack Query 本体の API は tanstack-query スキル。
The English summary is being prepared. Showing the original description.
OpenAI Codex (CLI / IDE / cloud / ChatGPT desktop app) リファレンス。 GPT-6 系, Fast / Ultrafast mode, codex exec, スラッシュコマンド, prompting, AGENTS.md, rules, subagents, approvals, auto-review, sandbox, permission profiles, profiles, config.toml, 環境変数, roles, MCP 設定, GitHub Action, Codex SDK, App Server (JSON-RPC), Agents SDK 連携, Codex skills (.agents/skills), plugins, scheduled tasks, Browser, Computer Use, cloud / local / worktree 環境, git worktrees, Record & Replay, cloud 委譲, GitHub / GitLab / Linear / Slack 連携, administration, provisioning, analytics API, compliance API, LLM gateway, Codex Security 脆弱性スキャン (SARIF), deep scan, triage, findings, threat model, security hardening。
The English summary is being prepared. Showing the original description.
Claude Code (code.claude.com) デプロイ・CI/CD リファレンス。 Amazon Bedrock / Google Cloud Agent Platform (Vertex AI) / Microsoft Foundry / Claude Platform on AWS、 Claude apps gateway、LLM gateway (protocol / rollout)、 GitHub Actions (claude-code-action) / GitLab CI/CD / GitHub Enterprise Server (GHES)、 Code Review (REVIEW.md・review level・@claude review always・コスト・トラブルシュート)、 ローカル /code-review、ultrareview (claude ultrareview)、 Slack (Claude Tag、旧 Claude Code in Slack、Pro/Max)、 headless mode、cloud environments、devcontainer、 self-hosted environments（runner 構成・identity 検証・本番デプロイ）。
The English summary is being prepared. Showing the original description.
修正完了後に agent-review-kit でレビューHTMLを生成し、ユーザーがブラウザで書いた差分コメントを Codex または Claude Code の同一セッションで受け取り、回答・修正・resolve を未解決0件まで繰り返すレビューループ。AIレビューの指摘を add-comment でブラウザ上のコメントとして表示し、ユーザーが返信した指摘だけ修正する「AIレビューモード」も含む。実装プラン・設計書などの任意HTMLを publish-html でレンダリング済みのまま表示し、要素クリック・テキスト範囲でコメントを受け取る「HTMLレビューモード」も含む。他のレビュースキルの結果の出力先として agent-review-kit が指定された場合も、このスキルを読んで AI レビューモードの手順に従うこと。Use when the user wants to review changes in a browser (GitHub-like diff review), review a rendered HTML doc (plan/design doc) in a browser, iterate on fixes with inline comments, or display AI review findings as browser comments (output target: agent-review-kit).
The English summary is being prepared. Showing the original description.
Gate a build on browser fingerprint regressions with liarjs - save a baseline scan as JSON, diff later runs against it, and fail the job when the consistency score falls below a floor. Use when asked to add a fingerprint or headless-detection check to GitHub Actions, GitLab CI or another pipeline, to catch a regression in a Chromium build or scraping harness before it ships, or to track how a fingerprint score changes across commits.
The English summary is being prepared. Showing the original description.
This skill should be used when users need to lint, format, or validate Python code using the Ruff command-line tool. Use this skill for tasks involving Python code quality checks, automatic code formatting, enforcing style rules (PEP 8), identifying bugs and security issues, or modernizing Python code. This skill should be invoked PROACTIVELY whenever Python code is written or modified to ensure code quality.
The English summary is being prepared. Showing the original description.
Create and manage webhook subscriptions for event-driven agent activation. Use when the user wants external services to trigger agent runs automatically.
The English summary is being prepared. Showing the original description.
Set up and maintain continuous integration and continuous deployment pipelines with GitHub Actions, GitLab CI, Jenkins, or similar tools to automate testing, building, and deployment. Use when configuring automated builds, setting up test automation, implementing deployment automation, creating release workflows, managing environment deployments, configuring build caching, implementing blue-green deployments, setting up rollback strategies, or automating the entire software delivery pipeline.
The English summary is being prepared. Showing the original description.
Post-deploy canary monitoring. Watches the live app for console errors, performance regressions, and page failures using the browse daemon. Takes periodic screenshots, compares against pre-deploy baselines, and alerts on anomalies. Use when: "monitor deploy", "canary", "post-deploy check", "watch production", "verify deploy". (gstack)
The English summary is being prepared. Showing the original description.
Read-only queue dashboard for workspace-aware ship. Shows which VERSION slots are currently claimed by open PRs, which sibling Conductor workspaces have WIP work likely to ship soon, and what slot /ship would pick next. No mutations — just a snapshot. Use when asked to "landing report", "what's in the queue", "show me open PRs", or "which version do I claim next". (gstack)
The English summary is being prepared. Showing the original description.