starslingdev · Agent Skills

2 Skills with substantive, source-verified documentation. Open a card to read the original instructions and review package and installation details.

starslingdev

Community

ci-secure

Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code execution (curl|bash and mutable fetch-and-run), and dependency install scripts running in a job that holds secrets — reports every finding with a plain-English attacker scenario, plus

1h installs

1

GitHub stars

42

Updated

Oct 22

MIT103 Files

View skill details →

starslingdev

Community

ci-speedup

Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead env vars, build-cache misconfig, and ~60 more patterns across caching, redundancy, parallelization, conditional execution, trigger scope, and hidden failures. Use when: (1) analyzing a repo's CI for optimization opportunities, (2) producing a prioritized report with measured wall-clock and runner-mi

1h installs

1

GitHub stars

42

Updated

Oct 22

MIT201 Files

View skill details →