starslingdev
共 2 个 Skill，均有经来源核对的实质文档。打开卡片可阅读原始说明，了解包内文件和安装方式。
starslingdevci-secure
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUBENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code execution (curl|bash and mutable fetch-and-run), and dependency install scripts running in a job that holds secrets — reports every finding with a plain-English attacker scenario, plus
- 1小时安装量
- 1
- GitHub Stars
- 42
- 最近更新
- 10月22日
starslingdevci-speedup
Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead env vars, build-cache misconfig, and ~60 more patterns across caching, redundancy, parallelization, conditional execution, trigger scope, and hidden failures. Use when: (1) analyzing a repo's CI for optimization opportunities, (2) producing a prioritized report with measured wall-clock and runner-mi
- 1小时安装量
- 1
- GitHub Stars
- 42
- 最近更新
- 10月22日