Development · npm · For devops and sre engineers

Scheduled CI skill that scans a repository for small, certain docs, test and code hygiene issues and fixes them on one branch with a commit per finding.

QwenLM/qwen-code

Checks a codebase for hardcoded secrets, vulnerable dependencies, weak input handling, weak authentication and unsafe transport settings before deployment or merge.

TheDecipherist/claude-code-mastery

Check if package.json files are in sync with pnpm-lock.yaml.

Hyk260/PureChat

A skill your agent uses whenever the user asks for a new npm version, npm release, package release, new release, version bump, publishing to npm, cutting a GitHub release, tagging a release, or…

jmfederico/pi-web

Defensive CI/CD patterns: semver validation, token checks, retry logic, and draft detection

bradygaster/squad

Audits outdated npm and Bun packages for supply chain integrity before bumping them, deferring risky ones and logging every decision.

backnotprop/plannotator

Product-specific frontend wrappers, API clients, and paths for ansible-ui.

ansible/ansible-ui

Coordinate a full Paperclip release across engineering verification, npm, GitHub, smoke testing, and announcement follow-up.

paperclipai/paperclip

Publish oh-my-opencode to npm by triggering the GitHub Actions publish workflow and verifying its artifacts.

code-yeongyu/oh-my-openagent

Releases and CI for eserstack: the shared version of all packages, the release command, the tag-driven build.yml run, JSR and npm publishing, changelog and breaking changes, release recovery, GitHub…

eser/stack

Master uv package manager for Python: project setup, dependency management, virtual environments, lockfiles, CI/CD integration, Docker builds, and migration from pip/poetry.

Aedelon/claude-code-blueprint

Autonomously cut a Rove (@sma1lboy/rove) release end-to-end — detect the semver bump from pending changesets (flagging an upstream minor you didn't intend), run the release gates, dispatch the…

Sma1lboy/rove

Defensive CI/CD patterns: semver validation, token checks, retry logic, draft detection — earned from v0.8.22

FritzAndFriends/SharpSite

Audit JS/TS projects against NPM Security Guidelines covering project setup, dependency hygiene, CI/CD pipeline, Dependabot, and incident response.

c0x12c/ai-toolkit

A skill your agent uses when setting up npm publishing with GitHub Actions - provides trusted publishing with OIDC, provenance attestations, and monorepo configuration

pr-pm/prpm

A skill your agent uses when Manor GitHub Actions, .github/workflows/ci.yml, OSS smoke/regression jobs, web source smoke, frontend build, lint, or public CI failure logs need diagnosis or repair.

manor-os/manor-ai

Set up a GitHub Actions CI/CD pipeline with linting, testing, type-checking, and deployment steps.

spencerpauly/awesome-cursor-skills