Development · Secrets management

Plan and apply Go dependency updates, including advisory-driven bumps, Trivy/govulncheck validation, and supply-chain review.

trufflesecurity/trufflehog

A skill your agent uses when: authenticating git and GitHub CLI for NEventStore tasks, fixing gh auth errors, setting PAT environment variables, preparing a shell session for git push and gh issue…

NEventStore/NEventStore

Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change.

crazywhalecc/static-php-cli

Covers Daytona CLI setup, sandbox debugging, keeping a sandbox alive and which credentials the CLI uses, for when Daytona itself is the problem rather than the tests.

different-ai/openwork

Run jit's pre-release QA — a team of QA-engineer subagents (functionality, integrations, UX, bug-hunting, code review) that exercise a release candidate on this real Mac and hand back a consolidated…

jitpass/jit

Run Windows tasks in Niubash, the GNU Bash-compatible Windows-native shell.

unixwin/niubash

Finalize a merge request: rebase onto main, run bugs, simplify, and specs in parallel, apply, then refactor last.

zifeo/lade

Debug container agent issues. An agent skill from sbusso/claudeclaw.

sbusso/claudeclaw

Walks a repository through release readiness before it goes public: secrets audit, licensing, documentation, CI and language-specific packaging.

trailofbits/skills

Keep keypaste's desktop screens, CLI output, site, README and brand assets on brand.

notinferred/keypaste

Triage, redact, clean up, and resolve OpenClaw GitHub Secret Scanning alerts in issues or PRs.

openclaw/openclaw

Swamp CLI — create and run models, build and validate workflows, query and manage data, store and retrieve vault secrets, develop and publish extensions, initialize repos, run reports, file issues…

swamp-club/swamp

Pre-submit hygiene check for AI-agent-authored pull requests.

Akimiya-z/codex-guard

Manages Git identity, HTTPS access tokens and SSH keys at the workspace level through three `tai tool` commands, each with a get, set, list, import or delete action.

YaoApp/yao

Prepare a Lade release: update CHANGELOG.md and bump crate versions with cargo set-version.

zifeo/lade

Diagnoses marchat client and server issues using -doctor, env configuration, and logs.

Cod-e-Codes/marchat

Helps when network-related commands (like curl, git, npm, pip, brew) are failing, timing out, or running slowly due to network issues.

didi/mpx

Run the mandatory pre-commit checks for the poku repository before staging a commit.

wellwelwel/poku

Scans a repository's source for security vulnerabilities with the supercov CLI, pointing to the line of each finding and mapping it to CWE classes.

supercorp-ai/supercov

Central authority on git hook implementations, modern best practices, and tooling for .NET/C, JavaScript/TypeScript, Python, and polyglot repositories.

Prorise-cool/Claude-Code-Multi-Agent

Handles npm registry tasks such as whoami checks, package name availability, name reservation and publishing, with credentials pulled from 1Password.

steipete/agent-scripts

Interact with GitHub repositories, pull requests, issues, and workflows using the GITHUBTOKEN environment variable and GitHub CLI.

OpenHands/extensions

This project uses flow for automation. An agent skill from flowexec/flow.

flowexec/flow

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

zebbern/claude-code-guide

Emulates any Aspire CLI build identity (channel, version, commit, package source) from a locally built CLI using ASPIRECLI environment variables and the install sidecar, so a reported bug can be…

microsoft/aspire

Expert-level Windows batch file (.bat/.cmd) skill for writing, debugging, and maintaining CMD scripts.

github/awesome-copilot

Add runtime configuration to specx Python services with pydantic-settings.

maksimzayats/specx

Detect exposed secrets, API keys, credentials, and tokens in code.

alirezarezvani/claude-code-tresor

Audit a pull request diff for common security concerns (input validation, sanitization, authentication and authorization, secrets management, unsafe dependencies, and related risks) and fold…

warpdotdev/oz-for-oss

Configuration and environment variable conventions for the Playwright scaffold — env file layout (env/.env.), dotenv loading via playwright.config.ts and the ENVIRONMENT variable, config objects in…

idavidov13/agentic-playwright

Review web application code for bugs, security issues, performance problems, and stack-specific anti-patterns.

rampstackco/claude-skills

Debug Bright Data Scraping Browser sessions using the Browser Sessions API.

brightdata/skills

A skill your agent uses when the user says 'git-guard', 'check git protection', 'is this repo protected', 'verify gitleaks', 'set up git hooks', 'install git-guard', or wants to confirm a repo…

cwinvestments/memstack

Apply security-conscious thinking when generating or modifying code.

techygarg/lattice

Turn the /ship scorecard into a blocking, config-as-code quality gate.

Houseofmvps/ultraship

Secure environment variable management ensuring secrets are never exposed in Claude sessions, terminals, logs, or git commits

aiskillstore/marketplace

Orchestrate end-to-end release pipelines. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

Defines environment variables, architecture design, and build/test commands.

shinpr/ai-coding-project-boilerplate

Edit opencode.json, AGENTS.md, and config files. An agent skill from IgorWarzocha/Opencode-Workflows.

IgorWarzocha/Opencode-Workflows

Set up worker environment and per-worker state for parallel pools.

matlab/matlab-agentic-toolkit

Troubleshooting Golem build failures and debugging manifest file (golem.yaml) configuration.

golemcloud/golem

Expert knowledge for Azure Data Factory development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations…

MicrosoftDocs/Agent-Skills

Aggiunge alle repository GitHub dei siti workflow di sicurezza automatici - scansione dipendenze vulnerabili, ricerca di segreti/chiavi nel codice, analisi statica CodeQL e Dependabot.

ccplugins/awesome-claude-code-plugins

Interact with Azure DevOps repositories, pull requests, and APIs using the AZUREDEVOPSTOKEN environment variable.

OpenHands/extensions

Triage Dependabot, code scanning and secret scanning alerts.

Community-Access/accessibility-agents

Manage a local GitHub knowledge base and provide GitHub search capabilities via gh CLI.

sundial-org/awesome-openclaw-skills

This skill should be used when the user asks to "triage security findings", "fix an Aikido finding", "review Aikido issues", "dismiss a false positive", "check SAST/IaC alerts", or needs to work…

bitwarden/ai-plugins

Evaluate JavaScript at bundle time and inline results. An agent skill from secondsky/claude-skills.

secondsky/claude-skills