Git · For devops and sre engineers

Generate a CycloneDX SBOM for the repository via git-pkgs sbom.

alpha-omega-security/scrutineer

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing client-side JavaScript, HTML source, or git history for exposed credentials, API keys, or tokens.

thedaviddias/Front-End-Checklist

Perform a focused security review of pending git changes to identify high-confidence security vulnerabilities with real exploitation potential.

waybarrios/opencode-power-pack

SSH connection to remote servers. An agent skill from artwist-polyakov/polyakov-claude-skills.

artwist-polyakov/polyakov-claude-skills

Atmos Git and GitOps: git.repositories, clone/pull/status/diff/commit/push/clean, local Git hook shims, signed commits, managed workdirs, fork-PR trust gate, and auth via identities or github/sts

cloudposse/atmos

Native Helm components (experimental): Helm Go SDK rendering/apply/delete, components.helm, chart sources (local/repo/OCI), values, repositories, helm plugin, provision targets, and how this differs…

cloudposse/atmos

Atmos hooks: lifecycle events, hook kinds, command/store/git/security hooks, step/steps hooks, when: conditions, scoping and overrides, toolchain integration, --skip-hooks, and Atmos Pro/local output

cloudposse/atmos

Native Kubernetes components (experimental): render/plan/diff/apply/deploy/delete/validate via Kubernetes Go SDK server-side apply, components.kubernetes, kubectl/kustomize providers…

cloudposse/atmos

Atmos Pro setup and workflows: settings.pro, GitHub OIDC, affected and inventory uploads, stack locks, pro commit, workflow dispatch, merge queues, and drift detection

cloudposse/atmos

Roll a release back for real when post-deploy regression goes red — apc release rollback flips the current version to pulled and the last good version back to current in the release ledger, and…

Prismer-AI/PrismerCloud

Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks.

briiirussell/cybersecurity-skills

Source control and artifact exposure (.git, .svn, .hg, backups, .env).

langbyyi/CyberStrikeAI-SRC

Configure Grafana OSS — provisions dashboards from YAML, sets up data sources (Prometheus / Loki / Tempo / Pyroscope), writes dashboard JSON with template variables, builds panel queries, assigns…

grafana/skills

CI/CD pipeline design with GitHub Actions, Docker, Kubernetes, Helm, and GitOps patterns

rohitg00/awesome-claude-code-toolkit

Mass scan for exposed env files, backups, and git configs. An agent skill from uphiago/recon-skills.

uphiago/recon-skills

GitHub repos: create, clone, fork, archive (gh CLI + git). An agent skill from taracodlabs/aiden.

taracodlabs/aiden

Plan a safe history-preserving reversal of a completed feature from its archive and exact commit, including later-dependency risk, then stop before implementation.

aiblueprinthq/ai-blueprint

Security: review git changes for vulnerabilities, threat-model a system's attack surface, audit supply-chain risks.

notque/vexjoy-agent

The AGENTS.md file that sf hardis:org:monitor:backup writes at the root of every monitoring repository, so a coding agent can answer questions about the org, its CI/CD deployments and its Grafana…

hardisgroupcom/sfdx-hardis

gh, vercel, supabase, render CLI and deployment platform setup

alinaqi/maggy

Execute use when constructing GitOps workflows using ArgoCD or Flux.

jeremylongshore/tons-of-skills-marketplace

Promote a QA'd Sculptor release candidate to a full production release: verify the RC build is green and has been QA'd, then from the release branch run just promote-release (which strips the rcN…

imbue-ai/sculptor

Revoke or rollback a pi-agent-dashboard release: delete the GitHub Release, remove the git tag locally and on origin, deprecate the npm version (npm unpublish is blocked after 72h), and optionally…

BlackBeltTechnology/pi-agent-dashboard

Rolls back git commit, DB migration, or deploy to known-good with safety + health checks.

softspark/ai-toolkit

Generate or update docs to match the code, citing each claim to path:line and asking on ambiguity; runbook docs also get a check-only validation script.

luongnv89/skills

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Automatically notify the user when long-running terminal commands finish (npm test, docker build, git push, etc.).

EliasOulkadi/shokunin

Diagnose, fix, and manage Mini Diarium's Flatpak/Flathub packaging across the multi-repo ecosystem.

fjrevoredo/mini-diarium

Audit Stella code, paths, or Git diffs for security defects affecting privileged legal data, tenant isolation, authentication, files, AI, and auditability.

stella/stella

DevOps knowledge reference covering Git workflows, testing strategies, DevSecOps, release pipeline orchestration (release.yml, multi-arch images, cosign integration), CI/CD pipelines, database…

telagod/code-abyss

Domain/DNS ops across Cloudflare, DNSimple, Namecheap for Peter.

sundial-org/awesome-openclaw-skills

Component vendoring: vendor.yaml and component.yaml manifests, immutable vendor.lock.yaml receipts, pulling from Git/S3/HTTP/OCI/Terraform Registry, --stack/--labels/--tags selector composition…

cloudposse/atmos

A skill your agent uses when auditing a project for secrets committed to source control, setting up gitleaks, or hardening the "No secrets in source" harness constraint — covers scanning…

Habitat-Thinking/ai-literacy-superpowers

Audit dependency manifests and lockfiles for SBOM extraction, risky install scripts, unpinned versions, remote/git dependency sources, dependency-confusion and typosquat/known-malicious package…

ptn1411/skill

发布 Tauri 桌面应用新版本，处理版本号同步、Git tag、GitHub Actions 构建、Release 仓库产物同步、Cloudflare R2 上传、update.json 生成、自动更新发布和文档站重建。

bkywksj/knowledge-base

Measure review adoption, latency, findings, usage, and outcomes from documented dashboards, exports, reports, or API data.

jeremylongshore/tons-of-skills-marketplace

Troubleshoot Obsidian plugin failures with systematic incident response.

jeremylongshore/tons-of-skills-marketplace

Configure Vercel CI/CD with GitHub Actions, preview deployments, and automated testing.

jeremylongshore/tons-of-skills-marketplace

Deploy and manage Vercel production deployments with promotion, rollback, and multi-region strategies.

jeremylongshore/tons-of-skills-marketplace

Execute Devin Desktop (formerly Windsurf) incident response when AI features fail or cause production issues.

jeremylongshore/tons-of-skills-marketplace

Implement reliable Devin Desktop (formerly Windsurf) Cascade workflows with checkpoints, rollback, and incremental editing.

jeremylongshore/tons-of-skills-marketplace

Create a GitHub deployment for the current branch using the deploy-review workflow

blockscout/frontend

Configuring the deployment logical version in the Golem Application Manifest (golem.yaml): the version: source (git tag, git commit hash, static string, or env var), tuning…

golemcloud/golem

A skill your agent uses when deploying or operating an app on Fly.io — writing fly.toml, placing Machines in regions near users, attaching Volumes, managing secrets, or picking a scaling lever…

ericrisco/rsc-harness

Backup and restore ClawdBot configuration, skills, commands, and settings.

sundial-org/awesome-openclaw-skills

Backup Clawdbot workspace and config to GitHub with git-crypt encryption.

sundial-org/awesome-openclaw-skills

Map native languages, extension bridges, build tools, manifests, and dependencies after shallow Git submodules have been initialized.

alpha-omega-security/scrutineer