Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis.
10 skills · 1 agent
Comprehensive code review system with organization-wide standards.
Plugin bitwarden-code-review from marketplace bitwarden-marketplace in bitwarden/ai-plugins. Commands read from the repo's manifest — 6 days ago.
addressing-code-review-commentsUse when the user is addressing pull request review comments locally and asks for help evaluating, implementing, or drafting responses to reviewer feedback - requires technical rigor and verification, not performative agreement or blind implementation
assessing-change-riskRates the risk of a finished or planned code change from low to critical and says how much human review it needs and where to look. Use for "assess the risk of this change", "how risky is this PR", "how much human review does this need", "what should a reviewer look at here", or when a caller hands
avoiding-false-positivesUse this skill to validate findings during a code review. For each finding, run the rejection criteria and verification checks. If a finding fails any check, drop it. In PR mode it also holds the once-per-review stacked-PR gate that decides whether completeness findings apply to the pull request at
classifying-review-findingsUse this skill when categorizing code review findings into severity levels. Apply when determining which emoji and label to use for PR comments, deciding if an issue should be flagged at all, or classifying findings as CRITICAL, IMPORTANT, DEBT, SUGGESTED, or QUESTION.
code-review-localReview a GitHub pull request or local changes and write the review to local files instead of posting
code-reviewReview a GitHub pull request and post findings directly to GitHub
performing-multi-agent-code-reviewPerform a rigorous, multi-agent code review with architecture-compliance, parallel quality/security analysis, finding validation, and severity audit. Use when the user asks for a structured, deep, thorough, multi-pass, or multi-agent code review — or a review that includes architecture/pattern compl
posting-bitwarden-review-commentsUse this skill when emitting inline review comments, whether posted to a GitHub pull request or written to a local file under caller-declared local-file output. Apply when formatting comments following Bitwarden engineering standards with severity emojis, clear explanations, and actionable suggestio
posting-review-summaryUse this skill when posting the final summary comment, including its No Verdict form when nothing could be reviewed and no inline comments exist. Otherwise apply as the LAST step of code review, after all findings are classified and inline comments are complete. Detects context (caller-declared loca
reviewing-dependency-changesUse this skill when a PR diff contains changes to dependency manifest files (package.json, .csproj, Cargo.toml, go.mod, requirements.txt, etc.) or when reviewing Renovate/Dependabot bot PRs. Evaluates new dependencies for AppSec approval process compliance, major version bump significance, lock file
Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis.
10 skills · 1 agent
Delivery lifecycle skills for Bitwarden initiatives — initiative funnel navigation, work transitions, architectural judgment, feature flags, commits, pull requests, preflight checks, and change labeling.
10 skills
Champion-of-a-technical-strategy agent for Bitwarden. Shepherds a Technical Strategy Idea through Architecture's evaluation into the Software Initiative Funnel, then drives the resulting initiative across all five funnel phases to durable adoption.
7 skills · 1 agent
GitHub Actions workflow compliance, action security auditing, and org-wide CI/CD remediation.
7 skills
Testing tools for Bitwarden: test coverage and Testmo case review, test layer recommendations, manual test cases, requirement readiness, test plans, and QA manual regression runs, plus the bundled bitwarden-test-automation MCP server.
6 skills · 1 MCP server
Validates Claude Code configuration files for security, structure, and quality. Routes CLAUDE.md, agents, commands, hooks, and settings to targeted review skills, reporting only what a changeset introduced.
7 skills
Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Automated code review for pull requests using multiple specialized agents with confidence-based scoring to filter false positives
1 command
Use Alibaba Open Code Review from local Codex.
2 skills
Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.
13 skills · 9 commands · 1 MCP server
Comprehensive UI/UX design plugin for mobile (iOS, Android, React Native) and web applications with design systems, accessibility, and modern patterns
9 skills · 4 commands · 3 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.