Application security engineering assistant for vulnerability triage, threat modeling, and secure code analysis.
10 skills · 1 agent
165
claude
bitwarden-devops-engineer
GitHub Actions workflow compliance, action security auditing, and org-wide CI/CD remediation.
/
Plugin bitwarden-devops-engineer from marketplace bitwarden-marketplace in bitwarden/ai-plugins. Commands read from the repo's manifest — 6 days ago.
What it installs
Skills (7)
action-auditAudit GitHub Actions action usage across an org. Searches for a specific action (incident mode) or sweeps all workflow files for non-compliant action references (audit mode). Produces a read-only report of findings with compliance status and resolved SHAs. Does not modify any files. <example> User:
action-remediateRemediate GitHub Actions action findings identified by the action-audit skill. Applies the appropriate fix per action type — `@main` ref for internal `bitwarden/` actions, full SHA with inline version comment for external actions, or full replacement — across selected repos and creates draft PRs. Ru
auditing-workflow-conventionsReference for Bitwarden GitHub Actions naming conventions that the workflow linter (bwwl) does not enforce. Covers three standards — job IDs (kebab-case), step names (Sentence case imperative), and workflow file names (kebab-case.yml, `_` prefix for reusable) — plus an advisory canonical step-name g
bitwarden-workflow-linter-rulesReference for all Bitwarden workflow linter (bwwl) rules. Covers all 10 linter rules split into two categories: mechanical rules that can be applied automatically (name_capitalized, permissions_exist, pinned_job_runner, step_pinned, underscore_outputs, job_environment_prefix, check_pr_target) and ju
managing-workflow-secretsBitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions composite actions (azure-login → get-keyvault-secrets → azure-logout), consume it safely, and get it beyond th
workflow-auditRun the Bitwarden workflow linter (bwwl) against one or more repos and report findings. Strictly read-only — does not modify any files. Categorizes findings as mechanical or judgment using the bitwarden-workflow-linter-rules skill. Supports single repo, multiple repos, or single file/directory scope
workflow-fixApply fixes for workflow linter findings identified by the workflow-audit skill. Applies mechanical fixes automatically, pauses for judgment calls, verifies with a re-lint, and creates draft PRs. Run the workflow-audit skill first to identify findings before using this skill. <example> User: Go ahea
More from bitwarden/ai-plugins
All 23 plugins →bitwarden-code-review
claudeComprehensive code review system with organization-wide standards.
10 skills
165
bitwarden-delivery-tools
claudeDelivery lifecycle skills for Bitwarden initiatives — initiative funnel navigation, work transitions, architectural judgment, feature flags, commits, pull requests, preflight checks, and change labeling.
10 skills
165
bitwarden-shepherd
claudeChampion-of-a-technical-strategy agent for Bitwarden. Shepherds a Technical Strategy Idea through Architecture's evaluation into the Software Initiative Funnel, then drives the resulting initiative across all five funnel phases to durable adoption.
7 skills · 1 agent
165
bitwarden-testing-tools
claudeTesting tools for Bitwarden: test coverage and Testmo case review, test layer recommendations, manual test cases, requirement readiness, test plans, and QA manual regression runs, plus the bundled bitwarden-test-automation MCP server.
6 skills · 1 MCP server
165
claude-config-validator
claudeValidates Claude Code configuration files for security, structure, and quality. Routes CLAUDE.md, agents, commands, hooks, and settings to targeted review skills, reporting only what a changeset introduced.
7 skills
165
Similar plugins
superpowers
claudecodexCore skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
15 skills · hooks
obra/superpowers 316,836
backend-development
claudecodexBackend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development
9 skills · 1 command · 8 agents
wshobson/agents 42,461
beads
claudecodexAI-supervised issue tracker for coding workflows
1 skill · 1 agent · hooks
gastownhall/beads 28,698
prowler
claudeConnect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.
1 skill · 1 MCP server
prowler-cloud/prowler 15,234
minimax-skills
claudeMiniMax AI skills library for frontend, fullstack, Android, iOS, shader, GIF sticker, document, presentation, spreadsheet, and multimodal media workflows
18 skills
MiniMax-AI/skills 13,828
worktrunk
claudecodexWorktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.
2 skills · hooks
max-sixty/worktrunk 12,481
Maintain bitwarden-devops-engineer?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.
claude & codex plugins23 plugins