GitHub Actions workflow style, security hardening, bitwise reusable-workflow wiring, and an actionlint/zizmor validation loop.
Plugin actions from marketplace bitwise in bitwise-media-group/skills. Commands read from the repo's manifest — today.
actions-reusable-workflowsWire a repository to the bitwise-media-group/github-workflows reusable workflows — copy the thin caller workflows from the library's examples/ at its latest release and pin them by commit SHA — for CI, CodeQL security scanning, release (release-please, GoReleaser, Zensical docs), the signature-prese
actions-securitySecurity hardening for GitHub Actions workflows with a least-privilege posture — default-deny permissions ({} then minimal per-job scopes), SHA-pinning every third-party action, avoiding pull_request_target (and the safe trusted-event allowlist pattern when an elevated trigger is unavoidable), preve
actions-styleGitHub Actions workflow authoring conventions for readable, least-privilege workflows — .github/workflows/*.yaml layout, explicit scoped triggers, boolean logic with truthy/falsey expressions (if ${{ inputs.flag }} over == 'true'), concurrency, matrix builds, job outputs, and authoring reusable (wor
actions-validateValidate GitHub Actions workflow files locally with the actionlint then zizmor loop — actionlint for syntax, expression typing, and shellcheck of run steps; zizmor for security audits (expression injection, pull_request_target risks, unpinned actions, over-broad permissions). Use after editing any .
Developer-workflow commands and skills — sandbox-safe Conventional commits with a commit.sh handoff, immutable code-scanning triage reports with SHA-pinned permalinks, generation of evolve evaluation suites (triggers + behavioral evals) for agent skills, adoption of the shared mise toolchain, and bootstrapping new repositories with the org's toolchain and reusable workflows.
6 skills · 3 commands
Modern Python on the Astral toolchain — uv project layout, ruff format/lint, ty/pyright type checking, pytest with Hypothesis, Google-style docstrings with CLI references, and trusted-publishing releases.
6 skills
Modern Go development — stdlib-first style, cobra/viper CLIs, table-driven tests and fuzzing, canonical project layout, doc-comment conventions, GoReleaser releases.
5 skills
Terraform style conventions, module scaffolding, and fmt/validate/tflint workflows.
3 skills
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
15 skills · hooks
Talk like caveman. Cut filler. Keep technical details explicit.
22 skills · 1 command · 3 agents · hooks
Persistent memory for Claude Code: the next session starts where the last one left off.
29 skills · 1 MCP server · hooks
tasteskill 2.5.1: professional company websites at the figma.com and x.ai level, with one section per screen, real photographs, real product UI, effects kept for tech and gaming pages, and a real-browser checker and finish gate.
1 skill
Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
Cross-session memory and token savings for coding agents.
6 skills · 1 agent · 1 MCP server · hooks
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.