company-skills

Plugin company-skills from marketplace company in cipherstash/skills. Commands read from the repo's manifest — yesterday.

Skills (12)

• authoring-pull-requests

  Takes finished work from the working tree to a draft pull request on a CipherStash GitHub repository — a type-prefixed branch, signed conventional commits that explain why, the repository's own pre-PR checklist and lint/build/test commands, and a plain-language PR body (Summary, Changes, Verificatio

• filing-github-issues

  Drafts and files GitHub issues on CipherStash repositories — searches open and closed issues in the current repo and its siblings first, verifies every mechanical claim with file:line evidence, picks the right repo (upstream cause versus consumer impact), and writes a Background / Problem / Proposal

• review-audit

  Collate a pull request's existing review feedback — inline threads, review bodies, and conversation comments from people and bots — verify each finding against the PR's head commit, and report which remain unresolved and which are addressed and can be resolved. Use when asked what review feedback is

• review-cross-check

  Verify new code review findings — this session's review or ones pasted from parallel agents — against a pull request's head, cross-check the confirmed ones against the PR's existing review feedback, and report which findings are new, which materially add to existing ones, and which are already cover

• review-fix

  Verify and fix code review findings — this session's review plus any pasted from parallel agents — each confirmed behavioural defect fixed red first with a regression test wherever one can be written. Use when asked to fix, or work through, the findings of a code review run in this session, a PR's u

• review-post

  Posts a finished code review to a GitHub pull request as a single review — one inline comment per finding, tagged with its source, plus an attestation summary naming the commit reviewed, the host, models, and skills, with blocking issues first — posted even when there are no findings. A finding that

• run-report

  Keeps a log of every problem an unattended run hits — errors, failed commands, retries, fallbacks, workarounds, skipped or partial steps, missing skills or access, and assumptions made in place of instructions — then publishes a run report as a Claude artifact, or in the final message where artifact

• rust-sdk-dx

  Applies CipherStash conventions for public Rust APIs in libraries, SDKs, and shared crates — thiserror error enums, typestate builders, required derives, newtype identifiers, ergonomic signatures, rustdoc sections, tokio async, crate layout, and feature flags. Use when writing or changing Rust libra

• rust-security

  Applies CipherStash company rules for Rust code that handles secrets, cryptography, and authentication — the crate-level security lint block, opaque secret types with no AsRef or Deref, crypto library order (vitaminc, then aws-lc-rs, then RustCrypto), one encryption context per purpose, udigest for

• rust-testing

  Applies CipherStash conventions for Rust tests — running unit and integration tests with nextest and its test groups, nested given_* scenario modules with expectation-style names, assertion messages, randomised test data with fake and Dummy impls behind a test-utils feature, per-test mocktail HTTP m

• vanta-remediate

  Patches the dependency vulnerabilities tracked by Vanta Linear issues — for each "[Vanta] Remediate {package} to {version} ({repo})" issue, finds every lockfile location that resolves a vulnerable version, bumps it with the right package manager, verifies the fix landed, opens a GitHub PR, and moves

• vanta-triage

  Reconciles open Vanta vulnerability findings (Dependabot package alerts and AWS Inspector container findings) with the Linear AppSec tracking issues — filing, retargeting, reopening, and closing issues so Linear matches Vanta. Use when asked to check Vanta, look for new security alerts or vulnerabil

Similar plugins