GitHub Actions workflows authored, preflighted and reviewed the way the infrastructure work is: a deterministic preflight (actionlint and zizmor on PATH reduced to counts, structural checks for the pinning, permissions, pull_request_target and injection traps), a workflow review lens with an Opus reviewer agent, and docs-first authoring references for reusable workflows, permissions and OIDC, supply chain and runtime shape.
Plugin github-actions from marketplace konyklabs-plugins in konyklabs/claude-plugins. Commands read from the repo's manifest — 12 days ago.
authoring-workflowsHow to write GitHub Actions workflows that survive the preflight and the review — the docs-first rule for syntax and limits (fetch the current page, never write from memory), least-privilege permissions with OIDC instead of long-lived keys, SHA-pinned actions with version comments, reusable workflow
preflighting-workflowsThe deterministic checks to run on a repository's GitHub Actions workflows before a review is asked for or a branch is pushed — actionlint and zizmor when on PATH reduced to counts and path:line rows, and the structural checks no linter owns (an unpinned action, a missing or write-all permissions bl
reviewing-workflowsThe review lens for GitHub Actions changes — the ordered checklist of defect classes reviewers keep finding late (a fork's code run with the base repository's secrets, event text executed as shell, a token holding more than the job uses, an action pinned to a tag or an impostor commit, a cache a low
workflow-reviewerReviews a GitHub Actions change with the review lens preloaded, on Opus at medium effort — the trust-boundary, injection, permissions, pinning, secrets-flow, cache, deploy-shape and reusable-contract checks, each returned as a finding with a concrete failure scenario. Use as the CI lens in a local r
Token guardrails for sessions on Fable-tier models: writes the task brief from a short interview, pins spawns to cheap workers, denies forks, requires a brief for expensive spawns, prices a per-session budget from the transcript, and holds workers to an evidence contract.
11 skills · 6 agents · hooks
Python test engineering skills — pytest project structure, Playwright API and browser tests, SQLAlchemy test fixtures — and the untangling workflow for large unmerged test suites.
5 skills · 1 agent
Production-readiness and security-scanning checks: a categorized deterministic scan, summarized external scanners, and an auditor agent, ordered by observed impact.
3 skills · 2 agents
Reconciles an application's end-to-end coverage against what it does: explore, mine, tile, fill, report, human-readable test cases.
4 skills
OpenTofu on AWS, authored and reviewed the way the Python work is: a deterministic preflight (fmt, validate, the linters on PATH reduced to counts, structural checks for the Fargate and Lambda traps no linter catches, a plan summary that fails closed on destroy), a Terraform review lens with an Opus reviewer agent, and docs-first authoring references for ECS Fargate, Lambda, IAM, networking and state.
3 skills · 1 agent
Vitest and TypeScript project skills, the py-testing shape for the TypeScript side: config that shares vite.config.ts, mocking and fake-timer rules, test.extend fixtures, typecheck mode, CI reporters and sharding; tsconfig for Node with nodenext, the TypeScript 6 and 7 default changes, strictness adoption, project references, type stripping; and a Sonnet test-implementer with both skills preloaded.
2 skills · 1 agent
Core skills library for Claude Code: TDD, debugging, collaboration patterns, and proven techniques
15 skills · hooks
Backend API design, GraphQL architecture, workflow orchestration with Temporal, and test-driven backend development
9 skills · 1 command · 8 agents
AI-supervised issue tracker for coding workflows
1 skill · 1 agent · hooks
MiniMax AI skills library for frontend, fullstack, Android, iOS, shader, GIF sticker, document, presentation, spreadsheet, and multimodal media workflows
18 skills
Worktrunk is a CLI for Git worktree management, designed for parallel AI agent workflows. This plugin provides configuration guidance (LLM commit messages, project hooks, worktree paths), automatic activity tracking (🤖/💬 indicators in `wt list` showing active Claude sessions), and a `/wt-diff` pane showing each worktree's changes.
2 skills · hooks
GSD Core is a meta-prompting, context engineering, and spec-driven development system for AI coding agents.
72 skills · 72 commands · 64 agents · hooks
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.