DevOps & Security skills

Browse reusable Agent Skills, each with a clear purpose and practical guidance.

github-actions

Manage ClaudeBar's GitHub Actions CI/CD pipelines: build, test, and release workflows. Use this skill when: (1) Setting up secrets for CI/CD (certificate, API key, Sparkle key, Codecov) (2) Creating a new release — tag-based or manual workflow_dispatch (3) Triggering or explaining the build.yml, tests.yml, or release.yml workflows (4) Debugging release failures (signing, notarization, appcast) (5) Managing beta vs stable channels for Sparkle auto-updates (6) User says "release a new version", "push a tag", "set up CI secrets", "why did the release fail"

1.32k repo starsObserved in 1 repos

DevOps & Security

GitHub

admin-tools

Administrative database tools (restricted access)

1.31k repo starsObserved in 1 repos

DevOps & Security

GitHub

airflow-workflow

Execution guide for Airflow scheduled jobs — troubleshooting, updating, conn_id conventions, and cron references

1.31k repo starsObserved in 1 repos

DevOps & Security

GitHub

security-issue

Create a security finding in the private peersyst/security repo with proper labels and format. Use when reporting a security vulnerability, concern, or observation found during audits or ad-hoc review.

1.31k repo starsObserved in 1 repos

DevOps & Security

GitHub

go-dependency-analyzer

Analyzes Go dependencies to determine usage in production code, what functionality is used, and where it's located. Use when user asks "verify where we use [dependency]", "is [dependency] used in production", "analyze dependency [name]", "what uses [package]", "dependency analysis", mentions CVE numbers, security vulnerabilities, or needs to understand dependency impact for triage, upgrades, or removal decisions.

1.30k repo starsObserved in 1 repos

DevOps & Security

GitHub

task-patrol-skill

巡查 Skill — 通过 CLI 工具巡查任务状态、标记异常、发送告警

1.29k repo starsObserved in 1 repos

DevOps & Security

GitHub

tunnel-doctor

Diagnoses and fixes Tailscale x proxy/VPN tool conflicts (Shadowrocket, Clash, Surge, OrbStack/Docker) on macOS — route hijacking, proxy env vars, system proxy bypass, SSH ProxyCommand double-tunneling, VM/container proxy propagation, stalled macOS DNS. Use when Tailscale ping works but SSH/HTTP times out, browser returns 503 but curl works, git push fails with "failed to begin relaying via HTTP", Docker pull/build times out behind TUN/VPN, setting up Tailscale SSH to WSL or remote dev over Tailscale, ssh/curl/git hang ~60s resolving a hostname while nslookup is instant, ping to a resolver works but dig times out, ssh -vvv freezes at "debug2: resolving", raw probes impossibly fast under a TUN (nc -z 0.00s), all DIRECT-routed sites fail at once (TLS handshake EOF, UNKNOWN_CERTIFICATE_VERIFICATION_ERROR, proxy CONNECT 503) while proxied sites work — TUN DIRECT split-brain — or a Windows host TUN (v2rayN) black-holing the whole machine incl. WSL and Tailscale (event-log forensics prove which action fixed it).

1.27k repo starsObserved in 2 repos

DevOps & Security

GitHub

debug-runs

Drive a full-sweep benchmark config to green with a tight feedback loop — trigger/monitor the sweep, root-cause failures, and (for fast iteration) SSH onto the runner's cluster to reproduce a single config directly on the node instead of waiting for full CI. Use when bringing up a new model/precision/SKU recipe, debugging a failing or flaky sweep, debugging node-level issues, or gathering context on a cluster before a run. Cluster access details are NOT in this repo — read them from the shared InferenceX Clusters canvas.

1.27k repo starsObserved in 1 repos

DevOps & Security

GitHub

code-security

Security guidelines for writing secure code. Use when writing code, reviewing code for vulnerabilities, or asking about secure coding practices like 'check for SQL injection' or 'review security'. IMPORTANT: Always consult this skill when writing or reviewing any code that handles user input, authentication, file operations, database queries, network requests, cryptography, or infrastructure configuration (Terraform, Kubernetes, Docker, GitHub Actions) — even if the user doesn't explicitly mention security. Also use when users ask to 'review my code', 'check this for bugs', or 'is this safe'.

1.27k repo starsObserved in 1 repos

DevOps & Security

GitHub

secknowledge-skill

Web+AI 安全测试知识库。融合 WooYun 88,636 案例 + 先知 L1-L4 方法论 + GAARM 150 风险 + OWASP Top 10 (LLM/ASI/WSTG)。 TRIGGER when 任务是实战安全测试：渗透测试、漏洞挖掘/利用、红队攻防、安全审计 (SAST/DAST)、 CTF、AI/LLM 安全测试 (Prompt 注入/越狱/MCP/Agent/沙箱逃逸)。用户明确给出测试目标 (URL/代码/模型/Agent 架构) 且意图是"测试/审计/挖漏洞/利用"。 DO NOT trigger: - 安全概念讨论（"什么是 XSS"、"SQL 注入原理是什么"）→ 普通问答 - 非安全性质的 code review / debug / 性能优化 → code-audit-skill 或其他 - 修复语法错误 / 业务逻辑 bug → 普通编程协助 - 纯 Web 白盒代码审计（完整项目目录 / Source-Sink 污点分析）→ code-audit-skill - 仅引用 CVE 编号查文档 → WebSearch 边界细则: CTF 短代码片段 + 利用思路 → 本 Skill；完整项目目录 + 系统白盒审计 → code-audit-skill

1.27k repo starsObserved in 1 repos

DevOps & Security

GitHub