Agent Skills Hub

using-sdlc-engineering

CMMI-based SDLC router providing process guidance, requirements management, architectural decision support, quality assurance, and governance for GitHub and Azure DevOps workflows.

ghost-scan-secrets

AI-powered secrets and credentials scanner. Detects hardcoded API keys, passwords, and sensitive data in your codebase with contextual analysis to reduce false positives.

secrets-management

Securely manage CI/CD secrets with Vault, AWS Secrets Manager, and environment-specific patterns. Prevent credential leakage, implement rotation, and enforce least-privilege access for pipelines.

mcp-prompts

An intelligent development orchestration skill that provides self-improving code analysis, build error diagnosis, and automated workflow configuration via mcp-prompts integration.

swift-review

Expert Swift code review for macOS/iOS. Detects memory leaks, threading bugs, concurrency issues, and accessibility gaps using parallel analysis agents.

code-review-specialist

A specialized code review agent that performs multi-dimensional analysis covering security vulnerabilities, performance optimization, code quality, and maintainability standards.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.

secure-claude-code

Monitor Runwall security posture, enabled guardrails, and recent audit logs for Claude Code, Codex, and MCP-based development environments.

rt.safety.auditor

Analyze C++ code for real-time safety violations including heap allocations, locks, blocking calls, and non-deterministic operations in high-performance audio threads.

cicd-pipeline-qe-orchestrator

Orchestrate end-to-end quality engineering across CI/CD pipelines, from commit-stage unit testing and shift-left strategies to production-stage synthetic monitoring and compliance gates.

contract-testing

Implement consumer-driven contract testing for microservices using Pact, schema validation, and API versioning to prevent breaking changes and ensure distributed team coordination.

toh-framework

Security-first auditing framework for AI-generated code. Provides multi-level protection including hardcoded secret detection, dangerous pattern identification, and comprehensive vulnerability audits for modern web applications.