by alirezarezvani
env-secrets-manager helps audit .env files, source code, and config for likely secret leaks, missing variable risks, and rotation readiness. Use it for repository hygiene, CI-friendly scans, and Security Audit workflows with scripts and references for detection, severity, validation, and containment.
by alirezarezvani
senior-secops is a Claude skill for application security reviews, vulnerability management, CVE triage, dependency risk, OWASP checks, and compliance guidance. It includes references for security standards and SOC 2, PCI-DSS, HIPAA, GDPR, plus scripts for code scanning, dependency assessment, and compliance checks.
by mukul975
detecting-supply-chain-attacks-in-ci-cd skill for auditing GitHub Actions and CI/CD configs. It helps find unpinned actions, script injection, dependency confusion, secret exposure, and risky permissions for Security Audit workflows. Use it to review a repo, workflow file, or suspicious pipeline change with clear findings and fixes.
