Loading...
Loading...
Found 71 Skills
Comprehensive guide for configuring and managing GitHub Dependabot. Use this skill when users ask about creating or optimizing dependabot.yml files, managing Dependabot pull requests, configuring dependency update strategies, setting up grouped updates, monorepo patterns, multi-ecosystem groups, security update configuration, auto-triage rules, or any GitHub Advanced Security (GHAS) supply chain security topic related to Dependabot.
Enforce web security and avoid security vulnerabilities
Runs a 25-point quality control test on a supplier sample before mass production. Catches the defects that turn into 18% return rates and stranded inventory. Produces a back-message to the supplier with specific fixes required before greenlighting the PO. Use when a user mentions Alibaba sample, supplier sample, sample QC, or before mass production. Trigger phrases: "Amazon supplier sample", "Alibaba sample evaluation", "sample QC", "before mass production", "supplier quality test". Works with zero tools.
Audit project dependencies for risk when the user asks to check dependencies, audit packages, review dependency health, check for vulnerabilities, or assess supply chain risk
Assists developers with understanding Tauri application lifecycle security threats spanning development, build, distribution, and runtime phases, including threat mitigation strategies and security best practices.
Run Confused and GuardDog to detect dependency confusion and typosquatting risks. Checks if internal package names exist on public registries and identifies malicious packages.
Security audit and vulnerability scanning for AI agent skills before installation. Detects prompt injection in SKILL.md files, dangerous code patterns (eval, exec, subprocess), network exfiltration, credential harvesting, dependency supply chain risks, file system boundary violations, and obfuscation. Produces PASS/WARN/FAIL verdicts with remediation guidance. Use when evaluating untrusted skills, pre-install security gates, or auditing skill repositories.
When the user wants to forecast using deep learning, LSTMs, transformers, or neural networks. Also use when the user mentions "neural network forecasting," "LSTM," "GRU," "transformer forecasting," "attention mechanisms," "seq2seq," "temporal convolution," "deep learning time series," or complex non-linear patterns. For traditional forecasting, see demand-forecasting. For general ML, see ml-supply-chain.
Elite CI/CD pipeline engineer specializing in GitHub Actions, GitLab CI, Jenkins automation, secure deployment strategies, and supply chain security. Expert in building efficient, secure pipelines with proper testing gates, artifact management, and ArgoCD/GitOps patterns. Use when designing pipelines, implementing security gates, or troubleshooting CI/CD issues.
Modern application security patterns aligned with OWASP Top 10:2025 (final), OWASP API Security Top 10 (2023), NIST SSDF, zero trust (incl. NSA ZIGs 2026), supply chain security (SBOM), passkeys/WebAuthn, authentication, authorization, input validation, cryptography, plus security ROI, breach cost modeling, and compliance-driven enterprise sales.
When the user wants to implement cross-docking operations, optimize transshipment, or reduce warehouse storage. Also use when the user mentions "crossdock," "transshipment," "flow-through distribution," "dock-to-dock," "consolidation center," or "break-bulk operations." For general warehouse design, see warehouse-design. For dock scheduling, see dock-door-assignment.
Plan supplier diversification away from China-only sourcing into Vietnam, India, Mexico, or domestic light-assembly. Compares HS-code duty rates, lead times, MOQ, and tariff exposure across alternative origins. Use when a user asks about diversifying suppliers, moving sourcing out of China, alternative manufacturing countries, tariff exposure, or de-risking supply chain. Trigger phrases: "diversify suppliers", "out of China", "Vietnam supplier", "India supplier", "Mexico", "tariff exposure", "supply chain risk". Works with zero tools.