ci-cd-security
About this skill
# CI/CD Security Scanner This skill turns the model into a workflow-YAML scanner. Read the file, walk the detection rules, report findings with severity and a concrete rewrite. No tools to install, no commands to run — the analysis is the model reading the YAML. The rules encode the current consensus from Astral, OpenSSF, GitHub Security Lab, Chainguard, and the zizmor audit set. The goal is to flag the same patterns those tools would flag, without needing to run them. ## Mental model Every workflow sits on
Security
This skill was reviewed and published through ClawHub's own moderation and security scanning pipeline before being listed on their registry. ClawHub checks for malicious code, dependency vulnerabilities, and policy violations.
When you run npx @agentpowers/cli install ci-cd-security, AgentPowers downloads the package to a sandbox and runs a full security scan (ClamAV, Snyk, GuardDog, VirusTotal) before allowing installation. If the scan fails, installation is blocked.
Powered by ClawHub
This skill is sourced from ClawHub, a large open registry of community-built AI tools. By integrating ClawHub into AgentPowers, you get access to hundreds of additional skills while still benefiting from our security scanning, one-command install, and unified management through the AgentPowers CLI.
Getting started
New to AgentPowers? Learn how to install and use skills from the community.