agentsclimarketplace

Devsecops checker

Skill maxwellokumu/okaudit-claude-skills/application-security/devsecops-checker

Claude-ready IT audit skills for identity, compliance, appsec, privacy, network, logging, vendor risk, and audit leadership workflows

Install
npx -y skills add maxwellokumu/okaudit-claude-skills --skill devsecops-checker

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

2 things to look at

  • no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
  • 5 stars5 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Review CI or CD pipeline configuration for DevSecOps controls and help Claude explain maturity gaps, missing safeguards, and practical improvements.

SKILL.md

1.6 KB, 258 tokens by cl100k_base, as published. Nobody here has run it

DevSecOps Checker

Use this skill when the user wants to assess a CI or CD pipeline for security controls, maturity, and coverage across the software delivery lifecycle.

Goal

Help Claude evaluate pipeline configuration, identify missing DevSecOps safeguards, and explain what improvements would materially strengthen delivery security.

Workflow

  1. Review the pipeline or workflow configuration the user wants assessed.
  2. Identify which security controls are present, such as scanning, signing, secret handling, approvals, or artifact protections.
  3. Note missing or weak controls that reduce confidence in the pipeline.
  4. Summarize the overall maturity level and the most important gaps to address first.
  5. Present recommendations in a practical order that engineering teams can act on.

Inputs

Expected inputs from the bundled tool metadata:

  • config: Path to the CI or CD pipeline configuration file.
  • output: Optional output format.

Bundled Files

  • main.py contains the executable pipeline assessment logic.
  • README.md provides usage guidance and examples.
  • skill.yaml captures the repo-native metadata for this skill.
  • sample_input may contain example pipeline files.

Guidance

Focus on material delivery risks such as missing security tests, weak secret handling, lack of gating, or absent artifact protections. Keep recommendations concrete and prioritized.

What ships with it: 5 files

16.7 KB alongside SKILL.md, 1 of them executable

sample_input/

Keep looking

Skills are one crate of 326,984. Ordering is by how many stacks a row turns up in, so the top of any crate is what has actually been picked rather than what has the most stars.