Menu
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
npx skills add https://github.com/tomevault-io/skills-registry --skill ci-cd-engineerThe command stays on one line. Scroll horizontally to inspect it before copying.
Prefer a local copy? Download the files currently available to SkillsMP.
| Use when this capability is needed.
> Use when this capability is needed.
Review architecture and API design for the vfs-s3 project. Use when the user mentions @architect, asks to review an issue's design, discuss module boundaries, API shape, or architectural decisions for vfs-s3. Also trigger when the user wants to create an ADR (Architecture Decision Record) or evaluate a technical approach for the project. Intended for dispatch from Codex automation or Claude routines; GitHub trigger phrase: @vfs-s3-bot please prepare design doc Use when this capability is needed.
Showing SKILL.md
Based on SOC occupation classification
| name | ci-cd-engineer |
| description | > Use when this capability is needed. |
Writing GitHub Actions workflows, debugging CI failures, setting up automated releases.
PR opened
→ validate: typecheck + lint + test
→ security: Trivy + Semgrep + Gitleaks
→ build: Docker image
Merge to main
→ validate + security + build (same)
→ publish: push image to registry
→ deploy: deploy to staging
→ smoke-test: verify staging
→ (manual approval)
→ deploy-prod: deploy to production
# .github/workflows/_validate.yml (reusable)
name: Validate
on:
workflow_call:
inputs:
node-version: { type: string, default: '20' }
secrets:
NPM_TOKEN: { required: false }
jobs:
validate:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
{ }
{ , }
[, ]
{ }
security:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11
# Secrets detection
- name: Gitleaks
uses: gitleaks/gitleaks-action@v2
# Dependency vulnerabilities
- name: Trivy
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8
with:
scan-type: 'fs'
severity: 'CRITICAL,HIGH'
exit-code: '1'
# SAST
- name: Semgrep
uses: semgrep/semgrep-action@v1
with:
config: "p/security-audit p/owasp-top-ten"
PASS: Pinned to full commit SHA
uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
FAIL: Pinned to tag or branch
uses: actions/checkout@v4 # can be moved (supply chain risk)
uses: actions/checkout@main # can change any time
deploy-staging:
environment: staging # uses GitHub environment secrets
runs-on: ubuntu-latest
needs: [validate, security, build]
steps:
- name: Deploy to staging
run: kubectl set image deployment/myapp myapp=$IMAGE_TAG
env:
KUBECONFIG: ${{ secrets.STAGING_KUBECONFIG }}
deploy-prod:
environment: production # requires manual approval in GitHub UI
runs-on: ubuntu-latest
needs: [deploy-staging, smoke-test]
steps:
- name: Deploy to production
run: kubectl set image deployment/myapp myapp=$IMAGE_TAG
# View workflow run
gh run list --limit 5
gh run view <run-id> --log
# Re-run failed jobs
gh run rerun <run-id> --failed-only
# Debug with tmate (SSH into runner — last resort)
- uses: mxschmitt/action-tmate@v3
if: ${{ failure() }}
Source: Abhiram1106/omnix — distributed by TomeVault.