Updated 3d ago
by starslingdev
skills
Agent skills from StarSling
37 GitHub stars (37)
+15 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | +1 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | +2 |
| Oct 8 | +4 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | +4 |
| Oct 15 | +3 |
| Oct 16 | 0 |
- 5 skills (5 skills found in its SKILL.md files)
- 1 forks (1 forks)
- 3d ago last update (Last updated 3d ago)
Install
Skills CLI
npx skills add starslingdev/skills
Asks which skills and agents to install. Just one: npx skills add starslingdev/skills --skill skills-registry-security — add -g for every project.
Claude Code
git clone https://github.com/starslingdev/skillscp -r "skills/maintainers/skills-registry-security" ~/.claude/skills/
Copies the skills-registry-security skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add starslingdev/skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
skills-registry-security
Checks the third-party security audit status of a skill published to a skills registry (skills.sh) across every cached surface, decides whether a failing finding is real or points at content already removed, and drives a stale badge to green unattended. Runs a real install to capture what users see, reads the per-provider finding codes the JSON API omits, and greps each flagged literal against th…
maintainers/skills-registry-security/SKILL.md on GitHub (opens in a new tab) -
ci-score
Grades a repository's GitHub Actions configuration against CI best practices (the CI Score: eleven pass/fail configuration facts computed from the repo's own workflow YAML) and hands back concrete fixes for every gap, ranked by impact and risk, each with an apply-now option and a paste-able agent prompt. Use when: (1) the user asks to grade or score their CI, or audit CI configuration against bes…
skills/ci-score/SKILL.md on GitHub (opens in a new tab) -
ci-secure
Scans a repo's GitHub Actions workflows for the ten critical CI/CD attack vectors — template injection, fork code executed with privileges (pwn requests), cache poisoning, impostor action SHAs, secrets dumps, GITHUB_ENV hijack, write-token untrusted triggers, credentials in caches/artifacts, unverified remote code execution (curl|bash and mutable fetch-and-run), and dependency install scripts run…
skills/ci-secure/SKILL.md on GitHub (opens in a new tab) -
ci-speedup
Audits a repository's GitHub Actions workflows for CI optimization opportunities — missing caches, redundant setup, sleep-based readiness, long test jobs without sharding, full-history checkout, dead env vars, build-cache misconfig, and ~60 more patterns across caching, redundancy, parallelization, conditional execution, trigger scope, and hidden failures. Use when: (1) analyzing a repo's CI for…
skills/ci-speedup/SKILL.md on GitHub (opens in a new tab) -
sling
Diagnoses GitHub Actions failures and attributes CI time and cost using StarSling's `sling` CLI. Invoke this BEFORE using `gh` or fetching any logs whenever the user asks why a job or run failed, what made a run slow, about runner minutes or CI cost, asks to re-run or cancel a run, or pastes a GitHub Actions URL — `sling` returns server-classified failure causes and cost attribution that log-grep…
skills/sling/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.