Does it handle security checks for pipelines?

Yes, it audits secret management, job permissions, and checks if third-party actions are pinned to specific SHAs to prevent supply chain attacks.

Which platforms does this skill support?

It supports a wide range of platforms including GitHub Actions, GitLab CI, Jenkins, Azure Pipelines, and CircleCI.

Can it help reduce CI/CD runner costs?

Yes, it identifies opportunities for dependency caching and job parallelization to significantly reduce execution time and resource consumption.

Should I use this for Kubernetes or Terraform files?

While it handles deployment logic, it is recommended to use the specialized k8s-reviewer or terraform-reviewer skills for deep infrastructure-specific audits.

CI/CD Pipeline Reviewer

Name: CI/CD Pipeline Reviewer
Author: physics91

byphysics91

0•

部署与 DevOps

Optimizes and audits CI/CD pipelines for security, performance, and best practices across major DevOps platforms.

The CI/CD Reviewer skill provides automated, deep-dive audits of continuous integration and delivery pipelines to ensure they are secure, efficient, and cost-effective. By analyzing files like GitHub Actions workflows, GitLab CI configurations, and Jenkinsfiles, it identifies bottlenecks in build times, security risks in secret handling, and missing optimization patterns like dependency caching. This skill is essential for DevOps engineers and developers looking to harden their deployment pipelines while maintaining high-speed delivery cycles through actionable, prioritized recommendations.

主要功能

01Standardized reporting with severity-rated issues and remediation steps

02Performance optimization through caching and job parallelization

03Deployment strategy validation for Staging, Blue-Green, and Canary patterns

040 GitHub stars

05Automated analysis of GitHub Actions, GitLab CI, and Jenkins pipelines

06Security auditing for secret management and unpinned third-party actions

使用场景

01Auditing complex GitHub Actions workflows for security vulnerabilities and slow execution

02Modernizing legacy Jenkins pipelines with current industry best practices

03Optimizing GitLab CI pipelines to reduce runner costs through better caching

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add physics91/claude-vibe ci-cd-reviewer

For use in Claude.ai and ChatGPT

Download Skill