DevOps

Cloud Misconfig Hunter searches for misconfigurations in AWS, GCP, and Azure cloud services, including public S3 buckets, exposed CloudFront origins, public Lambda function URLs, and leaked IAM credentials in JavaScript bundles. It validates findings by attempting actual data read/write or remote code execution, and is used during bug bounty and penetration testing engagements.

Hunt CI/CD finds and validates vulnerabilities in CI/CD pipelines, including Jenkins RCE, GitHub Actions injection, self-hosted runner poisoning, OIDC abuse, and Terraform state leakage. Use it when targeting public orgs, CI dashboards, or build artifacts.

Auth centralizes token management and credential resolution for the APM CLI, including GitHub and Azure DevOps PATs and az CLI bearer fallback. Activate when code touches authentication, tokens, git remote access, or credential errors.

Cut Release assesses merged changes since the last tag, picks a patch or minor semver bump, sanitizes the unreleased changelog into a dated version block, bumps pyproject.toml and uv.lock, verifies lint, and opens a release PR.

OpenKnowledge Discovery explains what OpenKnowledge is, how to install it on a repository with ok init, how to share a project, and how to open a single markdown file outside a project.

Mirage Filesystem works with files and directories mounted in a Mirage virtual filesystem, using Mirage tools for virtual paths that host filesystem tools cannot access. Use it when a task mentions Mirage, mounted cloud or database data, virtual paths, or asks to inspect, search, create, or edit data exposed through the Mirage tools.

Release Workflow automates version bump detection, changelog generation, and release publishing for Node.js, Python, Rust, Claude Plugin, and generic projects. Use it when the user says release, bump version, push, or release notes.

CCB Release Maintainer prepares, audits, and fixes GitHub and npm publication for SeemSeam/claude_codex_bridge, including README files, version metadata, package.json, release assets, and CI status before and after releases.

NotFair Upgrade updates the NotFair plugin to the latest version by refreshing the marketplace repo, installing the new version to the plugin cache, and updating installed_plugins.json. Use when asked to upgrade or update NotFair, or when a skill detects UPGRADE_AVAILABLE.

Bitbucket Automation manages Bitbucket repositories, pull requests, branches, issues, and workspace administration through Rube MCP using the Composio Bitbucket toolkit. Use it to create PRs, review diffs, manage issues, and administer repositories.

Tutti App Release sets up, reviews, runs, or debugs external repositories that publish a Tutti workspace app using a reusable release workflow, including manifests, S3/CloudFront hosting, latest/versions/catalog JSON, and App Center visibility.

Tutti Workspace App Factory creates, converts, or repairs a Tutti workspace app as a self-contained publishable package or a Chrome-style local debug app. Use it for factory handoffs, standalone generation, repair flows, manifests, bootstrap scripts, and validation.