Audit CI/CD pipelines for slowness, security issues, and reliability gaps.
npx skills add https://github.com/tonone-ai/tonone --skill relay-audit
Please help me install this Agent Skill. Skill: relay-audit Source: https://github.com/tonone-ai/tonone/tree/main/team/relay/skills/relay-audit Command: npx skills add https://github.com/tonone-ai/tonone --skill relay-audit
Audit existing CI/CD pipelines for slowness, security issues, and reliability gaps, enabling teams to quickly identify bottlenecks and risk areas.
Detect the CI/CD environment and follow the defined steps to generate a structured pipeline audit report.
High-intent search queries and answers about installing and using this skill.
To audit a CI/CD pipeline, the tool reads configuration files to check step timings, caching, and security practices. It then outputs a structured report highlighting bottlenecks, insecure configurations, and weak rollout strategies alongside recommended fixes.
Common security issues in CI/CD configurations include unpinned actions, leaked secrets, and overly permissive credentials. An audit flags these vulnerabilities and proposes concrete mitigations to secure your deployment pipeline across platforms like GitHub Actions and GitLab CI.
Yes, CI/CD pipeline auditing supports GitHub Actions, GitLab CI, CircleCI, and Jenkins. The audit detects slow steps, missing caching, insecure configurations, and weak rollout strategies across these popular platforms.
You should run a reliability audit when CI/CD pipelines underperform or fail to meet reliability targets. The audit checks deployment health and weak rollout strategies, outputting a structured report that enables teams to quickly identify and implement recommended fixes.
The best way to identify missing caching is to run an audit that reads pipeline configurations and checks step timings. The audit detects slow steps and missing caching mechanisms, producing a structured report with concrete recommendations for optimization.
Endor-Solutions-ArchitectureGenerate CI/CD security scanning configurations for GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Bitbucket Pipelines, and CircleCI.
YokhanScan dependencies, code patterns, and configurations to generate structured security audit reports.
0xBigBossManage long-lived development processes in tmux sessions with lifecycle controls.
Rune-kitRun static analysis tools and normalize findings into unified severity levels.
