Analyze failed CI/CD pipelines, identify likely root causes, inspect repository configuration and code context, and produce actionable, validated remediation guidance for GitHub Actions, GitLab CI, Jenkins, and related development pipelines.
This agent helps Python teams using the Anthropic or OpenAI SDK safely cut LLM spend without risking regressions. With zero code changes, it maps call sites and runs your test scenarios to rank token waste from missed prompt caching or heavy model tiers. It tests fixes in isolated git worktrees, enforcing a strict "do-no-harm" gate that reverts any patch failing to preserve behavior. It delivers a clear savings audit that converts into verified, behavior-preserving code patches upon opt-in.
Scan AI Skills and MCP servers before installation. Detect risky scripts, permissions, dependencies, network access, credential exposure, file changes, and suspicious configurations — then generate a clear evidence-based security report.
Built from real-world Linux administration and security hardening experience. This skill focuses on practical Debian and Ubuntu server security reviews for self-hosters, system administrators and small businesses. Instead of making risky automatic changes, it identifies security issues, explains their impact and provides clear, actionable hardening recommendations.
Paste a diff and get a risk-ranked checklist of what it'll actually break — hidden dependencies, config drift, and blast radius that static analysis can't see, checked before you ship.
DriftGuard analyzes a repository for dependency and API upgrade impact, identifies affected code, applies targeted migration changes, and validates the result with tests. It returns a structured migration result with changed files, diff, migration report, test results, and PR-ready summary. Runs with Claude Agent in Capafy and supports terminal/CI workflows.
Systematic QA of CLI tools and pipelines across multiple real workspaces using SFDPOT heuristics. Executes structured test flows, evaluates consistency oracles, collects evidence, and produces a structured bug report with P1/P2/P3 priorities and a release readiness verdict.
Defensive application-security auditing: turns a repo, manifest, or code snippet into an actionable report—dependency vulnerabilities, leaked secrets, insecure code patterns, and config hardening—mapped to OWASP Top 10 and ranked by severity. Finds risk and the fix only, never attack content.
