gen-ci

A tool that creates continuous integration and delivery pipelines for GitHub Actions, GitLab CI, or Bitbucket Pipelines. These pipelines automatically run project checks such as linting, tests, and builds.

In plain words
What is it for?
Use it to generate a core CI pipeline, or a fuller setup including Docker files, security scans, release automation, and deployment pipelines.
Why use it?
It saves you from manually writing pipeline configuration and adapts the setup to the project's detected technology stack. An optional full mode also creates deployment-related files and checks.

Command

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/alphaaiservice/cortex/gen-ci
Clone the repo
git clone --depth 1 https://github.com/alphaaiservice/cortex
Per session 47 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 8,831 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 1 finding. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00047 $0.08831
Opus 5 $0.00023 $0.04415
Sonnet 5 $0.00009 $0.01766
Haiku 4.5 $0.00005 $0.00883

Measured 2d ago against content hash 961603d34b53, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

gen-ci scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

- **Meilisearch**: port 7700, master key set for tests, health check with `curl http://localhost:7700/health`
commands/gen-ci.md · 822 lines

How it starts

The opening of the file, as written. The whole thing — 822 lines — stays where its author put it; the contents beside it link to each section on GitHub.

CI/CD Pipeline Generator

Generate production-quality CI/CD pipelines for: $ARGUMENTS

Parse $ARGUMENTS to determine:

  • Platform: github-actions (default if not specified), gitlab-ci, or bitbucket
  • Mode: --full flag means generate ALL pipeline files including Docker files, security scans, release automation, and deployment pipelines. Without --full, generate only the core CI pipeline (lint, test, build).

Step 1: Detect Project Stack

Run all detection tasks in parallel using Agent tool (mode = "bypassPermissions"). Scan the project root and subdirectories to build a complete technology profile.

1A: Detect Backend Stack

Search for these files and extract relevant information:

# Python detection
ls requirements.txt pyproject.toml setup.py setup.cfg Pipfile poetry.lock 2>/dev/null

# If Python found, detect framework
grep -l "fastapi\|FastAPI" requirements.txt pyproject.toml 2>/dev/null
grep -l "django\|Django" requirements.txt pyproject.toml 2>/dev/null
grep -l "flask\|Flask" requirements.txt pyproject.toml 2>/dev/null

# Node.js detection
ls package.json pnpm-lock.yaml yarn.lock package-lock.json bun.lockb 2>/dev/null

# Go detection
ls go.mod go.sum 2>/dev/null

# Rust detection
ls Cargo.toml Cargo.lock 2>/dev/null

# Java detection
ls pom.xml build.gradle build.gradle.kts 2>/dev/null

Record the Python version from pyproject.toml (requires-python) or .python-version file. Default to 3.11 and 3.12 for matrix testing.

Record the Node version from package.json (engines.node) or .nvmrc or .node-version. Default to 20 and 22 for matrix testing.

Record the Java version from build.gradle.kts (sourceCompatibility) or .java-version. Default to 21 for testing.

NestJS detection: If package.json contains @nestjs/core, this is a NestJS backend. Use pnpm commands and NestJS-specific CI steps (build, lint, test:e2e).

Spring Boot detection: If build.gradle.kts or pom.xml contains spring-boot, this is a Spring Boot backend. Use ./gradlew commands for build, test, and quality checks (checkstyle, spotbugs).

Read the full file on GitHub · 822 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 822 lines · 47 tokens per session scan A 961603d34b53

Subscribe to this mod's changes

gen-ci is a command published in the GitHub repository alphaaiservice/cortex (1 stars, last pushed 26d ago), licensed MIT. It adds 47 tokens to every session and 8,831 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.