One deterministic gate for your two riskiest moments: the terraform apply that reshapes your cloud, and the dependency you're about to install.
Skill Claude CodeCodex
Gates Terraform and OpenTofu changes with bumper before they are applied — turns a plan into JSON, scans it for destructive, irreversible, or non-compliant changes, and blocks apply until issues are fixed and the plan is verified. Use when about to run terraform/tofu plan or apply, when writing or editing .tf files…
Skill Claude CodeCodex
Looks up authoritative security knowledge from the bumper Advisor — CVEs and other vulnerability advisories, malicious-package reputation, and Infrastructure-as-Code misconfiguration rules (Terraform, Kubernetes, Dockerfile, CloudFormation). Use when you need ground-truth detail on a vulnerability, whether a package…
Skill Claude CodeCodex
Triages vulnerable and malicious dependencies with bumper — scans lockfiles for known CVEs and known-malicious packages, pulls authoritative detail from the bumper Advisor, and picks a safe version before installing. Use when adding or upgrading a dependency, editing a lockfile (package-lock.json, yarn.lock…