NOMARJ/sigil

Automated security auditing CLI for AI agent code — quarantine-first workflow for repos, packages, and agent tooling

This repository also configures its own agents. See what sigil tells them →

6Stars on the repository
189Mods indexed here, across every type
11d agoLast push, which is what freshness is scored on
Apache-2.0Licence, which decides whether bodies are shown

NOMARJ/sigil

Skill Claude CodeCodex

Enterprise infrastructure patterns for AWS VPC, ECS, and PrivateLink deployments.

not rated 6 11d ago A SkillSpector: pass 17 tokens original Apache-2.0

gitops-workflow

50

NOMARJ/sigil

Skill Claude CodeCodex

Implement GitOps workflows with ArgoCD and Flux for automated, declarative Kubernetes deployments with continuous reconciliation. Use when implementing GitOps practices, automating Kubernetes deployments, or setting up declarative infrastructure management.

not rated 6 11d ago D 46 tokens copy · 100% Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Design, organize, and manage Helm charts for templating and packaging Kubernetes applications with reusable configurations. Use when creating Helm charts, packaging Kubernetes applications, or implementing templated deployments.

not rated 6 11d ago A 41 tokens copy · 100% Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Create production-ready Kubernetes manifests for Deployments, Services, ConfigMaps, and Secrets following best practices and security standards. Use when generating Kubernetes YAML manifests, creating K8s resources, or implementing production-grade Kubernetes configurations.

not rated 6 11d ago A 50 tokens copy · 100% Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Implement Kubernetes security policies including NetworkPolicy, PodSecurityPolicy, and RBAC for production-grade security. Use when securing Kubernetes clusters, implementing network isolation, or enforcing pod security standards.

not rated 6 11d ago A 43 tokens copy · 88% Apache-2.0

distributed-tracing

54

NOMARJ/sigil

Skill Claude CodeCodex

Implement distributed tracing with Jaeger and Tempo to track requests across microservices and identify performance bottlenecks. Use when debugging microservices, analyzing request flows, or implementing observability for distributed systems.

not rated 6 11d ago A 43 tokens copy · 100% Apache-2.0

grafana-dashboards

55

NOMARJ/sigil

Skill Claude CodeCodex

Create and manage production Grafana dashboards for real-time visualization of system and application metrics. Use when building monitoring dashboards, visualizing metrics, or creating operational observability interfaces.

not rated 6 11d ago A 40 tokens copy · 80% Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Set up Prometheus for comprehensive metric collection, storage, and monitoring of infrastructure and applications. Use when implementing metrics collection, setting up monitoring infrastructure, or configuring alerting systems.

not rated 6 11d ago A 40 tokens copy · 100% Apache-2.0

slo-implementation

57

NOMARJ/sigil

Skill Claude CodeCodex

Define and implement Service Level Indicators (SLIs) and Service Level Objectives (SLOs) with error budgets and alerting. Use when establishing reliability targets, implementing SRE practices, or measuring service performance.

not rated 6 11d ago A 47 tokens copy · 100% Apache-2.0

owasp-security

58

NOMARJ/sigil

Skill Claude CodeCodex

Comprehensive OWASP security knowledge base and automation framework for the Enclave AI platform. Provides specialized security expertise for air-gap environments, OWASP Top 10 compliance, and enterprise security requirements.

not rated 6 11d ago A 0 tokens original Apache-2.0

differential-review

59

NOMARJ/sigil

Skill Claude CodeCodex

Security-focused differential code review analyzing git diffs in context of the broader codebase. Part of the Nomark Method Layer 2 security verification. Use whenever reviewing a PR, preparing to merge, or someone asks for a 'security review of this diff', 'review these changes for security', or 'is this PR safe to…

not rated 6 11d ago A 72 tokens original Apache-2.0

fp-check

60

NOMARJ/sigil

Skill Claude CodeCodex

Mandatory false positive gate review for security findings. Part of the Nomark Method Layer 2 verification. Use after security scans produce findings, when triaging vulnerability reports, or when someone asks 'is this a real issue', 'false positive check', 'triage these findings'.

not rated 6 11d ago A 58 tokens original Apache-2.0

insecure-defaults

61

NOMARJ/sigil

Skill Claude CodeCodex

Detect insecure default configurations, hardcoded credentials, fail-open security patterns, and dangerous defaults in code and config files. Part of the Nomark Method Layer 1 security scanning. Use whenever code is committed, config files change, or someone says 'check for secrets', 'credential scan', 'security…

not rated 6 11d ago A 76 tokens original Apache-2.0

second-opinion

62

NOMARJ/sigil

Skill Claude CodeCodex

Multi-model independent security review — routes code to a second LLM for review without sharing the primary model's analysis. Part of the Nomark Method Layer 3 verification. Use for security-critical changes (auth, payment, PII, crypto, infra), when someone asks for 'second opinion', 'independent review'…

not rated 6 11d ago A 85 tokens original Apache-2.0

sharp-edges

63

NOMARJ/sigil

Skill Claude CodeCodex

Identify error-prone APIs, dangerous configurations, and footgun designs in code. Part of the Nomark Method Layer 1 security scanning. Use whenever reviewing code for safety, someone asks 'is this code safe', 'dangerous patterns', 'footgun check', or when analyzing code that uses complex or risky APIs.

not rated 6 11d ago A 68 tokens original Apache-2.0

supply-chain-audit

64

NOMARJ/sigil

Skill Claude CodeCodex

Audit the supply-chain threat landscape of project dependencies. Part of the Nomark Method Layer 1 security scanning. Use whenever dependency files change (package.json, requirements.txt, go.mod, Cargo.toml), someone adds a new dependency, or someone asks 'are our dependencies safe', 'dependency audit', 'supply chain…

not rated 6 11d ago A 72 tokens original Apache-2.0

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when working with Conductor's context-driven development methodology, managing project context artifacts, or understanding the relationship between product.md, tech-stack.md, and workflow.md files.

not rated 6 11d ago A 40 tokens copy · 94% Apache-2.0

track-management

66

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when creating, managing, or working with Conductor tracks - the logical work units for features, bugs, and refactors. Applies to spec.md, plan.md, and track lifecycle operations.

not rated 6 11d ago A SkillSpector: warn 44 tokens original Apache-2.0

workflow-patterns

67

NOMARJ/sigil

Skill Claude CodeCodex

Use this skill when implementing tasks according to Conductor's TDD workflow, handling phase checkpoints, managing git commits for tasks, or understanding the verification protocol.

not rated 6 11d ago A SkillSpector: pass 35 tokens original Apache-2.0

devops-teams

68

NOMARJ/sigil

Skill Claude CodeCodex

Skill for orchestrating Claude Code agent teams on DevOps tasks with NOMARK discipline.

not rated 6 11d ago A 0 tokens original Apache-2.0

sigil-scan

69

NOMARJ/sigil

Skill Claude Code

Automated security auditing for AI agent code. Scans repos, packages, MCP servers, and installed skills for malicious patterns using eight-phase analysis: install hooks, dangerous code patterns, network exfiltration, credential access, obfuscation, provenance, prompt injection, and skill security. Use when: cloning…

not rated 6 11d ago B 173 tokens original Apache-2.0

At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: