Skill Claude CodeCodex
Verify that build output matches the design. Use when validating architecture alignment, component boundaries, interfaces, and integration points.
An AI agent starter template that implements the DORA AI Capabilities Model — built for GitHub Copilot, Claude Code, Cursor, and Codex
This repository also configures its own agents. See what uFawkesAI tells them →
Skill Claude CodeCodex
Verify that build output matches the design. Use when validating architecture alignment, component boundaries, interfaces, and integration points.
Skill Claude CodeCodex
Validate GitOps overlays for correctness and compliance. Use when reviewing kustomize builds, environment overlays, image tags, and secrets.
Skill Claude CodeCodex
Validate Kubernetes manifests for compliance. Use when reviewing resource limits, securityContext, network policies, and secret usage.
Skill Claude CodeCodex
Validate CI/CD pipeline correctness. Use when reviewing pipeline definitions for required stages, security gates, SBOM, and signing.
Skill Claude CodeCodex
Validate build output against organizational policies. Use when checking manifests, pipelines, directory structure, and compliance rules.
Skill Claude CodeCodex
Validate secret usage and governance. Use when reviewing secret storage, rotation policies, and access patterns.
Skill Claude CodeCodex
Validate RBAC, service accounts, and security posture. Use when reviewing roles, bindings, token permissions, and container security settings.
Skill Claude CodeCodex
Verify that build output satisfies the specification. Use when comparing implementation against functional and non-functional requirements.
Skill Claude CodeCodex
Ensure container images built by PIPE are secure, minimal, and free of vulnerabilities. Use when scanning container images, validating base images, or checking OS package vulnerabilities.
Skill Claude CodeCodex
Ensure all images are signed and verifiable before deployment. Use when validating Cosign signatures, keyless signing, or provenance.
Skill Claude CodeCodex
Scan container layers for OS and application vulnerabilities. Use when scanning image layers, validating CVE severity, or checking remediation suggestions.
Skill Claude CodeCodex
Detect vulnerable dependencies in NPM, Python, Go, and container layers. Use when scanning package.json, requirements.txt, Dockerfile, or validating SBOM.
Skill Claude CodeCodex
Scan JavaScript/TypeScript dependencies for vulnerabilities. Use when scanning package-lock.json, validating dependency trees, or detecting vulnerable transitive dependencies.
Skill Claude CodeCodex
Generate and validate Software Bill of Materials for Fawkes artifacts. Use when generating SBOM with Syft, validating SBOM schema, or checking dependency completeness.
Skill Claude CodeCodex
Detect insecure code patterns, vulnerabilities, and misconfigurations in OBS, PIPE, and Fawkes services. Use when running Semgrep, CodeQL, or validating secure coding patterns.
Skill Claude CodeCodex
Run CodeQL queries to detect deep security vulnerabilities. Use when building CodeQL database, running language-specific queries, or validating results.
Skill Claude CodeCodex
Run Semgrep rulesets against Fawkes codebases. Use when executing OWASP rules, custom Fawkes rules, or validating findings.
Skill Claude CodeCodex
Ensure no secrets leak into source code, logs, artifacts, or GitOps repos. Use when scanning source code, Git history, container layers, or validating artifact integrity.
Skill Claude CodeCodex
Detect secrets in source code and Git history. Use when scanning working tree, scanning Git history, or validating findings.
Skill Claude CodeCodex
Ensure all build artifacts are tamper-proof and verifiable. Use when validating checksums, signatures, or provenance.
Skill Claude CodeCodex
Execute all relevant tests and quality gates to validate build output. Use when running tests, collecting results, and measuring coverage.
Skill Claude CodeCodex
Validate full system behavior from the user's perspective. Use when running end-to-end tests to verify complete workflows and acceptance criteria.
Skill Claude CodeCodex
Validate interactions between components. Use when running integration tests to verify data flow and component boundaries.
Skill Claude CodeCodex
Stands up a real running instance of the affected component(s) and runs testtype:live-system acceptance criteria against it — real HTTP calls, real process behavior, real evidence. Not a mock, not a simulated environment. Use when tasks.json contains any acceptance criterion tagged testtype: live-system.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: