Run Ship Safe before a release when an agent needs one pre-ship pass for CI/CD misconfigurations, permission risks, secrets exposure, MCP-related hazards, and dependency issues.
Scanned 6/8/2026
Install via CLI
openskills install agentskillexchange/skills---
name: "Catch agent-era CI/CD and permission misconfigurations before shipping with Ship Safe"
slug: "catch-agent-era-ci-cd-and-permission-misconfigurations-before-shipping-with-ship-safe"
description: "Run Ship Safe before a release when an agent needs one pre-ship pass for CI/CD misconfigurations, permission risks, secrets exposure, MCP-related hazards, and dependency issues."
github_stars: 521
verification: "security_reviewed"
source: "https://github.com/asamassekou10/ship-safe"
author: "Asa M. Assekou"
publisher_type: "individual"
category: "CI/CD Integrations"
framework: "Multi-Framework"
tool_ecosystem:
github_repo: "asamassekou10/ship-safe"
github_stars: 521
npm_package: "ship-safe"
npm_weekly_downloads: 2762
---
# Catch agent-era CI/CD and permission misconfigurations before shipping with Ship Safe
Run Ship Safe before a release when an agent needs one pre-ship pass for CI/CD misconfigurations, permission risks, secrets exposure, MCP-related hazards, and dependency issues.
## Prerequisites
Node.js or package runner, repository or CI config to scan
## Installation
Use the upstream install or setup path that matches your environment:
- npx ship-safe
- npx ship-safe audit .
- npx ship-safe agent .
- npx ship-safe agent . --severity critical # critical findings only
Basic usage or getting-started notes:
- bash
- # Interactive REPL — scan, fix, ask questions in one session
- # Full audit: secrets + 23 agents + deps + remediation plan
- Source: https://github.com/asamassekou10/ship-safe
- Extracted from upstream docs: https://raw.githubusercontent.com/asamassekou10/ship-safe/HEAD/README.md
## Documentation
- https://github.com/asamassekou10/ship-safe
## Source
- [Agent Skill Exchange](https://agentskillexchange.com/skills/catch-agent-era-ci-cd-and-permission-misconfigurations-before-shipping-with-ship-safe/)
No comments yet. Be the first to comment!
Ultra-compressed communication mode. Cuts token usage ~75% by speaking like caveman while keeping full technical accuracy. Supports intensity levels: lite, full (default), ultra, wenyan-lite, wenyan-full, wenyan-ultra. Use when user says "caveman mode", "talk like caveman", "use caveman", "less tokens", "be brief", or invokes /caveman. Also auto-triggers when token efficiency is requested.
Adversarial multi-agent planning skill. Self-orchestrates 5 hostile category members (unspecified-low, unspecified-high, deep, ultrabrain, artistry) via team-mode for ruthless cross-critique debate, distills only the defensible insights, then MANDATORILY hands the distilled insight bundle to the `plan` agent for executable plan formalization. Use when planning needs maximum rigor and surfacing of weak assumptions, blind spots, and over-engineering. Triggers: 'hyperplan', 'hpp', '/hyperplan', ...
**Complete production-ready guide for Google Gemini embeddings API** This skill provides comprehensive coverage of the `gemini-embedding-001` model for generating text embeddings, including SDK usage, REST API patterns, batch processing, RAG integration with Cloudflare Vectorize, and advanced use cases like semantic search and document clustering. ---
Interview, source-challenge, verify, save, and ADR-gate fuzzy coding requests into Codex-ready implementation specs. Use when a feature, bugfix, refactor, migration, repo-wide change, or architecture task needs user-verified requirements, source-backed decisions, durable architecture decisions, acceptance criteria, validation commands, rollout notes, saved spec/ADR files, and a Codex execution prompt. Do not use when already fully specified or when the user wants direct implementation now.
Use when a repo needs CodeGraph plus ast-grep for Codex MCP setup, exploration, impact analysis, structural search, or safe refactor planning.