Tools

Turns a new epic idea into a PRD: problem and goals, personas, user journeys, functional and non-functional requirements, success metrics and out-of-scope items, asking questions when information is missing, saved as Markdown. From GitHub's awesome-copilot collection.

Writes product requirement docs for software and AI features: first asks about the problem, success metrics and constraints, then outputs an executive summary, user stories, technical specs and risk analysis with measurable requirements. From GitHub's awesome-copilot community library.

Finds leaked credentials in Git, GitHub, S3, filesystems and more, recognizing 800+ secret types and checking with each service whether a key is still live to cut false positives.

Trail of Bits skill that audits GitHub Actions workflows wired to AI coding agents (Claude Code Action, Codex, Gemini CLI and others) for prompt injection, env-variable relays, dangerous sandbox settings, wildcard allowlists and other privilege risks.

Static security analysis for CI/CD config: finds template injection, credential leaks, excessive permissions and more in GitHub Actions workflows, also covers Dependabot and pre-commit configs, and auto-fixes some findings.