Home / devcop95 / cyhber-deploy · GitHub

cyhber-deploy SKILL.md skillA

cyhber-deploy from devcop95/cyhber-deploy is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.

Install it, pinned
mdr add devcop95/cyhber-deploy/cyhber-deploy@git:20261006.d4d6dd0

Pins git:20261006.d4d6dd0 in mdr.lock. Pin the fingerprint instead.

Audit grade
A, 17 of 17 checks passed
Kind
SKILL.md skill
Repository
devcop95/cyhber-deploy
Path
skills/cyhber-deploy/SKILL.md
Versions recorded
4
Latest version
git:20261006.d4d6dd0, committed Oct 6, 2026
First version recorded
May 11, 2026
Size
12,603 bytes
Repository stars
21
License
MIT

Use when preparing staging/production deploys, modifying CI/CD pipelines (GitHub Actions, GitLab CI, Jenkins), changing IaC (Terraform, Kubernetes, Docker), handling authentication/authorization/sessions/secrets, detecting injection vulnerabilities, reviewing security groups/IAM/RBAC, hardcoded credentials, exposed endpoints, or requesting security reviews.

Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.

What the file says

# Cyhber Deploy

## Overview

Systematic DevSecOps review methodology enforcing 5-layer analysis with standardized severity-tagged alerts.

**Purpose:** Ensure comprehensive, structured security review - not ad-hoc vulnerability detection.

## When to Use

**Trigger on:**
- Deploy preparation (staging/production)
- CI/CD changes (workflows, pipelines, build scripts)
- IaC modifications (Terraform, K8s, Docker, cloud config)
- Auth/authz/session handling code
- Secret management changes
- Security review requests
- Suspicious patterns (injection, exposed secrets, overprivileged access)

**Also trigger when user mentions:**
- GitHub Actions, GitLab CI, Jenkins, CircleCI
- AWS, GCP, Azure cloud resources
- Docker, Kubernetes, Helm
- SQL queries, database access
- API keys, tokens, certificates
- Environment variables, config files

## Systematic 5-Layer Review

**ALWAYS follow this order** - don't skip layers based on request scope:

1. **Gather context** — languages, app type, environments, deploy target
2. **Summarize scope** — state what you are about to review
3. **Layer 1: Code validation**
4. **Layer 2: Dependencies**
5. **Layer 3: Secrets & PII**
6. **Layer 4: CI/CD pipeline**
…

Read the whole file at its exact version.

How to install

The exact contents, by fingerprint
mdr add devcop95/cyhber-deploy/cyhber-deploy@sha256:5e20d93c29c716a0

The line at the top of this page pins the label git:20261006.d4d6dd0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.

Badge

mdr badge

[![mdr](https://markdownregistry.com/badge/art_ydpsrag5ujvoin43.svg)](https://markdownregistry.com/a/art_ydpsrag5ujvoin43)

2 badge image fetches in 30 days. What the badge shows.

Versions

The registry has recorded 4 versions of this file, between May 11, 2026 and Oct 6, 2026, about one every 49 days. Its first recorded version is graded B and its latest A.

versioncommittedcommitsizeaudit
git:20261006.d4d6dd0 latest2026-10-06 d4d6dd0 12,603 BA view · diff
git:20260629.75238cc2026-06-29 75238cc 10,361 BA view · diff
git:20260511.7e033ba2026-05-11 7e033ba 10,683 BA view · diff
git:20260511.4c24f872026-05-11 4c24f87 15,365 BB view

Audit of the latest version

A  17 of 17 checks passed. Fixed automatic checks with no AI involved, so the same checks give the same answer every run.
  • pass: Frontmatter block present
  • pass: Frontmatter declares a name
  • pass: Frontmatter declares a description
  • pass: Size between 200 bytes and 200 KB (12603 bytes)
  • pass: No zero-width or bidi control characters
  • pass: No instruction hidden inside an HTML comment
  • pass: No link to an exfiltration or paste host
  • pass: No credential-shaped string
  • pass: No instruction to send local credentials anywhere
  • pass: No text hidden with inline styles
  • pass: No prompt-injection phrasing
  • pass: No curl or wget piped into a shell
  • pass: No recursive delete of root, home or parent
  • pass: No instruction to read or print local credentials
  • pass: No base64 blob over 200 characters
  • pass: No link to a raw IP address
  • pass: No script tag

Source

GitHub

devcop95/cyhber-deploy · 21 stars · license MIT · pushed 2026-10-06 · branch main

API

GET https://markdownregistry.com/api/v1/artifacts/art_ydpsrag5ujvoin43
GET https://markdownregistry.com/api/v1/resolve?ref=devcop95/cyhber-deploy/cyhber-deploy
GET https://markdownregistry.com/api/v1/blob/5e20d93c29c716a058ace594be6d5d8209eaa20b3e83558e2d60e034364bbd34

Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.

Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.

Browse by kind, by grade A, or by owner.