pipelinelint

CI/CD pipeline anti-pattern analyzer -- detects hardcoded secrets, missing cache configs, skipped tests, unsafe deployments, no approval gates, and environme...

This skill appears to do what it claims: local regex-based scans and optional git-hook integration. Before installing, review and accept that: (1) installing lefthook via Homebrew is required to enable repo hooks; (2) running the hooks installer will create or append a lefthook.yml in your repository and register pre-commit/pre-push hooks that run the scanner on commits/pushes (this changes repo config and can add scan latency); (3) the license check reads a license key from the PIPELINELINT_LICENSE_KEY env var or ~/.openclaw/openclaw.json — ensure you are comfortable storing your key there. If you do not want repo hooks, you can use the one-shot scan commands instead. As always, review the included shell scripts (analyzer.sh, dispatcher.sh, patterns.sh, license.sh) yourself before enabling hooks to confirm they match your security policies.

Type: OpenClaw Skill Name: pipelinelint Version: 1.0.0 PipelineLint is a legitimate CI/CD pipeline analyzer designed to detect security anti-patterns and configuration issues locally. The skill uses regex-based scanning (analyzer.sh, patterns.sh) and provides a tiered licensing system validated offline via JWT (license.sh). It includes standard developer features like git hook integration via lefthook and multi-format reporting (text, JSON, HTML). No evidence of data exfiltration, malicious execution, or unauthorized network activity was found; the code logic is entirely consistent with its stated purpose.