Speedy Gonzales — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Speedy Gonzales (Plugin) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Claude Code marketplace plugin that speeds up everyday dev workflows.
/plugin marketplace add nmoinvaz/speedy-gonzales
/plugin install arriba@speedy-gonzalesThe GitHub commands call the gh-arriba extension. The plugin installs it at the start of a session when it is missing, or install it yourself:
gh extension install nmoinvaz/gh-arriba| Command | Description |
|---|---|
/commit | Full commit workflow with branch creation and PR |
/comment-cleanup | Walk through changed comments and pick a writing variation |
/fixup | Apply staged changes to a previous commit |
/gh-pr | Create a PR with labels and reviewer |
/gh-pr-fix | Verify and fix unresolved PR review comments |
/gh-release | Trigger a GitHub release workflow |
/dependabot-merge | Interactively review and merge Dependabot PRs |
/dependabot-triage | Triage Dependabot security alerts |
/jira-fix-bug | Fix a bug from a Jira issue |
/jira-download-attachments | Download all attachments and inline media from a Jira ticket |
| Skill | Description |
|---|---|
/acli | Common Atlassian CLI (acli) commands for Jira |
/extract-asm | Extract function assembly from an object or assembly file |
/gh | GitHub CLI (gh) tips and workarounds |
/graph-data | House style and shared SVG primitives for Python-rendered data graphs |
/testrail | Interact with the TestRail Test Management API |
gh) - most commandsacli) - /acli skill (optional)/testrail skill (optional)~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.