gb-plugins-marketplace

Authenticate outbound network calls from inside a sandbox running behind a MITM egress-proxy + gateway auth-webhook (e.g. SandboxedOstoolsMcpServer). Tokens are injected server-side and the agent never holds them. A common egress-auth skill owns the wire contract (HTTP 511 auth_pending handshake, 403 deny), backoff polling, human-in-the-loop device-code relay, and a portable Python probe engine; thin user-invocable skills (connect, azure-devops, microsoft-graph) reference and invoke it with service-specific probe URLs, scopes, and endpoints.

Workspace-agent skills for sandboxed task execution: bootstrap workspace memory, use scripts for repeatable work, maintain task state, and understand sandbox auth/context boundaries.

Azure DevOps integration for work item management, PR publishing, iterative PR tending, autonomous work item implementation, and autonomous backlog processing. Orchestrates development methodology skills via the development plugin.

GitHub integration for issue/project management, PR publishing, iterative PR tending, issue-driven implementation, and backlog automation. Orchestrates development methodology skills via the development plugin.

Development methodology toolkit: design-first brainstorming, autonomous design with review-planning and implementation-handoff steps, test-driven development, parallel subagent-driven execution with review gates, and evidence-based completion verification. Includes planning, execution, and git workflow reference guides.

Developer performance review skill for analyzing work over time (weeks/months)

Code review toolkit with specialized agents for duplicate detection, EUII leak scanning, exception handling review, test coverage review, design simplification, code simplification, over-engineering / scope-creep detection, architecture review, performance review, schema and wire-contract compatibility review, severity grading quality gate, log review, and PR work item context gathering. Includes a review-pr command that auto-detects tech stack and publishes findings to Azure DevOps.

Microsoft Orleans patterns, best practices, and code review for virtual actor model applications — covers grain design, concurrency, cross-grain communication, streams, and serialization.

Achieve zero-warning builds through systematic warning elimination, code formatting, and package version validation

Log-first debugging methodology using structured JSONL logs queried with DuckDB. Includes debugging workflows, logging enablement for codebases, logging compliance review with calibrated Trace-coverage recommendations for AI-assisted debugging, and systematic root-cause debugging.