EXTENSIONS

Unified cross-provider AI token usage monitoring — workflow, model, and

Kanban workflow reports and automation for Redmine.

AWS cost audit workflow — identifies infrastructure waste by combining

AWS Operations Toolkit - Unified incident investigation and daily operational visibility.

SRE Health Check - Unified site reliability health check workflow with report.

Read fantasy league state from the Sleeper platform's public read-only API — no key, no OAuth, no write surface. Resolve a username to a user ID, list leagues and drafts, and read a league in depth: settings and scoring, rosters with owners joined and standings derived, weekly matchups paired head to head, the transaction log, traded picks, playoff brackets, the draft board, and league-wide add/drop trends. Player IDs are resolved to names from a locally cached catalogue, and a missing record (which Sleeper reports as HTTP 200 with a null body) fails loudly instead of reading as empty.

Narrow GitHub.com same-repository pull-request boundary: preflight, plan, apply, and read-back verification. Draft is requested per packet rather than fixed by the adapter. No merge, release, repository administration, PR update, or arbitrary endpoint capability.

Forge-neutral immutable change packets for reviewed repository delivery. Records exact Git base/head identity, validation evidence, requested draft submission metadata, a canonical SHA-256 digest, and derived readiness. Performs no network, Git, forge, approval, merge, or release operation.

Read-only workflow for evidence-backed Redmine Story status analysis.

A transport-neutral, secret-redacting notification outbox for swamp workflows that enqueues deduplicated notification records and drains them through a caller-supplied transport, performing no transport I/O itself.

A daily operator briefing workflow with companion report. Gathers data from GitLab (review queue, todos), Microsoft Teams (mentions, unread chats, channel messages), and Redmine (recent updates, new tickets), then renders a prioritized markdown briefing plus a stable JSON contract.

On-brand slide deck pipeline for swamp: a workflow that renders a deck from a voiced brief and a design reference via openai-document.webpageDesign, plus a skill that guides authoring the copy in your writing-voice profile, pinning brand tokens, and converting the PDF to PPTX. Depends on the openai-document, writing-voice, and openai-image extensions.

Drive an Absurd Postgres-based durable-execution task queue from swamp — spawn tasks, poll status, await results, emit events, cancel, and list.

Capability catalog and DAG planner models for Swamp workflows and direct model method calls. Publishes capability definitions and resolves per-host requested capabilities into dependency waves for execution.

Adaptive Garfield review and repair workflow with deterministic validation,

Query the Shodan internet-wide scan database to find and profile internet-exposed devices. Single API key resolved from vault. Read the account plan and remaining credits, run searches that return trimmed device records (IP, org, product, location, open port, CVEs) with facet rollups, count results without spending query credits, pull the full banner history for one IP, do keyless InternetDB lookups (ports, CPEs, tags, CVEs), and request on-demand scans of IPs you own. Built for AV/IoT exposure recon.

Human-in-the-loop review canvas — serve a local web form the human gates while the agent keeps working. list mode renders a long candidate list as a curation grid (configurable option-scale + per-item comment) for migrations, triage, and cleanup approvals; doc mode is a pastebin-style markdown editor (editor left, live preview right, optional approve/revise/reject verdict) for reviewing generated docs and gating publishes. Detached serve / status / collect / stop lifecycle; every save dual-writes JSON + markdown + a timestamped append-log, and collect records the result into the data model for workflow consumption. Python-stdlib server bundled; private networks only (URL-token guarded).

Integrate with a CybrIQ (Sepio) asset-visibility / hardware-access-control platform over its REST + GraphQL API. Local-login bearer auth with vault-resolved credentials. Read the asset dashboard, inventory, device types, risk insights, switches, external scan engines (Netpollers), events, alarm destinations, policies, scopes, tags, and user attributes; create tags, user attributes, policies, and scopes; and reach any other endpoint through a generic authenticated passthrough.