Plugins

12 plugins

Security audits, vulnerability scanning and secure coding.

30 skills · plugin

Dotnet Template Engine

.NET Template Engine skills: template discovery, project scaffolding, and template authoring.

6 skills · plugin

Create and Share Agent Skills

Scaffold, build, verify, and share a new agent skill with the team.

11 skills · plugin

Publish Mobile-First Page

Scaffold and publish a mobile-first page with responsive layout and design tokens.

4 skills · plugin

Build Spring Boot REST API

Scaffold a Spring Boot project and implement REST API following best practices.

3 skills · plugin

PR Review Pipeline

Install this pack to review a PR with structured analysis, security scanning, and quality enforcement.

11 skills · plugin

Quarkus Release Pipeline

Install this pack to run build, static analysis, security scan, and diff review before a Quarkus release.

3 skills · plugin

Microsoft 365 Agents Toolkit

Toolkit for building and evaluating Microsoft 365 Copilot declarative agents — scaffolding, JSON manifest development, capability configuration, and eval workflows.

6 skills · plugin

Analyze Single-Cell RNA-Seq

Analyze single-cell RNA-seq data using Scanpy, including quality control, normalization, clustering, marker gene identification, and visualization.

9 skills · plugin

Betreuungsrecht

Betreuungsrechtliche Skills für ehrenamtliche Familienbetreuer, Berufs- und Vereinsbetreuer: Kaltstart, Scan-Akte, Kalender, Gerichtskommunikation, Jahresbericht, Vermögensverzeichnis, Genehmigungspflichten, Wunschermittlung, Kontoanalyse und Schutzplan nach BtOG und BGB.

2 skills · plugin

Building Secure Contracts

Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.

11 skills · plugin

Build MVP from Spec

Turn a design or spec document into a working MVP by planning thin vertical slices, scaffolding, then building iteratively with TDD and gated commits.

5 skills · plugin

Results for “sca”

43 skills

Scanning Iac And Images With Trivy

Scan container images, IaC, and SBOMs for vulnerabilities and misconfigurations in CI/CD with Trivy.

24.6k · bundle

Performing Sca Dependency Scanning With Snyk

Scan open-source dependencies for known vulnerabilities using Snyk, including CI/CD integration, automated fix PRs, license compliance, and continuous monitoring.

24.6k · bundle

Performing Container Security Scanning With Trivy

Scan container images, filesystems, and Kubernetes manifests for vulnerabilities, misconfigurations, exposed secrets, and license compliance issues using Aqua Security Trivy with SBOM generation and CI/CD integration.

24.6k · bundle

Supply Chain Security

Assess software supply chain security by generating SBOMs, scanning dependencies, auditing CI/CD pipelines, analyzing container images, and verifying vulnerability reachability.

12.8k · bundle

Implementing Devsecops Security Scanning

Integrates SAST, DAST, and SCA security scanning into CI/CD pipelines using open-source tools like Semgrep, Trivy, OWASP ZAP, and Gitleaks.

24.6k · bundle

Building Devsecops Pipeline With Gitlab CI

Design and implement a comprehensive DevSecOps pipeline in GitLab CI/CD integrating SAST, DAST, container scanning, dependency scanning, and secret detection.

24.6k · bundle

More results

Scanning Containers With Trivy In Cicd

Integrate Trivy vulnerability scanning into CI/CD pipelines to detect container image CVEs, Dockerfile misconfigurations, and enforce severity-based quality gates.

24.6k · bundle

Implementing Aqua Security For Container Scanning

Deploy Aqua Security's Trivy scanner to detect vulnerabilities, misconfigurations, secrets, and license issues in container images across CI/CD pipelines and registries.

24.6k · bundle

Implementing Infrastructure As Code Security Scanning

Automates security scanning for Infrastructure as Code templates using Checkov, tfsec, and KICS to detect misconfigurations before deployment.

24.6k · bundle

Scanning Docker Images With Trivy

Scan Docker images for vulnerabilities, misconfigurations, secrets, and license violations using Trivy, with CI/CD integration and policy enforcement.

24.6k · bundle

Run Semgrep static analysis scans with automatic language detection, parallel subagent execution, and merged SARIF output. Supports full ruleset coverage or high-confidence security vulnerability filtering.

Senior Fullstack

Scaffolds fullstack projects (Next.js, FastAPI, MERN, Django) and analyzes code quality with security and complexity scoring.

20.4k · bundle

Configure and run CodeQL code scanning through GitHub Actions workflows or the standalone CLI for security analysis.

36.2k · bundle

Scans the projects/ directory and reports the pipeline phase completion status for each Virtual Team project, including validation errors and QA verdicts.

Implementing Secrets Scanning In CI CD

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment.

24.6k · bundle

Django Verification

Runs a comprehensive verification pipeline for Django projects including migrations, linting, tests with coverage, security scans, and deployment readiness checks before PRs or releases.

Dependency Auditor

Audit and manage dependencies across multi-language projects by scanning for vulnerabilities, license conflicts, and transitive dependency risks, with safe-upgrade planning.

20.4k · bundle

Env Secrets Manager

Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.

20.4k · bundle

Verification Loop

Runs a multi-phase verification pipeline including build, type-check, lint, tests, security scan, and diff review to ensure code quality before creating a PR.

Implementing Secret Scanning With Gitleaks

Detect and prevent hardcoded secrets in git repositories using Gitleaks, including pre-commit hooks, CI/CD integration, custom rules, baseline management, and remediation workflows.

24.6k · bundle

Detecting Typosquatting Packages

Flag misspelled, brandjacked, and typosquatted package names across npm, PyPI, and crates.io before installation using edit-distance, keyboard-proximity, and known-target corpus matching with typomania, OSSGadget, and pypi-scan.

24.6k · bundle

ai-builder-club

Scaffolds a per-task verification skill for a repo, including a dev-local launcher, a browser driver, and a verification SOP that spawns a sub-agent to drive the app and produce proof.

Building Vulnerability Scanning Workflow

Establishes recurring vulnerability scanning workflows using Nessus, Qualys, or OpenVAS, prioritizes findings with risk scoring and CISA KEV data, integrates with SIEM for exploitation detection, and tracks remediation via SLA-based dashboards and automated ticketing.

24.6k · bundle

Detecting AWS Credential Exposure With Trufflehog

Scan source code repositories, CI/CD pipelines, and configuration files for exposed AWS credentials using TruffleHog, git-secrets, and AWS-native detection mechanisms to prevent credential theft and unauthorized account access.

24.6k · bundle

Verifying Build Provenance With Slsa Sigstore

Verify signed artifacts and SLSA build provenance with Sigstore cosign and slsa-verifier, enforce keyless OIDC identity, and apply SLSA Build levels to harden the software supply chain.

24.6k · bundle

Integrating Dast With Owasp Zap In Pipeline

Integrates OWASP ZAP for Dynamic Application Security Testing in CI/CD pipelines, configuring baseline, full, and API scans, interpreting findings, tuning policies, and establishing quality gates in GitHub Actions and GitLab CI.

24.6k · bundle

Scans the projects/ directory and reports the pipeline phase completion status for each Virtual Team project.

Configure and manage GitHub Dependabot for automated dependency updates, security alerts, and vulnerability scanning across multiple ecosystems.

36.2k · bundle

Orchestrates end-to-end software development from scaffolding to deployment, covering frontend, backend, database, testing, and CI/CD workflows.

Codebase Migrate

Coordinate large-scale codebase migrations and multi-file refactors across hundreds of files using batched PRs and CI verification.

Designs and implements CI/CD pipelines, automating build, test, and deployment processes with security scanning and deployment strategies.

Automates the cycle of fixing CI failures, addressing PR review feedback, and pushing changes until all checks pass.

Laravel Verification

Runs a multi-phase verification pipeline for Laravel projects including environment checks, linting, static analysis, tests with coverage, security scans, and deployment readiness.

Scans GitHub repositories for failing or stuck Actions workflows, diagnoses root causes, and applies fixes such as canceling stuck runs, re-running failed jobs, and cleaning runner caches.

Generates a structured Claude CLI prompt from a JSON idea specification to bootstrap a complete skill directory with SKILL.md, references, scripts, and tests following repository conventions.

Quarkus Verification

Runs a comprehensive verification pipeline for Quarkus projects including build, static analysis, tests with coverage, security scans, native compilation, and diff review before PRs or releases.