← all publishers

socketdev

@socketdev source repo

Report this profile Claim this profile

• 100 skills
• 0 followers
• 8 hours ago last updated

1. ▌
   Updating Checksums · socketdev bundle

   Syncs SHA-256 checksums from GitHub releases to bundle-tools.json. Triggers when user mentions "update checksums", "sync checksums", or after releasing new tool versions.
   0
   installs
2. ▌
   Release · socketdev

   Release
   0
   installs
3. ▌
   Regenerating Patches · socketdev bundle

   Regenerate plugin-cache patches against the pinned upstream plugin source after drift or SHA bumps.
   0
   installs
4. ▌
   Updating Spec · socketdev bundle

   Sync against upstream PURL, VERS, and ECMA-427 specifications. Use for spec updates, upstream checks, or normalization changes.
   0
   installs
5. ▌
   Updating NPM Purl Package · socketdev bundle

   Sync feature parity with the upstream purl npm package. Use for purl parity, API coverage, registry validation, or normalization checks.
   0
   installs
6. ▌
   Content Filename From Title · socketdev bundle

   Create short URL-friendly filenames from prose titles. Use when naming docs, guides, or slugs.
   0
   installs
7. ▌
   Socket Fix · socketdev

   Fix dependency security issues - either scan and fix everything (requires /socket-scan), or target a single named package. Orchestrates /socket-dep-cleanup, /socket-dep-replace, /socket-dep-patch, and /socket-dep-upgrade as subskills.
   0
   installs
8. ▌
   Socket Scan · socketdev

   Run a dependency scan using the Socket CLI. Prompts unauthenticated users to log in or create a free account. If the user skips login, falls back to cdxgen with greatly reduced alert accuracy and poor SBOM accuracy. Authenticated users get temporary read-only scans by default (--tmp). Creates a persistent dashboard scan only when explicitly requested. Includes reachability analysis for enterprise customers and license compliance auditing.
   0
   installs
9. ▌
   Socket Setup · socketdev

   Set up Socket - prompt for API key, install the CLI, authenticate, configure policies and tokens, set up CI/CD for firewall or patch modes across GitHub, GitLab, Bitbucket, and other systems.
   0
   installs
10. ▌
    Socket Inspect · socketdev

    Research a package before you depend on it - pull every signal from Socket (scores, alerts, malware verdicts, CVEs, supply-chain risk), check the socket.dev package page, evaluate alternatives, and surface available Socket patches.
    0
    installs
11. ▌
    Socket Release · socketdev

    Stand up SocketDev publishing (npm, crates.io, GitHub releases, Homebrew tap) in a repo - copy in the socket-release kit from a sauce checkout and run its bootstrap through name reservation, GitHub environments, npm trusted publisher, publishing-access tightening, staged publish config, and verification.
    0
    installs
12. ▌
    NPM Publish · socketdev

    Operate the socket-release npm flow end to end - bootstrap a package (name reservation, permissive-then-staged-only publishing access, trusted publishing), dispatch a staged publish, promote with --approve, backfill an old version, and roll back with deprecate. Use when publishing an npm package in a repo carrying scripts/socket-release/.
    0
    installs
13. ▌
    Updating Xport · socketdev

    Act on `xport.json` lock-step drift: auto-bump `version-pin` rows; the other row kinds (file-fork, feature-parity, spec-conformance, lang-parity) are advisory only.
    0
    installs
14. ▌
    Socket Dep Patch · socketdev

    Apply Socket's binary-level security patches without changing dependency versions. Uses socket-patch apply to fix vulnerabilities in-place, then verifies automated patching is configured so patches persist across installs.
    0
    installs
15. ▌
    Brew Publish · socketdev

    Operate the socket-release Homebrew tap flow - the binary-download formula model, tap repo layout, formula bumps tied to published releases, and sha256 verification against the release's own checksums.txt. Use when bumping a Homebrew formula or standing up a tap for a Socket CLI.
    0
    installs
16. ▌
    Cargo Publish · socketdev

    Operate the socket-release crates.io flow - the cargo staged model (dry-run default), trusted publishing via OIDC under the cargo-publish environment, index-propagation waits, and yank-as-rollback. Use when publishing a Rust crate in a repo carrying scripts/socket-release/.
    0
    installs
17. ▌
    Socket Dep Cleanup · socketdev

    Evaluate and remove a single unused dependency from your project. Searches the entire codebase for all usages (imports, requires, config refs, scripts, type packages, indirect usage), reports findings, and performs full removal with verification.
    0
    installs
18. ▌
    Socket Dep Replace · socketdev

    Replace a dependency with an alternative package, eliminate it via code rewrite, or use socket-optimize for optimized replacements.
    0
    installs
19. ▌
    Socket Dep Upgrade · socketdev

    Use socket fix to find and update vulnerable dependencies, then fix any breaking changes in the codebase. Security-audited upgrades with automated code migration.
    0
    installs
20. ▌
    Github Release · socketdev

    Cut, verify, and reconcile immutable GitHub releases with the socket-release kit - the registry-resolvability ORDER RULE, the three-step draft-upload-undraft cut, checksums.txt production, and tag-gap healing. Use when tagging a release, healing a missing tag/release, or when the github-release workflow gate refuses a tag.
    0
    installs
21. ▌
    Socket Scan Setup · socketdev

    Set up prerequisites for Socket scanning - install the CLI, configure auth with the public demo token, and verify scan access. Use this before the first scan or when encountering auth errors.
    0
    installs
22. ▌
    Map · socketdev

    Emit a token-cheap symbol map for files or directories before reading unfamiliar source in detail.
    0
    installs
23. ▌
    Prose · socketdev bundle

    Edit human-facing prose to remove AI patterns, padding, hedging, and awkward generated phrasing.
    0
    installs
24. ▌
    Improve · socketdev bundle

    Read-only codebase survey returning prioritized implementation plans for other agents.
    0
    installs
25. ▌
    Pushing · socketdev

    Run the full pre-push gate, push only when green, then watch CI after the push.
    0
    installs
26. ▌
    Agent CI · socketdev bundle

    Run this repo's GitHub Actions locally with Agent-CI before pushing CI-sensitive changes.
    0
    installs
27. ▌
    Updating · socketdev bundle

    Run repo maintenance: updates, lockstep, submodules, security, coverage, audits.
    0
    installs
28. ▌
    Opening Pr · socketdev

    Implement a requested change, verify it, commit it, and open or update the PR.
    0
    installs
29. ▌
    Setup Repo · socketdev

    setup-repo
    0
    installs
30. ▌
    Cleaning CI · socketdev bundle

    Remove redundant CI workflows, stale Dependabot auto-fix surface, and obsolete workflow run clutter.
    0
    installs
31. ▌
    Greening CI · socketdev bundle

    Watch remote CI, pull the first failure log, fix locally, push, and loop until the run is green.
    0
    installs
32. ▌
    Handing Off · socketdev

    Write a compact handoff so another agent or human can continue the work without replaying context.
    0
    installs
33. ▌
    Auditing Gha · socketdev bundle

    Audit Actions permissions/allowlists against the fleet baseline; --conform fixes drift.
    0
    installs
34. ▌
    Building Tdd · socketdev

    Use red-green-refactor for a feature or bug fix when the user asks for test-first work.
    0
    installs
35. ▌
    Grilling Plan · socketdev

    Stress-test a plan one question at a time before building, especially for shared fleet resources.
    0
    installs
36. ▌
    Tidying Files · socketdev bundle

    Remove untracked or ignored junk and scratch files across fleet repos without touching tracked work.
    0
    installs
37. ▌
    Authoring Spec · socketdev

    Turn the current conversation into a spec: problem, solution, stories, tests, enforcement.
    0
    installs
38. ▌
    Guarding Paths · socketdev bundle

    Enforce one constructed path per concern; fix duplicated build, test, runtime, config paths.
    0
    installs
39. ▌
    Reviewing Code · socketdev bundle

    Review the current branch against a base with multiple AI backends and produce verified findings.
    0
    installs
40. ▌
    Scanning Vulns · socketdev bundle

    Run static vulnerability scanners over a target tree and write raw findings for triage.
    0
    installs
41. ▌
    Updating Daily · socketdev

    Promote soak-cleared dependency exclusions, drop expired dates, and reconcile the lockfile.
    0
    installs
42. ▌
    Cascading Fleet · socketdev bundle

    cascading-fleet
    0
    installs
43. ▌
    Creating Guards · socketdev

    Author or convert fleet hooks to the uniform check plus runGuard contract used by the dispatcher.
    0
    installs
44. ▌
    Diagnosing Bugs · socketdev

    Run the diagnosis loop for hard bugs, failing behavior, regressions, thrown errors, or slow paths.
    0
    installs
45. ▌
    Looping Quality · socketdev

    Run scanning-quality, fix findings, repeat until clean or the iteration limit is hit.
    0
    installs
46. ▌
    Running Test262 · socketdev

    Run the repo's canonical Test262 suite for parser/runtime conformance; never write ad hoc runners.
    0
    installs
47. ▌
    Threat Modeling · socketdev bundle

    Build or interview for a threat model covering assets, attackers, trust boundaries, and mitigations.
    0
    installs
48. ▌
    Trimming Bundle · socketdev bundle

    Find unused bundled code paths and keep only stubs that rebuild and pass tests.
    0
    installs
49. ▌
    Grooming Backlog · socketdev

    Collapse noisy backlogs: verify done work, fold duplicates, delete stale tasks.
    0
    installs
50. ▌
    Scanning Quality · socketdev bundle

    Scan for bugs, races, workflow flaws, insecure defaults, and regressions; verify and rank findings.
    0
    installs
51. ▌
    Updating Pricing · socketdev

    Refresh current AI model pricing data from vendor sources and update fleet pricing constants.
    0
    installs
52. ▌
    Greening CI Local · socketdev bundle

    Run Agent-CI locally in Docker, fix paused failures, and retry until the workflow is green.
    0
    installs
53. ▌
    Patching Findings · socketdev bundle

    Fix verified security findings with minimal patches and independent review before validation.
    0
    installs
54. ▌
    Scanning Security · socketdev bundle

    Run AgentShield, zizmor, and Socket dependency scans into a graded security report.
    0
    installs
55. ▌
    Squashing History · socketdev bundle

    Squash default-branch history to one commit with backup and force-push.
    0
    installs
56. ▌
    Tidying Worktrees · socketdev bundle

    Sweep spent clean worktrees whose branches merged or vanished; preserve dirty or unpushed work.
    0
    installs
57. ▌
    Triaging Findings · socketdev bundle

    Verify raw security findings, dedupe them, rerank exploitability, and assign owners.
    0
    installs
58. ▌
    Updating Coverage · socketdev

    Refresh the README coverage badge by running coverage and rewriting the shields.io badge line.
    0
    installs
59. ▌
    Updating Lockstep · socketdev bundle

    Resolve lockstep manifest drift by pipelining version-pin rows and reporting parity rows.
    0
    installs
60. ▌
    Updating Security · socketdev bundle

    Resolve Dependabot alerts by bumping, overriding, patching, or dismissing with evidence.
    0
    installs
61. ▌
    Managing Worktrees · socketdev bundle

    Create, fan out, and prune git worktrees for isolated tasks and parallel PR review.
    0
    installs
62. ▌
    Refreshing History · socketdev bundle

    refreshing-history
    0
    installs
63. ▌
    Updating Hooks Dry · socketdev

    Read-only DRY sweep of fleet hooks and oxlint rules for overlap and consolidation.
    0
    installs
64. ▌
    Writing Fast Tests · socketdev

    writing-fast-tests
    0
    installs
65. ▌
    Decomposing Tickets · socketdev

    Break a plan, spec, or findings report into independently-grabbable vertical-slice tracker tickets.
    0
    installs
66. ▌
    Locking Down Claude · socketdev

    locking-down-claude
    0
    installs
67. ▌
    Releasing A Package · socketdev

    Release a single-package fleet repo: pre-bump, changelog, staged publish, approve, tag, release.
    0
    installs
68. ▌
    Researching Recency · socketdev bundle

    Research recent community and upstream signals across GitHub, forums, social feeds, and web sources.
    0
    installs
69. ▌
    Writing Disclosures · socketdev

    Write or review a dual-use DISCLOSURE file; npm Trust & Safety reads it, so every claim must be verifiable.
    0
    installs
70. ▌
    Auditing API Surface · socketdev bundle

    Audit package exports for dead, internal-only, or weakly-consumed subpaths before pruning.
    0
    installs
71. ▌
    Delegating Execution · socketdev

    Route substantial work through plan, execute, review, follow-up agents at the right effort tier.
    0
    installs
72. ▌
    Designing Interfaces · socketdev bundle

    Designs and reviews accessible interfaces using reference research and rendered validation.
    0
    installs
73. ▌
    Migrating Rule Packs · socketdev bundle

    Run deterministic 10+ file code migrations via rule-pack transforms and isolated agents.
    0
    installs
74. ▌
    Codifying Disciplines · socketdev

    Turn repo rules that live only in prose or memory into scripts, hooks, lint rules, or checks.
    0
    installs
75. ▌
    Consolidating Commits · socketdev

    Regroup commits since a base into logical commits, keeping any version bump last; not squash-to-one.
    0
    installs
76. ▌
    Deduping Dependencies · socketdev

    Reduce duplicate installs with overrides, hardened drop-ins, patches, consumer checks.
    0
    installs
77. ▌
    Driving Cursor Bugbot · socketdev bundle

    Review Cursor Bugbot PR threads, classify findings, fix real bugs, reply inline, and push updates.
    0
    installs
78. ▌
    Optimizing Submodules · socketdev

    Minimize submodule sparse-checkouts to only the trees the repo actually consumes.
    0
    installs
79. ▌
    Plugging Promise Race · socketdev

    Reference for avoiding Promise.race/any handler leaks in loops and hand-rolled concurrency pools.
    0
    installs
80. ▌
    Optimizing Performance · socketdev bundle

    Audits performance in Rust, Go, C++, JS/TS, parsers, Node addons, and WebAssembly.
    0
    installs
81. ▌
    Testing Web Interfaces · socketdev bundle

    Tests web interfaces across component and browser layers.
    0
    installs
82. ▌
    Reordering Release Bump · socketdev bundle

    Move an existing version-bump commit back to tip, retag it, verify integrity, and force-push safely.
    0
    installs
83. ▌
    Improving Web Interfaces · socketdev bundle

    Improves web interfaces after design direction is locked.
    0
    installs
84. ▌
    Managing Pnpm Workspaces · socketdev bundle

    Maintains pnpm workspace dependencies safely.
    0
    installs
85. ▌
    Reviewing Web Interfaces · socketdev bundle

    Reviews web interface quality before landing UI changes.
    0
    installs
86. ▌
    Tidying Rolldown Bundles · socketdev bundle

    Keep rolldown bundles lean by reporting collapsible deps, catalog drift, and fat external shims.
    0
    installs
87. ▌
    Extracting Design Systems · socketdev

    Consolidates repeated UI patterns. Use after a pattern proves stable.
    0
    installs
88. ▌
    Optimizing Go Performance · socketdev

    Audits measured Go performance.
    0
    installs
89. ▌
    Property And Fuzz Testing · socketdev bundle

    Pick a property/fuzz tier and harness for parsers, decoders, and native addons.
    0
    installs
90. ▌
    Rendering Chromium To Png · socketdev bundle

    Render pages or extension popups to PNG and inspect pixels to catch real UI regressions.
    0
    installs
91. ▌
    Measuring Ecosystem Impact · socketdev

    Rank npm packages by ecosystem reach; model what overriding them removes from the install tree.
    0
    installs
92. ▌
    Optimizing Cpp Performance · socketdev

    Audits measured C++ performance.
    0
    installs
93. ▌
    Optimizing React Interfaces · socketdev bundle

    Optimizes measured React interface performance.
    0
    installs
94. ▌
    Optimizing Rust Performance · socketdev

    Audits measured Rust performance.
    0
    installs
95. ▌
    Optimizing Memory Performance · socketdev

    Audits measured memory and allocation performance.
    0
    installs
96. ▌
    Optimizing Parser Performance · socketdev

    Audits parser and tokenizer performance.
    0
    installs
97. ▌
    Optimizing Compiler Performance · socketdev

    Audits compiler and codegen performance.
    0
    installs
98. ▌
    Optimizing Javascript Performance · socketdev

    Audits measured JavaScript and TypeScript performance.
    0
    installs
99. ▌
    Optimizing Node Native Performance · socketdev

    Audits Node addon and native-boundary performance.
    0
    installs
100. ▌
     Optimizing Webassembly Performance · socketdev

     Audits WebAssembly performance and capability fallbacks.
     0
     installs