Import scanner output and SBOMs into DefectDojo Pro with automatic product and engagement creation, correct import versus reimport handling, and background-import polling. Also wires scan upload into CI pipelines. Requires DefectDojo Pro.
Plugin defectdojo-import from marketplace defectdojo in DefectDojo/agent-skills. Commands read from the repo's manifest — 1 month ago.
import-scansUpload scanner output or an SBOM into DefectDojo Pro. Use when the user has results from a security scanner and wants them in DefectDojo, or says import this scan, upload these results, push the Semgrep or Trivy or ZAP or Snyk or Nuclei or Burp output to Dojo, ingest this SBOM or CycloneDX or SPDX f
wire-ci-importAdd DefectDojo scan upload to a repository's CI pipeline. Use when the user wants scan results pushed to DefectDojo automatically on every build or pull request, asks to add DefectDojo to GitHub Actions or GitLab CI or Jenkins, wants to automate scan upload, or wants their pipeline wired into their
Connect Claude Code to a DefectDojo Pro instance. Wires the built-in MCP server, stores API credentials once, provides the dd-api REST bridge used by every other DefectDojo skill, and diagnoses broken connections. Requires DefectDojo Pro.
1 skill · 1 MCP server · hooks
Ask questions about DefectDojo findings, products, and security posture in plain language, then work the triage queue: close, verify, mark false positive, risk accept, tag, and annotate findings with a confirmation step before any write. Requires DefectDojo Pro.
2 skills
Produce executive, program, and remediation-trend security reports from DefectDojo Pro insights data, or generate a native DefectDojo report artifact for download. Requires DefectDojo Pro.
1 skill
DefectDojo umbrella. One command installs the full official skill set: connection setup, finding queries and triage, scan import and CI wiring, and executive reporting. Requires DefectDojo Pro.
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.