Ask questions about DefectDojo findings, products, and security posture in plain language, then work the triage queue: close, verify, mark false positive, risk accept, tag, and annotate findings with a confirmation step before any write. Requires DefectDojo Pro.
Plugin defectdojo-triage from marketplace defectdojo in DefectDojo/agent-skills. Commands read from the repo's manifest — 1 month ago.
findings-queryAnswer questions about DefectDojo security findings, products, engagements, tests, and risk posture, and produce a security brief. Use for questions like how many critical findings are open, what is our riskiest application, show me open SQL injection findings, what changed this week, which product
triage-findingsChange the state of DefectDojo findings and annotate them, including close, reopen, verify, mark false positive, mark out of scope, risk accept, add notes, add or remove tags, and merge duplicates. Use when the user wants to triage, dispose of, clean up, or work through findings or a security backlo
Connect Claude Code to a DefectDojo Pro instance. Wires the built-in MCP server, stores API credentials once, provides the dd-api REST bridge used by every other DefectDojo skill, and diagnoses broken connections. Requires DefectDojo Pro.
1 skill · 1 MCP server · hooks
Import scanner output and SBOMs into DefectDojo Pro with automatic product and engagement creation, correct import versus reimport handling, and background-import polling. Also wires scan upload into CI pipelines. Requires DefectDojo Pro.
2 skills
Produce executive, program, and remediation-trend security reports from DefectDojo Pro insights data, or generate a native DefectDojo report artifact for download. Requires DefectDojo Pro.
1 skill
DefectDojo umbrella. One command installs the full official skill set: connection setup, finding queries and triage, scan import and CI wiring, and executive reporting. Requires DefectDojo Pro.
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Production incident management, triage workflows, and automated incident resolution
4 skills · 2 commands · 6 agents
Finds breaks, traces root cause, routes for sign-off
4 skills · 1 agent
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.