ruflo-security-audit
claudeSecurity review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
Skills de gestion des dépendances : upgrade-dependency (montée de version) et fix-cve (correction de vulnérabilités, conversationnel ou headless).
Plugin dependency-tools from marketplace pass-emploi in France-Travail/pass-emploi-tools. Commands read from the repo's manifest — 2 days ago.
fix-cveUse when fixing dependency vulnerabilities in a Yarn Berry repo - one advisory or every CVE in the repo, interactively or headless (scheduled job, CI). Takes CVE/GHSA ids or package names, or nothing for a full sweep. Triggers - "fix les CVE", "corrige toutes les CVE du repo", "corriger la CVE de <d
upgrade-dependencyUse whenever upgrading, bumping or updating any dependency to a new version (minor, major, security), reviewing a Dependabot/Renovate PR, or when a bump caused build/type/runtime errors. Also called by fix-cve to assess a major bump. Triggers - "monter en version", "mettre à jour la dépendance X", "
Security review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Zero-dependency HTML presentation generator with safe presets, bold template-library styles, PPT conversion, and anti-AI-slop design philosophy.
1 skill
45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.
48 skills · hooks
Understand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.
1 skill · 1 agent
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.