supersize-semgrep — opt-in SAST extension (separate product)

Map the probe set onto STRIDE + agentic axes, run the Elevation-of-Privilege gap ritual, and propose new rules via PR (never self-merge).

3 skills · 3 commands · 1 agent

Front door: greet, explain the AUDIT ▸ MODEL ▸ EXTEND flow, list installed plugins, and consolidate readiness. A thin orchestrator that delegates to the specialists.

4 commands · hooks

Audit an AI-agent skill/plugin for supply-chain attacks before it runs (PASS/REVIEW/BLOCK), via the in-repo skillsentry CLI. Detection stays in the deterministic CLI, never the agent context.

1 skill · 1 command

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.

12 skills

Code intelligence powered by a knowledge graph. Provides execution flow tracing, blast radius analysis, and augmented search across your codebase.

12 skills · 1 MCP server · hooks

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents