Skills that triage, research and explain a yardstick gate's differences through the yardstick CLI.
Plugin yardstick from marketplace yardstick in anchore/yardstick. Commands read from the repo's manifest — 6 days ago.
explain-deltasFor one yardstick gate, explain why its two setups' scans differ, one computed reason node at a time — from both sides' grype logs, the grype release notes and the two DBs' records — and record plain-language reasons with log excerpts and facts through `yardstick claims agent explain propose`. No la
research-vulnDeep-dive one vulnerability finding from a yardstick gate — what the bug is, when upstream fixed it, whether the distro shipped or declined the fix, why the two grype DBs disagree — and record a verdict with justification, confidence, reasoning, facts, open questions and a report as a `yardstick cla
triage-deltasWalk the unlabeled differences between the two setups of a yardstick gate, say which are obvious tp/fp and the evidence that decided it (the justification, the rule and the facts), and record them as proposals (hints) for a person to accept in `yardstick claims serve`. Never writes labels.
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Investigate incidents, review code and execute UAT for release readiness, scan code for vulnerabilities, and run penetration tests with AWS DevOps Agent and AWS Security Agent.
13 skills · 9 commands · 1 MCP server
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Configure, run, and interpret HawkScan DAST results. Generates stackhawk.yml configs, runs scans via CLI or Docker, and transforms security findings into prioritized fix tasks for your coding agent.
1 skill · hooks
Answer questions about past agent runs from the recording, not from memory. Three read-only stdlib scripts over the session transcripts Claude Code and Codex already write: a finder that locates the run by repo, time window, touched file or command text; a timeline that numbers every step with its exit code, lists every file changed (flagging changes the agent never mentioned) and walks back from any step with each causal edge labelled recorded or inferred by a named rule; and a claim checker that tests a summary's claims (ran, passed, edited, not-edited, read) against the run and catches tests that passed before a later edit and exit codes that belong to the last command of a pipe. Secrets are always redacted. A UserPromptSubmit hook gives the agent this session's transcript path when a prompt asks about past work. Ships cs-run-forensics agent, /cs-run-forensics and /cs-check-claims commands and 3 cited references.
1 skill · 2 commands · 1 agent · hooks
Comprehensive smart contract security toolkit based on Trail of Bits' Building Secure Contracts framework. Includes vulnerability scanners for 6 blockchains and 5 development guideline assistants.
11 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.