ruflo-security-audit
claudeSecurity review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
Task-shaped skills over the `issuegraph` CLI, so the three things done constantly are a call with a memorable name: SELECTION (order a candidate set, answer what is ready, and why a P0 is held), CREATION (render a correct block on a new issue, including a decomposition's leaves), and GROOMING (validate, repair an inert block, refresh generated edges). Each composes the CLI and re-implements no parsing. They lead with the traps that fail silently: the `state` field is the condition to branch on and the exit code is not — `parse` exits 0 on an INERT block while `validate` exits 5, and both exit 3 on an UNREAD one, so the two verbs disagree about the same body; and an empty `ready` result with a non-empty `underRead` means "I could not tell", not "nothing is ready".
Plugin issuegraph-skills from marketplace issuegraph in autnmy/issuegraph. Commands read from the repo's manifest — 5 days ago.
issuegraph-creationRender a fresh Issuegraph frontmatter block for a NEW issue using the issuegraph CLI's `set` verb — blocked-by, serialize-with, decomposed-from, duplicate-of, together-with, priority and evidence. Use when filing an issue, decomposing one into sub-issues, or adding declarations to a body that has no
issuegraph-groomingValidate, repair and amend the Issuegraph block on issues that already exist, using the issuegraph CLI's `validate`, `backfill`, `splice` and `set` verbs. Use when auditing a backlog for unreadable blocks, repairing a block a code fence left inert, refreshing generated edges, or clearing an edge — i
issuegraph-selectionOrder a set of candidate issues and answer which of them are ready to work, using the issuegraph CLI's `order` and `ready` verbs. Use when picking the next issue, asking why a high-priority issue is not running, or filtering a candidate set down to what can start now — instead of hand-walking blocke
issuegraphRead and write the Issuegraph block in a GitHub issue body using the issuegraph CLI — dependency edges (blocked-by, serialize-with, decomposed-from, duplicate-of, together-with), priority, evidence, and the derived selection order. Use whenever you need to know what blocks an issue, what is ready to
Security review, dependency scanning, policy gates, and CVE monitoring
2 skills · 1 command · 1 agent
Automatically enforce SonarQube code quality and security in the agent coding loop — 7,000+ rules, secrets scanning, agentic analysis, and quality gates across 40+ languages. PostToolUse hooks run analysis after every file edit. Pre-tool secrets scanning prevents 450+ patterns from reaching the LLM. Slash commands give on-demand access to quality gate status, coverage, duplication, and dependency risks. Includes SonarQube CLI, MCP Server, skills, hooks, and slash commands.
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Zero-dependency HTML presentation generator with safe presets, bold template-library styles, PPT conversion, and anti-AI-slop design philosophy.
1 skill
45 advanced engineering skills: agent designer, agent workflow designer, RAG architect, database designer + schema designer + SQL assistant, migration architect, observability designer, dependency auditor, changelog generator, API design reviewer, API test suite builder, CI/CD pipeline builder, MCP server builder, skill security auditor, skill tester, performance profiler, focused-fix, browser-automation, full-page-screenshot, git-worktree-manager, monorepo-navigator, codebase-onboarding, interview-system-designer, runbook-generator, spec-driven-workflow, secrets-vault-manager, env-secrets-manager, pr-review-expert, self-eval, tc-tracker, feature-flags-architect, kubernetes-operator, chaos-engineering, ship-gate, slo-architect (error-budget + multi-window burn-rate alerts per Google SRE Workbook), tech-debt-tracker, agent-regression-evals, coding-agent-rollout, commit-craft, agent-run-forensics and i18n-localization. Agent skill and plugin for Claude Code, Codex, Gemini CLI, Cursor, OpenClaw.
48 skills · hooks
Understand a codebase before looking for bugs in it. Reads it function by function, records what each one assumes and depends on, and saves the write-ups to files instead of filling up the conversation.
1 skill · 1 agent
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.