Scan a codebase for OWASP Top-10 vulnerabilities, hardcoded secrets, insecure dependencies, and unsafe patterns. Read-only report ranked by severity.
Plugin security-review from marketplace easier-life-skills in dan323/easier-life-skills. Commands read from the repo's manifest — 11 days ago.
security-reviewScan a codebase for OWASP Top-10 vulnerabilities, hardcoded secrets, insecure dependencies, and unsafe code patterns. Produces a read-only markdown report ranked by severity (Critical / High / Medium / Low). Use when the user says "security review", "scan for vulnerabilities", "check for secrets", "
Audit a website for UX issues, bugs, accessibility problems, and unexpected behavior. site-mapper crawls once via Playwright MCP to produce sitemap.json; ux-analyst, accessibility-auditor, performance-auditor, and bug-script-runner then run in parallel against the shared artifact. bug-script-runner generates a Playwright spec on the fly using real selectors and executes it via npx playwright test.
1 skill · 5 agents · 1 MCP server · hooks
Read tasks from a YAML file (unified or legacy two-file format), implement one per run via an agent, and open a PR. Also ships `pr-reviewer` and `review-fixer` skills callable as workflow steps.
3 skills · 3 agents
Code-quality audit bundle — find unused code, find breaking REST API changes, and audit logging quality. All three skills are read-only and produce prioritised reports.
3 skills
Process the top Todo card on a GitHub Project (v2) board end-to-end: pull the board into a task-agent tasks.yml, claim the top Todo card (moved to In Progress), run task-agent against that task to open a PR, sync the PR back so the card moves to In Review, then review the PR with the `pr-reviewer` agent and apply fixes for actionable review comments. Bundles the `gh-project-sync` reconciler skill (used twice in the chain) and composes it with `task-agent` and the `pr-reviewer` and `review-fixer` skill wrappers (shipped by `task-agent`) via the `workflow` skill — `task-agent` and `workflow` must also be installed.
2 skills
Documentation skills: generate or update CHANGELOG.md from git history, and create a root README.md with a linked /docs structure
2 skills
Suggest the 5 most valuable next features or improvements for a project
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.