Production-readiness and security-scanning checks: a categorized deterministic scan, summarized external scanners, and an auditor agent, ordered by observed impact.
Plugin prod-readiness from marketplace konyklabs-plugins in konyklabs/claude-plugins. Commands read from the repo's manifest — 12 days ago.
hardening-checksThe production-readiness half of a review — denial-of-service surface (body and upload limits, timeouts, rate limits, concurrency and pagination caps, regex DoS, container hardening, CORS, debug flags), correctness traps that pass their tests (silent async failure, vendor key modes, token generation
readiness-reviewProduction-readiness and security review of an application, token-cheap — one deterministic scan emits a categorized report, external scanners are summarized to counts, an auditor judges only what needs judgment, and the conductor reads a table. Use before a release, before publishing a sample app o
security-scanningThe security half of a readiness review — secret and identifier leakage (distribution archives, full-history scans, custom credential formats, fixtures, the browser config endpoint), debug and observability surfaces (redaction at publish, debug endpoints, HTML-string sinks), and the external scanner
auditorJudges the review-tier rows of a readiness scan on Opus at medium effort — reads the cited sites, decides whether each is a defect, and returns findings as JSON with a concrete failure scenario, or clears them. Use after a scan, for the rows the scanner marked review, and for the correctness and doc
scannerRuns the production-readiness scan and the installed external scanners on Sonnet at medium effort and returns the bounded summary — never the raw tool output — in the worker report format. Use for the scan step of a readiness review, a pre-commit subset, or to re-run one check after a fix. Does not
Token guardrails for sessions on Fable-tier models: writes the task brief from a short interview, pins spawns to cheap workers, denies forks, requires a brief for expensive spawns, prices a per-session budget from the transcript, and holds workers to an evidence contract.
11 skills · 6 agents · hooks
Python test engineering skills — pytest project structure, Playwright API and browser tests, SQLAlchemy test fixtures — and the untangling workflow for large unmerged test suites.
5 skills · 1 agent
GitHub Actions workflows authored, preflighted and reviewed the way the infrastructure work is: a deterministic preflight (actionlint and zizmor on PATH reduced to counts, structural checks for the pinning, permissions, pull_request_target and injection traps), a workflow review lens with an Opus reviewer agent, and docs-first authoring references for reusable workflows, permissions and OIDC, supply chain and runtime shape.
3 skills · 1 agent
Reconciles an application's end-to-end coverage against what it does: explore, mine, tile, fill, report, human-readable test cases.
4 skills
OpenTofu on AWS, authored and reviewed the way the Python work is: a deterministic preflight (fmt, validate, the linters on PATH reduced to counts, structural checks for the Fargate and Lambda traps no linter catches, a plan summary that fails closed on destroy), a Terraform review lens with an Opus reviewer agent, and docs-first authoring references for ECS Fargate, Lambda, IAM, networking and state.
3 skills · 1 agent
Vitest and TypeScript project skills, the py-testing shape for the TypeScript side: config that shares vite.config.ts, mocking and fake-timer rules, test.extend fixtures, typecheck mode, CI reporters and sharding; tsconfig for Node with nodenext, the TypeScript 6 and 7 default changes, strictness adoption, project references, type stripping; and a Sonnet test-implementer with both skills preloaded.
2 skills · 1 agent
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint
13 skills · 1 command · 1 agent · hooks
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.