Install, plan, apply, and verify enforceable GitHub merge gates for the GRC Engineering workflow without granting the Noru hub administration rights.
Plugin repo-enforcement from marketplace noru-grc-engineering in noru-tech/noru-grc-engineering. Commands read from the repo's manifest — 6 days ago.
repo-enforcementInspect, install, plan, apply, and verify GitHub-backed repository enforcement for Noru GRC workflows. Use when a user asks to make compliance checks mandatory, configure merge blockers, protect GRC files, ratchet existing findings, or detect weakened GitHub rules.
/repo-enforcement:applyApply the exact fresh GitHub ruleset plan after explicit confirmation, then verify effective enforcement.
/repo-enforcement:planBind an exact, expiring GitHub ruleset plan to current repository, policy, check source, and live rules.
/repo-enforcement:setupInspect a repository and prepare a reviewable local GRC enforcement installation plan. Makes no GitHub administration change.
/repo-enforcement:statusReport current repository enforcement, baseline debt, and GitHub ruleset drift without changing anything.
/repo-enforcement:verifyVerify the offline GRC baseline and effective GitHub merge protections without changing them.
/repo-enforcement:workInspect one exact baseline item and guide its owning piece through a reviewed remediation PR.
Run consolidated branch reviews across independently installed GRC pieces, summarize live Noru work requiring attention with read scopes only, and check shared connection and repository context.
1 skill · 5 commands · 1 MCP server
Scan a repository for the AI systems, model providers and oversight points it actually contains, review the manifest in a PR, and land it in Noru as assets, vendors and evidence.
1 skill · 3 commands · 1 MCP server
Assemble the evidence bundle, sampling and workpapers an auditor asks for — for one framework over one audit window — from Noru's graph plus the local files an integration cannot reach, and land the tested conclusion for each control back in Noru.
1 skill · 3 commands · 1 MCP server
Who wrote each change, who approved it, who merged it and who deployed it, for one window — with every separation that did not hold owned by a named person, and the forge configuration that was supposed to keep them apart.
1 skill · 3 commands · 1 MCP server
Inventory the coding agents, MCP servers and plugins a repository's development process depends on, decide with the user which organization stands behind each one, and land them in Noru as vendors plus one evidence record for the window — never anything per person.
1 skill · 3 commands · 1 MCP server
Work Noru's own evidence queue: see which catalogue expectations are unmet, stage local artifacts against them, and upload with control mappings.
1 skill · 3 commands · 1 MCP server
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Headroom startup hooks for Claude Code and GitHub Copilot CLI.
hooks
Research any topic across Reddit, X, YouTube, TikTok, Instagram, Hacker News, Polymarket, GitHub, and 5+ more sources. AI agent scores by upvotes, likes, and real money - not editors.
1 skill
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
5 skills
CI/CD pipeline configuration, GitHub Actions/GitLab CI workflow setup, and automated deployment pipeline orchestration
4 skills · 1 command · 5 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.