Find the CRA gaps that a repository can close, publish a CVD contact, and upload an SBOM to CVD Portal.
Plugin cvd-portal from marketplace porta-regulus in porta-regulus/cvd-portal-claude-plugin. Commands read from the repo's manifest — 19 days ago.
init-cvdWrites SECURITY.md and .well-known/security.txt (RFC 9116) in the current repository. Both files point to the company's CVD Portal disclosure portal. Use when the repository has no vulnerability disclosure policy or security contact, or when the user asks to set up coordinated vulnerability disclosu
list-gapsRead-only. Lists the open EU Cyber Resilience Act conformity gaps for a product in CVD Portal and ranks them by the evidence that the current repository can supply. Use when the user asks which CRA gaps are open, what evidence the repository has, or where to start on Annex I.
sbomUploads an existing SBOM, or a dependency manifest, from the current repository to a product in CVD Portal after the user confirms. Use when the user asks to upload or refresh an SBOM in CVD Portal, or when list-gaps reports a missing SBOM. It does not generate an SBOM and does not run any program.
cvd-portalconnects to: https://cvdportal.com/api/mcp
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.