dev-workflow
claudeDevelopment pipeline: brainstorming to idea.md, a lead-driven build with checkpoint reports, one end-of-build review, and the commit workflow
43 skills · 35 commands · 17 agents
OWASP Top 10 security verification methodology with detection patterns
Plugin security-verification from marketplace radleta in radleta/claude-plugins. Commands read from the repo's manifest — 19 days ago.
reviewer-contractNormative contract for every reviewer and verifier: kill mandate, quote-plus-consequence findings, the would-ship-bug/real-minor/nit scale, report-everything coverage, dimensions checked, and the agent inventory. Use when writing a reviewer or verifier or composing a verdict — even when nothing was
scratch-memory-verdictsMCP contract for write_review and write_report only: tool schemas, role-to-status tables, and write paths for read-only reviewer/verifier sub-agents. Use when a reviewer or verifier persists an APPROVED/FINDINGS/ISSUES_FOUND verdict — even when the task looks like a single trivial call, load this in
security-verificationOWASP Top 10 security verification methodology with 9 detection categories and attack surface mapping. Use when reviewing code for injection risks, authentication issues, data exposure, or security misconfigurations — even for internal-only endpoints.
/security-verification:verify-securitySecurity verification - detects OWASP vulnerabilities, injection risks, and authentication issues before approval
security-verifierRuns OWASP Top 10 checks on a coder's step (injection, auth, data exposure, misconfig) and writes its verdict via scratch-memory MCP. Use when a coder report needs a security gate — even for low-risk changes.
Development pipeline: brainstorming to idea.md, a lead-driven build with checkpoint reports, one end-of-build review, and the commit workflow
43 skills · 35 commands · 17 agents
Project-scoped scratch-memory: MCP tools (write_report, write_review, write_issue, write_session, write_task) for sub-agent verdicts, session handoffs, and task capture plus scratch-memory CLI (handoff, pickup, register with two opt-in PostToolUse hooks, tasks, epics) for session state persistence and ownership transfer across Claude Code sessions, plus the commit-session verb for per-session file validation and rewrite-pointer/cat-sessions (with --with-tasks) verbs for v3 HANDOFF.md pointer regeneration and resume briefs; plus the capture-issue command and the scratch/issues/ corpus conventions (schema including the optional epic/spike keys, open|resolved lifecycle, triage, resolution) documented in scratch-issues-methodology, with the epics verb group deriving an epic's workable spike frontier and its whole member graph from those files; plus the wrap-up skill and its wrap collect verb, which sort a finished workstream's decisions, lessons, open questions, tasks and stray files into durable destinations before archiving it
12 skills · 10 commands · 6 agents
Wiki-backed persistent memory for Claude Code projects
6 skills · 3 commands · 1 agent
Unified code quality and requirements verification with detection categories
3 skills · 1 command · 1 agent
Comprehensive commit creation with adaptive analysis and conventional commit format
2 skills · 2 commands · 1 agent
Wiki-first codebase investigation plus the capture and ingestion layer that turns what a session learned into durable wiki knowledge
4 skills · 1 agent
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
IoT device lifecycle, telemetry anomaly detection, fleet management, and witness chain verification for Cognitum Seed hardware
5 skills · 1 command · 4 agents
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.