Four-agent application security pipeline for Spectra Assure. rl-appsec-assessor scans dependencies and writes a remediation plan; rl-appsec-triager verifies findings against NVD, OSV.dev, and GitHub Advisory; rl-appsec-investigator analyses malware exposure; rl-appsec-remediator implements fixes with a re-scan gate and runs tests. Includes the Claude Code report bridge (MCP server) so finding actions in the HTML report reach a live Claude session.
4 agents · 1 MCP server
Single-command supply chain security audit skill. Runs the full rl-appsec pipeline — assessor, triager, investigator, remediator — in sequence with phase gates and full transparency, then optionally opens the interactive report (rl-protect-run-report) for click-to-triage review. Requires rl-appsec-agent.
1 skill
Connects rl-protect to a Spectra Assure Community or Enterprise Portal account. Use when setting up rl-protect, adding or updating a server connection, or providing an API token.
1 skill
Creates and modifies rl-protect scanning profiles. Use when configuring assessment severity levels, adding governance allow/block rules, or managing policy overrides.
1 skill
Installs the rl-protect CLI from PyPI and configures it for first use. Use when setting up rl-protect for the first time or when rl-protect is not found on PATH.
1 skill
Interprets rl-protect JSON reports to answer questions about vulnerabilities, malware, behavior indicators, policy violations, overrides, governance blocks, and dependency graphs.
1 skill
Converts an rl-protect JSON report into a structured Markdown document with per-package findings, vulnerability tables, and a prioritized version update plan.
1 skill
Opens the interactive HTML security report and connects its action buttons to Claude Code. Regenerates the report, starts the local bridge, launches the report in the browser, and runs a watch loop that processes Triage / Suppress / Accept / Fix clicks automatically. Requires rl-appsec-agent.
1 skill
Scans packages and manifest files for supply chain risk before dependency changes are made. Use when adding packages, updating versions, or editing manifest files.
1 skill