Four-agent application security pipeline for Spectra Assure. rl-appsec-assessor scans dependencies and writes a remediation plan; rl-appsec-triager verifies findings against NVD, OSV.dev, and GitHub Advisory; rl-appsec-investigator analyses malware exposure; rl-appsec-remediator implements fixes with a re-scan gate and runs tests. Includes the Claude Code report bridge (MCP server) so finding actions in the HTML report reach a live Claude session.
Plugin rl-appsec-agent from marketplace rl-protect-skills in reversinglabs/rl-protect-skills. Commands read from the repo's manifest — 6 days ago.
This plugin runs code on your machine — it starts local MCP servers. The exact commands are listed below; read them before installing.
rl-appsec-assessorScans a project's dependencies with rl-protect, interprets all findings, looks up every policy code, checks whether exploitable packages are imported, classifies license risks, and writes a prioritized remediation plan. Invoke as the first step in a supply chain security audit, before rl-appsec-tria
rl-appsec-investigatorInvestigates malware exposure from malicious OSS packages identified by the assessor — extracts behavioral indicators with rl-protect interpret scripts, traces project call sites, and records structured exposure findings in the remediation plan. Invoke after rl-appsec-assessor has completed, before
rl-appsec-remediatorImplements fixes from a triaged remediation plan — upgrades dependencies with a mandatory re-scan gate and behavior diff, and runs available tests. Invoke after rl-appsec-triager has annotated rl-protect.remediation-plan.db.
rl-appsec-triagerReviews a remediation plan produced by rl-appsec-assessor, cross-references priority 0/1 CVE and GHSA findings against NVD/OSV/GitHub advisories, performs function-level reachability analysis, and annotates the plan with triage verdicts and external evidence. Invoke after rl-appsec-assessor has prod
rl-protect-bridgeruns: python ${CLAUDE_PLUGIN_ROOT}/scripts/bridge.py mcp
Single-command supply chain security audit skill. Runs the full rl-appsec pipeline — assessor, triager, investigator, remediator — in sequence with phase gates and full transparency, then optionally opens the interactive report (rl-protect-run-report) for click-to-triage review. Requires rl-appsec-agent.
1 skill
Connects rl-protect to a Spectra Assure Community or Enterprise Portal account. Use when setting up rl-protect, adding or updating a server connection, or providing an API token.
1 skill
Creates and modifies rl-protect scanning profiles. Use when configuring assessment severity levels, adding governance allow/block rules, or managing policy overrides.
1 skill
Installs the rl-protect CLI from PyPI and configures it for first use. Use when setting up rl-protect for the first time or when rl-protect is not found on PATH.
1 skill
Interprets rl-protect JSON reports to answer questions about vulnerabilities, malware, behavior indicators, policy violations, overrides, governance blocks, and dependency graphs.
1 skill
Converts an rl-protect JSON report into a structured Markdown document with per-package findings, vulnerability tables, and a prioritized version update plan.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Secure App Builder" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.