Single-command supply chain security audit skill. Runs the full rl-appsec pipeline — assessor, triager, investigator, remediator — in sequence with phase gates and full transparency, then optionally opens the interactive report (rl-protect-run-report) for click-to-triage review. Requires rl-appsec-agent.
28 on GitHubby ReversingLabsv1.1.0MITupdated 8 days agosecurity
/
Plugin rl-protect-audit from marketplace rl-protect-skills in reversinglabs/rl-protect-skills. Commands read from the repo's manifest — 6 days ago.
What it installs
Skills (1)
rl-protect-audit
Deep supply chain security audit of an existing project. Runs the full rl-appsec pipeline: assessor → triager → investigator → remediator, with phase gates between each stage. TRIGGER when: the user asks to audit, assess, or review a project directory's installed dependencies for supply chain risk.
Four-agent application security pipeline for Spectra Assure. rl-appsec-assessor scans dependencies and writes a remediation plan; rl-appsec-triager verifies findings against NVD, OSV.dev, and GitHub Advisory; rl-appsec-investigator analyses malware exposure; rl-appsec-remediator implements fixes with a re-scan gate and runs tests. Includes the Claude Code report bridge (MCP server) so finding actions in the HTML report reach a live Claude session.
Connects rl-protect to a Spectra Assure Community or Enterprise Portal account. Use when setting up rl-protect, adding or updating a server connection, or providing an API token.
Creates and modifies rl-protect scanning profiles. Use when configuring assessment severity levels, adding governance allow/block rules, or managing policy overrides.
Installs the rl-protect CLI from PyPI and configures it for first use. Use when setting up rl-protect for the first time or when rl-protect is not found on PATH.
Converts an rl-protect JSON report into a structured Markdown document with per-package findings, vulnerability tables, and a prioritized version update plan.
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain rl-protect-audit?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.