rl-protect-interpret

Four-agent application security pipeline for Spectra Assure. rl-appsec-assessor scans dependencies and writes a remediation plan; rl-appsec-triager verifies findings against NVD, OSV.dev, and GitHub Advisory; rl-appsec-investigator analyses malware exposure; rl-appsec-remediator implements fixes with a re-scan gate and runs tests. Includes the Claude Code report bridge (MCP server) so finding actions in the HTML report reach a live Claude session.

4 agents · 1 MCP server

Single-command supply chain security audit skill. Runs the full rl-appsec pipeline — assessor, triager, investigator, remediator — in sequence with phase gates and full transparency, then optionally opens the interactive report (rl-protect-run-report) for click-to-triage review. Requires rl-appsec-agent.

1 skill

Connects rl-protect to a Spectra Assure Community or Enterprise Portal account. Use when setting up rl-protect, adding or updating a server connection, or providing an API token.

1 skill

Creates and modifies rl-protect scanning profiles. Use when configuring assessment severity levels, adding governance allow/block rules, or managing policy overrides.

1 skill

Installs the rl-protect CLI from PyPI and configures it for first use. Use when setting up rl-protect for the first time or when rl-protect is not found on PATH.

1 skill

Converts an rl-protect JSON report into a structured Markdown document with per-package findings, vulnerability tables, and a prioritized version update plan.

1 skill

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Security Engineer" editorial skill bundle for Claude Code.

12 skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents