mattpocock-skills
claudeMatt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
Scan dependencies for CVEs, get evidence-backed upgrade targets, and measure locally whether the vulnerable code is actually reachable. Includes the Phoenix MCP server.
Plugin phoenix-blue-intelligence from marketplace phoenix-blue-intelligence in securityphoenix/phoenix-blue-ingelligence-skills. Commands read from the repo's manifest — 1 month ago.
This plugin runs code on your machine — it starts local MCP servers. The exact commands are listed below; read them before installing.
phoenix-cve-intelInterrogate Phoenix Blue vulnerability intelligence over MCP. Use when the user asks about a specific CVE, wants to know if a vulnerability is exploited in the wild or in CISA KEV, asks which threat actors use a CVE, wants to search or rank CVEs by risk, asks for a Phoenix PS-HP score, checks whethe
phoenix-library-upgradeFind which libraries in a project are vulnerable, which CVEs affect the pinned version, whether the library is a direct or transitive dependency, whether the code actually calls the vulnerable function, and which version to upgrade to. Use when the user asks to scan dependencies, check a lockfile, a
phoenixruns: python3 ${CLAUDE_PLUGIN_ROOT}/scripts/phoenix_mcp_bridge.py
Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).
39 skills
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Long-term semantic memory for Claude Code, powered by OpenViking
5 skills · 1 command · 1 MCP server · hooks
Connect Claude to Prowler Cloud through the Prowler MCP server. Reads providers, scans, findings, compliance results and resources for AWS, Azure, GCP, Kubernetes, Microsoft 365, GitHub and the other providers listed at https://registry.prowler.com, and returns remediation guidance for failed checks. Writes are limited to Prowler Cloud itself: triggering scans, finding triage, mute rules and the mutelist, providers and integrations. Your cloud resources are not changed by the connector.
1 skill · 1 MCP server
Triage, budget, constraints, and verifier skills. Pair with npx @cobusgreyling/loop init . --tool claude
14 skills
Point it at a codebase and it figures out what's worth doing — bugs, perf, tech debt, what to build next — then writes plans any agent can execute. It can hand the work to a cheaper model and review the result. It never edits your code.
1 skill
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.