Comprehensive security auditing with wave-based parallel execution and expert personas. Based on RAPTOR methodology.
Plugin appsec-audit from marketplace appsec-audit in skellorok/appsec-audit. Commands read from the repo's manifest — 1 month ago.
/appsec-audit:scanRun comprehensive security audit with wave-based parallel execution
appsec-actionerTakes action on validated findings - generates patches, exploits, or crash analysis. Loads personas based on action type. Spawned by /appsec-audit:scan orchestrator.
appsec-analystValidates security findings using expert analysis framework. Loads personas based on mode (triage, general, dataflow, fuzz-plan). Spawned by /appsec-audit:scan orchestrator.
appsec-reporterAggregates analysis and action outputs into final SECURITY-AUDIT.md report. Spawned by /appsec-audit:scan orchestrator.
appsec-scannerRuns a single security tool and outputs structured findings. Spawned by /appsec-audit:scan orchestrator for parallel tool execution.
appsec-synthesizerAggregates scanner outputs into structured findings list with deduplication, prioritization, and severity normalization. Spawned by /appsec-audit:scan orchestrator.
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.
1 skill · 4 agents · hooks
Open-source AI job search that runs locally in your AI coding CLI: scan job portals, evaluate listings into a structured A-H report with a 1-5 score, tailor your CV, track applications
5 skills · hooks
MetaHarness integration — surfaces score/genome/mint/mcp-scan/threat-model via skills; pairs with @metaharness/router (ADR-148/149) for cost-optimal model routing; honors ADR-150 optional-augmentation constraint
13 skills · 1 command · 1 agent · hooks
5 skills + 35 modes + Material Passport pipeline. Includes v3.6.7 cross-model audit gate and v3.6.8 generator-evaluator contract.
5 skills · 16 commands · 4 agents · hooks
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.