trivy-fix

Work one GitHub issue: a planner (Opus) first reads it and the code and posts an implementation plan or the open owner questions on the issue, or closes the issue when the owner's answer picks a close option, then the worker implements the current plan to an open pull request, or unsupervised through independent review and merge; an orchestrator runs planner and worker for labelled or named issues and continues issues that are already started (current plan, own pushed branch, own open PR) until they are merged; a skill proposes the opt-in label per issue and sets it on confirmation.

4 skills · 2 agents

List everything on GitHub that a task can be derived from, for the current repository or across all repositories of the account and of the organisations it belongs to: security alerts, failing default branches, failed workflow runs, open PRs, dependency PRs and issues, with auto-work candidates among the issues and a one-line summary at session start.

1 skill · hooks

Migrate an Nx monorepo to the latest Nx version, or to a given one, with automatic conflict resolution and PR creation.

1 skill · 1 agent

Delete local git branches whose content already landed on the default branch, with squash-merge detection and a dry-run preview.

1 skill · 1 agent

Independent, read-only review of one pull request before it is merged: verifies the PR first-hand, classifies every finding as blocking, fix-in-PR or follow-up and writes the verdict as a comment file.

1 agent

Set up tehw0lf/workflows reusable CI/CD in a repository: detect the project type, read the live input list from the orchestrator, and generate a validated caller workflow.

1 skill

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.

12 skills

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents