Investigation playbooks for the WhisperGraph MCP connector: indicator triage that reads coverage before it reports a verdict, bulk triage over a SIEM export, Cypher that passes the server's validator, and brand-protection sweeps. Requires the WhisperGraph connector — add it once and sign in, or run /whisper-setup.
Plugin whisper-graph from marketplace whisper-security in whisper-sec/whisper-skills. Commands read from the repo's manifest — 1 month ago.
whisper-brand-protectionWhisperGraph brand-protection and takedown playbook — find registered lookalike domains impersonating a brand, work out which ones are actually dangerous, attribute them to a registrant, and assemble evidence a registrar or hosting provider will act on. Use when the user asks about typosquats, looka
whisper-bulk-triageWhisperGraph bulk indicator triage — score a list of hostnames, IPs, ASNs, CIDRs or prefixes in one pass and return a ranked table an analyst can act on. Use when the user pastes or points at many indicators at once, mentions a list, batch, spreadsheet, CSV, SIEM export, EDR export, firewall log, pr
whisper-cypherWhisperGraph Cypher authoring — write read-only queries that pass the server's safety validator and return in milliseconds instead of timing out on billion-node labels. Use when a question has no ready-made WhisperGraph workflow and needs a custom query, when a query was rejected, rewritten, timed o
whisper-investigateWhisperGraph investigation playbook — triage a domain, IP, ASN, CIDR or prefix against an internet-infrastructure graph covering DNS, BGP and RPKI, WHOIS ownership, GeoIP, email (SPF/DMARC/DKIM), certificate transparency, TLS fingerprints, web links and threat feeds. Use when the user asks whether a
/whisper-graph:whisper-setupConnect the WhisperGraph MCP connector, or diagnose why it is not answering
whisper-bulk-triageTriage a large list of indicators against WhisperGraph in an isolated context and return only the ranked table. Use when the user has more than about twenty hostnames, IPs, ASNs, CIDRs or prefixes — a SIEM or EDR export, a log extract, an alert queue, a blocklist, a spreadsheet column — and wants to
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Long-horizon goal planning, deep research orchestration, and adaptive replanning using GOAP
5 skills · 1 command · 4 agents
Install the "AAS Secure App Builder" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.