Security tooling for YaleSites projects — currently supply-chain auditing (malicious-package detection via live OSV.dev and GitHub malware advisories), distinct from ordinary CVE scanning.
Plugin yalesites-security from marketplace yalesites-claude-plugins in yalesites-org/yalesites-claude-plugins. Commands read from the repo's manifest — 2 days ago.
supply-chain-auditAudit a project or system for supply chain attacks — packages with malicious code intentionally injected, not just regular CVEs. Use this skill whenever the user asks about supply chain security, whether their dependencies are safe or compromised, if a recent attack affects them, or asks to audit pa
Product team workflows for YaleSites: release prep, ticket creation and grooming, PR feedback, drafting web content for yalesites.yale.edu, keeping tickets in sync with how work actually turns out, UX research context for product decisions, Beacon AI chatbot test question sets and comparison analysis, and read-only migration assessment of a source site against the YaleSites content model.
20 skills
Day-to-day Git, pull-request, GitHub-issue, and Drupal development skills for YaleSites developers — look up/plan issues, conventional commits, cross-repo branch management, PR description and creation, Drupal coding conventions, and running PHPUnit tests in the YaleSites Lando environment.
8 skills
Deep expertise on the YaleSites Drupal platform: Layout Builder, blocks, Views, content types, menus, taxonomy, accessibility, editorial workflow, and training resources. Includes the yalesites-portfolio skill with measured block adoption, config trends, exemplar sites and page patterns from a crawl of the live portfolio (known gaps: Gallery unreviewed, 5 sites without data).
2 skills
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.