Not in the top 1,000 by GitHub stars
eyesecurity/skills
EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critical asset impact, enforces data residency, verifies suppliers, tracks incidents with automated deadlines.
History
Review weekly changes to SKILL.md before updating. Dates mark the weeks in which we observed each version; checks apply to the recorded commits.
View weekly changes
plugins/complisec/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/audit-logging/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/change-management/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/compliance-hub/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/complisec/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/data-sensitivity/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/eu-compliance-directives/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/incident-management/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/nis2-gap-analysis/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/org-profile/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/risk-assessment-writer/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/security-compliance-tools/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/complisec/skills/vendor-risk/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/supplychain/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/supplychain/skills/ci-audit/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/supplychain/skills/npm-harden/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/supplychain/skills/pypi-harden/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
plugins/vulnerability-research/SKILL.md
Week of Nov 2, 2026 · +0 / −0 lines
Before Network or broad shell → After Network or broad shell
f5790eb83ab8 → f5790eb83ab8
Diff text is unavailable under the recorded licenses. Line counts and the GitHub link remain available.
Week of Oct 26, 2026 · Line counts unavailable
Before Not checked yet → After Network or broad shell
First observation → f5790eb83ab8
No earlier version was observed for comparison.
Verified commit f5790eb83ab8f632ad86f456a485e0b2029a7a5d
git clone --filter=blob:none --no-checkout https://github.com/eyesecurity/skills.git .hotskills/eyesecurity-skills && git -C .hotskills/eyesecurity-skills checkout --detach f5790eb83ab8f632ad86f456a485e0b2029a7a5d
# Copy each selected skill directory from .hotskills/eyesecurity-skills into .claude/skills/<skill-name>/git clone --filter=blob:none --no-checkout https://github.com/eyesecurity/skills.git .hotskills/eyesecurity-skills && git -C .hotskills/eyesecurity-skills checkout --detach f5790eb83ab8f632ad86f456a485e0b2029a7a5d
# Copy each selected skill directory from .hotskills/eyesecurity-skills into .agents/skills/<skill-name>/Heat
1.5- Star growth, last 7 daysNot available
- Star growth, last 24 hoursNot available
- Rank movement, last 7 daysNot available
- Commits, last 30 daysNot available
- Accounts asking about it through MCP, last 7 daysNot available
- Hot votes this weekNot available
Heat never changes the order by stars, and sponsorship never touches it. How heat works
Stars over time
30-day change not yet available: not enough history.
Individual skills in this repository
- complisec
plugins/complisec - audit-logging
plugins/complisec/skills/audit-logging - change-management
plugins/complisec/skills/change-management - compliance-hub
plugins/complisec/skills/compliance-hub - complisec
plugins/complisec/skills/complisec - data-sensitivity
plugins/complisec/skills/data-sensitivity - eu-compliance-directives
plugins/complisec/skills/eu-compliance-directives - incident-management
plugins/complisec/skills/incident-management - nis2-gap-analysis
plugins/complisec/skills/nis2-gap-analysis - org-profile
plugins/complisec/skills/org-profile - risk-assessment-writer
plugins/complisec/skills/risk-assessment-writer - security-compliance-tools
plugins/complisec/skills/security-compliance-tools - vendor-risk
plugins/complisec/skills/vendor-risk - supplychain
plugins/supplychain - ci-audit
plugins/supplychain/skills/ci-audit - npm-harden
plugins/supplychain/skills/npm-harden - pypi-harden
plugins/supplychain/skills/pypi-harden - kitten-process
plugins/vulnerability-research
How it works
complisec
When your agent uses it
EU compliance enforcement for AI agents — NIS2, GDPR, ISO 27001. ACTIVATE on EVERY prompt. Reads .compliance/profile.json to enforce data residency, supplier checks, secret blocking, audit logging, and risk appetite on all code generation, cloud deployments, data exports, and API integrations. Invoke /complisec setup to create the org profile.
What it loads into context
Frontmatter
96 tokensAlways available to the agent
SKILL.md
1,606 tokensWhen the skill is activated
Reference documents
26,101 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Important: Installation vs Usage
- Boot sequence
- Enforcement rules
- Sub-skills
Scripts executed separately
hooks/audit-lib.shhooks/audit-session-start.shhooks/audit-tool-call.sh
Files
../../.claude-plugin/marketplace.jsonasset699 bytes.claude-plugin/plugin.jsonasset137 bytes.compliance/profile.example.jsonasset820 bytesREADME.mddoc7,806 bytesSKILL.mdcore7,138 bytesSKILL.mdcore7,138 bytesUSE-CASES.mddoc10,943 byteshooks/audit-lib.shruns3,197 byteshooks/audit-session-start.shruns4,161 byteshooks/audit-tool-call.shruns6,554 byteshooks/hooks.jsonasset1,191 bytes../supplychain/.claude-plugin/plugin.jsonasset208 bytes../supplychain/skills/ci-audit/SKILL.mddoc33,398 bytes../supplychain/skills/npm-harden/SKILL.mddoc22,952 bytes../supplychain/skills/pypi-harden/SKILL.mddoc20,547 bytes../vulnerability-research/.claude-plugin/plugin.jsonasset148 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubaudit-logging
When your agent uses it
ACTIVATE on ANY request that involves writing, generating, reviewing, modifying, or outputting source code in any programming language — Python, JavaScript, TypeScript, Go, Java, Rust, C#, SQL, Terraform, or any other. This includes functions, endpoints, scripts, migrations, infrastructure-as-code, config files with logic, and code snippets in responses. Every piece of code the LLM produces must include structured audit logging for security-relevant operations. Also activate when the user asks about audit logs, compliance logging, or traceability. Ensures NIS2 and ISO 27001 compliant logging (structured, no string interpolation, no secrets in logs).
What it loads into context
Frontmatter
156 tokensAlways available to the agent
SKILL.md
2,486 tokensWhen the skill is activated
Reference documents
725 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Standards alignment
- Audit event format
- Agent Decision Record (ADR)
- Storage
- Retention guidance
- Logging in AI-generated code
- Automated enforcement (hooks)
- Agent instructions
Files
SKILL.mdcore10,321 bytesSKILL.mdcore10,321 bytesSKILL.mdcore10,321 bytesaudit-event.schema.jsonasset2,453 bytesreferences/logging-guide.mddoc2,762 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubchange-management
When your agent uses it
ACTIVATE when making changes that affect critical assets: deployments, database migrations, schema changes, Terraform/IaC modifications, access control or IAM changes, firewall rules, TLS certificates, environment variables on production, or dependency upgrades. Ensures every change is documented, impact-assessed, approved, and reversible per NIS2 Art. 21(2)(e) and ISO 27001 A.8.32.
What it loads into context
Frontmatter
99 tokensAlways available to the agent
SKILL.md
1,452 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Change record format
- Storage
- Change record format
- Impact classification
- Change lifecycle
- What counts as a change to a critical asset
- External ticketing integration
- Agent instructions
Files
SKILL.mdcore6,338 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcompliance-hub
When your agent uses it
ACTIVATE when the user asks about centralising compliance records, log collection, audit trail persistence, log retention, SIEM integration, or agent observability. Central collection point for all complisec output: audit logs, incident records, change records, and vendor assessments. Configures immutable cloud storage and optionally connects observability platforms.
What it loads into context
Frontmatter
81 tokensAlways available to the agent
SKILL.md
2,762 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- What gets collected
- The problem
- Storage options — cheapest first
- Option 2: Agent observability platforms (richer, more expensive)
- Agent instructions
Files
SKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytesSKILL.mdcore10,954 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubcomplisec
When your agent uses it
EU compliance enforcement for AI agents — NIS2, GDPR, ISO 27001. ACTIVATE on EVERY prompt. Reads .compliance/profile.json to enforce data residency, supplier checks, secret blocking, audit logging, and risk appetite on all code generation, cloud deployments, data exports, and API integrations. Invoke /complisec setup to create the org profile.
What it loads into context
Frontmatter
96 tokensAlways available to the agent
SKILL.md
1,606 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Important: Installation vs Usage
- Boot sequence
- Enforcement rules
- Sub-skills
Files
SKILL.mdcore7,138 bytesSKILL.mdcore7,138 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubdata-sensitivity
When your agent uses it
ACTIVATE when the user's message contains secrets, credentials, API keys, passwords, tokens, private keys, AWS access keys, connection strings, database URLs, national IDs (BSN/SSN), or any sensitive data — even if the user did not ask about security. Also activate when asked to classify data, scan for PII, or review code for credential exposure. This skill BLOCKS secrets in prompts and enforces EU data protection rules (GDPR, NIS2, ISO 27001).
What it loads into context
Frontmatter
120 tokensAlways available to the agent
SKILL.md
2,088 tokensWhen the skill is activated
Reference documents
1,685 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- ABSOLUTE RULE — Never output detected secrets
- Classification & patterns
- 4. Blocking rules
- 5. Prompt secret detection
- 6. Secure coding reminder
- Agent instructions
Files
SKILL.mdcore8,820 bytesSKILL.mdcore8,820 bytesreferences/pattern-index.mddoc5,575 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubeu-compliance-directives
When your agent uses it
Curated index of official EU and national (member state) compliance sources, including directives, transposition laws, and regulatory guidance. ACTIVATE when answering questions about EU regulations or national implementations (NIS2, GDPR, DORA, AI Act, Cyberbeveiligingswet, etc.) — especially differences between EU directives and local laws, applicability, enforcement, timelines, or legal obligations. Also activate for conceptual or comparative questions ("what changed", "how does NL differ from the EU directive"). Always verify current legal status and ground answers in authoritative sources instead of relying on general knowledge.
What it loads into context
Frontmatter
142 tokensAlways available to the agent
SKILL.md
2,146 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Key concept: directives vs regulations
- Source index
- Agent lookup workflow
- Agent instructions
Files
SKILL.mdcore8,402 bytesSKILL.mdcore8,402 bytesSKILL.mdcore8,402 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubincident-management
When your agent uses it
ACTIVATE when a security incident, data breach, outage, or suspicious event is reported, discussed, or detected. Guides structured incident documentation through the full lifecycle: detection → triage → response → notification → recovery → lessons learned. Ensures NIS2 24/72h/30d notification deadlines and GDPR 72h breach reporting are met. Also activate when the user asks about incident response procedures, or breach notification obligations.
What it loads into context
Frontmatter
105 tokensAlways available to the agent
SKILL.md
2,540 tokensWhen the skill is activated
Reference documents
959 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Incident record format
- Incident lifecycle
- Significant incident criteria (NIS2 Art. 23(3))
- Agent instructions
Files
SKILL.mdcore10,011 bytesreferences/eu-reporting-directory.mddoc3,811 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnis2-gap-analysis
When your agent uses it
ACTIVATE when the user asks about NIS2, Cyberbeveiligingswet (Cbw), NIS2 applicability, NIS2 gap analysis, or NIS2 compliance assessment. Interview-driven gap analysis with 5-level maturity scoring field-tested by security consultants.
What it loads into context
Frontmatter
68 tokensAlways available to the agent
SKILL.md
4,359 tokensWhen the skill is activated
Reference documents
16,098 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- 1. Applicability pre-screen
- 2. Maturity model
- 3. Interview method
- 4. Controls — compact reference
- 5. Gap report
- 6. Quick references
- Agent instructions
Scripts executed separately
nis2_check.py
Files
SKILL.mdcore16,076 bytesSKILL.mdcore16,076 bytesSKILL.mdcore16,076 bytesciso-matrix-raw.mddoc23,703 bytesnis2_check.pyruns11,468 bytesreferences/questionnaire-details.mddoc51,760 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHuborg-profile
When your agent uses it
ACTIVATE when the user wants to create or update their organisation's compliance profile, or invokes /org-profile setup. Runs a questionnaire to capture identity, critical assets, data residency, risk appetite, suppliers, and legal obligations — outputs a compact profile for enforcement.
What it loads into context
Frontmatter
67 tokensAlways available to the agent
SKILL.md
1,433 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Questionnaire
- Output format
- Deploy the profile
- Agent instructions
Files
SKILL.mdcore5,716 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubrisk-assessment-writer
When your agent uses it
ACTIVATE when the user asks to write, create, draft, or generate a risk assessment, risk entry, risk evaluation, or threat/vulnerability description — or when the user describes a threat, vulnerability, weakness, new business activity, or scenario they want risk-assessed. Covers information security, compliance, operational, vendor, HR, physical, and quality risks within the ISO 27001 framework. Produces a structured risk entry with Risk Evaluation + Risk Treatment tables, L/M/H scoring, and guided likelihood/impact questions.
What it loads into context
Frontmatter
128 tokensAlways available to the agent
SKILL.md
2,771 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Storage
- Risk assessment record
- Risk matrix (L/M/H)
- GRC-Tool numeric scoring (1-3, use only when user requests it)
- Risk appetite
- Risk lifecycle
- Threat description patterns
- Measure library
- Agent instructions
Files
SKILL.mdcore12,166 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsecurity-compliance-tools
When your agent uses it
ACTIVATE when the user asks about compliance tooling, risk assessment methods, critical assets (crown jewels), or how to assess their organisation's security posture for EU regulations (NIS2, GDPR, ISO 27001). Curated index of tools and methodologies that support EU compliance — not generic AppSec tooling.
What it loads into context
Frontmatter
80 tokensAlways available to the agent
SKILL.md
1,989 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- NCSC Critical Asset Identification — "te beschermen belangen" (TBB) methodology
- Complisec skills
- EU compliance assessment tooling
- CISO workflow: from profile to risk prioritisation
- Agent instructions
Files
SKILL.mdcore9,019 bytesSKILL.mdcore9,019 bytesSKILL.mdcore9,019 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubvendor-risk
When your agent uses it
ACTIVATE when integrating a new service, API, SaaS tool, SDK, npm/pip/maven package, Docker image, or any third-party dependency — or when discussing suppliers, vendors, processor agreements, or supply chain security. Also activate on imports from unknown packages or adding external webhooks/endpoints. Ensures every new vendor or dependency is assessed against the org's critical assets, data residency, and NIS2 Art. 21(2)(d) supply chain requirements.
What it loads into context
Frontmatter
114 tokensAlways available to the agent
SKILL.md
1,262 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Storage
- Vendor assessment record
- Vendor lifecycle
- Triggers for the agent
- Agent instructions
Files
SKILL.mdcore5,248 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubsupplychain
When your agent uses it
Supply-chain security for JavaScript and Python projects — npm, pnpm, Yarn v2+, uv, pip, Poetry, pdm, and GitHub Actions CI. Router skill: detects which ecosystems a project uses and dispatches to the matching sub-skill under skills/. Read this first, then read only the sub-skill(s) the project actually needs.
What it loads into context
Frontmatter
94 tokensAlways available to the agent
SKILL.md
1,064 tokensWhen the skill is activated
Reference documents
1,353 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Important: installation vs usage
- What this file is
- Step 1 — detect ecosystems
- Step 2 — route
- Output grammar
- Not implemented
Files
.claude-plugin/plugin.jsonasset208 bytesREADME.mddoc5,035 bytesSKILL.mdcore4,211 bytesSKILL.mdcore4,211 bytesSKILL.mdcore4,211 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubci-audit
When your agent uses it
Audits npm and PyPI supply-chain hardening in GitHub Actions workflows. Primary focus on how the project's package manager is invoked in CI — install commands, registry integrity, manager version pinning, publish flow (OIDC + provenance / attestations), and uncontrolled install surface (npx, pipx, global installs, curl|sh). Secondary focus on generic GitHub Actions hardening (external action SHA pinning, token permissions, pull_request_target). Trigger with /supplychain:ci-audit or /supplychain:ci-audit <path>.
What it loads into context
Frontmatter
122 tokensAlways available to the agent
SKILL.md
9,476 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Trigger
- Step 1 — collect signals
- Step 2 — derive classification
- Step 3 — checks
- Step 4 — output format
Files
SKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytesSKILL.mdcore33,398 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubnpm-harden
When your agent uses it
Hardens npm, pnpm, and Yarn v2+ projects against supply chain attacks. Audits package manager configuration, version pinning, and lockfile hygiene to protect the npm supply chain. Trigger with /supplychain:npm-harden or /supplychain:npm-harden <path>.
What it loads into context
Frontmatter
69 tokensAlways available to the agent
SKILL.md
6,619 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Trigger
- Step 1 — detect manager
- Step 1.5 — derive version flags
- Step 2 — version rules
- Step 3 — checks
- Step 4 — output format
Files
SKILL.mdcore22,952 bytesSKILL.mdcore22,952 bytesSKILL.mdcore22,952 bytesSKILL.mdcore22,952 bytesSKILL.mdcore22,952 bytesSKILL.mdcore22,952 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubpypi-harden
When your agent uses it
Hardens Python projects against PyPI supply chain attacks. Audits installer configuration (uv, pip, Poetry, pdm), version pinning, lockfile + hash hygiene, release-age gate, sdist execution policy, and index integrity. Trigger with /supplychain:pypi-harden or /supplychain:pypi-harden <path>.
What it loads into context
Frontmatter
82 tokensAlways available to the agent
SKILL.md
5,926 tokensWhen the skill is activated
Reference documents
0 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Trigger
- Background — why Python differs from npm
- Step 1 — detect manager
- Step 1.5 — derive flags
- Step 2 — version rules
- Step 3 — checks
- Step 4 — output format
Files
SKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytesSKILL.mdcore20,547 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubkitten-process
When your agent uses it
ACTIVATE when the user asks to run the kitten process, or to analyse, assess, reverse engineer, or security-test a piece of software for vulnerabilities — an installer, binary, container image, appliance, firmware, or application. Drives a repeatable 12-step vulnerability research workflow from obtaining the target through mapping attack surface, reverse engineering, finding high-impact vulnerabilities, building a proof-of-concept, and writing a vendor advisory. Every step is documented to a KITTEN_<n>.md file so the assessment is auditable. For authorized security research and responsible disclosure only.
What it loads into context
Frontmatter
134 tokensAlways available to the agent
SKILL.md
1,194 tokensWhen the skill is activated
Reference documents
2,246 tokensLoaded on request
Token counts are estimates. Scripts run separately; they are not counted as reference context.
The playbook
- Scope of use
- How to run it
- Documentation convention
- The steps
Files
.claude-plugin/plugin.jsonasset148 bytesREADME.mddoc5,351 bytesSKILL.mdcore5,872 bytesSKILL.mdcore5,872 bytesUSE-CASES.mddoc4,608 bytes
No excerpt is shown for this license. Read the source on GitHub.
View the complete source on GitHubSkills included
- complisec
- audit-logging
- change-management
- compliance-hub
- complisec
- data-sensitivity
- eu-compliance-directives
- incident-management
- nis2-gap-analysis
- org-profile
- risk-assessment-writer
- security-compliance-tools
- vendor-risk
- supplychain
- ci-audit
- npm-harden
- pypi-harden
- kitten-process
Repository facts
- License
- GPL-3.0
- Created
- Mar 23, 2026
- Last pushed
- Oct 16, 2026
- Forks
- 1
- Open issues
- 1
- Project activity
- Active
Before you install
Network or broad shellAutomated signals, not a guarantee
Checked Nov 5, 2026
Not fully analyzed: some files were too long, unreadable or missing. This never lowers the level.
Show 47 notes
plugins/complisec/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/audit-logging/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/audit-logging/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/compliance-hub/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/complisec/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/data-sensitivity/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/eu-compliance-directives/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/eu-compliance-directives/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzedplugins/complisec/skills/nis2-gap-analysis/SKILL.md:1Analysis incomplete: Referenced executable target unavailable; not analyzed
- No broad tool permissions
- 7 dangerous shell commandsin 2 files: plugins/supplychain/skills/ci-audit/SKILL.md:3 supplychain/README.md:31
- 106 network referencesin 16 files: eu-compliance-directives/SKILL.md:34 plugins/supplychain/skills/pypi-harden/SKILL.md:214 security-compliance-tools/SKILL.md:21 and 13 more
- No hidden or obfuscated text
- No instruction overrides
- 4 executable scriptsin 4 files: complisec/hooks/audit-lib.sh:1 complisec/hooks/audit-session-start.sh:1 complisec/hooks/audit-tool-call.sh:1 and 1 more
- 18 references to secretsin 4 files: plugins/supplychain/skills/ci-audit/SKILL.md:78 data-sensitivity/SKILL.md:24 compliance-hub/SKILL.md:109 and 1 more
- No requests to vote in Hot
Show all 135 signals by file
plugins/complisec/README.md
- Network accessline 1
<p align="center"> <img src="https://img.shields.io/badge/NIS2-ready-green?style=flat-square" alt="NIS2" /> - Network accessline 2
<img src="https://img.shields.io/badge/NIS2-ready-green?style=flat-square" alt="NIS2" /> - Network accessline 3
<img src="https://img.shields.io/badge/GDPR-ready-green?style=flat-square" alt="GDPR" /> - Network accessline 8
<p align="center"> <strong>EU compliance enforcement for AI agents.</strong><br> <a href="https://skills.eye.security/eu-compliance/">skills.eye.security/eu-compliance</a> - Network accessline 9
<strong>EU compliance enforcement for AI agents.</strong><br> <a href="https://skills.eye.security/eu-compliance/">skills.eye.security/eu-compliance</a> </p> - Network accessline 10
<a href="https://skills.eye.security/eu-compliance/">skills.eye.security/eu-compliance</a>
plugins/complisec/hooks/audit-lib.sh
- Executable scriptline 1
#!/usr/bin/env bash
plugins/complisec/hooks/audit-session-start.sh
plugins/complisec/hooks/audit-tool-call.sh
plugins/complisec/skills/audit-logging/audit-event.schema.json
plugins/complisec/skills/change-management/SKILL.md
- Network accessline 114
| Platform | How to integrate | Official skill | |---|---|---| | **Jira** | Use Jira MCP or REST API to create issues in the compliance project. Map: `change_id` → Jira key, `impact` → priority, `status` → workflow state, `affected_assets` - Network accessline 115
|---|---|---| | **Jira** | Use Jira MCP or REST API to create issues in the compliance project. Map: `change_id` → Jira key, `impact` → priority, `status` → workflow state, `affected_assets` → labels. | [Jira MCP](https://github.com/modelco - Network accessline 116
| **Jira** | Use Jira MCP or REST API to create issues in the compliance project. Map: `change_id` → Jira key, `impact` → priority, `status` → workflow state, `affected_assets` → labels. | [Jira MCP](https://github.com/modelcontextprotocol/ - Network accessline 117
| **Linear** | Use Linear MCP to create issues. Map: `impact` → priority (Urgent/High/Medium/Low), `change_type` → label. | [Linear MCP](https://github.com/modelcontextprotocol/servers/tree/main/src/linear) |
plugins/complisec/skills/compliance-hub/SKILL.md
- Access to secretsline 109
[Credential-related source omitted] - Network accessline 210
[Credential-related source omitted] - Access to secretsline 210
[Credential-related source omitted] - Access to secretsline 211
[Credential-related source omitted] - Network accessline 212
export LANGFUSE_BASE_URL=https://cloud.langfuse.com - Network accessline 254
# Docker Compose — runs Langfuse on your own infra git clone https://github.com/langfuse/langfuse.git - Network accessline 255
git clone https://github.com/langfuse/langfuse.git - Network accessline 256
cd langfuse docker compose up -d # → available at http://localhost:3000 - Network accessline 258
# → available at http://localhost:3000 - Access to secretsline 269
[Credential-related source omitted]
plugins/complisec/skills/data-sensitivity/SKILL.md
- Access to secretsline 24
[Credential-related source omitted] - Access to secretsline 95
[Credential-related source omitted] - Network accessline 97
For comprehensive secure coding review patterns, see [baz-scm/awesome-reviewers secure-coding](https://lobehub.com/skills/baz-scm-awesome-reviewers-secure-coding/skill.md) and their [keep-secrets-out reviewer](https://github.com/baz-scm/awe - Access to secretsline 111
[Credential-related source omitted] - Access to secretsline 133
[Credential-related source omitted] - Access to secretsline 134
[Credential-related source omitted]
plugins/complisec/skills/data-sensitivity/references/pattern-index.md
plugins/complisec/skills/eu-compliance-directives/SKILL.md
- Network accessline 34
- **URL**: https://ecs-org.eu/activities/nis2-transposition-tracker/ - Network accessline 42
- **URL**: https://digital-strategy.ec.europa.eu/en/policies/nis-transposition - Network accessline 50
- **URL**: https://eur-lex.europa.eu - Network accessline 52
- **Reliability**: HIGH (authoritative) - **Key URLs**: - NIS2: https://eur-lex.europa.eu/eli/dir/2022/2555 - Network accessline 53
- **Key URLs**: - NIS2: https://eur-lex.europa.eu/eli/dir/2022/2555 - GDPR: https://eur-lex.europa.eu/eli/reg/2016/679 - Network accessline 54
- NIS2: https://eur-lex.europa.eu/eli/dir/2022/2555 - Network accessline 55
- GDPR: https://eur-lex.europa.eu/eli/reg/2016/679 - Network accessline 56
- DORA: https://eur-lex.europa.eu/eli/reg/2022/2554 - Network accessline 57
- AI Act: https://eur-lex.europa.eu/eli/reg/2024/1689 - Network accessline 62
- **URL**: https://www.enisa.europa.eu/publications - Network accessline 70
- **URL**: https://www.enisa.europa.eu/publications/nis2-technical-implementation-guidance - Network accessline 71
- **PDF**: https://www.enisa.europa.eu/sites/default/files/2025-06/ENISA_Technical_implementation_guidance_on_cybersecurity_risk_management_measures_version_1.0.pdf - Network accessline 78
- **URL**: https://digital-strategy.ec.europa.eu/en/library/toolbox-improve-ict-supply-chain-security - Network accessline 85
- **URL**: https://edpb.europa.eu/our-work-tools/general-guidance/guidelines-recommendations-best-practices_en - Network accessline 87
- **Reliability**: HIGH - **Use for**: GDPR interpretation, cross-border enforcement, binding decisions - **Supervisory authorities**: https://edpb.europa.eu/about-edpb/about-edpb/members_en - Network accessline 89
- **Supervisory authorities**: https://edpb.europa.eu/about-edpb/about-edpb/members_en - Network accessline 93
- **URL**: https://digital-strategy.ec.europa.eu/en/policies/ai-office - Network accessline 132
- **URL**: https://www.twobirds.com/en/insights/2023/global/nis2-tracker - Network accessline 138
- **Install**: `npx @ansvar/eu-regulations-mcp` or add as MCP server - **Source**: https://github.com/Ansvar-Systems/EU_compliance_MCP - Network accessline 139
- **Source**: https://github.com/Ansvar-Systems/EU_compliance_MCP
plugins/complisec/skills/incident-management/references/eu-reporting-directory.md
- Network accessline 39
Source: [ENISA National Cybersecurity Organisations](https://www.enisa.europa.eu/topics/national-cyber-security-strategies/ncss-map/national-cyber-security-strategies-interactive-map/national-cybersecurity-organisations). - Network accessline 75
Source: [EDPB Members](https://edpb.europa.eu/about-edpb/about-edpb/members_en).
plugins/complisec/skills/nis2-gap-analysis/nis2_check.py
- Executable scriptline 1
#!/usr/bin/env python3
plugins/complisec/skills/security-compliance-tools/SKILL.md
- Network accessline 21
Source: [NCSC — Hoe breng ik mijn te beschermen belangen in kaart?](https://www.ncsc.nl/risicomanagement/hoe-breng-ik-mijn-te-beschermen-belangen-kaart) - Network accessline 62
| Resource | What it provides | |----------|-----------------| | **[EU_compliance_MCP](https://github.com/Ansvar-Systems/EU_compliance_MCP)** | Full-text search across 49 EU regulations (2,500+ articles), cross-regulation comparison, ISO 27 - Network accessline 64
| **[EU_compliance_MCP](https://github.com/Ansvar-Systems/EU_compliance_MCP)** | Full-text search across 49 EU regulations (2,500+ articles), cross-regulation comparison, ISO 27001/NIST CSF control mappings, evidence requirements per articl - Network accessline 74
| Resource | What it provides | Link | |----------|-----------------|------| | **NCSC Zelfevaluatie NIS2** | Dutch NIS2 self-assessment questions aligned with Cbw | [ncsc.nl](https://www.ncsc.nl) | - Network accessline 75
|----------|-----------------|------| | **NCSC Zelfevaluatie NIS2** | Dutch NIS2 self-assessment questions aligned with Cbw | [ncsc.nl](https://www.ncsc.nl) | | **CCB CyFun** | Belgian Cybersecurity Framework — 5 maturity levels, maps to NI - Network accessline 76
| **NCSC Zelfevaluatie NIS2** | Dutch NIS2 self-assessment questions aligned with Cbw | [ncsc.nl](https://www.ncsc.nl) | - Network accessline 77
| **CCB CyFun** | Belgian Cybersecurity Framework — 5 maturity levels, maps to NIS2 | [ccb.belgium.be](https://ccb.belgium.be/nl/cyfun) | - Network accessline 78
| **BSI IT-Grundschutz** | German baseline protection — detailed control catalogue | [bsi.bund.de](https://www.bsi.bund.de/EN/Themen/Unternehmen-und-Organisationen/Standards-und-Zertifizierung/IT-Grundschutz/) | - Network accessline 79
| **ENISA Risk Management Toolbox** | EU-wide risk assessment methodology for NIS2 entities | [enisa.europa.eu](https://www.enisa.europa.eu) | - Network accessline 91
| Skill | Source | What it adds | |-------|--------|-------------| | **baz-scm/secure-coding** | [LobeHub](https://lobehub.com/skills/baz-scm-awesome-reviewers-secure-coding/skill.md) / [GitHub](https://github.com/baz-scm/awesome-reviewers/ - Network accessline 92
|-------|--------|-------------| | **baz-scm/secure-coding** | [LobeHub](https://lobehub.com/skills/baz-scm-awesome-reviewers-secure-coding/skill.md) / [GitHub](https://github.com/baz-scm/awesome-reviewers/tree/main/_skills/secure-coding) | - Network accessline 93
| **baz-scm/secure-coding** | [LobeHub](https://lobehub.com/skills/baz-scm-awesome-reviewers-secure-coding/skill.md) / [GitHub](https://github.com/baz-scm/awesome-reviewers/tree/main/_skills/secure-coding) | OWASP-aligned code review patter - Network accessline 94
| **baz-scm/keep-secrets-out** | [GitHub](https://github.com/baz-scm/awesome-reviewers/blob/main/_reviewers/skills-keep-secrets-out.md) | Pre-commit secret detection, rotation procedures | - Network accessline 95
| **DefenseClaw** | [GitHub](https://github.com/cisco-ai-defense/defenseclaw) | AI agent runtime security — admission control for skills/MCP servers, CodeGuard static analysis (secrets, injection, unsafe exec), LLM prompt/response guardrail
plugins/supplychain/README.md
- Network accessline 1
<p align="center"> <img src="https://img.shields.io/badge/npm-hardened-green?style=flat-square" alt="npm" /> - Network accessline 2
<img src="https://img.shields.io/badge/npm-hardened-green?style=flat-square" alt="npm" /> - Network accessline 3
<img src="https://img.shields.io/badge/pnpm-hardened-green?style=flat-square" alt="pnpm" /> - Network accessline 4
<img src="https://img.shields.io/badge/Yarn%20v2%2B-hardened-green?style=flat-square" alt="Yarn v2+" /> - Network accessline 5
<img src="https://img.shields.io/badge/PyPI-hardened-blue?style=flat-square" alt="PyPI" /> - Network accessline 6
<img src="https://img.shields.io/badge/uv-hardened-blue?style=flat-square" alt="uv" /> - Network accessline 7
<img src="https://img.shields.io/badge/Poetry-hardened-blue?style=flat-square" alt="Poetry" /> - Dangerous shell operationline 31
| `/supplychain:ci-audit` | Audits how npm and Python package managers are invoked in `.github/workflows/**` — install flags, registry override, manager version drift, OIDC publish + provenance / PEP 740 attestations, `npx` / `pipx` / `curl - Dangerous shell operationline 44
| **ci-audit** | `/supplychain:ci-audit [path]` | npm and PyPI supply chain **in GitHub Actions** — install flags, registry integrity, manager version consistency, OIDC + provenance / PEP 740 attestations, uncontrolled surface (`npx` / `pip - Dangerous shell operationline 45
| *postinstall-scan* | `/postinstall-scan` | `package.json.scripts` + transitive lifecycle hooks; Python `__init__.py` import-time exec patterns (curl\|sh, eval, base64) | planned |
plugins/supplychain/skills/ci-audit/SKILL.md
- Dangerous shell operationline 3
description: Audits npm and PyPI supply-chain hardening in GitHub Actions workflows. Primary focus on how the project's package manager is invoked in CI — install commands, registry integrity, manager version pinning, publish flow (OIDC + p - Dangerous shell operationline 3
description: Audits npm and PyPI supply-chain hardening in GitHub Actions workflows. Primary focus on how the project's package manager is invoked in CI — install commands, registry integrity, manager version pinning, publish flow (OIDC + p - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 78
[Credential-related source omitted] - Access to secretsline 197
[Credential-related source omitted] - Access to secretsline 197
[Credential-related source omitted] - Network accessline 262
- `PIPX_RUN` non-empty → ⚠<U+FE0F> WARN "`pipx run` / `uvx` resolves the tool fresh from PyPI every run — no lockfile, no release-age gate, no pinning. A compromised tool runs with the CI job's environment. Pin via `pipx run --spec '<pkg>==<exact- - Network accessline 262
- `PIPX_RUN` non-empty → ⚠<U+FE0F> WARN "`pipx run` / `uvx` resolves the tool fresh from PyPI every run — no lockfile, no release-age gate, no pinning. A compromised tool runs with the CI job's environment. Pin via `pipx run --spec '<pkg>==<exact- - Dangerous shell operationline 263
- `PY_PIPE_EXEC` non-empty → 🚨 CRITICAL "`curl … | python` / `curl … | sh` in workflow — the remote endpoint can serve different code on every fetch and runs in the CI job's full context. Replace with a pinned download + checksum verificati - Dangerous shell operationline 263
- `PY_PIPE_EXEC` non-empty → 🚨 CRITICAL "`curl … | python` / `curl … | sh` in workflow — the remote endpoint can serve different code on every fetch and runs in the CI job's full context. Replace with a pinned download + checksum verificati - Network accessline 263
- `PY_PIPE_EXEC` non-empty → 🚨 CRITICAL "`curl … | python` / `curl … | sh` in workflow — the remote endpoint can serve different code on every fetch and runs in the CI job's full context. Replace with a pinned download + checksum verificati - Network accessline 263
- `PY_PIPE_EXEC` non-empty → 🚨 CRITICAL "`curl … | python` / `curl … | sh` in workflow — the remote endpoint can serve different code on every fetch and runs in the CI job's full context. Replace with a pinned download + checksum verificati - Access to secretsline 297
[Credential-related source omitted] - Access to secretsline 297
[Credential-related source omitted] - Network accessline 314
🚨 N critical 🔶 N failing ⚠<U+FE0F> N hardening ✅ N passing → [top fix] 📖 Hardening guide: https://docs.github.com/en/actions/reference/security/secure-use - Network accessline 314
🚨 N critical 🔶 N failing ⚠<U+FE0F> N hardening ✅ N passing → [top fix] 📖 Hardening guide: https://docs.github.com/en/actions/reference/security/secure-use - Network accessline 316
📖 Hardening guide: https://docs.github.com/en/actions/reference/security/secure-use - Network accessline 316
📖 Hardening guide: https://docs.github.com/en/actions/reference/security/secure-use
plugins/supplychain/skills/npm-harden/SKILL.md
- Network accessline 221
| `MGR` | URL | |-------|-----| | `pnpm` | `https://pnpm.io/supply-chain-security` | - Network accessline 221
| `MGR` | URL | |-------|-----| | `pnpm` | `https://pnpm.io/supply-chain-security` | - Network accessline 222
|-------|-----| | `pnpm` | `https://pnpm.io/supply-chain-security` | | `npm` | `https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/` | - Network accessline 222
|-------|-----| | `pnpm` | `https://pnpm.io/supply-chain-security` | | `npm` | `https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/` | - Network accessline 223
| `pnpm` | `https://pnpm.io/supply-chain-security` | - Network accessline 223
| `pnpm` | `https://pnpm.io/supply-chain-security` | - Network accessline 224
| `npm` | `https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/` | - Network accessline 224
| `npm` | `https://github.blog/security/supply-chain-security/our-plan-for-a-more-secure-npm-supply-chain/` | - Network accessline 225
| `yarn` (v1 or v2+) | `https://yarnpkg.com/features/security` | - Network accessline 225
| `yarn` (v1 or v2+) | `https://yarnpkg.com/features/security` |
plugins/supplychain/skills/pypi-harden/SKILL.md
- Network accessline 214
🚨 N critical 🔶 N failing ⚠<U+FE0F> N hardening ✅ N passing → [top fix] 📖 Hardening guide: https://pip.pypa.io/en/stable/topics/secure-installs/ - Network accessline 214
🚨 N critical 🔶 N failing ⚠<U+FE0F> N hardening ✅ N passing → [top fix] 📖 Hardening guide: https://pip.pypa.io/en/stable/topics/secure-installs/ - Network accessline 216
📖 Hardening guide: https://pip.pypa.io/en/stable/topics/secure-installs/ - Network accessline 216
📖 Hardening guide: https://pip.pypa.io/en/stable/topics/secure-installs/ - Network accessline 227
| `PRIMARY_MGR` | URL | |---------------|-----| | `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | - Network accessline 227
| `PRIMARY_MGR` | URL | |---------------|-----| | `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | - Network accessline 228
|---------------|-----| | `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | | `poetry` | `https://python-poetry.org/docs/dependency-specification/` | - Network accessline 228
|---------------|-----| | `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | | `poetry` | `https://python-poetry.org/docs/dependency-specification/` | - Network accessline 229
| `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | - Network accessline 229
| `uv` | `https://docs.astral.sh/uv/concepts/resolution/` | - Network accessline 230
| `poetry` | `https://python-poetry.org/docs/dependency-specification/` | - Network accessline 230
| `poetry` | `https://python-poetry.org/docs/dependency-specification/` | - Network accessline 231
| `pip` / `pip-tools` | `https://pip.pypa.io/en/stable/topics/secure-installs/` | - Network accessline 231
| `pip` / `pip-tools` | `https://pip.pypa.io/en/stable/topics/secure-installs/` | - Network accessline 232
| `pdm` | `https://pdm-project.org/latest/usage/lockfile/` | - Network accessline 232
| `pdm` | `https://pdm-project.org/latest/usage/lockfile/` |
plugins/vulnerability-research/README.md
- Network accessline 1
<p align="center"> <img src="https://img.shields.io/badge/authorized%20testing-only-red?style=flat-square" alt="Authorized testing only" /> - Network accessline 2
<img src="https://img.shields.io/badge/authorized%20testing-only-red?style=flat-square" alt="Authorized testing only" /> - Network accessline 3
<img src="https://img.shields.io/badge/responsible-disclosure-blue?style=flat-square" alt="Responsible disclosure" /> - Network accessline 30
|---------|-------------------------| | "Run the kitten process on this appliance installer" | Obtains and extracts the build, records version/build-date/hash, maps the stack | | "What's the attack surface here?" | Maps network-reachable, p - Network accessline 31
| "Run the kitten process on this appliance installer" | Obtains and extracts the build, records version/build-date/hash, maps the stack | | "What's the attack surface here?" | Maps network-reachable, pre-auth components; confirms with nmap - Network accessline 32
| "What's the attack surface here?" | Maps network-reachable, pre-auth components; confirms with nmap/curl if a host is in scope |
plugins/vulnerability-research/USE-CASES.md
How the signals fit together
Facts from a static read of the files at the pinned commit. They describe what the code does, not why.
Some files could not be read; the facts below still hold.
Signal confidence: 133 facts
- Network access in prose of documentationcomplisec/README.md:1Low confidence
- Network access in prose of documentationcomplisec/README.md:2Low confidence
- Network access in prose of documentationcomplisec/README.md:3Low confidence
- Network access in prose of documentationcomplisec/README.md:8Low confidence
- Network access in prose of documentationcomplisec/README.md:9Low confidence
- Network access in prose of documentationcomplisec/README.md:10Low confidence
- Executable script in code of a file that runscomplisec/hooks/audit-lib.sh:1High confidence
- Executable script in code of a file that runscomplisec/hooks/audit-session-start.sh:1High confidence
- Network access in code of a file that runscomplisec/hooks/audit-session-start.sh:60High confidence
- Executable script in code of a file that runscomplisec/hooks/audit-tool-call.sh:1High confidence
- Network access in code of a file that runscomplisec/hooks/audit-tool-call.sh:122High confidence
- Network access in prose of the SKILL.mdchange-management/SKILL.md:114Low confidence
- Network access in prose of the SKILL.mdchange-management/SKILL.md:115Low confidence
- Network access in prose of the SKILL.mdchange-management/SKILL.md:116Low confidence
- Network access in prose of the SKILL.mdchange-management/SKILL.md:117Low confidence
- Access to secrets in code of the SKILL.mdcompliance-hub/SKILL.md:109High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:210High confidence
- Access to secrets in code of the SKILL.mdcompliance-hub/SKILL.md:210High confidence
- Access to secrets in code of the SKILL.mdcompliance-hub/SKILL.md:211High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:212High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:254High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:255High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:256High confidence
- Network access in code of the SKILL.mdcompliance-hub/SKILL.md:258High confidence
- Access to secrets in code of the SKILL.mdcompliance-hub/SKILL.md:269High confidence
- Access to secrets in prose of the SKILL.md: a variable, placeholder or call, not a stored valuedata-sensitivity/SKILL.md:24Low confidence
- Access to secrets in prose of the SKILL.md: a variable, placeholder or call, not a stored valuedata-sensitivity/SKILL.md:95Low confidence
- Network access in prose of the SKILL.mddata-sensitivity/SKILL.md:97Low confidence
- Access to secrets in prose of the SKILL.md: a variable, placeholder or call, not a stored valuedata-sensitivity/SKILL.md:111Low confidence
- Access to secrets in prose of the SKILL.md: a variable, placeholder or call, not a stored valuedata-sensitivity/SKILL.md:133Low confidence
- Access to secrets in prose of the SKILL.md: a variable, placeholder or call, not a stored valuedata-sensitivity/SKILL.md:134Low confidence
- Access to secrets in prose of documentationdata-sensitivity/references/pattern-index.md:24Low confidence
- Access to secrets in prose of documentationdata-sensitivity/references/pattern-index.md:74Low confidence
- Access to secrets in prose of documentation: a variable, placeholder or call, not a stored valuedata-sensitivity/references/pattern-index.md:94Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:34Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:42Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:50Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:52Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:53Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:54Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:55Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:56Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:57Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:62Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:70Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:71Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:78Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:85Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:87Low confidence
- Network access in prose of the SKILL.mdeu-compliance-directives/SKILL.md:89Low confidence
and 83 more
Works with
| Agent | Status | Evidence | Install to |
|---|---|---|---|
| Claude Code | Native | Manifest .claude-plugin/marketplace.json | .claude/skills/<skill-name>/ |
| Codex | Native | Manifest AGENTS.md | .agents/skills/<skill-name>/ |
| Cursor | Compatible | Standard SKILL.md plugins/complisec/SKILL.md | .cursor/skills/<skill-name>/ |
| Gemini CLI | Compatible | Standard SKILL.md plugins/complisec/SKILL.md | .gemini/skills/<skill-name>/ |
| GitHub Copilot | Compatible | Standard SKILL.md plugins/complisec/SKILL.md | .github/skills/<skill-name>/ |
| OpenCode | Compatible | Standard SKILL.md plugins/complisec/SKILL.md | .opencode/skills/<skill-name>/ |
- Native The repository ships a manifest, folder or frontmatter field for this agent.
- Compatible A standard SKILL.md that this agent can read.
- Unknown No evidence either way.
Derived automatically from paths, manifests and frontmatter. Not tested on each agent.
