Global

SkillSpector helps you answer: "Is this skill safe to install?"

Semgrep is a fast, open-source, static analysis tool that searches code, finds bugs, and enforces secure guardrails and coding standards. Semgrep supports 30+ languages and can run in an IDE, as a pre-commit check, and as part of CI/CD workflows.

Run AI agents in a zero latency sandbox in seconds and with zero setup — Claude Code, Codex, Pi, CoPilot, Hermes, OpenCode, OpenClaw and more — nono gets you up and running within seconds, with no daemon, no container, no VM, and no disk space usage.

Verify that the PowerPoint you are about to deliver is exactly the PPTX that passed QA—locally, offline, and with tamper-evident evidence.

Use OSV-Scanner to find existing vulnerabilities affecting your project's dependencies.

We encourage users to help make these tools better by submitting issues when you find a bug or want a new feature. Check out our contributing overview and developer-specific documentation if you are interested in providing code contributions.

Read-only developer endpoint scanner for on-disk package, extension, and developer-tool metadata, built to check exposure to known software supply-chain compromises.

Raptor turns Claude Code into a general-purpose AI offensive/defensive security agent. md and creating rules, sub-agents, and skills, and orchestrating security tool usage, we configure the agent for adversarial thinking, and perform research or attack/defense operations.

"Distroless" images contain only your application and its runtime dependencies. They do not contain package managers, shells or any other programs you would expect to find in a standard Linux distribution.

The original nirholas/claude-code before DMCA and take down. Once everything is cleared, it will return. Working with Anthropic and Github to get everything back.

Skill 开放规范已经被 Claude Code、ChatGPT 与 Codex、GitHub Copilot、Cursor、Gemini CLI、VS Code、OpenCode、Kiro、JetBrains Junie 等大量宿主采用。不同宿主的搜索路径和实验字段支持度可能不同，请以 Agent Skills Client Showcase 和对应产品文档为准。

一款长亭自研的完善的安全评估工具，支持常见 web 安全问题扫描和自定义 poc | 使用之前务必先阅读文档

dev is to build a fast, modern browser for the npm registry.

🛡️ A curated list of resources on agent skills security: attacks, defenses, frameworks, and benchmarks for securing AI agent tool use and skill ecosystems

A drop-in safety guard for the curl … | bash install pattern.

NOTE] > Laravel Vet is in beta. The behaviour can change before the first stable release.

That is the whole thing. init walks you through it: pick the folder, pick your coding CLI, pick the model, choose review-or-fix, and it runs.