Clear Capabilities
Official@clear-capabilities · United States of America
Offers integrated security scanning, threat modeling, and automated remediation for enterprise codebases and production environments.
Agent Skills by Clear Capabilities
Showing 11 vetted skills indexed across 1 GitHub repositories.
Clear-Capabilitiesagentic-security:add-scan-rule
Add a new SAST detector to the agentic-security scanner via a six-step process.
Clear-Capabilitiesagentic-security:privacy-data-flow
Classify PII/PHI/PCI data flows and write DATA_FLOW.md artifacts.
Clear-Capabilitiesagentic-security:security-sql-injection-warn
Block unsafe SQL string concatenation and enforce parameterized queries during code editing.
Clear-Capabilitiesagentic-security:security-scan-on-deploy
Automate security scans before production deploys and surface top findings.
Clear-Capabilitiesagentic-security:security-rotate-leak
Rotate leaked API keys and credentials end-to-end across supported providers.
Clear-Capabilitiesagentic-security:security-fix-finding
Remediate a security finding via the MCP pipeline synthesize_fix, verify_fix, and apply_fix.
Clear-Capabilitiesagentic-security:security-weak-crypto
Block code writes using MD5, SHA1, DES, RC4, or static IVs.
Clear-Capabilitiesagentic-security:threat-model-first
Document STRIDE security risks before editing code across trust boundaries.
Clear-Capabilitiesagentic-security:security-eval-warn
Detect and refuse runtime code-eval patterns across major languages.
Clear-Capabilitiesagentic-security:security-explain-cve
Explain CVEs, GHSA findings, and scanner findings in plain English.
Clear-Capabilitiesagentic-security:security-tutor
Explains security findings via Socratic Source-Sink-Sanitizer walkthroughs before remediation.
Frequently Asked Questions About Clear Capabilities
FAQPage SchemaWhat specific security tasks does Clear Capabilities enable?▼
Clear Capabilities enables SAST detector implementation, automated credential rotation, PII/PHI data flow classification, and STRIDE-based threat modeling. It provides direct remediation for security findings, blocks unsafe cryptographic primitives like MD5 or SHA1, and prevents runtime code-eval patterns during the development lifecycle.
Which personas benefit from these security capabilities?▼
Security engineers, DevSecOps practitioners, and software developers benefit from these capabilities. The system is designed for teams requiring automated guardrails against SQL injection, weak cryptography, and insecure code patterns, while providing Socratic tutoring to help developers understand and fix vulnerabilities before production deployment.
What are the prerequisites for implementing these security checks?▼
Implementation requires integration into the existing development pipeline to enable scan-on-deploy functionality. Users must define trust boundaries for STRIDE modeling and ensure access to the environment's credential providers to facilitate end-to-end rotation of leaked keys and secrets.