Socket
Official@socketdev · United States of America
Depend on Socket to protect your app from malicious dependencies lurking in your open source supply chain.
Agent Skills by Socket
Showing 106 vetted skills indexed across 5 GitHub repositories.
SocketDevfleet-triaging-findings
Triage raw security-scanner output into prioritized findings with owners.
SocketDevfleet-updating-hooks-dry
Audit fleet hook trees and oxlint plugin configurations for duplication and bloat.
SocketDevfleet-scanning-quality
Orchestrate parallel code scans and generate an A-F prioritized markdown report.
SocketDevfleet-updating-pricing
Fetch current vendor prices and update model-pricing.json with today's date.
SocketDevfleet-scanning-security
Scan CLAUDE config, GitHub Actions, and dependencies to generate an A-F graded security report.
SocketDevfleet-cascading-fleet
Propagate wheelhouse template SHAs and registry pins across fleet repositories.
SocketDevfleet-guarding-paths
Audit and fix path duplication across Socket repositories to enforce canonical path references.
SocketDevfleet-updating-coverage
Run coverage tooling and update the root README coverage badge.
SocketDevfleet-tidying-files
Sweep fleet repositories for junk files and stray temporary directories.
SocketDevfleet-reordering-release-bump
Relocate a release bump commit to the default branch tip and retag vX.Y.Z.
SocketDevfleet-optimizing-submodules
Determine and apply minimal sparse-checkout patterns for .gitmodules submodules using Bash and Node.js scripts.
SocketDevfleet-auditing-api-surface
Identifies and classifies unused or dead API export subpaths in libraries via fleet-wide analysis.
SocketDevfleet-tidying-rolldown-bundles
Report dedupable lockfile transitives in fleet bundle repos.
SocketDevfleet-setup-repo
Automates Fleet repository onboarding including credentials and tooling setup.
SocketDevfleet-tidying-worktrees
Prune spent git worktrees across multiple repositories with dry-run and --fix modes.
SocketDevfleet-prose
Remove AI writing patterns from prose in documentation and conversational modes.
SocketDevfleet-researching-recency
Aggregate and rank community signals from developer sources over 30 days.
SocketDevfleet-agent-ci
Run and validate GitHub Actions workflows locally in Docker.
SocketDevfleet-trimming-bundle
Stub unused modules in built bundles to reduce size with rolldown.
SocketDevfleet-managing-worktrees
Create, fan out, and prune git worktrees for parallel sessions.
SocketDevfleet-patching-findings
Generate surgical patches for verified vulnerability findings and commit them to a code repository.
SocketDevfleet-cleaning-ci
Identify and remove orphaned CI YAMLs, disable automated-security-fixes, and purge stale workflow records.
SocketDevfleet-locking-down-claude
Enforce four-flag lockdown on Claude programmatic invocations in Node scripts.
SocketDevfleet-migrating-rule-packs
Apply rule-pack transformations across target files in parallel worktrees.
Frequently Asked Questions About Socket
FAQPage SchemaWhat specific security tasks does Socket enable for engineering teams?▼
Socket enables automated dependency security scanning, SBOM generation, license auditing, and surgical patching of vulnerabilities. It identifies malicious dependencies, enforces security policies, and provides prioritized findings to help teams remediate risks without altering package versions.
Which personas benefit most from Socket's repository maintenance capabilities?▼
Security engineers, DevOps leads, and maintainers of large-scale JavaScript/TypeScript monorepos benefit from Socket. It is designed for teams managing complex dependency trees who require consistent security posture, drift detection, and standardized repository health across multiple projects.
What are the prerequisites for integrating Socket into a development environment?▼
Integration requires a Node.js environment and access to the Socket CLI. Users must authenticate with the platform to generate security policies and enable repository-level scanning, which then interfaces with existing Git worktrees and package managers like pnpm.