Detects integrity vulnerabilities in code, CI/CD configs, and dependencies.
npx skills add https://github.com/florianbuetow/claude-code --skill integrity
Please help me install this Agent Skill. Skill: integrity Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/integrity Command: npx skills add https://github.com/florianbuetow/claude-code --skill integrity
This Skill identifies and helps remediate software and data integrity failures, protecting against vulnerabilities like insecure deserialization, CI/CD pipeline injection, and untrusted dependencies.
Analyze the current project's dependencies for supply chain vulnerabilities.
High-intent search queries and answers about installing and using this skill.
To detect insecure deserialization vulnerabilities, this Skill analyzes source code and data manifests to identify integrity failures. It specifically scans for insecure deserialization patterns and produces actionable findings with severity ratings and remediation steps.
Yes, you can scan CI/CD pipeline configurations for injection vulnerabilities. The Skill analyzes your CI/CD configurations to identify potential pipeline injection flaws and provides actionable findings with severity ratings and specific remediation guidance.
The best way to audit dependencies for supply chain vulnerabilities is to analyze dependency manifests for untrusted dependency sources. This Skill scans your dependencies to detect unverified auto-updates and untrusted sources, generating findings with severity ratings and remediation steps.
To check for missing subresource integrity, this Skill analyzes your source code and configurations to identify where integrity checks are absent. It detects missing subresource integrity and outputs actionable findings with severity ratings and steps to remediate the issue.
Yes, this vulnerability detection tool works without external dependencies. The Skill operates independently with no required dependencies to analyze source code, CI/CD configurations, and dependency manifests for software and data integrity failures.
You need to verify untrusted dependency sources to prevent software and data integrity failures. Scanning dependency manifests detects unverified auto-updates and untrusted sources, producing actionable findings with severity ratings to protect your supply chain from exploitation.
mrkhachaturovAudit dependencies, CI/CD configurations, and webhooks to generate a security posture report.
ArabelaTsoDetect security vulnerabilities by matching code against known patterns and CVE-style patterns.
jeremylongshoreGenerate CI/CD pipeline configurations for GitHub Actions, GitLab CI, and Jenkins.
paulojalowyjScan dependencies, secrets, code patterns, and configurations for security vulnerabilities.
