Browse plugins

This plugin documents AI-generated codebases and audits them for security/performance gaps by comparing documented intent against actual implementation, producing a reviewer-ready shipping packet. It provides five commands to reverse-engineer architecture, map test coverage, and identify risks that generic scanners miss.

This plugin performs security audits on codebases through a single command that analyzes code for potential vulnerabilities and security issues. It operates without requiring external dependencies or third-party services.

This agent implements AI ethics frameworks, governance policies, and responsible AI practices for B2B applications, focusing on bias detection and algorithmic transparency. It helps enterprises establish AI governance structures and compliance requirements that build trust in AI systems.

This agent implements data privacy engineering and GDPR compliance frameworks for B2B applications, covering data minimization, consent management, and privacy-by-design principles. It specializes in helping enterprises meet global privacy regulation requirements across their platforms.

This agent automates compliance processes for major regulatory frameworks including SOC 2, ISO 27001, GDPR, and HIPAA, helping B2B platforms with audit preparation and continuous monitoring. It provides a specialized interface for implementing and managing enterprise regulatory requirements without external dependencies.

This Agent Skill assesses software projects against enterprise-grade security and quality standards including OpenSSF Scorecard, Best Practices Badge, SLSA, and supply chain security frameworks. It provides dynamic scoring across different platforms and languages, with automation scripts and templates to help projects progress toward compliance certifications.

This plugin provides an AI agent that conducts comprehensive security assessments and compliance validation for B2B SaaS platforms, covering SOC 2, GDPR, and ISO 27001 standards. It specializes in multi-tenant security reviews, enterprise compliance checks, and audit preparation without requiring external API keys or tools.

Provides best-practice guidance for Dockerfile development, Docker Compose orchestration, and multi-platform builds with Docker Bake, including CI testing patterns and security hardening. Includes a companion skill for Windows hosts running Docker Desktop via WSL2 to prevent bind-mount path corruption.

This skill validates deployable TYPO3 v14 site/project repositories against a gold-standard ruleset covering layout, Docker/Compose topology, Concourse CI pipelines, supply-chain gating, secrets, and Valkey/ofelia runtime. It includes a self-contained Python checker and machine-readable rule catalogue requiring only pyyaml, no external services.