4 plugins, each analyzed from its own files.
This plugin documents AI-generated codebases and audits them for security/performance gaps by comparing documented intent against actual implementation, producing a reviewer-ready shipping packet. It provides five commands to reverse-engineer architecture, map test coverage, and identify risks that generic scanners miss.
This Agent Skill assesses software projects against enterprise-grade security and quality standards including OpenSSF Scorecard, Best Practices Badge, SLSA, and supply chain security frameworks. It provides dynamic scoring across different platforms and languages, with automation scripts and templates to help projects progress toward compliance certifications.
Provides best-practice guidance for Dockerfile development, Docker Compose orchestration, and multi-platform builds with Docker Bake, including CI testing patterns and security hardening. Includes a companion skill for Windows hosts running Docker Desktop via WSL2 to prevent bind-mount path corruption.
This skill validates deployable TYPO3 v14 site/project repositories against a gold-standard ruleset covering layout, Docker/Compose topology, Concourse CI pipelines, supply-chain gating, secrets, and Valkey/ofelia runtime. It includes a self-contained Python checker and machine-readable rule catalogue requiring only pyyaml, no external services.