Agent Skills Hub

find-bugs

Perform automated security audits, bug detection, and code quality assessments on local branch diffs using a structured, checklist-driven verification process.

semgrep

Run Semgrep static analysis scans on codebases using parallel subagents, multi-language detection, and Pro-enabled cross-file taint tracking.

compliance-testing

Automate regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, and PCI-DSS to ensure legal adherence, prepare for audits, and secure sensitive data.

google-docs

Comprehensive Google Docs and Drive management tool. Supports document creation via Markdown, text formatting, structure analysis, and full file operations including upload, download, and sharing.

sarif-parsing

Parses and processes SARIF files from static analysis tools. Enables aggregation, deduplication, filtering, and CI/CD integration of scan results.

Damage Control

Defense-in-depth protection for Claude Code. Manage security hooks to block dangerous commands, enforce file access controls, and protect sensitive paths across global or project-specific scopes.

skill-vetter

Security-first vetting protocol for AI agent skills. Detects red flags like credential theft, obfuscated code, and unauthorized data exfiltration before installation.

CCOS MCP Tools

Reference for all MCP tools exposed by the CCOS server, enabling capability discovery, session management, and governed RTFS execution for autonomous agent workflows.

k8s-security-policies

Implement production-grade Kubernetes security using NetworkPolicy, RBAC, Pod Security Standards, and OPA Gatekeeper policies.

worker-integration

Intelligent orchestration for dispatching tasks to specialized background agents with performance-based routing and execution tracking.

configuring-firewalls

Configure host-based firewalls (UFW, nftables, iptables) and cloud security groups (AWS, GCP, Azure) with production-ready security rules.

owasp-mobile-security-checker

Automated security auditing for Flutter applications based on OWASP Mobile Top 10 (2024). Perform vulnerability scans for hardcoded secrets, insecure storage, dependency risks, and network configuration issues.