Skill Claude CodeCodex
Audit the FOSSA MCP server against its vendored OpenAPI spec and the live API - enumerate documented operations, map registered tools to them, live-verify every read endpoint, and prove the write gate refuses without a single HTTP call. Use when asked whether the endpoints are alive and accessible, whether the tool…
Skill Claude CodeCodex
Produce a shippable third-party attribution document (NOTICE / THIRDPARTYLICENSES) for a FOSSA project from its attribution report. Use when asked for a NOTICE file, third-party licenses, an attribution report, open source notices, license texts for a release, or a list of a project's dependencies with their licenses…
Skill Claude CodeCodex
Run a customer-facing, obligation-oriented license audit of a FOSSA project — classify every license by what it actually obligates in this customer's distribution model and hand back an action list. Use when asked for a license audit, to review licensing issues, "can we ship this", any GPL/AGPL/copyleft question…
Skill Claude CodeCodex
Turn a project's FOSSA findings into NeuVector runtime controls and push them to the cluster. Two tracks — vulnerability findings become WAF sensors (regex-matched request inspection); license-conflict findings become a workload quarantine (network isolation / deploy hold). Use when asked to mitigate, compensate for…
Skill Claude CodeCodex
Rank FOSSA projects by remediation urgency using a custom impact risk score that adds reachability and exposure to CVSS and EPSS. Use when asked which projects need remediation, how to prioritize FOSSA findings, to build or suggest a custom risk/impact score, to triage a FOSSA portfolio, or whenever FOSSA severity is…
Skill Claude CodeCodex
Export a FOSSA project's vulnerability findings as a normalized OSV or CycloneDX 1.6 VDR document, and diff them against another scanner's output. Use when asked to export vulnerabilities, produce a VEX/VDR/OSV/CycloneDX payload, compare FOSSA with Snyk/Trivy/Grype or another scanner, run a vendor comparison, or turn…
MCP server Claude CodeCodexCursor +2
MCP server "fossa-mcp" as configured in darthzen/fossa-mcp. Runs locally from the fossa-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "neuvector-mcp" as configured in darthzen/neuvector-mcp. Runs locally from the neuvector-mcp Python package.
MCP server Claude CodeCodexCursor +2
MCP server "ollama-code-mcp" as configured in darthzen/ollama-code-mcp. Runs locally from the ollama-code-mcp Python package.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: