devsecops commands

Zyrexnn/Cybermes

Command

Command "recon" from Zyrexnn/Cybermes, covering /recon, what this does, usage, steps and step 1: subdomain enumeration.

Zyrexnn/Cybermes

Command

Command "report" from Zyrexnn/Cybermes, covering /report, pre-conditions, usage, what this generates and platform selection.

Zyrexnn/Cybermes

Command

Command "web3-audit" from Zyrexnn/Cybermes, covering /web3-audit, usage, step 0: pre-dive kill signals, find accounting variables and find all early returns in critical functions.

davidmatousek/tachi

Command Claude Code

Execute implementation with Architect checkpoints at critical phases - Streamlined v2.

davidmatousek/tachi

Command Claude Code

Create PRD with Triad governance (PM + Architect + Team-Lead sign-offs) - Streamlined v2.

davidmatousek/tachi

Command Claude Code

Generate tasks with triple sign-off (PM + Architect + Team-Lead) - Streamlined v2.

JeongJaeSoon/agent-guard

Command

Print the gitleaks release sha256 for a version, formatted for direct paste into a GitHub Actions workflow or agent-guard setup --install. Pass an optional VERSION arg, e.g. /agent-guard:checksum 8.30.1.

JeongJaeSoon/agent-guard

Command

Run a deterministic one-shot secret scan over the current working tree (staged + unstaged + untracked). Use to confirm "is the current state safe to commit?" without going through hook triggers.

dfirs1car1o/sicario-spec

Command

Assess the repository against SicarioSpec guardrails.

dfirs1car1o/sicario-spec

Command

Generate or update docs/compliance/control-applicability.md.

dfirs1car1o/sicario-spec

Command

Run deterministic verification.

netresearch/enterprise-readiness-skill

Command

Run enterprise readiness assessment on current project.

netresearch/enterprise-readiness-skill

Command

Check and improve SLSA compliance level.

ch015/code-pentester

Command

A follow-up security check that verifies whether earlier findings were fixed and, depending on the selected mode, looks for new problems.

ch015/code-pentester

Command

A design-stage security review for product requirement documents and other planning documents; a PRD is a document describing what a product should do.

ch015/code-pentester

Command

Vulnerability Assessment — 8차원 아키텍처 진단 + Self-Verify + Evidence Verification.

HermeticOrmus/LibreSecOps-Claude-Code

Command

Use at the start of a bug bounty engagement after reviewing the program scope. Appropriate when.

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "azure-sec-audit" from HermeticOrmus/LibreSecOps-Claude-Code, covering /azure-sec-audit, trigger, input, process and phase 1: identity (entra id).

HermeticOrmus/LibreSecOps-Claude-Code

Command

Command "compliance-gap" from HermeticOrmus/LibreSecOps-Claude-Code, covering /compliance-gap, trigger, input, process and step 1: gap identification.

chawdamrunal/assay

Command

List installed Claude Code plugins, MCP servers, hooks, and settings overrides.

chawdamrunal/assay

Command

Run a full Assay security scan against a target. Drives the 5-stage citation-verified methodology end-to-end via the assay MCP server. No separate Anthropic API call — uses your Claude Code subscription quota.

chawdamrunal/assay

Command

Show which Anthropic credential source Assay is using.

jaskaranhundal/usap-skills

Command Claude Code

Run cs-security-analyst (AT workflow) against the Perfect Storm 8-vector crisis scenario and produce a 12-check mock comparison scorecard.

jaskaranhundal/usap-skills

Command Claude Code

Run cs-security-analyst (AT + CA workflows) against the Fintech FortiGate zero-day scenario and produce a 7-task scorecard.