Skill Claude CodeCodex
Audit the FOSSA MCP server against its vendored OpenAPI spec and the live API - enumerate documented operations, map registered tools to them, live-verify every read endpoint, and prove the write gate refuses without a single HTTP call. Use when asked whether the endpoints are alive and accessible, whether the tool…
Skill Claude CodeCodex
Produce a shippable third-party attribution document (NOTICE / THIRDPARTYLICENSES) for a FOSSA project from its attribution report. Use when asked for a NOTICE file, third-party licenses, an attribution report, open source notices, license texts for a release, or a list of a project's dependencies with their licenses…
Skill Claude CodeCodex
Run a customer-facing, obligation-oriented license audit of a FOSSA project — classify every license by what it actually obligates in this customer's distribution model and hand back an action list. Use when asked for a license audit, to review licensing issues, "can we ship this", any GPL/AGPL/copyleft question…
Skill Claude CodeCodex
Turn a project's FOSSA findings into NeuVector runtime controls and push them to the cluster. Two tracks — vulnerability findings become WAF sensors (regex-matched request inspection); license-conflict findings become a workload quarantine (network isolation / deploy hold). Use when asked to mitigate, compensate for…
Skill Claude CodeCodex
Compare the vendored FOSSA OpenAPI spec against the live one and report which changes affect this repo's registered MCP tools. Use when asked what changed in the FOSSA API since the spec was vendored, whether the vendored spec is stale, whether an API change breaks or touches a registered tool, or before refreshing…
Skill Claude CodeCodex
Rank FOSSA projects by remediation urgency using a custom impact risk score that adds reachability and exposure to CVSS and EPSS. Use when asked which projects need remediation, how to prioritize FOSSA findings, to build or suggest a custom risk/impact score, to triage a FOSSA portfolio, or whenever FOSSA severity is…
Skill Claude CodeCodex
Export a FOSSA project's vulnerability findings as a normalized OSV or CycloneDX 1.6 VDR document, and diff them against another scanner's output. Use when asked to export vulnerabilities, produce a VEX/VDR/OSV/CycloneDX payload, compare FOSSA with Snyk/Trivy/Grype or another scanner, run a vendor comparison, or turn…
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: