Skill Claude Code ✓ vendor
Requirements authoring guide for BRD and PRD across Discover, Define, and Govern with canonical templates and handoff contracts.
not rated 1.4k
+25 today A SkillSpector: pass 27 tokens
original MIT
1.4kStars on the repository
90Mods indexed here, across every type
todayLast push, which is what freshness is scored on
MITLicence, which decides whether bodies are shown
Skill Claude Code needs its repo ✓ vendor
Security planning and plan-drift analysis for STRIDE, standards, controls, backlog handoff, current findings, and TM7 generation.
not rated 1.4k
+25
changed 3d ago A SkillSpector: warn 31 tokens
original MIT
Skill Claude Code ✓ vendor
Consolidated Responsible AI standards reference: NIST AI RMF 1.0, AI STRIDE threat-modeling overlay, EU AI Act risk tiers, and an open-standards catalog with phase mapping.
not rated 1.4k
+25 today A SkillSpector: pass 47 tokens
original MIT
Skill Claude Code ✓ vendor
Challenge a confirmed task, decision, plan, or artifact through adaptive skeptical questions. Use when you need to expose assumptions before acting.
not rated 1.4k
+25
changed today A SkillSpector: pass 32 tokens
original MIT
Skill Claude Code ✓ vendor
Execute an approved RPI plan, maintain current planning state, and record implementation evidence. Use when implementation is ready to begin or resume.
not rated 1.4k
+25
changed today A SkillSpector: pass 32 tokens
original MIT
Skill Claude Code ✓ vendor
Independently critique an RPI implementation plan once against supplied evidence without editing the plan. Use when planning credibility needs a read-only assessment.
not rated 1.4k
+25
changed today A SkillSpector: warn 35 tokens
original MIT
rpi-plan
55Skill Claude Code ✓ vendor
Create one evidence-based RPI implementation plan from supplied context, research, drafts, and decisions. Use when implementation planning is needed.
not rated 1.4k
+25
changed today A SkillSpector: warn 30 tokens
original MIT
rpi-quick
56Skill Claude Code ✓ vendor
Sequence Research, Plan, Implement, Review, and Follow-up for an RPI task. Use when one workflow should coordinate the full delivery lifecycle.
not rated 1.4k
+25
changed today A SkillSpector: pass 34 tokens
original MIT
rpi-research
57Skill Claude Code ✓ vendor
Research-only RPI playbook that gathers task evidence, writes dated research artifacts under .copilot-tracking/research/, and hands off planning-ready findings. Use when the user needs evidence, alternatives, or task framing first.
not rated 1.4k
+25
changed today A SkillSpector: warn 50 tokens
original MIT
rpi-review
58Skill Claude Code ✓ vendor
Compare RPI planning and implementation evidence, record review findings, and route follow-up work. Use when an implementation needs acceptance review.
not rated 1.4k
+25
changed today B SkillSpector: warn 30 tokens
original MIT
Skill Claude Code ✓ vendor
Guided, conversational walkthrough that explains code, UI, UX, features, or .copilot-tracking artifacts with navigable evidence links, deep subagent review, and a reconciled decisions-and-changes ledger. Use when the user wants to understand how something works or why it was changed.
not rated 1.4k
+25 today A SkillSpector: pass 65 tokens
original MIT
Skill Claude CodeCodex ✓ vendor
Retrieves and groups GitHub code scanning alerts by rule and severity using the gh CLI.
not rated 1.4k
+25 today A SkillSpector: warn 22 tokens
original MIT
mcsb
61Skill Claude Code ✓ vendor
Microsoft Cloud Security Benchmark (MCSB v2) control-domain taxonomy and NIST 800-53 / CIS Controls crosswalk for planning and reviewing Azure cloud resources.
not rated 1.4k
+25 today A SkillSpector: pass 38 tokens
original MIT
Skill Claude Code ✓ vendor
OWASP Agentic Security Top 10 knowledge base for identifying, assessing, and remediating AI agent system security risks.
not rated 1.4k
+25 today A SkillSpector: pass 30 tokens
original MIT
owasp-cicd
63Skill Claude Code ✓ vendor
OWASP CI/CD Top 10 knowledge base for identifying, assessing, and remediating CI/CD pipeline security risks.
not rated 1.4k
+25 today A SkillSpector: pass 30 tokens
original MIT
owasp-docker
64Skill Claude Code ✓ vendor
OWASP Docker Top 6 knowledge base for identifying, assessing, and remediating Docker container security risks.
not rated 1.4k
+25 today A SkillSpector: pass 27 tokens
original MIT
Skill Claude Code ✓ vendor
OWASP Infrastructure Top 10 knowledge base for identifying, assessing, and remediating internal IT infrastructure security risks.
not rated 1.4k
+25 today A SkillSpector: pass 28 tokens
original MIT
owasp-llm
66Skill Claude Code ✓ vendor
OWASP Top 10 for LLM Applications (2025) knowledge base for identifying, assessing, and remediating large language model security risks.
not rated 1.4k
+25 today A SkillSpector: pass 36 tokens
original MIT
owasp-mcp
67Skill Claude Code ✓ vendor
OWASP MCP Top 10 knowledge base for identifying, assessing, and remediating Model Context Protocol security risks.
not rated 1.4k
+25 today A SkillSpector: pass 28 tokens
original MIT
owasp-top-10
68Skill Claude Code ✓ vendor
OWASP Top 10 for Web Applications (2025) knowledge base for identifying, assessing, and remediating web application security risks.
not rated 1.4k
+25 today A SkillSpector: pass 34 tokens
original MIT
Skill Claude Code ✓ vendor
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
not rated 1.4k
+25 today A SkillSpector: pass 25 tokens
original MIT
Skill Claude Code ✓ vendor
Format specifications and data contracts for the security reviewer orchestrator and its subagents.
not rated 1.4k
+25 today A SkillSpector: pass 22 tokens
original MIT
Skill Claude Code ✓ vendor
Software supply chain security reference for OpenSSF Scorecard, SLSA, Sigstore, SBOM, and posture/backlog taxonomies.
not rated 1.4k
+25 today A SkillSpector: pass 33 tokens
original MIT
vex
72Skill Claude Code ✓ vendor
OpenVEX v0.2.0 specification reference plus VEX management playbooks - Brought to you by microsoft/hve-core.
not rated 1.4k
+25 today A SkillSpector: warn 31 tokens
original MIT
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: