Software supply chain security — SBOM generation and analysis, dependency confusion and typosquatting detection, malicious package indicators, CI/CD pipeline hardening, and artifact provenance/signing (SLSA, Sigstore)
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Masriyan/Claude-Code-CyberSecurity-Skill☆ 4912026년 10월 20일 업데이트
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
lingxling/awesome-skills-cn☆ 3172026년 10월 7일 업데이트
Implements data lineage tracking for privacy compliance including origin tracking, transformation logging, access auditing, deletion verification, and cross-system lineage graphs. Covers source-to-sink mapping, GDPR Art. 30 RoPA integration, automated lineage discovery, and breach impact scoping. Keywords: data lineage, data provenance, data flow mapping, transformation logging, deletion verification.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mukul975/Privacy-Data-Protection-Skills☆ 3152026년 3월 17일 업데이트
Design memory provenance and tenant isolation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
TheGoat395/Codex-Skills☆ 1292026년 9월 11일 업데이트
Suede Labs skill that turns messy creator materials into a local, offline rights-and-provenance transfer package: inventoried and hashed assets, a normalized suede-intake.json manifest, credits and splits, license notes, provenance, and a missing-information report, validated by a bundled stdlib script. Use when a creator needs to hand a song, release, or project to a collaborator, advisor, registry, marketplace, or label; when someone asks for a rights package, intake package, or handoff folder; or when a validated manifest is needed before licensing or royalty-routing review. Carries questions, not answers: building the package clears nothing and uploads nothing. NOT FOR: finding or investigating the rights gaps in the first place (use suede-rights-audit); linting a release folder's files and metadata (use suede-release-linter); a sync one-sheet (use suede-sync-packaging).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
JasonColapietro/suede-creator-skills☆ 1282026년 10월 21일 업데이트
Queries the NCATS Translator ARAX production API for bounded, typed, provenance-rich one-hop and endpoint-pinned two-hop biomedical knowledge-graph relationships. Use for Biolink-constrained RTX-KG2 lookup, explicit selected-provider ARAX federation, separate entity normalization, qualifier-aware graph traversal, and inspection of TRAPI edge bindings, publications, and knowledge-source provenance. Do not use for inference, ranking, open-ended pathfinding, clinical guidance, or sensitive queries.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
K-Dense-AI/drug-discovery-agent-skills☆ 452026년 10월 19일 업데이트
Use when you need Liberty91 platform intelligence — what actually happened (deduplicated Threat Events with every source, Admiralty reliability/credibility and verification stage), whether an IOC is already known to your account, the canonical threat library (actors, malware, vulnerabilities, clusters, ATT&CK TTPs), alert matches, or which of your customer organizations an occurrence affects — or when you need to push intelligence back: ingesting your own report, generating an intelligence package, or uploading an organization document. Also supplies event provenance fields, when the platform returns them, and Threat Library alias resolution to /source-provenance and /quality-of-information-check. Two-way, first-party integration. Commonly invoked by /ip-investigation and friends, /ioc-enrichment-workflow, /threat-actor-profiling, /campaign-tracking and /vulnerability-intelligence. Reads $LIBERTY91_API_KEY.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
Liberty91LTD/cti-skills☆ 272026년 9월 30일 업데이트
Add SLSA build-provenance attestations to existing GitHub Actions workflows. Use when the user wants to add artifact attestations, build provenance, or SLSA attestations to Docker container image builds in GitHub Actions CI/CD pipelines.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
jim60105/copilot-prompt☆ 222026년 10월 16일 업데이트
Track ENCODE experiments locally with publications, citations, and provenance. Use when the user wants to build a collection of experiments, manage citations, compare experiments, or track data provenance.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
ammawla/encode-toolkit☆ 212026년 9월 27일 업데이트
Run a deterministic, read-only health check on an Obsidian wiki. Use for lint, vault health check, audit wiki health, find orphans, find dead links, frontmatter audit, provenance audit, or wiki audit. Reports graph, link, frontmatter, provenance-ledger, empty-section, and stale-index findings; it does not reason broadly or repair files.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
gabrielmoreira/agent-skills-mirror☆ 192026년 10월 20일 업데이트
Understand what Skmtc is, how its engine works, and the architectural invariants — for agents building or extending infrastructure *around* Skmtc rather than authoring generators or running the CLI. Covers the three-phase pipeline, the host/Worker boundary, cross-generator coordination, the manifest, the attribution / gen-maps (provenance) subsystem, the package graph, the Deno and JSR platform, and the design decisions that make Skmtc behave unlike a typical codegen tool. Use this skill when the user asks "what is Skmtc", "how does the Skmtc engine work", "explain the Skmtc architecture", or is building platform infrastructure around Skmtc — a hosted generate API, a schema or generator registry, tracing or provenance tooling, a web app or SaaS that wraps the engine, or platform-level CI integration. This skill is the system mental model. It does NOT cover authoring generators (→ skmtc-generator), running CLI commands (→ skmtc-cli), or diagnosing broken runs (→ skmtc-debug).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
skmtc/skmtc☆ 192026년 10월 20일 업데이트
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
sinhoneyy/master-skills☆ 142026년 9월 5일 업데이트
Use when designing or auditing long-term memory for persistent AI agents. Stores immutable source evidence before canonical facts, links beliefs to provenance, applies novelty-aware ADD/UPDATE/NOOP write gating, keeps uncertain merges explicit, separates retrieval from answer generation, supports deletion, and evaluates memory failures layer by layer.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
mouadja02/skills☆ 102026년 10월 21일 업데이트
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
JantonioFC/skillsbank☆ 92026년 8월 4일 업데이트
Refresh owner-specific mutable provenance and generated documentation without rewriting release or installed-target evidence.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
CruxExperts/LocalSetup☆ 62026년 10월 21일 업데이트
Check Herdr source, skill, schema, and release drift; maintain the master provenance manifest and reviewed compatibility without automatically upgrading hosts. Start with ls-herdr-task-routing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
CruxExperts/LocalSetup☆ 62026년 10월 21일 업데이트
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
lucaspmarie-a11y/claude-skills-vault☆ 52026년 6월 7일 업데이트
Authors portable, strongly-typed bioinformatics pipelines in the Common Workflow Language (CWL v1.2) as CommandLineTool/Workflow/ExpressionTool documents, validated with cwltool and run at scale on Toil/Arvados/Calrissian. Use when deciding CWL (portability/provenance/regulated) vs Nextflow/WDL/Snakemake; declaring secondaryFiles for indexed companions (.bai/.fai/.dict/.tbi and the caret rule); putting resources/containers under requirements (must-hold) vs hints (advisory) to avoid silent OOM; choosing scatterMethod (dotproduct vs flat_/nested_crossproduct); preferring $(...) parameter refs over ${...} JavaScript for portability; pinning DockerRequirement images; or emitting a CWLProv provenance object for audited/clinical settings.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
huang-sh/DeepScience☆ 42026년 7월 15일 업데이트
The AI native file format. EXIF for AI — stamps every file with trust scores, source provenance, and compliance metadata. Embeds into 20+ formats (DOCX, PDF, images, code). EU AI Act, SOX, HIPAA auditing.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
phoroth/AGENTIC☆ 32026년 8월 8일 업데이트
Runtime security for agent skills — prevents state corruption, skill overwrite attacks, denial of service, and enforces provenance tracking and no-go repo management. Load as part of the secure-* skill sequence whenever an agent processes external content or writes to the skill store. Also load when the user asks to check for state corruption, prevent skill overwrite, manage no-go repos, check provenance, audit runtime security, detect DoS patterns, or protect the skill store. Covers Issues 6, 9, 10 from the agent security threat model: instruction hierarchy enforcement, state corruption and skill overwrite, and denial of service prevention.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
dvy1987/agent-loom☆ 32026년 8월 8일 업데이트
Builds scoped, provenance-preserving context packets between DAG nodes. NOT for execution or aggregation.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Designs or reviews provenance-bound DAG attempt traces, coverage gaps, cancellation, and unknown-effect reconciliation. NOT for claiming execution completeness, deployment monitoring, or root-cause proof.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Track the full Toulmin epistemic ancestry of every claim produced by a multi-agent swarm. Each agent output is tagged with an argument chain (claim / data / warrant / relationship) derived from SwarmTracer spans and LineageEdge records, so operators can zoom into any sub-claim and see precisely which agents asserted it, what triggered each assertion, and how contradictions propagated or were synthesised away. The SwarmTracer pattern — wrapping the SwarmAgentExecutor to capture spans, record messages, and build a lineage graph — is the concrete runtime substrate. Argumentative lineage lifts that graph into the Toulmin vocabulary so reasoning provenance is both machine-queryable and human-interpretable.
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트
Verify every visual-evidence artifact (screenshot/GIF/recording) attached to a PR carries a provenance manifest binding it to real daemon-backed truth — daemon port, run id, transcript head hash, agent node id, commit, and an honest real/fixture/mock source label — and that operator-control-panel PRs cover the required set of proof states. Use when gating a PR's proof artifacts before merge, auditing whether a "LIVE" visual claim is backed by a real daemon run versus a reused or fixture-backed mock, or defining the required state-coverage set for a control-panel change. NOT for the capture technique itself — headless Playwright, `screencapture -x -l`, non-interruptive capture (use port-daddy-agent-skill's visual-evidence doctrine), designing the receipt body schema an artifact attaches to (use agent-work-receipt-designer), or the broader dogfood/Potemkin product-quality bar (use multi-agent-authoring-product-bar).
한국어 요약은 준비 중입니다. 원문 설명을 표시하고 있습니다.
curiositech/port-daddy☆ 32026년 10월 19일 업데이트