Skill UI

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

Automate Gumroad storefront tasks via the Composio MCP integration, managing product listings, sales filters, license checks, and webhook subscriptions through natural language.

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

Automates scaffolding of new Claude Code plugins within the claude-code-plugins repo, creating directories, plugin.json, READMEs, LICENSE, commands/agents/skills/MCP assets, and marketplace entries before validating schemas and syncing the catalog.

This comprehensive guide provides a detailed framework for optimizing spending across Replit services. Learn how to conduct a thorough billing audit, right-size deployment resources (Autoscale vs. Reserved VM), manage data egress costs, optimize team seat licenses, and clean up idle resources. Essential for controlling cloud spending and ensuring efficient resource allocation in any development workflow.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

Trivy is a comprehensive open-source scanner designed to detect vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations within container images. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or investigating security incidents. The tool supports generating multiple standardized output formats like SARIF, CycloneDX, and SPDX.

Design, review, migrate, and safely plan MATLAB or GNU Octave numerical workflows covering arrays, tabular/time data, functions, tests, projects, graphics, MAT files, and Python interoperability, with license and execution safety gates.

This skill manages comprehensive identity verification using the Persona API. It covers government ID checks (passport, driver's license), selfie liveness detection, and database lookups (SSN, watchlist). Use this when implementing Know Your Customer (KYC) workflows, reviewing detailed verification results, or building custom approval logic based on multi-source identity data.