Skill UI

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

Analyzes project dependencies via the dependency-checker plugin to flag security vulnerabilities, outdated packages, and license conflicts before deployment; run it when you need insight on risky npm, pip, composer, gem, or go modules.

This skill functions as a dedicated dependency security expert, specializing in auditing project dependencies. It analyzes codebases for known security vulnerabilities, license compliance issues, outdated packages, and overall supply chain risks. It provides comprehensive, actionable remediation strategies and detailed risk reports to keep software supply chains secure and compliant.

A powerful tool for comprehensive, offline dependency auditing across 8+ programming ecosystems (e.g., Node, Python, Go, Rust). It identifies critical CVE vulnerabilities, license conflicts, and calculates safe upgrade paths, making it essential for pre-release security checks, legal compliance reviews, and major version migrations.

Automate Gumroad storefront tasks via the Composio MCP integration, managing product listings, sales filters, license checks, and webhook subscriptions through natural language.

Automated license compliance scanner guidance for Security Fundamentals, delivering step-by-step practices, best-practice patterns, and production-ready code plus validation to keep authentication, validation, and secure coding efforts aligned.

Automates scaffolding of new Claude Code plugins within the claude-code-plugins repo, creating directories, plugin.json, READMEs, LICENSE, commands/agents/skills/MCP assets, and marketplace entries before validating schemas and syncing the catalog.

This comprehensive guide provides a detailed framework for optimizing spending across Replit services. Learn how to conduct a thorough billing audit, right-size deployment resources (Autoscale vs. Reserved VM), manage data egress costs, optimize team seat licenses, and clean up idle resources. Essential for controlling cloud spending and ensuring efficient resource allocation in any development workflow.

This skill provides comprehensive license management for Windsurf enterprise deployments. It helps users track seat allocation, monitor usage, optimize subscriptions, and generate compliance reports, ensuring cost efficiency and adherence to licensing rules. Use it when managing enterprise licensing and optimizing resource costs.

Estimates itemized closing costs for refinance quotes across 10 licensed states, covering lender, third-party, title, and recording fees while handling FHA Streamline refund netting and VA funding-fee exemptions for compliant borrower disclosures.

This skill details implementing Software Composition Analysis (SCA) using Snyk. It helps security teams detect known vulnerabilities, check license compliance, and automate dependency remediation within CI/CD pipelines. Learn to integrate scanning into GitHub, GitLab, and Jenkins workflows, generate automated fix PRs, and continuously monitor deployed applications to safeguard the software supply chain.

Trivy is a comprehensive open-source scanner designed to detect vulnerabilities in OS packages, language dependencies, misconfigurations, exposed secrets, and license violations within container images. It is essential for integrating security checks into CI/CD pipelines, performing rigorous security assessments, or investigating security incidents. The tool supports generating multiple standardized output formats like SARIF, CycloneDX, and SPDX.