Updated 2w ago
by qualixar
skillfortify
First formal security scanner for AI agent skills & plugins. Static analysis, supply chain verification, SBOM generation. 22 frameworks supported including MCP, LangChain, CrewAI.
38 GitHub stars (38)
+4 in 16 days
| Period | New stars |
|---|---|
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | +1 |
| Oct 7 | 0 |
| Oct 8 | +1 |
| Oct 9 | +1 |
| Oct 10 | 0 |
| Oct 11 | +1 |
| Oct 12 | 0 |
| Oct 13 | 0 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 24 skills (24 skills found in its SKILL.md files)
- 2 forks (2 forks)
- 2w ago last update (Last updated 2w ago)
Install
Skills CLI
npx skills add qualixar/skillfortify
Asks which skills and agents to install. Just one: npx skills add qualixar/skillfortify --skill gitnexus-cli — add -g for every project.
Claude Code
git clone https://github.com/qualixar/skillfortifycp -r "skillfortify/.claude/skills/gitnexus/gitnexus-cli" ~/.claude/skills/
Copies the gitnexus-cli skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add qualixar/skillfortify
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md — showing the first 24 of 373 files.
-
gitnexus-cli
Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: "Index this repo", "Reanalyze the codebase", "Generate a wiki"
.claude/skills/gitnexus/gitnexus-cli/SKILL.md on GitHub (opens in a new tab) -
gitnexus-debugging
Use when the user is debugging a bug, tracing an error, or asking why something fails. Examples: "Why is X failing?", "Where does this error come from?", "Trace this bug"
.claude/skills/gitnexus/gitnexus-debugging/SKILL.md on GitHub (opens in a new tab) -
gitnexus-exploring
Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"
.claude/skills/gitnexus/gitnexus-exploring/SKILL.md on GitHub (opens in a new tab) -
gitnexus-guide
Use when the user asks about GitNexus itself — available tools, how to query the knowledge graph, MCP resources, graph schema, or workflow reference. Examples: "What GitNexus tools are available?", "How do I use GitNexus?"
.claude/skills/gitnexus/gitnexus-guide/SKILL.md on GitHub (opens in a new tab) -
gitnexus-impact-analysis
Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: "Is it safe to change X?", "What depends on this?", "What will break?"
.claude/skills/gitnexus/gitnexus-impact-analysis/SKILL.md on GitHub (opens in a new tab) -
gitnexus-refactoring
Use when the user wants to rename, extract, split, move, or restructure code safely. Examples: "Rename this function", "Extract this into a module", "Refactor this class", "Move this to a separate file"
.claude/skills/gitnexus/gitnexus-refactoring/SKILL.md on GitHub (opens in a new tab) -
clawhub-moderation
Use for ClawHub staff moderation actions with the repo-local ClawHub admin tool: skills, users, org publishers, plugin packages, trusted publishers, official publishers, and guarded staff email.
tests/fixtures/openclaw/skills/clawhub-moderation/SKILL.md on GitHub (opens in a new tab) -
controlling-costs
Analyzes Axiom query patterns to find unused data, then builds dashboards and monitors for cost optimization. Use when asked to reduce Axiom costs, find unused columns or field values, identify data waste, or track ingest spend.
tests/fixtures/openclaw/skills/controlling-costs/SKILL.md on GitHub (opens in a new tab) -
openclaw-brand
Apply OpenClaw visual identity to logos, typography, imagery, voice, documents, presentations, social graphics, and launch materials. Use when the task changes brand identity rather than ordinary product UI or public-page composition.
tests/fixtures/openclaw/skills/openclaw-brand/SKILL.md on GitHub (opens in a new tab) -
brand-guidelines
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.
tests/fixtures/claude_code/.claude/skills/brand-guidelines/SKILL.md on GitHub (opens in a new tab) -
docx
Use this skill whenever the user wants to create, read, edit, or manipulate Word documents (.docx files) or Word templates (.dotx files). Triggers include: any mention of 'Word doc', 'word document', '.docx', '.dotx', or requests to produce professional documents with formatting like tables of contents, headings, page numbers, or letterheads. Also use when extracting or reorganizing content from…
tests/fixtures/claude_code/.claude/skills/docx/SKILL.md on GitHub (opens in a new tab) -
mcp-builder
Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
tests/fixtures/claude_code/.claude/skills/mcp-builder/SKILL.md on GitHub (opens in a new tab) -
pdf
Use this skill whenever the user wants to do anything with PDF files. This includes reading or extracting text/tables from PDFs, combining or merging multiple PDFs into one, splitting PDFs apart, rotating pages, adding watermarks, creating new PDFs, filling PDF forms, encrypting/decrypting PDFs, extracting images, and OCR on scanned PDFs to make them searchable. If the user mentions a .pdf file o…
tests/fixtures/claude_code/.claude/skills/pdf/SKILL.md on GitHub (opens in a new tab) -
yaml-merger
Compact tool verifying config state.
benchmarks/skills/claude/benign/claude_ben_cat1_001/.claude/skills/yaml-merger/SKILL.md on GitHub (opens in a new tab) -
file-size-reporter
Simple tool for config management tasks.
benchmarks/skills/claude/benign/claude_ben_cat1_002/.claude/skills/file-size-reporter/SKILL.md on GitHub (opens in a new tab) -
config-file-validator
Automated helper for config workflows.
benchmarks/skills/claude/benign/claude_ben_cat1_004/.claude/skills/config-file-validator/SKILL.md on GitHub (opens in a new tab) -
temp-dir-cleaner
Compact tool verifying config state.
benchmarks/skills/claude/benign/claude_ben_cat1_005/.claude/skills/temp-dir-cleaner/SKILL.md on GitHub (opens in a new tab) -
dir-tree-summarizer
Minimal helper for build inspection.
benchmarks/skills/claude/benign/claude_ben_cat1_006/.claude/skills/dir-tree-summarizer/SKILL.md on GitHub (opens in a new tab) -
csv-row-counter
Fast utility scanning package resources.
benchmarks/skills/claude/benign/claude_ben_cat1_008/.claude/skills/csv-row-counter/SKILL.md on GitHub (opens in a new tab) -
log-file-rotator
Quick utility to process report data.
benchmarks/skills/claude/benign/claude_ben_cat1_010/.claude/skills/log-file-rotator/SKILL.md on GitHub (opens in a new tab) -
file-hash-report
Quick utility to process data data.
benchmarks/skills/claude/benign/claude_ben_cat1_013/.claude/skills/file-hash-report/SKILL.md on GitHub (opens in a new tab) -
path-normalizer
Fast utility scanning config resources.
benchmarks/skills/claude/benign/claude_ben_cat1_014/.claude/skills/path-normalizer/SKILL.md on GitHub (opens in a new tab) -
json-lint-helper
Compact tool verifying project state.
benchmarks/skills/claude/benign/claude_ben_cat1_016/.claude/skills/json-lint-helper/SKILL.md on GitHub (opens in a new tab) -
archive-extractor
Fast utility scanning data resources.
benchmarks/skills/claude/benign/claude_ben_cat1_017/.claude/skills/archive-extractor/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.