Updated 2w ago
by reversinglabs
rl-protect-skills
Claude Code agents and skills for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violations before they enter your project. Remediate issues with AppSec agents.
28 GitHub stars (28)
+1 in 20 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
- 6 skills (6 skills found in its SKILL.md files)
- 0 forks (0 forks)
- 2w ago last update (Last updated 2w ago)
Install
Skills CLI
npx skills add reversinglabs/rl-protect-skills
Asks which skills and agents to install. Just one: npx skills add reversinglabs/rl-protect-skills --skill rl-protect-connect — add -g for every project.
Claude Code
git clone https://github.com/reversinglabs/rl-protect-skillscp -r "rl-protect-skills/plugins/rl-protect-connect/skills/rl-protect-connect" ~/.claude/skills/
Copies the rl-protect-connect skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add reversinglabs/rl-protect-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
rl-protect-connect
Configures the rl-protect tool by connecting it to a Spectra Assure Community (free) or Spectra Assure Portal account (enterprise). Use when the user wants to set up rl-protect, add or update a server connection, or provide an API token.
plugins/rl-protect-connect/skills/rl-protect-connect/SKILL.md on GitHub (opens in a new tab) -
rl-protect-edit-profile
Creates or modifies rl-protect scanning profiles (rl-profile JSON). Use when the user wants to configure scan policy, set assessment severity levels, add governance allow/block rules, or apply policy overrides.
plugins/rl-protect-edit-profile/skills/rl-protect-edit-profile/SKILL.md on GitHub (opens in a new tab) -
rl-protect-install
Installs the rl-protect CLI from PyPI and configures it for first use. Use when the user wants to set up rl-protect, when rl-protect is not found on PATH, or when the user asks how to get started with Spectra Assure supply chain scanning.
plugins/rl-protect-install/skills/rl-protect-install/SKILL.md on GitHub (opens in a new tab) -
rl-protect-interpret
Interprets rl-protect JSON reports (rl-protect.report.json). Use when the user asks about vulnerabilities, malware, indicators, policy violations, overrides, governance, dependency trees, or behavior diffs, or when a scan saved a report and the user wants to dig deeper into findings.
plugins/rl-protect-interpret/skills/rl-protect-interpret/SKILL.md on GitHub (opens in a new tab) -
rl-protect-report
Converts an rl-protect JSON report (rl-protect.report.json) into a structured Markdown document. Use when the user wants to generate a report file, export scan findings to Markdown, create a document to review or share, or plan dependency version updates.
plugins/rl-protect-report/skills/rl-protect-report/SKILL.md on GitHub (opens in a new tab) -
rl-protect-scan
Supply chain security gate. MUST be invoked BEFORE running any install command (npm install, pip install, gem install), before editing manifest/lock files (package.json, requirements.txt, pyproject.toml, Gemfile), before writing imports/requires for packages not already in the project, and before recommending packages. Also invoke when updating or downgrading package versions. This skill scans pa…
plugins/rl-protect-scan/skills/rl-protect-scan/SKILL.md on GitHub (opens in a new tab)
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.