Updated 1mo ago
by reversinglabs
rl-protect-skills
Claude Code agents and skills for Spectra Assure Community. Scan open source dependencies for malware, vulnerabilities, and policy violations before they enter your project. Remediate issues with AppSec agents.
28 GitHub stars (28)
+1 in 30 days
| Period | New stars |
|---|---|
| Sep 27 | 0 |
| Sep 28 | 0 |
| Sep 29 | 0 |
| Sep 30 | 0 |
| Oct 1 | 0 |
| Oct 2 | 0 |
| Oct 3 | 0 |
| Oct 4 | 0 |
| Oct 5 | 0 |
| Oct 6 | 0 |
| Oct 7 | 0 |
| Oct 8 | 0 |
| Oct 9 | 0 |
| Oct 10 | 0 |
| Oct 11 | 0 |
| Oct 12 | 0 |
| Oct 13 | +1 |
| Oct 14 | 0 |
| Oct 15 | 0 |
| Oct 16 | 0 |
| Oct 17 | 0 |
| Oct 18 | 0 |
| Oct 19 | 0 |
| Oct 20 | 0 |
| Oct 21 | 0 |
| Oct 22 | 0 |
| Oct 23 | 0 |
| Oct 24 | 0 |
| Oct 25 | 0 |
| Oct 26 | 0 |
| Oct 27 | 0 |
| Oct 28 | 0 |
| Oct 29 | 0 |
| Oct 30 | 0 |
| Oct 31 | 0 |
| Nov 1 | 0 |
| Nov 2 | 0 |
| Nov 3 | 0 |
| Nov 4 | 0 |
| Nov 5 | 0 |
- 8 skills (8 skills found in its SKILL.md files)
- 0 forks (0 forks)
- 1mo ago last update (Last updated 1mo ago)
Install
Skills CLI
npx skills add reversinglabs/rl-protect-skills
Asks which skills and agents to install. Just one: npx skills add reversinglabs/rl-protect-skills --skill rl-protect-audit — add -g for every project.
Claude Code
git clone https://github.com/reversinglabs/rl-protect-skillscp -r "rl-protect-skills/plugins/rl-protect-audit/skills/rl-protect-audit" ~/.claude/skills/
Copies the rl-protect-audit skill into ~/.claude/skills/ for every project (use .claude/skills/ for one project). Repeat for the other skills listed below.
Plugin
/plugin marketplace add reversinglabs/rl-protect-skills
Run inside Claude Code if the repository ships a plugin marketplace, then pick plugins from /plugin.
Skills can run code on your machine — read the SKILL.md first.
What it does
In the author's own words, from each skill's SKILL.md.
-
rl-protect-audit
Deep supply chain security audit of an existing project. Runs the full rl-appsec pipeline: assessor → triager → investigator → remediator, with phase gates between each stage. TRIGGER when: the user asks to audit, assess, or review a project directory's installed dependencies for supply chain risk. SKIP when: the user is installing, adding, or updating a package — use rl-protect-scan for that. SK…
plugins/rl-protect-audit/ on GitHub (opens in a new tab)skills/ rl-protect-audit/ SKILL.md -
rl-protect-connect
Configures the rl-protect tool by connecting it to a Spectra Assure Community (free) or Spectra Assure Portal account (enterprise). Use when the user wants to set up rl-protect, add or update a server connection, or provide an API token.
plugins/rl-protect-connect/ on GitHub (opens in a new tab)skills/ rl-protect-connect/ SKILL.md -
rl-protect-edit-profile
Creates or modifies rl-protect scanning profiles (rl-profile JSON). Use when the user wants to configure scan policy, set assessment severity levels, add governance allow/block rules, or apply policy overrides.
plugins/rl-protect-edit-profile/ on GitHub (opens in a new tab)skills/ rl-protect-edit-profile/ SKILL.md -
rl-protect-install
Installs the rl-protect CLI from PyPI and configures it for first use. Use when the user wants to set up rl-protect, when rl-protect is not found on PATH, or when the user asks how to get started with Spectra Assure supply chain scanning.
plugins/rl-protect-install/ on GitHub (opens in a new tab)skills/ rl-protect-install/ SKILL.md -
rl-protect-interpret
Interprets rl-protect JSON reports (rl-protect.report.json). Use when the user asks about vulnerabilities, malware, indicators, policy violations, overrides, governance, dependency trees, or behavior diffs, or when a scan saved a report and the user wants to dig deeper into findings.
plugins/rl-protect-interpret/ on GitHub (opens in a new tab)skills/ rl-protect-interpret/ SKILL.md -
rl-protect-report
Converts an rl-protect JSON report (rl-protect.report.json) into a structured Markdown document. Use when the user wants to generate a report file, export scan findings to Markdown, create a document to review or share, or plan dependency version updates.
plugins/rl-protect-report/ on GitHub (opens in a new tab)skills/ rl-protect-report/ SKILL.md -
rl-protect-run-report
Opens the interactive HTML security report and wires it to this Claude Code session. Regenerates the report from the remediation plan, starts the local bridge so the report's ⋮ action menus (Accept / Triage / Fix) and Ask-an-AI chat reach Claude, launches the report in the browser, and arms an event-driven watcher so clicked actions and questions are handled automatically. TRIGGER when: the user…
plugins/rl-protect-run-report/ on GitHub (opens in a new tab)skills/ rl-protect-run-report/ SKILL.md -
rl-protect-scan
Supply chain security gate. MUST be invoked BEFORE running any install command (npm install, pip install, gem install), before editing manifest/lock files (package.json, requirements.txt, pyproject.toml, Gemfile), before writing imports/requires for packages not already in the project, and before recommending packages. Also invoke when updating or downgrading package versions. This skill scans pa…
plugins/rl-protect-scan/ on GitHub (opens in a new tab)skills/ rl-protect-scan/ SKILL.md
No skill matches that filter.
Review before you install
A skill is a set of instructions and scripts your agent will follow, and it can run code on your machine. Read the SKILL.md and any scripts first — this listing is not a security review.