Skip to content
AI Primer
๐Ÿ”’ Security

package-security-check

instructaby instructa23 days ago127

Run a reusable JavaScript supply-chain security baseline with pnpm-first hardening, release-age gating, lifecycle-script controls, exotic dependency checks, CI install checks, and optional incident IOC profiles.

Install

npx skills add https://github.com/instructa/agent-skills --skill package-security-check
Show step-by-step
  1. 1

    Open your terminal

    • Mac: Press โŒ˜ Space, type "Terminal", press Enter
    • Windows: Press Win R, type "cmd", press Enter
  2. 2

    Paste the command above and press Enter

    Use the Copy command button, then paste in your terminal (Mac: โŒ˜V, Windows: Ctrl V).

  3. 3

    Restart Claude Code

    Close and reopen Claude Code, or start a new session, so it picks up the new skill.

Where it lives
~/.claude/skills/instructa--agent-skills--skills--package-security-check/
โ”œโ”€โ”€ SKILL.md
โ””โ”€โ”€ ... (skill resource files)
View on GitHub

Comments

X@kevinkern

"after these supply-chain incidents, I summarized some basic repo hardening checks into a skill. It checks the repo for - pnpm 11+ package manager policy -..."

Always review skill code before installing. Third-party skills may contain scripts that run on your machine.

Related skills

๐Ÿ”’ Security

vercel-deepsec

Detects broad web application security vulnerabilities using the Vercel DeepSec benchmark prompt. Use when benchmarking security review coverage or running an open-ended appsec scan for auth bypass, missing auth, XSS, RCE, SQL injection, SSRF, path traversal, secrets, weak crypto, unsafe redirects, webhook verification, Next.js Server Actions, Lua/OpenResty, Go, cache poisoning, or header trust bugs.

by getsentry ยท 1 month ago56
๐ŸŽจ Design

baoyu-comic

Knowledge comics (็Ÿฅ่ฏ†ๆผซ็”ป): educational, biography, tutorial.

by NousResearch ยท 16 days ago180.3k
๐Ÿค– ML/AI

comfyui

Generate images, video, and audio with ComfyUI โ€” install, launch, manage nodes/models, run workflows with parameter injection. Uses the official comfy-cli for lifecycle and direct REST/WebSocket API for execution.

by NousResearch ยท 1 month ago180.3k
๐Ÿค– ML/AI

hyperframes

Create HTML-based video compositions, animated title cards, social overlays, captioned talking-head videos, audio-reactive visuals, and shader transitions using HyperFrames. HTML is the source of truth for video. Use when the user wants a rendered MP4/WebM from an HTML composition, wants to animate text/logos/charts over media, needs captions synced to audio, wants TTS narration, or wants to convert a website into a video.

by NousResearch ยท 1 month ago180.3k