docs: add skill-security-auditor to marketplace, README, and CHANGELOG

- Add standalone plugin entry for skill-security-auditor in marketplace.json
- Update engineering-advanced-skills plugin description to include it
- Update skill counts: 85→86 across README, CHANGELOG, marketplace
- Add install command to README Quick Install section
- Add to CHANGELOG [Unreleased] section
This commit is contained in:
Leo
2026-03-04 03:00:47 +01:00
parent b87662ecdf
commit 76bd5bf933
3 changed files with 37 additions and 9 deletions

View File

@@ -4,11 +4,11 @@
"name": "Alireza Rezvani",
"url": "https://alirezarezvani.com"
},
"description": "Production-ready skill packages for Claude AI - 85 expert skills across marketing, engineering, product, C-level advisory, project management, regulatory compliance, business growth, and finance",
"description": "Production-ready skill packages for Claude AI - 86 expert skills across marketing, engineering, product, C-level advisory, project management, regulatory compliance, business growth, and finance",
"homepage": "https://github.com/alirezarezvani/claude-skills",
"repository": "https://github.com/alirezarezvani/claude-skills",
"metadata": {
"description": "85 production-ready skill packages across 9 domains: marketing, engineering, engineering-advanced, product, C-level advisory, project management, regulatory compliance, business growth, and finance",
"description": "86 production-ready skill packages across 9 domains: marketing, engineering, engineering-advanced, product, C-level advisory, project management, regulatory compliance, business growth, and finance",
"version": "2.0.0"
},
"plugins": [
@@ -53,7 +53,7 @@
{
"name": "engineering-advanced-skills",
"source": "./engineering",
"description": "24 POWERFUL-tier engineering skills: agent designer, RAG architect, database designer, migration architect, observability designer, dependency auditor, release manager, API reviewer, CI/CD pipeline builder, MCP server builder, and more",
"description": "25 POWERFUL-tier engineering skills: agent designer, RAG architect, database designer, migration architect, observability designer, dependency auditor, release manager, API reviewer, CI/CD pipeline builder, MCP server builder, skill security auditor, and more",
"version": "2.0.0",
"author": {
"name": "Alireza Rezvani"
@@ -75,7 +75,9 @@
"runbook",
"changelog",
"onboarding",
"worktree"
"worktree",
"security-audit",
"vulnerability-scanner"
],
"category": "development"
},
@@ -279,6 +281,28 @@
"retrospective"
],
"category": "project-management"
},
{
"name": "skill-security-auditor",
"source": "./engineering/skill-security-auditor",
"description": "Security audit and vulnerability scanner for AI agent skills. Scans for malicious code, prompt injection, data exfiltration, supply chain risks, and privilege escalation before installation. Zero dependencies, PASS/WARN/FAIL verdicts with remediation guidance.",
"version": "2.0.0",
"author": {
"name": "Alireza Rezvani"
},
"keywords": [
"security",
"audit",
"vulnerability",
"scanner",
"malware",
"prompt-injection",
"supply-chain",
"code-review",
"safety",
"pre-install"
],
"category": "security"
}
]
}

View File

@@ -7,6 +7,9 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
## [Unreleased]
### Added
- **skill-security-auditor** (POWERFUL tier) — Security audit and vulnerability scanner for AI agent skills. Scans for malicious code, prompt injection, data exfiltration, supply chain risks, and privilege escalation. Zero dependencies, PASS/WARN/FAIL verdicts.
### Planned
- Complete Anthropic best practices refactoring (5/42 skills remaining)
- Production Python tools for remaining RA/QM skills
@@ -99,9 +102,9 @@ Major rewrite of existing skills following Anthropic's agent skills specificatio
- **Codex skills sync** — Automated symlink workflow for Codex integration
### 📊 Stats
- **85 total skills** across 9 domains (up from 42 across 6)
- **86 total skills** across 9 domains (up from 42 across 6)
- **92+ Python automation tools** (up from 20+)
- **25 POWERFUL-tier skills** in new `engineering/` domain
- **26 POWERFUL-tier skills** in `engineering/` domain (including skill-security-auditor)
- **37/42 original skills refactored** to Anthropic best practices
### Fixed
@@ -250,7 +253,7 @@ Major rewrite of existing skills following Anthropic's agent skills specificatio
| Version | Date | Skills | Domains | Key Changes |
|---------|------|--------|---------|-------------|
| 2.0.0 | 2026-02-16 | 85 | 9 | 25 POWERFUL-tier skills, 37 refactored, Codex support, 3 new domains |
| 2.0.0 | 2026-02-16 | 86 | 9 | 26 POWERFUL-tier skills, 37 refactored, Codex support, 3 new domains |
| 1.1.0 | 2025-10-21 | 42 | 6 | Anthropic best practices refactoring (5 skills) |
| 1.0.2 | 2025-10-21 | 42 | 6 | GitHub repository pages (LICENSE, CONTRIBUTING, etc.) |
| 1.0.1 | 2025-10-21 | 42 | 6 | Star History, link fixes |

View File

@@ -34,6 +34,7 @@ Use Claude Code's built-in plugin system for native integration:
/plugin install finance-skills@claude-code-skills # 1 finance skill
# Or install individual skills:
/plugin install skill-security-auditor@claude-code-skills # Security scanner
/plugin install content-creator@claude-code-skills # Single skill
/plugin install fullstack-engineer@claude-code-skills # Single skill
```
@@ -112,7 +113,7 @@ Or preview first with `--dry-run`:
Install to Claude Code, Cursor, VS Code, Amp, Goose, and more - all with one command:
```bash
# Install all 85 skills to all supported agents
# Install all 86 skills to all supported agents
npx agent-skills-cli add alirezarezvani/claude-skills
# Install to specific agent (Claude Code)
@@ -2251,7 +2252,7 @@ Explore our complete ecosystem of Claude Code augmentation tools and utilities:
### Current Status (Q4 2025)
**✅ Phase 1: Complete - 85 Production-Ready Skills**
**✅ Phase 1: Complete - 86 Production-Ready Skills**
**Marketing Skills (6):**
- Content Creator - Brand voice analysis, SEO optimization, social media frameworks