AI Agent Skills

Supply chain security gate. MUST be invoked BEFORE running any install command (npm install, pip install, gem install), before editing manifest/lock files (package.json,…

A baseline skill that the security scanner must report as completely clean. Used as a false-positive gate.

Records and queries what agents actually did, attributed to the skill that was active, using qvr's experimental audit subsystem. Use when a user wants observability into…

Vets and continuously verifies the integrity and provenance of agent skills installed with qvr. Use when a user cares about skill security, trust, signing, tampering, or…

Full audit readiness assessment against Zealynx security framework. Goes check-by-check through every framework check for your vertical. Produces .zealynx-run.json for i…

Deep analysis of a single security check against local Solidity code. Use with framework check IDs like AC-01, LN-02, VT-03. Also works during manual assessment to get A…

Quick security scan of Solidity smart contracts. Analyzes code against real audit findings from 4,500+ Solodit references across 39 DeFi verticals. Use when reviewing So…

Дисциплинированный пайплайн разработки проекта по стадиям 0–10 — context load → idea → plan + criteria → risk spikes → contracts → vertical slice → tasks → implementatio…

Triage whether a known CVE/GHSA vulnerability is actually exploitable in this project. Use when the user wants a reachability verdict on a specific advisory — i

Coordinate SEO, LLM-readable site architecture, UX, content, monitoring, security, and external authority work as a task-plan-driven sequence. Use this skill when the us…