A curated registry of security-focused agent skills for reviewing Dependabot PRs, running static analysis, and integrating security MCP servers.
- Human-edited YAML catalog with trust tiers and categories
- Build-time full-text search index from remote skill content
- Minimal static UI (dark-first) hosted on GitHub Pages from
/docs - Primary navigation opens the skill folder on GitHub; secondary link opens the primary file (
SKILL.md,README.md, oraction.yml)
npm install
npm run buildOpen docs/index.html locally or enable GitHub Pages with source set to /docs.
| Command | Description |
|---|---|
npm run validate |
Validate catalog schema and remote file URLs |
npm run build:index |
Fetch skill content and emit docs/data/index.json |
npm run build:site |
Copy web/ assets into docs/ |
npm run build |
Full pipeline |
catalog/
├── skills.yaml # Curated skill entries
├── repositories.yaml # GitHub repo metadata
├── trust-tiers.yaml # highest / high / medium
└── categories.yaml # dependabot-prs, static-analysis, etc.
folder_url is always derived at build time from skill_file_url — never hand-authored.
- Push to
mainormaster - Enable Pages: Settings → Pages → Source: GitHub Actions
- The workflow builds and deploys from
/docs