dev-security
OpenKrillPackage health, CVE triage, software end-of-life and licence facts, DESIGN.md lint and diff, and AI coding agent news.
Claude Code
claude plugin install dev-security --marketplace nguyenhieuec/agent-tools-plugins
Skills (7)
-
Skill agent-trace
Read a tool-call log from an AI agent run and see which calls failed, looped or were slow. Use when the user asks things like "Analyze this agent tool-call log and tell me why the run failed." or "Find retry loops and slow calls in this…
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill agent-trace
-
Skill cve
Triage a CVE: how severe it is, whether it is exploited, and how likely exploitation is. Use when the user asks things like "How bad is CVE-2021-44228?" or "Which of CVE-2023-4863, CVE-2024-3094 and CVE-2019-0708 should I patch first?".
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill cve
-
Skill design-md
Lint and diff DESIGN.md files with the official Google linter, or write one from a web page. Use when the user asks things like "I will paste my DESIGN.md file next. Lint it and tell me what to fix" or "I will paste an old and a new…
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill design-md
-
Skill dev-facts
Software end-of-life dates, open-source licenses, browser support for web features and RFC facts. Use when the user asks things like "Is Node.js 20 still supported, and when does it reach end of life?" or "Is the MIT license OSI approved?".
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill dev-facts
-
Skill industry-pulse
What happened in AI coding agents like Claude Code, Codex, Cursor and Copilot, and what people say. Use when the user asks things like "What is new in AI coding agents today?" or "What happened with Claude Code this week?".
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill industry-pulse
-
Skill injection-scan
Check text before your agent reads it: hidden instructions, invisible text and links that leak data. Use when the user asks things like "Scan this web page text for prompt injection before you summarize it." or "Check this tool output for…
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill injection-scan
-
Skill packages
Check an npm or Python package, or a package.json, for vulnerabilities and upkeep. Use when the user asks things like "Is lodash 4.17.15 vulnerable?" or "Is the npm package request still maintained, and is there a safer alternative?".
Any agent
npx skills add nguyenhieuec/agent-tools-plugins --skill packages
From the OpenKrill plugin marketplace, read on 2026-10-15. Find a skill by task.