reviewdog

This skill performs multi-language static application security testing (SAST) using Horusec, scanning for vulnerabilities across 18+ languages and detecting secrets in git history. It integrates into CI/CD pipelines to provide prioritized security findings with severity classification. Use it for comprehensive security analysis during development and to maintain a secure SDLC.

This Claude Skill generates Software Bill of Materials (SBOMs) for container images and applications using Syft, detecting packages across 28+ ecosystems. It outputs multiple formats (CycloneDX, SPDX) for vulnerability scanning, license compliance, and supply chain security. Use it to integrate SBOM generation into CI/CD pipelines or create signed attestations for software provenance.

This skill provides a production-tested setup for Content Collections, a TypeScript-first tool that transforms Markdown/MDX files into type-safe data collections with Zod validation. Use it when building blogs, documentation sites, or content-heavy Vite + React applications to ensure type safety and automatic content validation. It covers everything from Vite plugin configuration and MDX compilation to deployment optimization and schema validation.

This skill enables developers to build applications with the Polymarket prediction markets platform, including API integration for trading and market data. It also provides real-time data streaming via WebSocket to monitor live trades and market activity. Use it for implementing trading strategies or creating tools that process live market updates.