Security and compliance enforcement automation including pre-commit hooks, policy checks, and validation
Comprehensive branch protection configuration patterns with enforcement automation. Security tiers, IaC at scale, GitHub App enforcement, audit reporting, and bypass controls.
Block non-compliant manifests at merge time using policy-platform container in CI. Automate Kyverno validation across environments with zero configuration drift.
Make security mandatory through automation. Branch protection, pre-commit hooks, status checks, policy-as-code, and SLSA provenance for SOC 2 compliance.
Phased rollout plan for SDLC hardening. Foundation to runtime enforcement in 90 days. Prioritized by risk and audit importance.
Incident response playbook templates for Kubernetes. Detection, containment, remediation, and post-incident procedures with decision trees and validation steps.
Own this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimOwn this plugin?
Verify ownership to unlock analytics, metadata editing, and a verified badge. GitHub access is read-only (username + org membership).
Sign in to claimBased on adoption, maintenance, documentation, and repository signals. Not a security audit or endorsement.
Claude Code skills marketplace for secure development patterns, enforcement automation, and build engineering.
Status: 🚧 Under active development
# Add the AEL skills marketplace
/plugin marketplace add adaptive-enforcement-lab/claude-skills
# Install individual plugin collections
/plugin install patterns@ael-skills
/plugin install enforcement@ael-skills
/plugin install build@ael-skills
Reusable engineering patterns automatically generated from AEL documentation:
Security and compliance enforcement automation from AEL enforcement guides:
Build engineering patterns from AEL build guides:
All skills in this repository are automatically generated from AEL documentation:
To auto-register this marketplace for your team, add to .claude/settings.json in your project:
{
"extraKnownMarketplaces": {
"ael-skills": {
"source": {
"source": "github",
"repo": "adaptive-enforcement-lab/claude-skills"
}
}
},
"enabledPlugins": {
"patterns@ael-skills": true,
"enforcement@ael-skills": true,
"build@ael-skills": true
}
}
.claude-plugin/
└── marketplace.json # Marketplace catalog
plugins/ # Generated plugins (DO NOT EDIT)
├── patterns/
│ ├── .claude-plugin/
│ │ └── plugin.json # Plugin metadata
│ └── skills/ # Pattern skills
├── enforce/
│ ├── .claude-plugin/
│ │ └── plugin.json # Plugin metadata
│ └── skills/ # Enforcement skills
├── build/
│ ├── .claude-plugin/
│ │ └── plugin.json # Plugin metadata
│ └── skills/ # Build skills
└── secure/
├── .claude-plugin/
│ └── plugin.json # Plugin metadata
└── skills/ # Security skills
skillgen/ # Generator source
├── cmd/skillgen/ # Main application
├── internal/
│ ├── domain/ # Core entities
│ ├── ports/ # Interfaces
│ ├── adapters/ # Implementations
│ └── services/ # Business logic
└── templates/ # Go templates
.github/workflows/
└── generate-skills.yml # CI automation
# Build the generator
cd skillgen && go build -o ../bin/skillgen ./cmd/skillgen
# Run generator (from repo root)
./bin/skillgen \
--source ../adaptive-enforcement-lab-com/docs \
--output plugins \
--plugin-metadata ./plugin-metadata.json \
--release-manifest ./.release-please-manifest.json
# Run tests
cd skillgen && go test ./...
See CONTRIBUTING.md for detailed development guidelines.
This project follows Clean/Hexagonal Architecture:
internal/domain): Core entities and business logicinternal/ports): Interfaces for external dependenciesinternal/adapters): Implementations (filesystem, parsers)internal/services): Application services (extractors, generators)cmd/skillgen): Entry point and dependency injectionReleases are automated using release-please:
Contributions are welcome! See CONTRIBUTING.md for:
For security vulnerability reporting, see SECURITY.md.
Turn secure development into an enforced standard, not an afterthought.
Reusable engineering patterns for error handling, state management, performance optimization, and resilience
Build engineering patterns for CI/CD pipelines, release automation, and deployment strategies
Security patterns and hardening guides for cloud-native applications, GitHub Actions, and supply chain security
npx claudepluginhub adaptive-enforcement-lab/claude-skills --plugin enforceNavigate cnspec policy bundles using graph commands for LLMs
Check infrastructure compliance (SOC2, HIPAA, PCI-DSS)
Runtime security enforcement for AI coding agents — policy hooks, audit receipts, threat hunting, and security tools for Claude Code.
A secure runtime for Claude Code. Intercepts every tool call with policy-based allow/block/ask decisions, evasion detection, path fencing, file snapshots, and audit logging.
Harness-native ECC operator layer - 67 agents, 271 skills, 92 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
v9.44.1 — Patch release for Gemini environment/version detection and qwen auth gating. Run /octo:setup.