From suaveplan-security
Use when implementing or debugging code that uses @suaveplan/slsa: SLSA L1-L2 supply-chain security: provenance, SBOM, DSSE attestations, Sigstore Rekor transparency-log client, policy evaluation, OTel audit events.
How this skill is triggered — by the user, by Claude, or both
Slash command
/suaveplan-security:slsaThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
SLSA L1-L2 supply-chain security for the Suaveplan monorepo. Generates and verifies in-toto / SLSA v1.0 provenance, CycloneDX 1.5 SBOMs, DSSE attestation envelopes, and RFC 6962 Sigstore Rekor transparency-log proofs. Every capability emits structured OTel span events and raises typed `SlsaError` subclasses with stable error codes.
SLSA L1-L2 supply-chain security for the Suaveplan monorepo. Generates and verifies in-toto / SLSA v1.0 provenance, CycloneDX 1.5 SBOMs, DSSE attestation envelopes, and RFC 6962 Sigstore Rekor transparency-log proofs. Every capability emits structured OTel span events and raises typed SlsaError subclasses with stable error codes.
@suaveplan/slsa.import { /* see API Reference below */ } from "@suaveplan/slsa";
Workspace dependencies: @suaveplan/crypto, @suaveplan/crypto-hash, @suaveplan/crypto-utils, @suaveplan/error, @suaveplan/serialize, @suaveplan/types
This skill is intentionally short. The package's own documentation is the authoritative source — read these in order:
packages/security/slsa/README.md — overview, install, quick-start, module indexpackages/security/slsa/src/**/*.md — co-located docs per implementation file (Purpose, Features, Basic + Advanced examples, full API reference, Implementation notes — all packages in genesis ship ≥200 words per module)packages/security/slsa/package.json exports map — every subpath you can import fromWhen the user asks an API question, read the relevant co-located .md first; do not answer from training-data memory.
@suaveplan/crypto@suaveplan/crypto-hash@suaveplan/crypto-utils@suaveplan/error@suaveplan/serialize@suaveplan/typesThis SKILL.md is auto-generated by suaveplan-skills/scripts/generate-skills.ts from the package's README. Do not edit by hand — re-run the generator after the README changes.
Provides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.
npx claudepluginhub suaveplan/suaveplan-skills --plugin suaveplan-security