sauce

Socket Security Skills is a collection of definitions designed to enable coding agents to perform dependency security tasks. These tasks encompass vulnerability scanning, package review, patching, firewall configuration, and secure dependency updates. The skills adhere to the standardized Agent Skill format, ensuring compatibility with a wide array of coding agent tools such as Claude Code, Codex, Gemini CLI, OpenCode, Cursor, VS Code Copilot, and others. The repository offers self-contained folders that package instructions, scripts, and resources for AI agents. Each folder contains a SKILL.md file with YAML frontmatter defining the skill's name and description, followed by specific guidance. For agents that do not support the native skill format, a fallback mechanism using AGENTS.md is provided. Key features include setup, analysis, and fix skills. Setup skills handle the installation, authentication, and configuration of Socket for a project. Analysis skills enable dependency scanning and package inspection to identify security risks. Fix skills provide holistic dependency repair, orchestrating cleanup, replacement, patching, and upgrades through individual subskills. The project supports various installation methods, including the Skills CLI, native plugin marketplaces for Claude Code, manual copying for Codex, extension installation for Gemini CLI, and plugin manifests for Cursor. Skills interact directly with the Socket CLI and Batch PURL API, eliminating the need for an MCP server. Best practices are integrated, such as enforcing soak time for dependencies and using sfw to wrap package managers for malicious package prevention.