cybersec-superpowers 0.1.0__tar.gz

cybersec_superpowers-0.1.0/.claude-plugin/plugin.json

@@ -0,0 +1,26 @@
+{
+  "name": "CyberSecurity Superpowers",
+  "description": "A curated set of Claude agent skills for cybersecurity operations including secure coding, static analysis, incident response, compliance auditing, and threat intelligence.",
+  "version": "0.1.0",
+  "author": "rohit-barui",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/rohit-barui/cybersecurity-superpowers"
+  },
+  "capabilities": {
+    "skills": [
+      "secure-coding",
+      "static-analysis",
+      "incident-response",
+      "compliance-audit",
+      "threat-intelligence"
+    ],
+    "tools": true
+  },
+  "configuration": {
+    "claude_code": {
+      "auto_attach": true,
+      "skill_discovery": "directory-based"
+    }
+  }
+}

cybersec_superpowers-0.1.0/.opencode/INSTALL.md

@@ -0,0 +1,75 @@
+# OpenCode Integration for Cybersecurity Superpowers
+
+## Overview
+
+This guide explains how to install and activate the Cybersecurity Superpowers skills within [OpenCode](https://opencode.ai).
+
+> **Prerequisites**: You must have OpenCode installed and configured. See the [OpenCode documentation](https://opencode.ai/docs) for setup instructions.
+
+## Installation
+
+1. Clone this repository to your local machine:
+   ```bash
+   git clone https://github.com/rohit-barui/CyberSecurity-Superpowers.git
+   cd CyberSecurity-Superpowers
+   ```
+
+2. Run the setup script to verify the environment:
+   ```bash
+   bash scripts/setup.sh
+   ```
+
+3. Configure OpenCode to recognize the skills. Add the following to your OpenCode configuration file (typically `~/.config/opencode/opencode.json` or project-local `.opencode/opencode.json`):
+
+   ```json
+   {
+     "agents": {
+       "cybersecurity-superpowers": {
+         "path": "/path/to/CyberSecurity-Superpowers",
+         "auto_load": true
+       }
+     }
+   }
+   ```
+
+## Activating Skills
+
+Skills are automatically discovered from the `skills/cybersecurity/` directory. OpenCode will load the following skills:
+
+| Skill                | Description                                    |
+|----------------------|------------------------------------------------|
+| threat-modeling      | STRIDE-based threat analysis with CVSS scoring |
+| secure-coding        | Language-specific OWASP security checklists    |
+| static-analysis      | SAST and dependency vulnerability scanning     |
+| penetration-testing  | Scoped red-team plan generation                |
+| incident-response    | NIST-aligned incident response playbooks       |
+| supply-chain-security | SBOM generation and supply chain scanning     |
+
+## Available Scripts
+
+| Script | Purpose |
+|--------|---------|
+| `scripts/run-orchestrator.sh` | Multi-skill pipeline with `implement`, `threat-model`, `full` modes |
+| `scripts/run-security-suite.sh` | Batch runner for all 5 core skills |
+| `scripts/setup.sh` | Environment verification |
+| `scripts/init-project.sh` | Directory creation and hook installation |
+| `scripts/generate-sbom.sh` | SBOM generation |
+| `scripts/run-clear-eval.sh` | CLEAR framework project evaluation |
+
+## Verification
+
+To verify that skills are properly loaded:
+
+```bash
+opencode agent list
+```
+
+You should see `cybersecurity-superpowers` in the list of available agents.
+
+## Uninstalling
+
+Remove the agent configuration from your OpenCode config file, or delete this repository.
+
+---
+
+For full documentation, see the [main README](README.md).

cybersec_superpowers-0.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2025 Rohit Barui
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

cybersec_superpowers-0.1.0/MANIFEST.in

@@ -0,0 +1,18 @@
+include VERSION
+include README.md
+include LICENSE
+recursive-include scripts/ *.sh
+recursive-include skills/cybersecurity/ *
+recursive-include skills/orchestration/ *
+recursive-include tools/ *
+recursive-include hooks/ *.sh
+recursive-include tests/ *.sh
+recursive-include tests/ *.json
+recursive-include examples/demo-project/ *
+recursive-include artifacts/reports/ *.md
+recursive-include artifacts/sbom/ *.json
+recursive-include docs/ *
+recursive-include assets/ *
+recursive-include marketing/ *
+recursive-include .claude-plugin/ *
+recursive-include .opencode/ *

cybersec_superpowers-0.1.0/PKG-INFO

@@ -0,0 +1,204 @@
+Metadata-Version: 2.4
+Name: cybersec-superpowers
+Version: 0.1.0
+Summary: Enterprise-grade cybersecurity orchestration platform — STRIDE threat modeling, OWASP secure coding, SAST, pentest plans, incident response playbooks, and SBOM supply-chain security as composable agent skills
+Author-email: Rohit Barui <rohit.barui@example.com>
+License: MIT
+Project-URL: Homepage, https://github.com/rohit-barui/CyberSecurity-Superpowers
+Project-URL: Repository, https://github.com/rohit-barui/CyberSecurity-Superpowers
+Project-URL: Documentation, https://github.com/rohit-barui/CyberSecurity-Superpowers#readme
+Project-URL: Issues, https://github.com/rohit-barui/CyberSecurity-Superpowers/issues
+Keywords: cybersecurity,devsecops,threat-modeling,secure-coding,incident-response,sast,sbom,owasp
+Classifier: Development Status :: 4 - Beta
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Information Technology
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Operating System :: POSIX
+Classifier: Operating System :: MacOS
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Unix Shell
+Classifier: Topic :: Security
+Classifier: Topic :: Software Development :: Build Tools
+Classifier: Topic :: System :: Systems Administration
+Requires-Python: >=3.8
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Dynamic: license-file
+
+# 🛡️ CyberSecurity Superpowers
+
+> **The Ultimate Enterprise DevSecOps & Cybersecurity Extension for AI Coding Agents.**
+> Embed automated threat modeling, secure coding, SAST scanning, red-team penetration testing, NIST incident response, and supply-chain security into any agentic workflow.
+
+[![CI Pipeline](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/ci.yml/badge.svg)](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/ci.yml)
+[![Release](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/release.yml/badge.svg)](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/release.yml)
+[![PyPI](https://img.shields.io/badge/pypi-cybersec--superpowers-blue?style=flat-square&logo=pypi)](https://pypi.org/project/cybersec-superpowers/)
+[![Skills](https://img.shields.io/badge/superpowers-6_core_skills-007ACC?style=flat-square&logo=shield)](https://github.com/rohit-barui/CyberSecurity-Superpowers)
+[![Version](https://img.shields.io/badge/version-v0.1.0-brightgreen?style=flat-square)](https://github.com/rohit-barui/CyberSecurity-Superpowers/releases)
+[![License](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
+[![Standards](https://img.shields.io/badge/standards-OWASP_|_NIST_|_MITRE_ATT%26CK-orange?style=flat-square)](https://github.com/rohit-barui/CyberSecurity-Superpowers)
+
+---
+
+## ⚡ Why CyberSecurity Superpowers is THE Go-To Skill Set
+
+AI coding assistants are faster than ever at writing code — but speed without security creates vulnerabilities at scale. **CyberSecurity Superpowers** transforms any AI assistant (Claude Code, Gemini CLI, Cursor, OpenCode, Copilot) into an autonomous **CISO-grade DevSecOps engineer**.
+
+### 🌟 Key Differentiators & Benefits
+
+* 🎯 **360° SDLC Security Coverage**: From pre-code threat modeling to post-breach incident playbooks, cover every phase of security automatically.
+* 🤖 **Autonomous ReAct Orchestrator**: Intelligently routes tasks to specific security skill modules without manual intervention.
+* 🏆 **Industry-Standard Alignment**: Native integration with **OWASP Top 10**, **OWASP WSTG**, **MITRE ATT&CK**, **NIST SP 800-61**, **CVSS v3.1**, and **CycloneDX/SPDX**.
+* 🌐 **Harness-Agnostic & Zero Lock-in**: Works out of the box with any LLM, CLI, or agent runtime on Linux, macOS, and Windows.
+* 📊 **Audit-Ready Artifact Generation**: Automatically generates structured, version-controlled Markdown & JSON reports in `artifacts/reports/`.
+
+---
+
+## 🚀 Quickstart
+
+Get up and running in 30 seconds. Choose your install method:
+
+### 📦 One-Click Install (curl | bash)
+
+```bash
+curl -sSL https://raw.githubusercontent.com/rohit-barui/CyberSecurity-Superpowers/main/install.sh | bash
+cybersec demo
+```
+
+### 🐍 PyPI (pip / pipx)
+
+```bash
+pipx install cybersec-superpowers
+# or: pip install --user cybersec-superpowers
+cybersec threat-model "My App"
+```
+
+### 📁 Git Clone
+
+```bash
+git clone https://github.com/rohit-barui/CyberSecurity-Superpowers.git
+cd CyberSecurity-Superpowers
+bash scripts/setup.sh
+bash examples/demo-project/run-demo.sh
+```
+
+---
+
+## 🧩 The 6 Core Cybersecurity Superpowers
+
+| Superpower | Description | Industry Standard | Output Artifact |
+|---|---|---|---|
+| 🧠 **Threat Modeling** | Automated STRIDE threat analysis, trust boundary mapping, & CVSS v3.1 risk scoring | NIST SP 800-53 / OWASP ASVS | `artifacts/reports/stride-model.md` |
+| 🛡️ **Secure Coding** | Language-specific security checklist enforcement (JS, TS, Python, Go, Rust) | OWASP Top 10 | `artifacts/reports/SECURITY.md` |
+| 🔍 **Static Analysis (SAST)** | Multi-engine SAST & dependency vulnerability scanning (Semgrep, Bandit, Gosec, NPM Audit) | SARIF / CWE / CVE | `artifacts/reports/SECURITY_SCAN.md` |
+| ⚔️ **Penetration Testing** | Scoped red-team attack plan generator mapped to offensive tactics | MITRE ATT&CK & OWASP WSTG | `artifacts/reports/pentest-plan.md` |
+| 🚨 **Incident Response** | Incident playbook generator for Ransomware, Data Breach, Phishing, DDoS, & Insider Threats | NIST SP 800-61 Rev. 2 | `artifacts/reports/incident-playbook.md` |
+| 📦 **Supply-Chain Security** | Automated SBOM generation (CycloneDX / SPDX) and dependency vulnerability audit | NTIA Minimum Elements | `artifacts/sbom/sbom-report.json` |
+
+---
+
+## 🏗️ Architecture & Orchestration
+
+The system utilizes an autonomous **ReAct Orchestrator** (`scripts/run-orchestrator.sh`) that accepts natural language intent or CLI modes and routes them across the underlying security modules:
+
+```
+                  ┌───────────────────────────────┐
+                  │    User / AI Agent Intent     │
+                  └───────────────┬───────────────┘
+                                  │
+                                  ▼
+                  ┌───────────────────────────────┐
+                  │      ReAct Orchestrator       │
+                  │   (scripts/run-orchestrator)  │
+                  └───────────────┬───────────────┘
+                                  │
+      ┌───────────────┬───────────┼───────────┬───────────────┐
+      ▼               ▼           ▼           ▼               ▼
+┌───────────┐   ┌───────────┐ ┌───────────┐ ┌───────────┐   ┌───────────┐
+│  Threat   │   │  Secure   │ │  Static   │ │   Pentest │   │ Incident  │
+│ Modeling  │   │  Coding   │ │ Analysis  │ │   Plan    │   │ Response  │
+└─────┬─────┘   └─────┬─────┘ └─────┬─────┘ └─────┬─────┘   └─────┬─────┘
+      │               │           │           │               │
+      └───────────────┴───────────┼───────────┴───────────────┘
+                                  │
+                                  ▼
+                  ┌───────────────────────────────┐
+                  │ Audit-Ready Markdown & JSON   │
+                  │ (artifacts/reports/*.md)      │
+                  └───────────────────────────────┘
+```
+
+---
+
+## 💻 Usage & CLI Examples
+
+### Automated Orchestration
+
+```bash
+# Run Secure Coding + SAST on current codebase
+bash scripts/run-orchestrator.sh implement "Authentication microservice"
+
+# Generate complete Threat Model for a project
+bash scripts/run-orchestrator.sh threat-model "Payment Gateway API"
+
+# Run full 5-phase security suite
+bash scripts/run-orchestrator.sh full "Production Release Candidate"
+```
+
+### Direct Skill Execution
+
+```bash
+# Threat Modeling
+bash skills/cybersecurity/threat-modeling/run.sh --project "E-Commerce System"
+
+# Secure Coding Checklists
+bash skills/cybersecurity/secure-coding/run.sh --language python --target-dir ./src
+
+# Static Analysis (SAST)
+bash skills/cybersecurity/static-analysis/run.sh --target-dir ./src --format md
+
+# Penetration Testing Plan
+bash skills/cybersecurity/penetration-testing/run.sh --target-app "Portal API" --scope web
+
+# Incident Response Playbook
+bash skills/cybersecurity/incident-response/run.sh --incident-type ransomware
+
+# Supply Chain SBOM Generation
+bash scripts/generate-sbom.sh --target-dir .
+```
+
+### Git Hooks & DevSecOps Automation
+
+Protect your main branch automatically before commits and pushes:
+
+```bash
+# Install automated Git hooks (Pre-commit SAST & Pre-push security gates)
+bash scripts/init-project.sh
+```
+
+---
+
+## 🛡️ CI/CD Pipeline
+
+Every commit and pull request is automatically validated by GitHub Actions (`.github/workflows/ci.yml`):
+
+* ✅ **Lint & Frontmatter Validation**: ShellCheck, Yamllint, and `SKILL.md` spec validation.
+* ✅ **Automated Skill Tests**: End-to-end unit test execution across all 6 superpowers (`tests/run-skill-tests.sh`).
+* ✅ **Orchestrator Verification**: Live execution check of the orchestrator pipeline.
+* ✅ **Security Gate Build**: Summary matrix validation with non-zero exit enforcement on failure.
+
+---
+
+## 👥 Contributing
+
+We welcome community contributions! Check out our [Good First Issues](docs/good-first-issues.md) and review [CONTRIBUTING.md](CONTRIBUTING.md) to get started.
+
+---
+
+## 📄 License
+
+This project is licensed under the [MIT License](LICENSE). Feel free to use, adapt, and build upon it!
+
+---
+
+*Built with ❤️ for the AI Security & DevSecOps Community.*

cybersec_superpowers-0.1.0/README.md

@@ -0,0 +1,177 @@
+# 🛡️ CyberSecurity Superpowers
+
+> **The Ultimate Enterprise DevSecOps & Cybersecurity Extension for AI Coding Agents.**
+> Embed automated threat modeling, secure coding, SAST scanning, red-team penetration testing, NIST incident response, and supply-chain security into any agentic workflow.
+
+[![CI Pipeline](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/ci.yml/badge.svg)](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/ci.yml)
+[![Release](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/release.yml/badge.svg)](https://github.com/rohit-barui/CyberSecurity-Superpowers/actions/workflows/release.yml)
+[![PyPI](https://img.shields.io/badge/pypi-cybersec--superpowers-blue?style=flat-square&logo=pypi)](https://pypi.org/project/cybersec-superpowers/)
+[![Skills](https://img.shields.io/badge/superpowers-6_core_skills-007ACC?style=flat-square&logo=shield)](https://github.com/rohit-barui/CyberSecurity-Superpowers)
+[![Version](https://img.shields.io/badge/version-v0.1.0-brightgreen?style=flat-square)](https://github.com/rohit-barui/CyberSecurity-Superpowers/releases)
+[![License](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE)
+[![Standards](https://img.shields.io/badge/standards-OWASP_|_NIST_|_MITRE_ATT%26CK-orange?style=flat-square)](https://github.com/rohit-barui/CyberSecurity-Superpowers)
+
+---
+
+## ⚡ Why CyberSecurity Superpowers is THE Go-To Skill Set
+
+AI coding assistants are faster than ever at writing code — but speed without security creates vulnerabilities at scale. **CyberSecurity Superpowers** transforms any AI assistant (Claude Code, Gemini CLI, Cursor, OpenCode, Copilot) into an autonomous **CISO-grade DevSecOps engineer**.
+
+### 🌟 Key Differentiators & Benefits
+
+* 🎯 **360° SDLC Security Coverage**: From pre-code threat modeling to post-breach incident playbooks, cover every phase of security automatically.
+* 🤖 **Autonomous ReAct Orchestrator**: Intelligently routes tasks to specific security skill modules without manual intervention.
+* 🏆 **Industry-Standard Alignment**: Native integration with **OWASP Top 10**, **OWASP WSTG**, **MITRE ATT&CK**, **NIST SP 800-61**, **CVSS v3.1**, and **CycloneDX/SPDX**.
+* 🌐 **Harness-Agnostic & Zero Lock-in**: Works out of the box with any LLM, CLI, or agent runtime on Linux, macOS, and Windows.
+* 📊 **Audit-Ready Artifact Generation**: Automatically generates structured, version-controlled Markdown & JSON reports in `artifacts/reports/`.
+
+---
+
+## 🚀 Quickstart
+
+Get up and running in 30 seconds. Choose your install method:
+
+### 📦 One-Click Install (curl | bash)
+
+```bash
+curl -sSL https://raw.githubusercontent.com/rohit-barui/CyberSecurity-Superpowers/main/install.sh | bash
+cybersec demo
+```
+
+### 🐍 PyPI (pip / pipx)
+
+```bash
+pipx install cybersec-superpowers
+# or: pip install --user cybersec-superpowers
+cybersec threat-model "My App"
+```
+
+### 📁 Git Clone
+
+```bash
+git clone https://github.com/rohit-barui/CyberSecurity-Superpowers.git
+cd CyberSecurity-Superpowers
+bash scripts/setup.sh
+bash examples/demo-project/run-demo.sh
+```
+
+---
+
+## 🧩 The 6 Core Cybersecurity Superpowers
+
+| Superpower | Description | Industry Standard | Output Artifact |
+|---|---|---|---|
+| 🧠 **Threat Modeling** | Automated STRIDE threat analysis, trust boundary mapping, & CVSS v3.1 risk scoring | NIST SP 800-53 / OWASP ASVS | `artifacts/reports/stride-model.md` |
+| 🛡️ **Secure Coding** | Language-specific security checklist enforcement (JS, TS, Python, Go, Rust) | OWASP Top 10 | `artifacts/reports/SECURITY.md` |
+| 🔍 **Static Analysis (SAST)** | Multi-engine SAST & dependency vulnerability scanning (Semgrep, Bandit, Gosec, NPM Audit) | SARIF / CWE / CVE | `artifacts/reports/SECURITY_SCAN.md` |
+| ⚔️ **Penetration Testing** | Scoped red-team attack plan generator mapped to offensive tactics | MITRE ATT&CK & OWASP WSTG | `artifacts/reports/pentest-plan.md` |
+| 🚨 **Incident Response** | Incident playbook generator for Ransomware, Data Breach, Phishing, DDoS, & Insider Threats | NIST SP 800-61 Rev. 2 | `artifacts/reports/incident-playbook.md` |
+| 📦 **Supply-Chain Security** | Automated SBOM generation (CycloneDX / SPDX) and dependency vulnerability audit | NTIA Minimum Elements | `artifacts/sbom/sbom-report.json` |
+
+---
+
+## 🏗️ Architecture & Orchestration
+
+The system utilizes an autonomous **ReAct Orchestrator** (`scripts/run-orchestrator.sh`) that accepts natural language intent or CLI modes and routes them across the underlying security modules:
+
+```
+                  ┌───────────────────────────────┐
+                  │    User / AI Agent Intent     │
+                  └───────────────┬───────────────┘
+                                  │
+                                  ▼
+                  ┌───────────────────────────────┐
+                  │      ReAct Orchestrator       │
+                  │   (scripts/run-orchestrator)  │
+                  └───────────────┬───────────────┘
+                                  │
+      ┌───────────────┬───────────┼───────────┬───────────────┐
+      ▼               ▼           ▼           ▼               ▼
+┌───────────┐   ┌───────────┐ ┌───────────┐ ┌───────────┐   ┌───────────┐
+│  Threat   │   │  Secure   │ │  Static   │ │   Pentest │   │ Incident  │
+│ Modeling  │   │  Coding   │ │ Analysis  │ │   Plan    │   │ Response  │
+└─────┬─────┘   └─────┬─────┘ └─────┬─────┘ └─────┬─────┘   └─────┬─────┘
+      │               │           │           │               │
+      └───────────────┴───────────┼───────────┴───────────────┘
+                                  │
+                                  ▼
+                  ┌───────────────────────────────┐
+                  │ Audit-Ready Markdown & JSON   │
+                  │ (artifacts/reports/*.md)      │
+                  └───────────────────────────────┘
+```
+
+---
+
+## 💻 Usage & CLI Examples
+
+### Automated Orchestration
+
+```bash
+# Run Secure Coding + SAST on current codebase
+bash scripts/run-orchestrator.sh implement "Authentication microservice"
+
+# Generate complete Threat Model for a project
+bash scripts/run-orchestrator.sh threat-model "Payment Gateway API"
+
+# Run full 5-phase security suite
+bash scripts/run-orchestrator.sh full "Production Release Candidate"
+```
+
+### Direct Skill Execution
+
+```bash
+# Threat Modeling
+bash skills/cybersecurity/threat-modeling/run.sh --project "E-Commerce System"
+
+# Secure Coding Checklists
+bash skills/cybersecurity/secure-coding/run.sh --language python --target-dir ./src
+
+# Static Analysis (SAST)
+bash skills/cybersecurity/static-analysis/run.sh --target-dir ./src --format md
+
+# Penetration Testing Plan
+bash skills/cybersecurity/penetration-testing/run.sh --target-app "Portal API" --scope web
+
+# Incident Response Playbook
+bash skills/cybersecurity/incident-response/run.sh --incident-type ransomware
+
+# Supply Chain SBOM Generation
+bash scripts/generate-sbom.sh --target-dir .
+```
+
+### Git Hooks & DevSecOps Automation
+
+Protect your main branch automatically before commits and pushes:
+
+```bash
+# Install automated Git hooks (Pre-commit SAST & Pre-push security gates)
+bash scripts/init-project.sh
+```
+
+---
+
+## 🛡️ CI/CD Pipeline
+
+Every commit and pull request is automatically validated by GitHub Actions (`.github/workflows/ci.yml`):
+
+* ✅ **Lint & Frontmatter Validation**: ShellCheck, Yamllint, and `SKILL.md` spec validation.
+* ✅ **Automated Skill Tests**: End-to-end unit test execution across all 6 superpowers (`tests/run-skill-tests.sh`).
+* ✅ **Orchestrator Verification**: Live execution check of the orchestrator pipeline.
+* ✅ **Security Gate Build**: Summary matrix validation with non-zero exit enforcement on failure.
+
+---
+
+## 👥 Contributing
+
+We welcome community contributions! Check out our [Good First Issues](docs/good-first-issues.md) and review [CONTRIBUTING.md](CONTRIBUTING.md) to get started.
+
+---
+
+## 📄 License
+
+This project is licensed under the [MIT License](LICENSE). Feel free to use, adapt, and build upon it!
+
+---
+
+*Built with ❤️ for the AI Security & DevSecOps Community.*

cybersec_superpowers-0.1.0/VERSION

@@ -0,0 +1 @@
+0.1.0

cybersec_superpowers-0.1.0/artifacts/reports/SECURITY_SCAN.md

@@ -0,0 +1,32 @@
+# Security Scan Report
+
+## Project: Cybersecurity Superpowers
+## Date: 2026-08-16
+## Tools Used: 
+
+## Summary
+
+| Severity | Count |
+|----------|-------|
+| Critical | 0 |
+| High | 0 |
+| Medium | 0 |
+| Low | 0 |
+| Info | 0 |
+
+## Findings
+
+| ID | Tool | Type | Location | Severity | Description | Remediation |
+|----|------|------|----------|----------|-------------|-------------|
+
+## Tool Results
+
+### npm audit
+[Summary of results]
+
+### Bandit
+[Summary of results]
+
+## Next Steps
+
+[Actions to take for each finding]