Claude Skills

Sbom Maker

runxhq/runx

Derive a CycloneDX software bill of materials from a supplied lockfile deterministically, digest-bound to the exact bytes, with license risks surfaced and unsupported or unpinned lockfiles refused.

★ 86 Synced 1 hour ago View SKILL.md

At a glance

Manual install Rust Actively maintained
Install git clone --depth 1 https://github.com/runxhq/runx cp -r runx/skills/sbom-maker ~/.claude/skills/sbom-maker
Can use Not declared by the author

Setup, runtime and requirements describe runxhq/runx, the repo this skill ships in.

Also in runxhq/runx

View the repo

Adopt a pinned third-party SKILL.md as an exact native Runx binding bundle with deterministic source digests, a bounded execution profile, i...

Agency Legal

Run a standing team with a mandate, advanced one governed case-turn at a time: a fixed roster, a persistent objective, a multi-turn case, me...

Answer one question strictly from a small, caller-supplied documentation corpus, with exact supporting quotations or an explicit account of...

Audit a sealed runx receipt for governance, comparing exercised authority and any declared approval requirement with signed evidence, and fl...

Build a scoped brand voice packet from source material so downstream agents can write, review, and adapt content without inventing brand cla...

Business Ops Sales

Route one business signal through a replayable governed ops graph: classify, docs, release, work, outreach, spend, and proof, with consequen...

Verify and settle one provider-side paid call through Runx Hosted with approval and provider readback.

Convert bounded mailbox and calendar evidence into a reviewable executive action packet.

Turn governed source evidence into a citation-bound reader-facing draft, channel package, and provider-neutral publication handoff.

Draft a contract from a versioned template with explicit parties and terms, reconciling every clause against the rendered baseline determini...

CRM Cleanup Sales

Reconcile a call transcript against current CRM records and propose allowlisted field updates, each traced to a verbatim transcript quote, w...

Audit exact npm dependency versions against OSV through Runx native HTTP and emit replay-verified evidence with no unverified findings.