https://basitalisandhu.github.io/ Open-source tooling for AI agent security and cloud security: Claude Code skill packs, MCP servers and linters, threat modelling, Semgrep rules and an AI agent incident dataset. en Sun, 04 Oct 2026 00:00:00 +0000 https://github.com/basitalisandhu/spotlighting/releases/tag/v0.1.0https://github.com/basitalisandhu/spotlighting/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of spotlighting: Spotlighting for prompt injection defence in Python. https://github.com/basitalisandhu/skill-scan-gate/releases/tag/v0.1.0https://github.com/basitalisandhu/skill-scan-gate/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of skill-scan-gate: CI gate for Claude Code skills and plugins. https://github.com/basitalisandhu/security-actions/releases/tag/v0.1.0https://github.com/basitalisandhu/security-actions/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of security-actions: GitHub Actions for AI agent and supply chain security checks. https://github.com/basitalisandhu/scp-guardrails/releases/tag/v0.1.0https://github.com/basitalisandhu/scp-guardrails/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of scp-guardrails: AWS service control policy builder and linter. https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.3.0https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.3.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.3.0 of repo-engineering-skills: Repository engineering skills for Claude Code: docs checked against the code, audits where every finding cites a line, agent context files that say only what code cannot. https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.2.0https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.2.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.2.0 of repo-engineering-skills: Repository engineering skills for Claude Code: docs checked against the code, audits where every finding cites a line, agent context files that say only what code cannot. https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.1.1https://github.com/basitalisandhu/repo-engineering-skills/releases/tag/v0.1.1Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.1 of repo-engineering-skills: Repository engineering skills for Claude Code: docs checked against the code, audits where every finding cites a line, agent context files that say only what code cannot. https://github.com/basitalisandhu/mcp-tools-lint/releases/tag/v0.1.0https://github.com/basitalisandhu/mcp-tools-lint/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mcp-tools-lint: Lint MCP tool schemas and annotations before clients reject them. https://github.com/basitalisandhu/mcp-server-template/releases/tag/v0.1.0https://github.com/basitalisandhu/mcp-server-template/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mcp-server-template: Secure MCP server template in TypeScript and Python, safe by default. https://github.com/basitalisandhu/mcp-rc-check/releases/tag/v0.2.0https://github.com/basitalisandhu/mcp-rc-check/releases/tag/v0.2.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.2.0 of mcp-rc-check: MCP specification migration checker for the 2026-07-28 revision. https://github.com/basitalisandhu/mcp-rc-check/releases/tag/v0.1.0https://github.com/basitalisandhu/mcp-rc-check/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mcp-rc-check: MCP specification migration checker for the 2026-07-28 revision. https://github.com/basitalisandhu/mcp-egress/releases/tag/v0.1.0https://github.com/basitalisandhu/mcp-egress/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mcp-egress: Record every host an MCP server contacts, per tool, and fail CI on new ones. https://github.com/basitalisandhu/mcp-auth-doctor/releases/tag/v0.1.0https://github.com/basitalisandhu/mcp-auth-doctor/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mcp-auth-doctor: Diagnose OAuth discovery problems on remote MCP servers. https://github.com/basitalisandhu/mac-maintenance-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/mac-maintenance-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of mac-maintenance-skills: Claude Code skills for cleaning up and speeding up a Mac: read-only survey first, safe tier removes only what programs recreate, leftovers and duplicate finders. https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.2.0https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.2.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.2.0 of m365-governance-skills: Microsoft 365 governance skills for Claude Code: Entra ID posture review, Intune baseline check, Graph permission preflight, Teams and group sprawl, access review pack. https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.1.1https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.1.1Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.1 of m365-governance-skills: Microsoft 365 governance skills for Claude Code: Entra ID posture review, Intune baseline check, Graph permission preflight, Teams and group sprawl, access review pack. https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/m365-governance-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of m365-governance-skills: Microsoft 365 governance skills for Claude Code: Entra ID posture review, Intune baseline check, Graph permission preflight, Teams and group sprawl, access review pack. https://github.com/basitalisandhu/llms-txt-gen/releases/tag/v0.1.0https://github.com/basitalisandhu/llms-txt-gen/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of llms-txt-gen: Generate llms.txt for any docs site or repository. https://github.com/basitalisandhu/github-manager-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/github-manager-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of github-manager-skills: Claude Code skills for engineering managers that compute from exported GitHub data: stuck-PR and review-queue digest, iteration report, blameless postmortem timeline. https://github.com/basitalisandhu/dev-mcp-servers/releases/tag/v0.1.0https://github.com/basitalisandhu/dev-mcp-servers/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of dev-mcp-servers: Ten small MCP servers for everyday development and security checks. https://github.com/basitalisandhu/compliance-evidence-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/compliance-evidence-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of compliance-evidence-skills: Compliance evidence skills for Claude Code: integrity-checked evidence packs from GitHub, AWS and Microsoft 365 exports, mapped to ISO 27001 and SOC 2, with narratives that cite evidence or say not assessable. https://github.com/basitalisandhu/claude-perm-sim/releases/tag/v0.1.0https://github.com/basitalisandhu/claude-perm-sim/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of claude-perm-sim: Claude Code permission rule simulator: shows which rule decides a tool call and where a rule set is permissive. https://github.com/basitalisandhu/claude-mcp-allow/releases/tag/v0.1.0https://github.com/basitalisandhu/claude-mcp-allow/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of claude-mcp-allow: Least-privilege Claude Code permission rules for MCP tools, generated from their annotations. https://github.com/basitalisandhu/claude-dev-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/claude-dev-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of claude-dev-skills: Claude Code skills for everyday development: code review, refactoring, debugging, CI and containers, data and APIs, documentation and security basics. https://github.com/basitalisandhu/cc-plugin-lock/releases/tag/v0.1.0https://github.com/basitalisandhu/cc-plugin-lock/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of cc-plugin-lock: Lock file for Claude Code plugins: pins plugins and skills to content hashes and verifies them before load. https://github.com/basitalisandhu/cc-hooks/releases/tag/v0.1.0https://github.com/basitalisandhu/cc-hooks/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of cc-hooks: Typed Python SDK and offline test runner for Claude Code hooks. https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.2.0https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.2.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.2.0 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage. https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.1.1https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.1.1Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.1 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage. https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.1.0https://github.com/basitalisandhu/aws-security-skills/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage. https://github.com/basitalisandhu/agentic-semgrep-rules/releases/tag/v0.1.0https://github.com/basitalisandhu/agentic-semgrep-rules/releases/tag/v0.1.0Sun, 04 Oct 2026 00:00:00 +0000Release v0.1.0 of agentic-semgrep-rules: Semgrep rules for AI agent code in Python, TypeScript and JavaScript.