sbom-cra-checker
SBOM correctness, signing, retention, and EU Cyber Resilience Act (CRA) vulnerability-reporting readiness — validates SPDX 2.3+/CycloneDX 1.6+ against NTIA…
Skill by robotijn
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/robotijn-sbom-cra-checker
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/sbom-cra-checker
What's inside
- Skill name
sbom-cra-checker- Description
- SBOM correctness, signing, retention, and EU Cyber Resilience Act (CRA) vulnerability-reporting readiness — validates SPDX 2.3+/CycloneDX 1.6+ against NTIA minimum elements and ENISA Single Reporting Platform wiring.
- License
- NOASSERTION
- Instructions
- 597 lines in SKILL.md · view on GitHub
Agent Skills spec issues
- body: 597 lines (spec recommends under 500)
Files (1)
- SKILL.md
The license isn't open source, so the instructions aren't shown here. Read SKILL.md on GitHub
More from robotijn/ctoc
- 0.604score
dependency-analyzer
robotijn
Builds the import graph of a codebase and reports circular dependencies, layer violations, coupling and instability per module, stable-dependencies…
SkillAFreshness: A★ 4Claude Code +9 - 0.604score
deepthink
robotijn
Deep web research in the background on a decision question, a source (a paper, a repository or a web page) or an open topic.
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
changelog-generator
robotijn
Auto-generates changelogs from commits and PRs — Keep a Changelog 1.1 + Conventional Commits, semver-driven, breaking-change-first, generated-and-curated…
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
pattern-detector
robotijn
Detects which architecture pattern a codebase follows (Layered, Hexagonal, Clean, Onion, CQRS, DDD, Vertical Slice, Modular Monolith, Microservices) with…
SkillAFreshness: A★ 4Claude Code +9 - 0.600score
ask-me-questions
robotijn
Render pending decisions as a matrix with pros, cons, and — only for a decision that has an objectively best answer — one quality recommendation, then collect…
SkillAFreshness: A★ 4Claude Code +9 - 0.598score
api-deprecation-checker
robotijn
Detects usage of deprecated APIs, libraries, and language features so teams can plan migrations.
SkillAFreshness: A★ 4Claude Code +9 - 0.598score
license-scanner
robotijn
Scans dependencies for license compliance, attribution gaps, and copyleft conflicts.
SkillAFreshness: A★ 4Claude Code +9 - 0.598score
documentation-updater
robotijn
Updates API docs, README, code comments, and changelog entries.
SkillAFreshness: A★ 4Claude Code +9 - 0.598score
hallucination-detector
robotijn
Detects AI-generated code that references non-existent packages, APIs, methods, or fabricated patterns.
SkillAFreshness: A★ 4Claude Code +9 - 0.595score
ai-code-quality-reviewer
robotijn
The method behind the ai-code-quality-reviewer agent for reviewing code that a large-language-model coding assistant wrote, across ten defect classes — a…
SkillAFreshness: A★ 4Claude Code +9 - 0.592score
llm-security-tester
robotijn
Paranoid red-team analyst for large language models — scans applications that call large language models for findings from the OWASP Top 10 for Large Language…
SkillAFreshness: A★ 4Claude Code +9 - 0.589score
audit-log-checker
robotijn
Validates audit logging for compliance, security, and operational visibility.
SkillAFreshness: A★ 4Claude Code +9
Signals
- Stars
- 4
- Forks
- 1
- Open issues
- 5
- Last commit (this folder)
- Oct 6, 2026 (23 days ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- NOASSERTION
- Repository
- github.com/robotijn/ctoc
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from robotijn
- 0.604score
deepthink
robotijn
Deep web research in the background on a decision question, a source (a paper, a repository or a web page) or an open topic.
SkillAFreshness: A★ 4Claude Code +9 - 0.604score
dependency-analyzer
robotijn
Builds the import graph of a codebase and reports circular dependencies, layer violations, coupling and instability per module, stable-dependencies…
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
changelog-generator
robotijn
Auto-generates changelogs from commits and PRs — Keep a Changelog 1.1 + Conventional Commits, semver-driven, breaking-change-first, generated-and-curated…
SkillAFreshness: A★ 4Claude Code +9 - 0.601score
pattern-detector
robotijn
Detects which architecture pattern a codebase follows (Layered, Hexagonal, Clean, Onion, CQRS, DDD, Vertical Slice, Modular Monolith, Microservices) with…
SkillAFreshness: A★ 4Claude Code +9 - 0.600score
ask-me-questions
robotijn
Render pending decisions as a matrix with pros, cons, and — only for a decision that has an objectively best answer — one quality recommendation, then collect…
SkillAFreshness: A★ 4Claude Code +9 - 0.598score
license-scanner
robotijn
Scans dependencies for license compliance, attribution gaps, and copyleft conflicts.
SkillAFreshness: A★ 4Claude Code +9
Cite this page
sbom-cra-checker skill. Agent Mart. https://agentmart.dev/skills/robotijn-sbom-cra-checker (last updated 2026-10-24)