Vendor — Security skill for Claude Code
VENDOR.md — third-party provenance and audit record.
How to install Vendor
Installs to ~/.claude/skills/devara1983ntr-blackheart-security-framework-vendor/SKILL.md
mkdir -p ~/.claude/skills/devara1983ntr-blackheart-security-framework-vendor && curl -fsSL https://raw.githubusercontent.com/devara1983ntr/blackheart-security-framework/HEAD/skills/VENDOR.md -o ~/.claude/skills/devara1983ntr-blackheart-security-framework-vendor/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Vendor does
VENDOR.md — third-party provenance and audit record
This is the authoritative record of every piece of third-party content in Blackhearts: where it came from, under what licence, what the audit found, and what a reviewer must check before trusting it. If a fact about third-party content is not recorded here, Blackhearts does not claim it.
1. Sources
| Source | Repository | Licence | Pinned commit | Retrieved |
|---|---|---|---|---|
| Skill catalogue | alirezarezvani/claude-skills |
Alternatives in Security
- Pal — Multi-model AI integration — chat, debugging, code review, planning, security audit 11.3k ★
- Skills Audit Report — Date: 2026-02-15 Auditor: Automated Skill Quality Audit Scope: Recently added skills in business-growth/, fina 5.3k ★
- Om Vault Audit — Vault Audit 4.6k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Drift Detector
Keep third-party API integrations green — scan repos, audit for CVEs/EOL/vendor-API sunsets, deliver the repor
Cc Skill Audit
Security scanner & PreToolUse firewall for Claude Code third-party skills. Detects undisclosed telemetry, outb
Secure Plugin Installer
Audit and gate third-party Claude Code plugins / OpenClaw skills before enabling them: capability enumeration,
Dsh Plugin Audit
Agent Skill for DeepSeek Harness (DSH):装第三方插件前的静态安全审计 —— 扫出 eval、patch 层 !!js、安装期脚本、开机自启、凭据复制、出网域名与提示词注入面。Audi
Claude Code Tooling Skills
Claude Code skills for keeping a Claude Code setup safe: review a third-party skill before installing it, lint
Skill Lint
Security scanner for Claude Code / agent skills. Catches prompt injection, obfuscation, credential exfiltratio
Related Agents
Dependency Vetting
Dependency & Model Vetting Agent (SSDF PW.4, AI PW.4.4). Read-only. Vets a proposed or changed third-party pac
Dependency Vetter
Supply-chain security audit of a third-party package (npm today) at ONE exact resolved version, run BEFORE it
Astro Performance
Delegated by the astro orchestrator during /astro audit to review Core Web Vitals causes, images, CSS/JS deliv