{"@attributes":{"version":"2.0"},"channel":{"title":"Muhammad Basit Ali","link":"https:\/\/basitalisandhu.github.io\/","description":"Open-source tooling for AI agent security and cloud security: Claude Code skill packs, MCP servers and linters, threat modelling, Semgrep rules and an AI agent incident dataset.","language":"en","lastBuildDate":"Mon, 26 Oct 2026 00:00:00 +0000","item":[{"title":"ways-of-working-skills v0.5.0","link":"https:\/\/github.com\/basitalisandhu\/ways-of-working-skills\/releases\/tag\/v0.5.0","guid":"https:\/\/github.com\/basitalisandhu\/ways-of-working-skills\/releases\/tag\/v0.5.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.5.0 of ways-of-working-skills: Claude Code skills for ways of working: change requests from a Terraform plan, an action ledger across meeting notes, exception and risk registers, RFC lint, a decision log, weekly status notes, a private 1:1 ledger and focus time from a calendar export."},{"title":"repo-engineering-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/repo-engineering-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/repo-engineering-skills\/releases\/tag\/v0.6.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of repo-engineering-skills: Repository engineering skills for Claude Code: docs checked against the code, audits where every finding cites a line, agent context files that say only what code cannot."},{"title":"mac-maintenance-skills v0.2.0","link":"https:\/\/github.com\/basitalisandhu\/mac-maintenance-skills\/releases\/tag\/v0.2.0","guid":"https:\/\/github.com\/basitalisandhu\/mac-maintenance-skills\/releases\/tag\/v0.2.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.2.0 of mac-maintenance-skills: Claude Code skills for cleaning up and speeding up a Mac: read-only survey first, safe tier removes only what programs recreate, leftovers and duplicate finders."},{"title":"m365-governance-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/m365-governance-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/m365-governance-skills\/releases\/tag\/v0.6.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of m365-governance-skills: Microsoft 365 governance skills for Claude Code: Entra ID posture review, Intune baseline check, Graph permission preflight, Teams and group sprawl, access review pack."},{"title":"github-manager-skills v0.4.0","link":"https:\/\/github.com\/basitalisandhu\/github-manager-skills\/releases\/tag\/v0.4.0","guid":"https:\/\/github.com\/basitalisandhu\/github-manager-skills\/releases\/tag\/v0.4.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.4.0 of github-manager-skills: Claude Code skills for engineering managers that compute from exported GitHub data: stuck-PR and review-queue digest, iteration report, blameless postmortem timeline."},{"title":"compliance-evidence-skills v0.7.0","link":"https:\/\/github.com\/basitalisandhu\/compliance-evidence-skills\/releases\/tag\/v0.7.0","guid":"https:\/\/github.com\/basitalisandhu\/compliance-evidence-skills\/releases\/tag\/v0.7.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.7.0 of compliance-evidence-skills: Compliance evidence skills for Claude Code: integrity-checked evidence packs from GitHub, AWS and Microsoft 365 exports, mapped to ISO 27001 and SOC 2, with narratives that cite evidence or say not assessable."},{"title":"claude-skills v0.6.1","link":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.6.1","guid":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.6.1","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.1 of claude-skills: Every skill I maintain, in one repository: 87 skills in 13 plugins from the packs below, one marketplace, one install script, synced daily."},{"title":"claude-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.6.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of claude-skills: Every skill I maintain, in one repository: 87 skills in 13 plugins from the packs below, one marketplace, one install script, synced daily."},{"title":"claude-skills v0.5.1","link":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.5.1","guid":"https:\/\/github.com\/basitalisandhu\/claude-skills\/releases\/tag\/v0.5.1","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.5.1 of claude-skills: Every skill I maintain, in one repository: 87 skills in 13 plugins from the packs below, one marketplace, one install script, synced daily."},{"title":"claude-dev-skills v0.4.1","link":"https:\/\/github.com\/basitalisandhu\/claude-dev-skills\/releases\/tag\/v0.4.1","guid":"https:\/\/github.com\/basitalisandhu\/claude-dev-skills\/releases\/tag\/v0.4.1","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.4.1 of claude-dev-skills: Claude Code skills for everyday development: code review, refactoring, debugging, CI and containers, data and APIs, documentation and security basics."},{"title":"claude-dev-skills v0.4.0","link":"https:\/\/github.com\/basitalisandhu\/claude-dev-skills\/releases\/tag\/v0.4.0","guid":"https:\/\/github.com\/basitalisandhu\/claude-dev-skills\/releases\/tag\/v0.4.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.4.0 of claude-dev-skills: Claude Code skills for everyday development: code review, refactoring, debugging, CI and containers, data and APIs, documentation and security basics."},{"title":"claude-code-tooling-skills v0.5.0","link":"https:\/\/github.com\/basitalisandhu\/claude-code-tooling-skills\/releases\/tag\/v0.5.0","guid":"https:\/\/github.com\/basitalisandhu\/claude-code-tooling-skills\/releases\/tag\/v0.5.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.5.0 of claude-code-tooling-skills: Claude Code skills for keeping a Claude Code setup safe: review a third-party skill before installing it, lint skill descriptions, audit the context budget, build least-privilege permissions, test hooks."},{"title":"aws-security-skills v0.6.1","link":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.6.1","guid":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.6.1","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.1 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage."},{"title":"aws-security-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.6.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage."},{"title":"agent-skills-state-2026 v1.3.0","link":"https:\/\/github.com\/basitalisandhu\/agent-skills-state-2026\/releases\/tag\/v1.3.0","guid":"https:\/\/github.com\/basitalisandhu\/agent-skills-state-2026\/releases\/tag\/v1.3.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v1.3.0 of agent-skills-state-2026: Monthly study of public agent skill, plugin and MCP repositories: dataset, method, hand-checked precision and scripts."},{"title":"agent-security-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/agent-security-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/agent-security-skills\/releases\/tag\/v0.6.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of agent-security-skills: Claude Code security plugin and agent skills for securing LLM agents: threat modelling, configuration audits, prompt injection review, MCP server review, incident lookup."},{"title":"agent-identity-governance-skills v0.4.0","link":"https:\/\/github.com\/basitalisandhu\/agent-identity-governance-skills\/releases\/tag\/v0.4.0","guid":"https:\/\/github.com\/basitalisandhu\/agent-identity-governance-skills\/releases\/tag\/v0.4.0","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"Release v0.4.0 of agent-identity-governance-skills: Claude Code skills for agent identity governance: inventory the non-human identities agents run as, review permissions, recertify quarterly, catch expiring credentials, switch one off fast."},{"title":"What do skills that ask for the whole shell do with it?","link":"https:\/\/basitalisandhu.github.io\/posts\/what-do-skills-that-ask-for-the-whole-shell-do-with-it\/","guid":"https:\/\/basitalisandhu.github.io\/posts\/what-do-skills-that-ask-for-the-whole-shell-do-with-it\/","pubDate":"Mon, 26 Oct 2026 00:00:00 +0000","description":"I read 3,715 public agent skills that grant unscoped Bash. Three in ten never show a shell command, most of the rest need three commands or fewer, and a third install, delete, push or eval."},{"title":"skill-scan-gate v0.4.0","link":"https:\/\/github.com\/basitalisandhu\/skill-scan-gate\/releases\/tag\/v0.4.0","guid":"https:\/\/github.com\/basitalisandhu\/skill-scan-gate\/releases\/tag\/v0.4.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.4.0 of skill-scan-gate: CI gate for Claude Code skills and plugins, with SARIF output. GitHub Action and CLI."},{"title":"scp-guardrails v0.3.0","link":"https:\/\/github.com\/basitalisandhu\/scp-guardrails\/releases\/tag\/v0.3.0","guid":"https:\/\/github.com\/basitalisandhu\/scp-guardrails\/releases\/tag\/v0.3.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.3.0 of scp-guardrails: Build AWS service control policies from a short spec and lint them for lockouts and statements that deny nothing."},{"title":"mcp-tools-lint v0.3.0","link":"https:\/\/github.com\/basitalisandhu\/mcp-tools-lint\/releases\/tag\/v0.3.0","guid":"https:\/\/github.com\/basitalisandhu\/mcp-tools-lint\/releases\/tag\/v0.3.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.3.0 of mcp-tools-lint: Lint MCP tool schemas and annotations before clients reject them."},{"title":"mcp-server-template v0.3.0","link":"https:\/\/github.com\/basitalisandhu\/mcp-server-template\/releases\/tag\/v0.3.0","guid":"https:\/\/github.com\/basitalisandhu\/mcp-server-template\/releases\/tag\/v0.3.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.3.0 of mcp-server-template: Secure MCP server template in TypeScript and Python, safe by default."},{"title":"mcp-egress v0.2.0","link":"https:\/\/github.com\/basitalisandhu\/mcp-egress\/releases\/tag\/v0.2.0","guid":"https:\/\/github.com\/basitalisandhu\/mcp-egress\/releases\/tag\/v0.2.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.2.0 of mcp-egress: Record every host an MCP server contacts, per tool, and fail CI on new ones."},{"title":"llms-txt-gen v0.3.0","link":"https:\/\/github.com\/basitalisandhu\/llms-txt-gen\/releases\/tag\/v0.3.0","guid":"https:\/\/github.com\/basitalisandhu\/llms-txt-gen\/releases\/tag\/v0.3.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.3.0 of llms-txt-gen: Generate llms.txt for any docs site or repository."},{"title":"garak-mcp-probes v0.2.0","link":"https:\/\/github.com\/basitalisandhu\/garak-mcp-probes\/releases\/tag\/v0.2.0","guid":"https:\/\/github.com\/basitalisandhu\/garak-mcp-probes\/releases\/tag\/v0.2.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.2.0 of garak-mcp-probes: Run garak against your own MCP servers, with detectors for denied tool calls, leaked canaries and runaway step counts."},{"title":"compliance-evidence-skills v0.6.0","link":"https:\/\/github.com\/basitalisandhu\/compliance-evidence-skills\/releases\/tag\/v0.6.0","guid":"https:\/\/github.com\/basitalisandhu\/compliance-evidence-skills\/releases\/tag\/v0.6.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.6.0 of compliance-evidence-skills: Compliance evidence skills for Claude Code: integrity-checked evidence packs from GitHub, AWS and Microsoft 365 exports, mapped to ISO 27001 and SOC 2, with narratives that cite evidence or say not assessable."},{"title":"claude-code-tooling-skills v0.4.0","link":"https:\/\/github.com\/basitalisandhu\/claude-code-tooling-skills\/releases\/tag\/v0.4.0","guid":"https:\/\/github.com\/basitalisandhu\/claude-code-tooling-skills\/releases\/tag\/v0.4.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.4.0 of claude-code-tooling-skills: Claude Code skills for keeping a Claude Code setup safe: review a third-party skill before installing it, lint skill descriptions, audit the context budget, build least-privilege permissions, test hooks."},{"title":"aws-security-skills v0.5.0","link":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.5.0","guid":"https:\/\/github.com\/basitalisandhu\/aws-security-skills\/releases\/tag\/v0.5.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.5.0 of aws-security-skills: AWS security skills for Claude Code: account audit, SCP guardrails, blast-radius landing zones, IAM least privilege, Security Hub triage."},{"title":"agentdojo-mcp v0.3.0","link":"https:\/\/github.com\/basitalisandhu\/agentdojo-mcp\/releases\/tag\/v0.3.0","guid":"https:\/\/github.com\/basitalisandhu\/agentdojo-mcp\/releases\/tag\/v0.3.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v0.3.0 of agentdojo-mcp: Run the AgentDojo benchmark's user and injection tasks against a real MCP server's tools."},{"title":"agent-skills-state-2026 v1.2.0","link":"https:\/\/github.com\/basitalisandhu\/agent-skills-state-2026\/releases\/tag\/v1.2.0","guid":"https:\/\/github.com\/basitalisandhu\/agent-skills-state-2026\/releases\/tag\/v1.2.0","pubDate":"Tue, 20 Oct 2026 00:00:00 +0000","description":"Release v1.2.0 of agent-skills-state-2026: Monthly study of public agent skill, plugin and MCP repositories: dataset, method, hand-checked precision and scripts."}]}}