igorganapolsky/thumbgate/vulnerability-pre-action-diode

Name: vulnerability-pre-action-diode
Author: igorganapolsky

Claude Code and agent skill by igorganapolsky/thumbgate

Trust tier 3

community

By igorganapolsky
Security
igorganapolsky/thumbgate
skills/vulnerability-pre-action-diode/SKILL.md
Updated 7 Oct 2026
Version 1.0.01 version recorded

Source check pending

Checking that the SKILL.md file is still in the repository.

WHOOP / The New Stack vulnerability triage elimination pattern is FORMAT, not a ThumbGate clone. Intercepts untrusted installs, pipe-to-bash, and unpinned supply-chain artifacts in PreToolUse (<5ms) instead of 3-day post-mortem triage. Calculates quantifiable enterprise ROI. Slash: /vulnerability-pre-action-diode.

Install

npx vskill@latest install igorganapolsky/thumbgate/vulnerability-pre-action-diode

SKILL.md

Vulnerability Pre-Action Diode — compare, do not clone

Goal

Provide deterministic pre-action interdiction on agent dependency installations and shell commands before execution occurs, eliminating the 96-hour post-facto manual triage cycle reported in enterprise environments (WHOOP/TNS).

Constraints

NEVER	ALWAYS
Clone Datadog Bits AI or workflow orchestrators	Enforce deterministic PreToolUse diodes in <5ms
Allow pipe-to-bash (`curl \	bash`)	Block remote script pipes immediately
Allow plaintext `http://` package registries	Enforce HTTPS encrypted package endpoints
Allow untrusted package lifecycle scripts	Block `--ignore-scripts false` overrides
Claim fake MTTR savings	Cite the empirical 96-hour WHOOP/TNS benchmark

CLI Procedures

bash

# Evaluate a tool call
node scripts/vulnerability-pre-action-diode.js --check="npm install express" --json
 
# Run enterprise ROI calculation
node scripts/triage-savings-calculator.js --vulnerabilities=4 --interdictions=24 --tier=enterprise --json
 
# Run unit tests
npm run test:vulnerability-diode

Rubric

critical violations (pipe_to_bash, insecure_protocol_dependency, known_compromised_package) return verdict: 'block'
unpinned installs return verdict: 'review'
pinned installs return verdict: 'allow'
triage hours saved computed accurately ($125/hr blended rate)
test suite passes: npm run test:vulnerability-diode

Security

Security scanPassed, 95 of 100Pattern checks on the skill's files.
Model reviewPassed

See the full security report

Quality evaluation

Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

SKILL.md in the repositoryCheckingskills/vulnerability-pre-action-diode/SKILL.md

Popularity

7-day trend score: 5

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

Claude Code
Cursor
GitHub Copilot
Windsurf
Codex
Gemini CLI
Cline
Amp
Roo Code
Goose
Continue
Kilo Code
Junie
Trae
OpenHands
Qwen Code
AI Agent
Tabnine Chat
Sourcegraph Cody
Amazon Q
Firebase Genkit
Sweep
Devin
Phind
Mentat
Claude Desktop
Aider
GPT Pilot
Plandex
bolt.new
v0
Replit Agent
Anse
TypingMind
BetterChatGPT
LibreChat
Warp AI
Pieces
Fig AI

Embed badge

[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/igorganapolsky/thumbgate/vulnerability-pre-action-diode/badge)](https://verified-skill.com/skills/igorganapolsky/thumbgate/vulnerability-pre-action-diode)

Something wrong with this skill or its page? Tell us.