Corsair
Turns scanner output into signed, verifiable compliance proofs (CPOEs) via the external Corsair CLI.
Fungerar med konfiguration
Vad den gör
Documentation-only skill that drives the Corsair CLI to sign security/audit tool output into cryptographically verifiable CPOEs (JWT-VC), verify vendor proofs via trust.txt/DID/SCITT, diff proofs for drift, and manage compliance mapping packs. Triggers when the user mentions compliance proofs, CPOE, trust.txt, SCITT, GRC evidence, vendor assessment, or compliance drift; requires the separate Corsair CLI + Bun runtime to actually execute anything.
Testrapport
Unusually disciplined security posture (explicit 'never install/exfiltrate/execute-remote-content without confirmation' guardrails baked into the skill body itself, and the documented CLI subcommands genuinely match real source files like src/parley/vc-generator.ts and scitt-registry.ts) — but every workflow needs the separate Corsair CLI + Bun runtime installed first, and the skill's own pointer to its reference doc ('skills/corsair/references/REFERENCE.md') 404s once the folder is installed standalone at ~/.claude/skills/corsair/ (the real path is just references/REFERENCE.md).
Testad: 2026-07-16 · Claude Code 2.x (agent harness)
Installation
git clone https://github.com/grcorsair/corsair mkdir -p ~/.claude/skills cp -r corsair/skills/corsair ~/.claude/skills/corsair
Kommandon och exempelprompter
/corsairTurns scanner output into signed, verifiable compliance proofs (CPOEs) via the external Corsair CLI.
Skills triggas av vanliga förfrågningar — inga kommandon att memorera. Efter installationen aktiverar prompter som dessa skillen (på engelska):
sign my latest security scan output into a verifiable compliance proofverify a vendor's trust.txt claims against their signed proofdiff two compliance proofs to see what changed since last audit