ColibriSec/balam-skill
Watch
1
0
Fork
You've already forked balam-skill
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
AI Skill for Balam
12 commits 1 branch 0 tags 39 KiB
Find a file
Exact
Repository files (latest commit first)
Filename Latest commit message Latest commit date
James Luther f4cf50a014
All checks were successful
validate / validate (push) Successful in 11s
Details
security-scan / scan (push) Successful in 24s
Details
Merge pull request 'Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity' (#3) from enhancement/repo-hygiene into main 
Reviewed-on: #3
2026-09-18 23:54:37 +00:00
.claude-plugin Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00
.forgejo/workflows Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00
skills/balam Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00
.gitignore Remove docs/superpowers from the repo 2026-09-05 11:04:14 -05:00
CHANGELOG.md Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00
LICENSE Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00
README.md Add repo metadata, evals, and CI validation; fix SKILL.md path ambiguity 2026-09-18 18:51:38 -05:00

README.md

balam-skill

A Claude Code skill that connects to Balam (a self-hosted, DefectDojo-style vulnerability-management system) through its MCP server, balam-mcp.

It drives day-to-day vulnerability-management work directly from Claude Code:

  • Triaging and updating findings
  • Importing/uploading scan reports (Nessus, OJO, or other scanners)
  • Managing product types, products, engagements, and tests
  • Creating risk acceptances
  • Checking dashboards, metrics, and risk registers

Installation

Add this repository as a Claude Code plugin marketplace, then install the balam-skill plugin from it. See .claude-plugin/marketplace.json for the marketplace definition.

Requirements

  • A running Balam instance
  • BALAM_URL and BALAM_TOKEN set in the environment (see skills/balam/SKILL.md for how the skill checks for and registers these)
  • uvx, or a local checkout of balam-mcp as a fallback

Repository layout

skills/balam/SKILL.md      - the skill itself
skills/balam/evals/         - eval prompts for testing the skill's behavior
.claude-plugin/             - plugin and marketplace manifests
.forgejo/workflows/         - CI (security scanning of this repo)

License

GPL-2.0-only. See LICENSE.