Agent Skills (During Code Generation)

Overview

Skills are reusable capabilities for AI agents. In practice, they act as a cross-coding harness that can be used across coding tools, agentic IDEs, and developer workflows.

Heeler Agent Skills are designed to let coding agents automatically invoke security and dependency intelligence when relevant, or allow developers to explicitly call those capabilities when they want deeper review.

Heeler Agent Skills help coding agents make safer, lower-maintenance decisions across the software supply chain. They reduce security risk, control open-source sprawl, and guide dependency choices with clear, actionable outputs.

Overview

Heeler Agent Skills are designed to support secure development workflows by helping agents:

• Detect exposed secrets before code is merged or released

• Identify dependency vulnerabilities and enforce security policies

• Check open-source licenses and flag prohibited or risky licenses

• Recommend safer dependency versions during upgrades or package additions

• Run a complete security scan in a single pass

• Produce structured repository security reviews with prioritized remediation guidance

Available Skills

heeler-secrets-scan

This skill helps identify exposed credentials, API keys, tokens, and other secrets before they become incidents.

---

heeler-vulnerabilities-scan

This skill surfaces vulnerable dependencies and supports policy enforcement for release and CI workflows.

---

heeler-license-check

This skill helps eliminate license contamination and uses your central license policy.

---

heeler-recommended-version

This skill helps agents reduce version sprawl and choose safer, more maintainable dependency versions.

---

heeler-scan-all

This skill gives users a single entry point for broad software supply chain and repository security checks.

Scope

• Secrets scanning

• Dependency vulnerability scanning

• License checks

• Malicious package detection

---

heeler-security-review

Perform a security review for the current project, including secrets exposure risk, dependency vulnerabilities, license and compliance risks, and operational hardening. Return a prioritized remediation plan.

---

Choosing the Right Skill

Need	Recommended Skill
Detect leaked credentials or tokens	heeler-secrets-scan
Find CVEs and gate on severity	heeler-vulnerabilities-scan
Review OSS licenses and compliance risk	heeler-license-check
Choose a safe dependency version	heeler-recommended-version
Run a full security scan	heeler-scan-all
Get a prioritized security review	heeler-security-review

Get Started

To get started with Heeler Agent Skills, visit https://github.com/Heeler-Security/heelercli/tree/main/.agents