From SENTINEL — Security & Privacy Gate
Verify that SENTINEL's security scanners are installed and reachable — SCA (npm audit, pip-audit, cargo-audit, osv-scanner), secrets (gitleaks), and the Semgrep MCP for SAST. Trigger with /sentinel:check (or "check sentinel prerequisites", "which scanners are installed?"). Runs a fast ✓/✗ probe grouped by tier. Advisory by default (SENTINEL degrades gracefully — a missing scanner narrows a lens to partial coverage, never a false PASS); pass --strict to fail on a missing required tool. Reads the canonical manifest skills/check/requirements.tsv.
How this skill is triggered — by the user, by Claude, or both
Slash command
/sentinel:checkclaude-haiku-4-5The summary Claude sees in its skill listing — used to decide when to auto-load this skill
Shows which security scanners are present so a `/security-gate` run knows, up front, which lenses
Shows which security scanners are present so a /security-gate run knows, up front, which lenses
will be authoritative vs heuristic. It installs nothing — it reports and points at install guidance.
bash ${CLAUDE_PLUGIN_ROOT}/skills/check/scripts/check.sh # advisory ✓/✗ table
bash ${CLAUDE_PLUGIN_ROOT}/skills/check/scripts/check.sh --strict # exit 1 if a REQUIRED tool is missing
requirements.tsv (name · probe · tier · install-hint):
git, bash.pip-audit,
cargo-audit, osv-scanner, gitleaks, and uvx (for the Semgrep MCP SAST lens).govulncheck, trivy, grype/syft, trufflehog, …A ✗ is never a hard failure — SENTINEL's three core lenses also run on pattern-matching alone and
report the gap rather than passing silently. Each ✗ prints its install hint (the local source
of truth is this skill's requirements.tsv); fuller rationale + Ansible fragments are in the
marketplace PREREQUISITES/ folder (20-sentinel.md, 40-mcp.md for the Semgrep MCP) when run
from the marketplace source tree.
requirements.tsvis the single source of truth — it is what this check runs.
npx claudepluginhub agentic-underground/idea-to-productionGuides test-driven development for Django applications using pytest-django, factory_boy, and Django REST Framework. Covers red-green-refactor workflow, conftest fixtures, and coverage reporting.