IMIO

Full security pentest skill for iMio SmartWeb staging instances. Runs all 4 scanners (gitleaks, bandit, semgrep, osv), tests HTTP-level vulnerabilities, attempts active exploitation of confirmed findings on a dedicated scratch instance, and generates fix recommendations with a unified HTML report. Works both as a local Claude Code skill (Bash) and as a platform.claude.com agent system prompt (computer use).

Pin a new package version in versions.cfg, update CHANGES.rst with changelog entries, and commit

Update a buildout-based Plone project to a target Plone version using official Plone release artifacts.

Use when the user asks to run a Bandit security scan on a Python package, audit a Python codebase for security issues, or review/triage Bandit findings. Triages findings by severity, proposes remediations, and verifies tests still pass.