Enterprise Readiness Skill

1# Enterprise Readiness Skill
2 
3Netresearch AI skill for assessing and enhancing software projects to meet enterprise-grade standards for security, quality, and automation.
4 
5## 🔌 Compatibility
6 
7This is an **Agent Skill** following the [open standard](https://agentskills.io) originally developed by Anthropic and released for cross-platform use.
8 
9**Supported Platforms:**
10- ✅ Claude Code (Anthropic)
11- ✅ Cursor
12- ✅ GitHub Copilot
13- ✅ Other skills-compatible AI agents
14 
15> Skills are portable packages of procedural knowledge that work across any AI agent supporting the Agent Skills specification.
16 
17 
18## Features
19 
20- **OpenSSF Framework Alignment** - Complete coverage across Scorecard, Best Practices Badge (Passing/Silver/Gold), SLSA, and S2C2F
21- **Dynamic Scoring** - Fair cross-stack assessment with platform/language-specific criteria
22- **Supply Chain Security** - SLSA provenance, artifact signing, SBOM generation, dependency scanning
23- **Quality Gates** - Testing layers, coverage thresholds, static analysis, secret scanning
24- **Automation Scripts** - Ready-to-use scripts for security hardening and compliance checks
25- **Badge Progression** - Guided path from Passing → Silver → Gold certification
26 
27## Installation
28 
29### Marketplace (Recommended)
30 
31Add the [Netresearch marketplace](https://github.com/netresearch/claude-code-marketplace) once, then browse and install skills:
32 
33```bash
34# Claude Code
35/plugin marketplace add netresearch/claude-code-marketplace
36```
37 
38### npx ([skills.sh](https://skills.sh))
39 
40Install with any [Agent Skills](https://agentskills.io)-compatible agent:
41 
42```bash
43npx skills add https://github.com/netresearch/enterprise-readiness-skill --skill enterprise-readiness
44```
45 
46### Download Release
47 
48Download the [latest release](https://github.com/netresearch/enterprise-readiness-skill/releases/latest) and extract to your agent's skills directory.
49 
50### Git Clone
51 
52```bash
53git clone https://github.com/netresearch/enterprise-readiness-skill.git
54```
55 
56### Composer (PHP Projects)
57 
58```bash
59composer require netresearch/enterprise-readiness-skill
60```
61 
62Requires [netresearch/composer-agent-skill-plugin](https://github.com/netresearch/composer-agent-skill-plugin).
63### npm (Node Projects)
64 
65```bash
66npm install --save-dev \
67  @netresearch/agent-skill-coordinator \
68  github:netresearch/enterprise-readiness-skill
69```
70 
71Requires [@netresearch/agent-skill-coordinator](https://github.com/netresearch/node-agent-skill-coordinator), which discovers the skill in `node_modules` and registers it in `AGENTS.md` via a `postinstall` hook. For pnpm, also allowlist the coordinator's postinstall:
72 
73```json
74{
75  "pnpm": {
76    "onlyBuiltDependencies": ["@netresearch/agent-skill-coordinator"]
77  }
78}
79```
80 
81## Usage
82 
83The skill triggers on keywords like:
84- "enterprise readiness", "production ready"
85- "OpenSSF", "security scorecard", "best practices badge"
86- "SLSA", "supply chain security", "SBOM"
87- "quality gates", "CI/CD hardening"
88 
89### Example Prompts
90 
91```
92"Assess this project for enterprise readiness"
93"What's needed for OpenSSF Best Practices Silver badge?"
94"Help me reach SLSA Level 2"
95"Set up supply chain security for this Go project"
96```
97 
98## Structure
99 
100```
101enterprise-readiness/
102├── SKILL.md              # AI instructions
103├── README.md             # This file
104├── LICENSE-MIT           # Code license (MIT)
105├── LICENSE-CC-BY-SA-4.0  # Content license (CC-BY-SA-4.0)
106├── composer.json         # PHP distribution
107├── references/           # OpenSSF criteria documentation
108│   ├── general.md        # Universal checks (60 points)
109│   ├── github.md         # GitHub-specific (40 points)
110│   ├── go.md             # Go-specific (20 points)
111│   ├── openssf-badge-silver.md
112│   └── openssf-badge-gold.md
113├── scripts/              # Automation scripts
114│   ├── check-*.sh        # Validation scripts
115│   └── setup-*.sh        # Configuration scripts
116└── assets/               # Templates and configs
117    └── templates/        # CI/CD, SBOM, policy templates
118```
119 
120## Contributing
121 
122Contributions welcome! Please submit PRs for:
123- Additional platform support (GitLab, Bitbucket)
124- New language-specific checks
125- Script improvements
126- Documentation updates
127 
128## License
129 
130This project uses split licensing:
131 
132- **Code** (scripts, workflows, configs): [MIT](LICENSE-MIT)
133- **Content** (skill definitions, documentation, references): [CC-BY-SA-4.0](LICENSE-CC-BY-SA-4.0)
134 
135See the individual license files for full terms.
136## Credits
137 
138Developed and maintained by [Netresearch DTT GmbH](https://www.netresearch.de/).
139 
140---
141 
142**Made with ❤️ for Open Source by [Netresearch](https://www.netresearch.de/)**
143