If you're running Harbor registries and need help with vulnerability scanning, artifact signing, or multi-region replication, this skill knows the stack deeply. It covers Trivy integration for CVE scanning with severity policies, Notary v2 and Cosign for image signing, RBAC with robot accounts and OIDC, and pull/push replication strategies. The prompts emphasize security first practices like scan-on-push automation, content trust enforcement, and tested disaster recovery. It's tagged as high risk, which makes sense since you're protecting the container supply chain. Best for teams managing Harbor 2.10+ in production who need to balance security scanning, compliance requirements, and global availability without reinventing the wheel every time.

skills.sh installs
198
GitHub stars
48
last updated
Aug 21, 2026

Install

$ npx -y skills add martinholovsky/claude-skills-generator --skill harbor-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Harbor Container Registry Expert

1. Overview

You are an elite Harbor registry administrator with deep expertise in:

  • Registry Operations: Harbor 2.10+, OCI artifact management, quota management, garbage collection
  • Security Scanning: Trivy integration, CVE database management, vulnerability policies, scan automation
  • Artifact Signing: Notary v2, Cosign integration, content trust, signature verification
  • Access Control: Project-based RBAC, robot accounts, OIDC/LDAP integration, webhook automation
  • Replication: Multi-region pull/push replication, disaster recovery, registry federation
  • Enterprise Features: Audit logging, retention policies, tag immutability, proxy cache
  • OCI Artifacts: Helm charts, CNAB bundles, Singularity images, WASM modules

You build registry infrastructure that is:

  • Secure: Image signing, vulnerability scanning, CVE policies enforced
  • Reliable: Multi-region replication, backup/restore, high availability
  • Compliant: Audit trails, retention policies, immutable artifacts
  • Performant: Cache strategies, garbage collection, resource optimization

Sponsors

Details

Repository
github.com/martinholovsky/claude-skills-generator
Categories
Security, Automation & Workflows
First seen
Jun 3, 2026

More from martinholovsky/claude-skills-generator

All 50

Recommended

More Security
13stonebrother avatarcode-audit3stonebrother/code-auditProfessional code security audit skill covering 55+ vulnerability types. Enhanced with WooYun 88,636 real-world vulnerability cases (2010-2016). This skill shou195skills.sh installs
2schwepps avatarsolidity-auditorschwepps/skillsProfessional-grade Solidity smart contract security auditor. Performs comprehensive audits or targeted reviews (security vulnerabilities, gas optimization, stor193skills.sh installs
3yonatangross avatarmcp-patternsyonatangross/orchestkitMCP server building, advanced patterns, and security hardening. Use when building MCP servers, implementing tool handlers, choosing a transport, adding OAuth au190skills.sh installs
4itsmostafa avatarcognitoitsmostafa/aws-agent-skillsAWS Cognito user authentication and authorization service. Use when setting up user pools, configuring identity pools, implementing OAuth flows, managing user a188skills.sh installs
5prompt-security avatarclawsec-nanoclawprompt-security/clawsecUse when checking for security vulnerabilities in NanoClaw skills, before installing new skills, or when asked about security advisories affecting the bot188skills.sh installs
6personamanagmentlayer avataraudit-expertpersonamanagmentlayer/pclExpert-level security auditing, compliance, code review, and vulnerability assessment186skills.sh installs