This connects Claude to Fortify, the static code analyzer from Micro Focus that scans source code for security vulnerabilities. You'll want this if you're running security audits, triaging CVEs, or automating vulnerability reports without leaving your chat. It runs through Membrane's CLI, which handles all the OAuth plumbing and credential refresh so you don't pass API keys around. You can search for pre-built actions using natural language intent queries, run scans, pull vulnerability data, or hit the Fortify API directly through an authenticated proxy when the actions don't cover your case. Free tier supported, MIT licensed.

skills.sh installs
212
GitHub stars
272
last updated
Aug 21, 2026

Install

$ npx -y skills add membranedev/application-skills --skill fortify --agent claude-code

Installs into .claude/skills of the current project.

Files

Fortify

Fortify is a static code analyzer used to identify security vulnerabilities in software. Security professionals and developers use it to scan source code, detect potential weaknesses, and prioritize remediation efforts.

Official docs: https://www.microfocus.com/documentation/fortify-software-security-center/

Fortify Overview

  • Scan
    • Scan Configuration
  • Vulnerability
  • Project Version
  • Analysis
  • Audit
  • Report

Working with Fortify

This skill uses the Membrane CLI to interact with Fortify. Membrane handles authentication and credentials refresh automatically — so you can focus on the integration logic rather than auth plumbing.

Install the CLI

Install the Membrane CLI so you can run membrane from the terminal:

npm install -g @membranehq/cli@latest

Authentication

membrane login --tenant --clientName=<agentType>

This will either open a browser for authentication or print an authorization URL to the console, depending on whether interactive mode is available.

Sponsors

Details

Repository
github.com/membranedev/application-skills
Category
Automation & Workflows
First seen
Jun 3, 2026

More from membranedev/application-skills

All 142
1davila7 avatarazure-functionsdavila7/claude-code-templatesExpert patterns for Azure Functions development including isolated worker model, Durable Functions orchestration, cold start optimization, and production patter211skills.sh installs
2slanycukr avataraxiosslanycukr/riot-api-projectPromise-based HTTP client for making requests from browser and Node.js211skills.sh installs
3davila7 avatarlatchbio-integrationdavila7/claude-code-templatesLatch platform for bioinformatics workflows. Build pipelines with Latch SDK, @workflow/@task decorators, deploy serverless workflows, LatchFile/LatchDir, Nextfl209skills.sh installs
4yonatangross avatarcreate-pryonatangross/orchestkitCreates GitHub pull requests with pre-flight validation, conventional title formatting, and structured summary generation. Runs parallel checks (tests, lint, ty209skills.sh installs
5josiahsiegel avatartailwindcss-debuggingjosiahsiegel/claude-plugin-marketplaceTailwind CSS debugging and troubleshooting common issues. PROACTIVELY activate for: (1) classes not applying / no styles in browser, (2) JIT mode not picking up207skills.sh installs
6membranedev avatarlightspeed-ecommembranedev/application-skillsLightspeed eCom integration. Manage data, records, and automate workflows. Use when the user wants to interact with Lightspeed eCom data.207skills.sh installs