Runtime Application Self-Protection

Runtime Application Self-Protection is a DevOps skill for Claude Code, published by xalgord in xalgorix.

852 stars153 forkson xalgord/xalgorixAdded 2026/08/12+1% in starsRepository updated 2026/08/11

ai-agentai-securityautomationautonomous-pentestingbug-bountycybersecurityethical-hackinggolangpenetration-testingpentestpentesting-toolsreconsecuritysecurity-researchsecurity-toolstypescriptvulnerability-detectionvulnerability-scanner

Install in seconds

Install Runtime Application Self-Protection

Copy Runtime Application Self-Protection into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/xalgorix/xalgorix/tree/main/internal/tools/skills/data/application-security/implementing-runtime-application-self-protection ~/.claude/skills/implementing-runtime-application-self-protection

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/xalgorix/xalgorix.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: internal/tools/skills/data/application-security/implementing-runtime-application-self-protection/SKILL.md in xalgord/xalgorix
Installs to: ~/.claude/skills/implementing-runtime-application-self-protection
Collection: One of 51 skills cataloged from this repository
Category: DevOps — 798 skills

What Runtime Application Self-Protection does

Runtime Application Self-Protection deploys RASP agents to detect and block attacks from inside an application at runtime. Use it to configure policies, tune coverage, and verify alerts for SQL injection, command injection, SSRF, and similar threats.

Runtime Application Self-Protection is cataloged under DevOps on DirSkills. Runtime Application Self-Protection comes from a repository tagged ai-agent, ai-security, automation, autonomous-pentesting and bug-bounty.

Documentation

README

Excerpt

Implementing Runtime Application Self-Protection

Overview

Runtime Application Self-Protection (RASP) instruments application code at runtime to detect and block attacks by examining actual execution context rather than relying solely on network traffic patterns. Unlike WAFs that inspect HTTP requests externally, RASP agents intercept dangerous operations (SQL queries, file operations, command execution, deserialization) at the function level inside the application, achieving near-zero false positives. This skill covers deploying OpenRASP for Java applications, configuring detection policies for OWASP Top 10 attacks, tuning alerting thresholds, and integrating RASP telemetry with SIEM platforms.

When to Use

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Runtime Application Self-Protection

What else does xalgord publish alongside Runtime Application Self-Protection?
Runtime Application Self-Protection is one of 51 skills that DirSkills catalogs from xalgord/xalgorix, the repository it ships in. Its siblings there include AFL++ Fuzzing, AI Security Guardrails and AI-Assisted Vulnerability Discovery. Each one is a separate skill with its own page in this directory, installs the same way Runtime Application Self-Protection does, and is maintained by xalgord in that same repository. The rest of the collection is listed on the xalgord/xalgorix page.
How does Runtime Application Self-Protection compare to other DevOps skills?
Runtime Application Self-Protection ranks #531 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Runtime Application Self-Protection against them. Open each page to compare what they document and how they install.