测试与安全

awesome-claude-code-security-compliance-suite

reason-machines/security-skills

Security & compliance skill suite providing OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows for AI coding agents

  • 734 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite

SKILL.md

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

A comprehensive security and compliance skill suite derived from hesreallyhim/awesome-claude-code, providing specialized commands and workflows for security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance, and incident response.

What This Project Does

This skill suite provides 10 specialized security commands and 5 multi-step compliance workflows with structured output UI for:

  • Vulnerability Scanning: OWASP Top-10 analysis, dependency CVE detection
  • Compliance Auditing: GDPR, SOC2, ISO27001 gap analysis
  • Security Operations: Threat modeling, penetration testing, IAM audits
  • Incident Response: Breach response playbooks and investigation workflows
  • Policy Generation: Privacy policies, security documentation

All commands use consistent structured output with progress tracking, findings tables, and prioritized action plans.

Installation

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

A comprehensive security and compliance skill suite derived from hesreallyhim/awesome-claude-code, providing specialized commands and workflows for security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance, and incident response.

What This Project Does

This skill suite provides 10 specialized security commands and 5 multi-step compliance workflows with structured output UI for:

  • Vulnerability Scanning: OWASP Top-10 analysis, dependency CVE detection
  • Compliance Auditing: GDPR, SOC2, ISO27001 gap analysis
  • Security Operations: Threat modeling, penetration testing, IAM audits
  • Incident Response: Breach response playbooks and investigation workflows
  • Policy Generation: Privacy policies, security documentation

All commands use consistent structured output with progress tracking, findings tables, and prioritized action plans.

Installation