AI导哈

测试与安全

sparkfinderoven-claude-security-compliance-suite

reason-machines/security-skills

Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 auditing, threat modeling, and incident response workflows

  • 727 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite

SKILL.md

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

This skill suite provides AI coding agents with specialized commands and workflows for security auditing, vulnerability management, compliance (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output.

What This Project Does

The Security & Compliance Skills Suite equips AI agents with:

  • OWASP Top-10 vulnerability scanning with CVSS scores
  • Dependency CVE detection with upgrade paths
  • Compliance auditing (GDPR, SOC2, ISO27001)
  • Threat modeling using STRIDE methodology
  • IAM security audits for least-privilege assessment
  • Secret detection for pre-commit hooks
  • Incident response playbooks with structured workflows
  • Penetration test reporting with executive summaries

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

This skill suite provides AI coding agents with specialized commands and workflows for security auditing, vulnerability management, compliance (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output.

What This Project Does

The Security & Compliance Skills Suite equips AI agents with:

  • OWASP Top-10 vulnerability scanning with CVSS scores
  • Dependency CVE detection with upgrade paths
  • Compliance auditing (GDPR, SOC2, ISO27001)
  • Threat modeling using STRIDE methodology
  • IAM security audits for least-privilege assessment
  • Secret detection for pre-commit hooks
  • Incident response playbooks with structured workflows
  • Penetration test reporting with executive summaries

相关 Skills

anthropic-cybersecurity-skillsreason-machines/security-skillsUse 754 structured cybersecurity skills mapped to MITRE ATT&CK, NIST CSF, ATLAS, D3FEND, and NIST AI RMF for AI-driven security operations测试与安全1655pentest-ai-agentsreason-machines/security-skillsClaude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting测试与安全1364pentest-agents-bug-bounty-frameworkreason-machines/security-skillsAutonomous bug bounty agent framework with 50 agents, hunt loops, exploit chains, MCP servers for platform integration and writeup search智能体工作流1328openosint-ai-osint-frameworkreason-machines/security-skillsAI-powered OSINT agent with interactive REPL, MCP server, and CLI for email/username/domain/IP/phone investigation using 11 integrated tools文档办公1192vibe-security-skillreason-machines/security-skillsAgent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants测试与安全1137openclaw-security-hardeningreason-machines/security-skillsDeploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices测试与安全1129