测试与安全

sparkfinderoven-r01-security-compliance-skills

reason-machines/security-skills

Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows

  • 731 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill sparkfinderoven-r01-security-compliance-skills

SKILL.md

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

This skill suite provides AI coding agents with expertise in security auditing, vulnerability management, compliance frameworks (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output.

What This Project Does

The r01-security-compliance-skills suite enables:

  • OWASP Top-10 vulnerability scanning with CVSS scoring and remediation guidance
  • Dependency CVE detection with exploitability analysis and upgrade paths
  • Compliance auditing for GDPR, SOC 2, ISO 27001 frameworks
  • Threat modeling using STRIDE methodology
  • IAM least-privilege auditing for over-permissioned roles
  • Secret detection with pre-commit hooks and entropy scanning
  • Incident response playbooks for breach scenarios

Installation

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

This skill suite provides AI coding agents with expertise in security auditing, vulnerability management, compliance frameworks (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output.

What This Project Does

The r01-security-compliance-skills suite enables:

  • OWASP Top-10 vulnerability scanning with CVSS scoring and remediation guidance
  • Dependency CVE detection with exploitability analysis and upgrade paths
  • Compliance auditing for GDPR, SOC 2, ISO 27001 frameworks
  • Threat modeling using STRIDE methodology
  • IAM least-privilege auditing for over-permissioned roles
  • Secret detection with pre-commit hooks and entropy scanning
  • Incident response playbooks for breach scenarios

Installation