AI导哈

测试与安全

sparkfinderoven-security-compliance-suite

reason-machines/security-skills

Security audit and compliance automation suite with OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response playbooks

  • 723 次安装
  • 12 星标
  • 收录于

安装命令

npx skills add https://github.com/reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite

SKILL.md

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

A comprehensive security and compliance automation toolkit derived from awesome-claude-code. Provides 10 specialized commands for vulnerability scanning, compliance auditing, threat modeling, and incident response with structured output and multi-step workflows.

What This Project Does

This skill suite enables AI coding agents to perform:

  • Vulnerability Scanning: OWASP Top-10 checks, CVE dependency analysis
  • Compliance Auditing: GDPR, SOC2 Type II, ISO27001 gap analysis
  • Threat Modeling: STRIDE-based architecture security assessment
  • IAM Security: Least-privilege audits, over-permission detection
  • Incident Response: Structured playbooks for breach handling
  • Secret Detection: Pre-commit hooks with entropy scanning

All commands follow a consistent 5-step interaction pattern with visual progress tracking and prioritized action plans.

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

A comprehensive security and compliance automation toolkit derived from awesome-claude-code. Provides 10 specialized commands for vulnerability scanning, compliance auditing, threat modeling, and incident response with structured output and multi-step workflows.

What This Project Does

This skill suite enables AI coding agents to perform:

  • Vulnerability Scanning: OWASP Top-10 checks, CVE dependency analysis
  • Compliance Auditing: GDPR, SOC2 Type II, ISO27001 gap analysis
  • Threat Modeling: STRIDE-based architecture security assessment
  • IAM Security: Least-privilege audits, over-permission detection
  • Incident Response: Structured playbooks for breach handling
  • Secret Detection: Pre-commit hooks with entropy scanning

All commands follow a consistent 5-step interaction pattern with visual progress tracking and prioritized action plans.

相关 Skills

anthropic-cybersecurity-skillsreason-machines/security-skillsUse 754 structured cybersecurity skills mapped to MITRE ATT&CK, NIST CSF, ATLAS, D3FEND, and NIST AI RMF for AI-driven security operations测试与安全1655pentest-ai-agentsreason-machines/security-skillsClaude Code subagents for offensive security research, penetration testing planning, recon analysis, exploit research, detection engineering, and security reporting测试与安全1364pentest-agents-bug-bounty-frameworkreason-machines/security-skillsAutonomous bug bounty agent framework with 50 agents, hunt loops, exploit chains, MCP servers for platform integration and writeup search智能体工作流1328openosint-ai-osint-frameworkreason-machines/security-skillsAI-powered OSINT agent with interactive REPL, MCP server, and CLI for email/username/domain/IP/phone investigation using 11 integrated tools文档办公1192vibe-security-skillreason-machines/security-skillsAgent skill that audits vibe-coded apps for common security vulnerabilities introduced by AI coding assistants测试与安全1137openclaw-security-hardeningreason-machines/security-skillsDeploy and manage security hardening for high-privilege autonomous AI agents (OpenClaw) using zero-trust architecture and automated defense matrices测试与安全1129