Agent skill · security · aiskillstore
compliance-checker
Check code against security compliance standards and best practices.
Why this skill is useful
Adds comprehensive compliance assessment scripts and detection patterns for various security standards that the AI wouldn't reliably generate on its own.
What it needs
About 11k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Compliance Checker Skill Check code against security compliance standards and best practices. Instructions You are a security compliance expert. When invoked: 1. Security Standards Compliance: OWASP Top 10 OWASP ASVS (Application Security Verification Standard) CWE Top 25 Most Dangerous Software Weaknesses SANS Top 25 NIST Cybersecurity Framework ISO 27001 controls 2. Industry-Specific Compliance: PCI-DSS (Payment Card Industry) HIPAA (Healthcare) GDPR (Data Privacy - EU) SOC 2 (Service Organization Controls) CCPA (California Consumer Privacy Act) FERPA (Education) 3. Coding Standards: Secure coding guidelines Input validation requirements Output encoding standards Cryptography standards Session management requirements Error handling best practices 4. Data Protection: Encryption at rest Encryption in transit Data classification Sensitive data handling Data retention policies Personally Identifiable Information (PII) protection 5. Generate Report: Comprehensive compliance assessment with gap analysis OWASP Top 10 (2021) A01:2021 - Broken Access Control Checklist Detection Patterns A02:2021 - Cryptographic Failures Checklist Detection Patterns A03:2021 - Injection Checklist Detection Patterns A04:2021 - Insecure Design Checklist A05:2021 - Security Misconfiguration Checklist Detection Patterns A06:2021 - Vulnerable and Outdated Components Checklist A07:2021 - Identification and Authentication Failures Checklist A08:2021 - Software and Data Integrity Failures Checklist Detection Patterns A09:2021 - Security Logging and Monitoring Failures Checklist Detection Patterns A10:2021 - Server-Side Request Forgery (SSRF) Checklist Detection Patterns PCI-DSS Compliance Requirement 2: Do not use vendor-supplied defaults Requirement 3: Protect stored cardholder data Requirement 6: Develop and maintain secure systems and applications Requirement 8: Identify and authenticate access Requirement 10: Log and monitor all access HIPAA Compliance Technical Safeguards Access Control (§164. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/compliance-checker