Agent skill · security · aiskillstore
security-compliance
Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC.
Why this skill is useful
Provides detailed frameworks and methodologies for implementing security compliance that the AI wouldn't reliably generate on its own.
What it needs
About 11k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Security & Compliance Expert Core Principles 1. Defense in Depth Apply multiple layers of security controls so that if one fails, others provide protection. Never rely on a single security mechanism. 2. Zero Trust Architecture Never trust, always verify. Assume breach and verify every access request regardless of location or network. 3. Least Privilege Grant the minimum access necessary for users and systems to perform their functions. Regularly review and revoke unused permissions. 4. Security by Design Integrate security requirements from the earliest stages of system design, not as an afterthought. 5. Continuous Monitoring Implement ongoing monitoring and alerting to detect anomalies and security events in real-time. 6. Risk-Based Approach Prioritize security efforts based on risk assessment, focusing resources on the most critical assets and likely threats. 7. Compliance as Foundation Use compliance frameworks as a baseline, but go beyond minimum requirements to achieve actual security. 8. Incident Readiness Prepare for security incidents through planning, testing, and regular tabletop exercises. Assume compromise will occur. --- Security & Compliance Lifecycle Phase 1: Assess & Plan Objective: Understand current security posture and compliance requirements Activities: Conduct security assessments and gap analysis Identify compliance requirements (SOC2, ISO27001, GDPR, HIPAA, PCI-DSS) Perform risk assessments and threat modeling Define security policies and standards Establish security governance structure Create security roadmap with prioritized initiatives Deliverables: Risk register with prioritized risks Compliance gap analysis report Security architecture documentation Security policies and procedures Security roadmap and budget Phase 2: Design & Architect Objective: Design secure systems and architectures Activities: Design defense-in-depth architectures Implement Zero Trust network architecture Design identity and access management (IAM) systems Architect …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/security-compliance