Agent skill · security · aradotso
awesome-claude-code-security-compliance-suite
Security & compliance skill suite providing OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows for AI coding agents
Why this skill is useful
Adds 10 specialized security commands and 5 multi-step compliance workflows that provide capabilities not typically available to AI agents.
What it needs
Requires git installed locally. About 9k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
🔒 Security & Compliance Skills Suite Skill by ara.so — Security Skills collection. A comprehensive security and compliance skill suite derived from hesreallyhim/awesome-claude-code, providing specialized commands and workflows for security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance, and incident response. What This Project Does This skill suite provides 10 specialized security commands and 5 multi-step compliance workflows with structured output UI for: Vulnerability Scanning: OWASP Top-10 analysis, dependency CVE detection Compliance Auditing: GDPR, SOC2, ISO27001 gap analysis Security Operations: Threat modeling, penetration testing, IAM audits Incident Response: Breach response playbooks and investigation workflows Policy Generation: Privacy policies, security documentation All commands use consistent structured output with progress tracking, findings tables, and prioritized action plans. Installation Quick Install (Local Skills Directory) Manual Installation Verification Verify installation by checking available commands: Core Commands 1. OWASP Top-10 Security Scan Scans code for OWASP Top-10 vulnerabilities with CVSS scores and remediation guidance. Example Output Structure: 2. Dependency CVE Scanner Scans project dependencies for known CVEs with exploitability scores. Example for Node.js project: Expected Output: 3. GDPR Compliance Audit Maps data flows, identifies consent gaps, and generates DPA checklist. Example Analysis: 4. SOC2 Readiness Assessment Performs gap analysis across all 5 Trust Service Criteria. Example Output: 5. Threat Modeling (STRIDE) Generates STRIDE threat model for architecture diagrams. Example for Web Application: 6. Penetration Test Report Generator Structures penetration test findings with executive summary and remediation. Example Report Structure: 7. Secret Detection (Pre-commit Hook) Configures pre-commit hooks for secret and credential detection. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/awesome-claude-code-security-compliance-suite