Agent skill · security · aradotso
sparkfinderoven-claude-security-compliance-suite
Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 auditing, threat modeling, and incident response workflows
Why this skill is useful
Adds 10 specialized commands and 5 multi-step workflows for security auditing and compliance that fundamentally extend the AI's capabilities.
What it needs
Requires git installed locally. About 9k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
🔒 Security & Compliance Skills Suite Skill by ara.so — Security Skills collection. This skill suite provides AI coding agents with specialized commands and workflows for security auditing, vulnerability management, compliance (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output. What This Project Does The Security & Compliance Skills Suite equips AI agents with: OWASP Top-10 vulnerability scanning with CVSS scores Dependency CVE detection with upgrade paths Compliance auditing (GDPR, SOC2, ISO27001) Threat modeling using STRIDE methodology IAM security audits for least-privilege assessment Secret detection for pre-commit hooks Incident response playbooks with structured workflows Penetration test reporting with executive summaries All commands follow a consistent 5-step interaction pattern with visual progress tracking and prioritized action plans. Installation Method 1: Clone to Claude Skills Directory Method 2: Manual Setup Activate in Claude Code In a Claude Code session: Or reference in your project's .claude/config.json: Core Commands /owasp-scan - OWASP Top-10 Vulnerability Scan Scans code for OWASP Top-10 vulnerabilities with exploit descriptions, CVSS scores, and remediation steps. Usage: Example Output Structure: Code Pattern for SQL Injection Detection: /dep-cve - Dependency CVE Report Scans project dependencies for known CVEs with exploitability scores and upgrade paths. Usage: Example Implementation Pattern: Expected Output: /gdpr-audit - GDPR Compliance Audit Maps data flows, identifies consent gaps, and generates DPA checklists. Usage: Code Example - Data Flow Detection: Audit Checklist Output: /soc2-readiness - SOC2 Compliance Assessment Performs gap analysis across all 5 SOC2 Trust Service Criteria. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/sparkfinderoven-claude-security-compliance-suite