Agent skill · security · aradotso
sparkfinderoven-r01-security-compliance-skills
Security & compliance skill suite for OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response workflows
Why this skill is useful
Adds 10 specialized commands and 5 multi-step workflows for security auditing, compliance, and incident response that are not commonly found in public resources.
What it needs
Requires git installed locally. About 10k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
🔒 Security & Compliance Skills Suite Skill by ara.so — Security Skills collection. This skill suite provides AI coding agents with expertise in security auditing, vulnerability management, compliance frameworks (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 specialized commands and 5 multi-step workflows with structured output. What This Project Does The r01-security-compliance-skills suite enables: OWASP Top-10 vulnerability scanning with CVSS scoring and remediation guidance Dependency CVE detection with exploitability analysis and upgrade paths Compliance auditing for GDPR, SOC 2, ISO 27001 frameworks Threat modeling using STRIDE methodology IAM least-privilege auditing for over-permissioned roles Secret detection with pre-commit hooks and entropy scanning Incident response playbooks for breach scenarios Installation Local Installation Register with Claude Code Verify Installation Core Commands /owasp-scan - OWASP Top-10 Code Scanning Scans code for OWASP Top-10 vulnerabilities with exploit descriptions and CVSS scores. Example Output Structure: /dep-cve - Dependency CVE Scanning Analyzes dependencies for known CVEs with exploitability scores. Example Integration: /gdpr-audit - GDPR Compliance Auditing Maps data flows, identifies consent gaps, and generates DPA checklists. Configuration File (.gdpr-config.yml): /soc2-readiness - SOC 2 Compliance Gap Analysis Evaluates readiness across all 5 Trust Service Criteria (TSC). Example Report: /threat-model - STRIDE Threat Modeling Generates STRIDE-based threat models with risk matrices. Example Threat Model: /secret-detect - Secret Detection Configuration Configures pre-commit hooks for secret scanning with entropy analysis. Generated Pre-commit Hook (.git/hooks/pre-commit): /iam-audit - IAM Least-Privilege Auditing Audits IAM roles for over-permissions, stale access, and MFA gaps. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/sparkfinderoven-r01-security-compliance-skills