Agent skill · security · aradotso
sparkfinderoven-security-compliance-skills
Security & compliance skill suite with OWASP scanning, CVE detection, GDPR audits, SOC2 readiness, threat modeling, and incident response workflows
Why this skill is useful
Adds 10 specialized commands and 5 multi-step workflows for security audits and compliance that significantly enhance the AI's capabilities in security management.
What it needs
Requires git installed locally. About 9k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
🔒 Security & Compliance Skills Suite Skill by ara.so — Security Skills collection. This skill suite provides specialized commands and workflows for security audits, vulnerability management, compliance (GDPR/SOC2/ISO27001), and incident response. Derived from hesreallyhim/awesome-claude-code, it offers 10 security-focused commands and 5 multi-step workflows with structured output. Installation Local Installation Register with Claude Code In a Claude Code session: Core Commands /owasp-scan - OWASP Top 10 Security Scan Scans code for OWASP Top 10 vulnerabilities with exploit descriptions, CVSS scores, and remediation steps. Usage: Output Structure: Example Remediation: /dep-cve - Dependency CVE Scanner Analyzes project dependencies for known CVEs with exploitability scores and upgrade paths. Usage: Example Output: Checking in CI/CD: /gdpr-audit - GDPR Compliance Audit Maps data flows, identifies consent gaps, and generates DPA (Data Processing Agreement) checklists. Usage: Example Analysis: Implementation Example: /soc2-readiness - SOC 2 Type II Readiness Assessment Gap analysis across all 5 Trust Service Criteria (TSC): Security, Availability, Processing Integrity, Confidentiality, Privacy. Usage: Example Report: /threat-model - STRIDE Threat Modeling Generates STRIDE threat models for architecture diagrams with risk matrices. Usage: Example Analysis: Code Example: /secret-detect - Pre-commit Secret Detection Configures pre-commit hooks for secret detection with entropy scanning. Usage: Generated Configuration: Custom Rules: Git Hook Installation: /iam-audit - IAM Least-Privilege Audit Audits IAM roles for over-permissioned access, stale accounts, and MFA gaps. Usage: Example Report: /incident-playbook - Security Incident Response Generates structured incident response playbooks: triage → contain → eradicate → recover → lessons learned. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/sparkfinderoven-security-compliance-skills