Agent skill · security · aradotso
sparkfinderoven-security-compliance-suite
Security audit and compliance automation suite with OWASP scanning, CVE detection, GDPR/SOC2 audits, threat modeling, and incident response playbooks
Why this skill is useful
Adds executable scripts for comprehensive security audits, compliance checks, and incident response workflows that are not commonly available in public documentation.
What it needs
Requires git installed locally. About 8k tokens when loaded. Last updated 2026-08-04. 11 stars on the source repository.
What this skill does
🔒 Security & Compliance Skills Suite Skill by ara.so — Security Skills collection. A comprehensive security and compliance automation toolkit derived from awesome-claude-code. Provides 10 specialized commands for vulnerability scanning, compliance auditing, threat modeling, and incident response with structured output and multi-step workflows. What This Project Does This skill suite enables AI coding agents to perform: Vulnerability Scanning: OWASP Top-10 checks, CVE dependency analysis Compliance Auditing: GDPR, SOC2 Type II, ISO27001 gap analysis Threat Modeling: STRIDE-based architecture security assessment IAM Security: Least-privilege audits, over-permission detection Incident Response: Structured playbooks for breach handling Secret Detection: Pre-commit hooks with entropy scanning All commands follow a consistent 5-step interaction pattern with visual progress tracking and prioritized action plans. Installation Quick Install Manual Setup Core Commands OWASP Security Scan Performs OWASP Top-10 vulnerability analysis with CVSS scoring. Output Structure: SQL Injection checks (A03:2021) Broken Authentication (A07:2021) XSS vulnerabilities (A03:2021) CSRF protection gaps Security misconfiguration (A05:2021) CVSS scores with exploit descriptions Dependency CVE Scanning Checks: NPM/PyPI/Maven/NuGet packages Direct and transitive dependencies Exploitability scores (EPSS) Available patches and upgrade paths GDPR Compliance Audit Analyzes: Personal data collection points Consent mechanisms and gaps Right to erasure implementation Data processor agreements (DPA) Cross-border transfer safeguards Breach notification procedures SOC2 Readiness Assessment Evaluates: Security (CC6.x controls) Availability (A1.x controls) Processing Integrity Confidentiality Privacy Evidence collection readiness Threat Modeling Generates: Spoofing threats Tampering vectors Repudiation risks Information disclosure Denial of service scenarios Elevation of privilege paths Penetration Test Report …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aradotso/sparkfinderoven-security-compliance-suite