CSA's Valid-AI-ted scoring method (published package 1.1.0) with seven documented fixes, and reference data for every current CAIQ and AI-CAIQ version: scores a completed CAIQ (CCM) or AI-CAIQ (AICM) question by question on a 0-4 scale and writes a scored workbook and a summary PDF. An informational, AI-assisted assessment of the written responses, produced by your AI assistant. Read the README's known issues first.
Plugin valid-ai-ted-scorer from marketplace csa-plugins-official in CloudSecurityAlliance/csa-plugins-official. Commands read from the repo's manifest — 17 days ago.
caiq-scorerScores a completed CAIQ (CCM) or AI-CAIQ (AICM) questionnaire question-by-question on a 0-4 scale using CSA's Valid-AI-ted scoring methodology, and produces a scored workbook plus a domain-rollup summary report (PDF). Use when the user uploads or references a filled-out CAIQ or AI-CAIQ (for example
SecID — universal security identifier lookup, resolution, and registry research. Resolve CVEs, CWEs, ATT&CK techniques, NIST controls, and 700+ security knowledge sources. Local MCP server calls the SecID REST API with optional --base-url for internal resolvers.
3 commands · 1 agent · 1 MCP server
AI-driven source-code vulnerability audit: a 5-stage methodology (recon, investigate, validate, disclose, learn) with adversarial false-positive filtering and conservative, cooperative disclosure. Static-only; hands off to the defending-code harness for runtime-verified findings.
2 skills
Large-N analysis of the CVE corpus: growth attribution, CNA behaviour profiling, record completeness, and CWE assignment quality. Answers whether CVE growth is real, whether CVE data is improving, and why each CNA participates — with the corpus pitfalls that produce confidently wrong answers.
1 skill
CWE assignment and vulnerability chain analysis for CNAs, security researchers, and vendors. Guides analysts through vulnerability understanding, code examination, CWE identification, chain mapping, and quality validation.
1 skill
Comprehensive security incident analysis with OSINT collection, source cross-referencing, confidence classification, and deep analysis. Teaches analysts the methodology while producing structured reports.
1 skill
Map relationships between security knowledge sources using the NIST IR 8477 methodology. Supports four relationship styles (crosswalk, supportive, set theory, structural), guided use case documentation, cross-model validation, and multiple output formats including OLIR/CPRT-compatible JSON and Excel.
1 skill
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.