blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
Plugin compliance-frameworks from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
gdpr-requirementsGDPR reference for technology teams: key definitions, Article 5 principles, lawful bases, data subject rights, data protection by design, processor duties, breach notification, DPIAs, a SaaS compliance checklist, and a data deletion pattern. Use when building or reviewing systems that process EU per
soc2-controlsSOC 2 Type II reference: the Trust Service Criteria, Common Criteria controls, evidence requirements, a readiness pattern, and common auditor requests. Use when preparing for a SOC 2 audit or designing controls to satisfy it.
/compliance-frameworks:compliance-checkAssess a system against a compliance framework and produce a gap analysis report of implemented, partial, and missing controls.
/compliance-frameworks:compliance-gapIdentify gaps between current controls and a framework's requirements and produce a prioritized remediation roadmap, optionally mapped across multiple frameworks.
compliance-auditorUse this agent when assessing a system against SOC 2, ISO 27001:2022, PCI DSS v4.0, HIPAA, GDPR, NIST 800-53 r5, or NIST CSF 2.0, or when mapping one set of controls across several frameworks. It maps controls to requirements and produces an audit-ready assessment with gaps and remediation.
evidence-collectorUse this agent when preparing for an audit and you need to know what evidence proves each control, where to collect it (IAM, Git history, scan reports, IR records, backups, vendor reviews), and how to automate and keep it fresh. It produces an evidence plan organized by control and evidence type.
Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.
2 skills · 2 commands · 2 agents
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Privacy & Compliance Engineering" editorial skill bundle for Claude Code.
6 skills
Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.
5 skills
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.
57 skills · 1 MCP server
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.