claude

compliance-frameworks

Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.

4 on GitHubby Diego Bodartv1.0.0MITupdated 1 month ago
/

Plugin compliance-frameworks from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (2)

  • gdpr-requirements

    GDPR reference for technology teams: key definitions, Article 5 principles, lawful bases, data subject rights, data protection by design, processor duties, breach notification, DPIAs, a SaaS compliance checklist, and a data deletion pattern. Use when building or reviewing systems that process EU per

  • soc2-controls

    SOC 2 Type II reference: the Trust Service Criteria, Common Criteria controls, evidence requirements, a readiness pattern, and common auditor requests. Use when preparing for a SOC 2 audit or designing controls to satisfy it.

Slash commands (2)

  • /compliance-frameworks:compliance-check

    Assess a system against a compliance framework and produce a gap analysis report of implemented, partial, and missing controls.

  • /compliance-frameworks:compliance-gap

    Identify gaps between current controls and a framework's requirements and produce a prioritized remediation roadmap, optionally mapped across multiple frameworks.

Subagents (2)

  • compliance-auditor

    Use this agent when assessing a system against SOC 2, ISO 27001:2022, PCI DSS v4.0, HIPAA, GDPR, NIST 800-53 r5, or NIST CSF 2.0, or when mapping one set of controls across several frameworks. It maps controls to requirements and produces an audit-ready assessment with gaps and remediation.

  • evidence-collector

    Use this agent when preparing for an audit and you need to know what evidence proves each control, where to collect it (IAM, Git history, scan reports, IR records, backups, vendor reviews), and how to automate and keep it fresh. It produces an evidence plan organized by control and evidence type.

View source on GitHub

More from HermeticOrmus/LibreSecOps-Claude-Code

All 33 plugins →

Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.

2 skills · 2 commands · 2 agents

4

Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.

2 skills · 2 commands · 2 agents

4

Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.

2 skills · 2 commands · 2 agents

4

Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.

2 skills · 2 commands · 2 agents

4

Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.

2 skills · 2 commands · 2 agents

4

Identity and access management: IAM architecture, SSO and MFA design, RBAC/ABAC/ReBAC access control models, authentication flow review, and access audits.

2 skills · 2 commands · 2 agents

4

Similar plugins

ruflo-adr

claudecodex

ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code

5 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

Automate API security directly in Claude Code with 42Crunch - automatically audit OpenAPI specs, detect vulnerabilities aligned with OWASP API Security risks (including BOLA/BFLA), and apply AI-powered fixes. Designed for AI-assisted development workflows, it provides continuous guardrails through an audit->scan->remediate->validate loop, ensuring APIs meet enterprise security standards before deployment.

5 skills

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Twilio Skills provide procedural knowledge for AI coding agents — which APIs to use, in what order, and what to avoid. Covers SMS, Voice, WhatsApp, Verify, SendGrid, Compliance, and 30+ products.

57 skills · 1 MCP server

anthropics/knowledge-work-plugins 35,601

14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.

21 skills

alirezarezvani/claude-skills 29,725

Maintain compliance-frameworks?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins33 plugins