blue-team-detection
claudeDetection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Privacy engineering: privacy by design, GDPR data protection impact assessments, personal data flow mapping, and technical privacy controls.
Plugin privacy-engineering from marketplace libre-secops in HermeticOrmus/LibreSecOps-Claude-Code. Commands read from the repo's manifest — 1 month ago.
data-protection-patternsTechnical patterns for anonymization, pseudonymization, field-level encryption, data minimization, consent management, and data subject request automation, with the difference between anonymous and pseudonymous data. Use when implementing privacy controls in code or data pipelines.
privacy-by-designThe seven Privacy by Design principles with software engineering practices for each, such as privacy requirements in specs, privacy-protective defaults, and separating identity from behavioral data. Use when designing features that handle personal data.
/privacy-engineering:data-flow-mapMap personal data flows through a system: collection points, processing activities, storage locations, third-party sharing, cross-border transfers, and retention, as input to GDPR Article 30 records or a DPIA.
/privacy-engineering:privacy-reviewReview a system, feature, or architecture for privacy issues and produce findings grouped by privacy principle and applicable regulation (GDPR, CCPA, HIPAA).
dpia-analystUse this agent when a processing activity may need a GDPR Data Protection Impact Assessment: checking Article 35 triggers, scoping the DPIA, rating risks to data subjects, evaluating mitigations, and deciding on Article 36 consultation. It follows CNIL, ICO, and ISO 29134 methods; for privacy review
privacy-engineerUse this agent when reviewing a system, feature, or codebase for privacy: personal data classification, data minimization, anonymization versus pseudonymization, consent management, data subject rights, and retention. It applies privacy by design and LINDDUN threat modeling and recommends technical
Detection engineering and threat hunting: Sigma and YARA rules with SIEM translations, detection-as-code, and hypothesis-driven hunts mapped to MITRE ATT&CK.
2 skills · 2 commands · 2 agents
Methodology for authorized bug bounty programs: scope-respecting reconnaissance, attack surface mapping, and vulnerability reports that triagers can reproduce.
2 skills · 2 commands · 2 agents
Compliance assessment, gap analysis, and audit evidence planning for SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, and NIST frameworks.
2 skills · 2 commands · 2 agents
Container security for Docker and Podman: Dockerfile and Compose hardening, image vulnerability scanning with SBOMs, and runtime isolation.
2 skills · 2 commands · 2 agents
Security-integrated CI/CD: pipeline security architecture, SAST, SCA, secrets, IaC, and container scanning in GitHub Actions, GitLab CI, and Jenkins, and build-breaking security gates.
2 skills · 2 commands · 2 agents
Digital forensics for authorized investigations: investigation planning, chain of custody, disk and artifact analysis, timelines, and memory forensics with Volatility.
2 skills · 2 commands · 2 agents
Install the "AAS Privacy & Compliance Engineering" workflow plugin from Agentic Awesome Skills.
6 skills
SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, and regulatory documentation
1 command · 1 agent
14 regulatory affairs & quality management skills for HealthTech/MedTech: ISO 13485 QMS, MDR 2017/745, FDA 510(k)/PMA, GDPR/DSGVO, ISO 27001 ISMS, CAPA management, risk management, clinical evaluation, SOC 2 compliance.
21 skills
PM utility skills: resume review, NDA drafting, privacy policy generation, and grammar/flow checking. Essential tools for product managers beyond core product work.
4 skills · 5 commands
Sets up cookieless, privacy-first website analytics in your own site: time per page section, scroll, goals and 404s from a small tracker and a same-origin collector, an optional consent banner, PostHog session replay only after consent, one Slack or e-mail line per notable visit, a weekly digest, and health alerts. A Playwright check then proves the privacy claims: nothing stored before consent, no e-mail or token from the URL in any report, private pages silent.
1 skill
Verified PostHog operator pack with 24 workflows for regional ingestion, identity, flags, privacy, costs, incidents, migrations, and safe releases.
24 skills
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.