sdlc-cross-role
claudeCross-functional SDLC workflows: phase gates, definitions of ready/done, feature lifecycle, release checklists, incident-to-improvement, compliance traceability. Grounded in ISO/IEC 12207, 15288.
8 skills · 8 commands
GDPR, SOC2, PCI-DSS compliance mapping, audit preparation, data classification.
Plugin security-compliance from marketplace claude-skills in sethdford/claude-skills. Commands read from the repo's manifest — 1 month ago.
audit-preparationPrepare for compliance audits by collecting evidence, organizing documentation, and coordinating with auditors.
compliance-mappingMap security controls to compliance framework requirements (NIST, CIS, ISO 27001, PCI-DSS, HIPAA, GDPR, SOC 2).
data-classificationClassify organizational data by sensitivity level and define handling, storage, and access requirements.
gdpr-assessmentAssess GDPR compliance for data processing, rights, privacy controls, and incident response obligations.
pci-dss-reviewReview PCI-DSS compliance for payment card data security across network, systems, and processes.
privacy-impact-assessmentConduct Privacy Impact Assessments (PIA) to evaluate privacy risks and compliance for data processing activities.
security-policy-templateDevelop organization-wide security policies covering access control, data handling, incident response, and vendor management.
soc2-controlsImplement SOC 2 Trust Services Criteria controls for security, availability, processing integrity, confidentiality, and privacy.
/security-compliance:assess-complianceAssess organizational compliance against key regulatory frameworks (GDPR, SOC2, PCI-DSS, ISO 27001).
/security-compliance:classify-dataConduct data classification and define protection requirements for each classification level.
/security-compliance:prepare-auditPrepare for security audits through evidence gathering and control verification.
Cross-functional SDLC workflows: phase gates, definitions of ready/done, feature lifecycle, release checklists, incident-to-improvement, compliance traceability. Grounded in ISO/IEC 12207, 15288.
8 skills · 8 commands
Architecture patterns, system decomposition, DDD, microservices, event-driven, CQRS. Grounded in TOGAF, IASA BTABoK, ISO 42010.
10 skills · 4 commands
User research: personas, empathy maps, journey maps, interviews, usability testing, JTBD.
10 skills · 4 commands
Clean code, refactoring, SOLID principles, code smell detection, complexity analysis.
10 skills · 4 commands
Problem discovery, customer research, opportunity assessment, assumption mapping.
10 skills · 4 commands
UI design: color systems, typography, layout grids, responsive design, data viz.
9 skills · 4 commands
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
ADR lifecycle management — create, index, supersede, and link Architecture Decision Records to code
5 skills · 1 command · 1 agent
Install the "AAS Security Engineer" editorial skill bundle for Claude Code.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.