SOC2, HIPAA, and GDPR compliance validation, secrets scanning, compliance checklists, regulatory documentation, SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
Plugin security-scanning from marketplace claude-code-workflows in shotcowboystyle/ag-skills. Commands read from the repo's manifest — 11 days ago.
attack-tree-constructionBuild comprehensive attack trees to visualize threat paths. Use when mapping attack scenarios, identifying defense gaps, or communicating security risks to stakeholders.
sast-configurationConfigure Static Application Security Testing (SAST) tools for automated vulnerability detection in application code. Use when setting up security scanning, implementing DevSecOps practices, or automating code vulnerability detection.
security-requirement-extractionDerive security requirements from threat models and business context. Use when translating threats into actionable requirements, creating security user stories, or building security test cases.
stride-analysis-patternsApply STRIDE methodology to systematically identify threats. Use when analyzing system security, conducting threat modeling sessions, or creating security documentation.
threat-mitigation-mappingMap identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness.
/security-scanning:compliance-checkReview software compliance controls, regulatory requirements, and audit readiness
/security-scanning:security-dependenciesScan dependencies for vulnerabilities and generate supply chain security evidence
/security-scanning:security-hardeningOrchestrate comprehensive security hardening with defense-in-depth strategy across all application layers
/security-scanning:security-sastStatic Application Security Testing (SAST) for code vulnerability analysis across multiple languages and frameworks
security-scanning-security-auditorAudit one codebase, service or change for security vulnerabilities against the OWASP Top 10:2025 and OWASP ASVS 5.0, and return evidenced findings with severity and remediation guidance. Use when code or architecture needs a security review before release, after a security fix, or for a compliance e
threat-modeling-expertBuild a threat model for one system, feature or architecture and return prioritized threats, attack scenarios, mitigations and security requirements. Use when a design or architecture needs a threat model before build or release, or a vulnerability scan needs threat and business-impact context. Repo
UX/UI design ops — briefs, tokens, components, screens and pages graded against live Awwwards and Mobbin references, plus Material 3/Compose, React Native, and web component design. Absorbs the former ui-design plugin.
47 skills · 39 commands · 4 agents
Image editing, batch operations, format conversion (WebP, AVIF, JPEG XL, PDF), metadata, and library organization — bucket by resolution, aspect ratio, orientation, format, capture time, and camera; dedupe near-duplicates.
28 skills · 19 commands
Drive an AI-generated video project end to end — brief, model selection, characters, script, storyboard, generation pipelines (text-to-image, image-to-video, voice, lip-sync), GPU-aware assembly, ComfyUI import/export, budgets, export — plus a curated index of agent-callable video and audio tooling.
13 skills · 11 commands · 7 agents · 3 MCP servers
Chain-of-custody evidence handling — hash, timestamp, inspect metadata, append to an immutable custody register, package as BagIt, verify, and sync to WORM or S3 Object Lock storage.
14 skills · 12 commands
Modern Python development with Python 3.12+, Django, FastAPI, async patterns, and production best practices
16 skills · 1 command · 3 agents
Work out the real baggage allowance for every segment of an itinerary, inventory what is carried by weight, solve the pack against the binding limit, price excess-baggage options, rank a leave-behind list, and render a counter card and packing list with Typst.
9 skills · 10 commands
Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses
200 skills · 98 commands · 71 agents · 1 MCP server · hooks
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
hooks
Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails
3 skills · 1 command · 1 agent
Install the "AAS Security Engineer" workflow plugin from Agentic Awesome Skills.
12 skills
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
24 skills · 2 agents
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.