# awesome-claude-code-security-compliance-suite

This skill checks code and dependencies for security issues, supports GDPR audits, and builds threat models. Use it for security work inside coding agents.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 730 installs · ★ 12
- Author: reason-machines
- License: LicenseRef-Unknown · policy=link-only · description only; the file stays with the author
- Source: https://github.com/reason-machines/security-skills/tree/HEAD/skills/awesome-claude-code-security-compliance-suite/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/awesome-claude-code-security-compliance-suite

## What it does

The skill covers OWASP Top-10 checks, dependency CVE detection, GDPR and SOC2 audits, threat modeling, IAM reviews, and incident-response workflows. Its outputs use structured findings and action plans.

The package includes commands plus multi-step workflows for security tasks. `/owasp-scan <target_directory>` scans code, `/dep-cve` checks project dependencies, and `/gdpr-audit <application_path>` reviews data flows and consent. In Claude Code, installation is followed by reading `~/.claude/skills/awesome-claude-code-security-compliance-suite/SKILL.md`; that step activates the skill.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/awesome-claude-code-security-compliance-suite/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/awesome-claude-code-security-compliance-suite/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/awesome-claude-code-security-compliance-suite/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/awesome-claude-code-security-compliance-suite/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install reason-machines/security-skills awesome-claude-code-security-compliance-suite
```

2. **Manually: put the files in place**
- File: `.github/skills/awesome-claude-code-security-compliance-suite/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/reason-machines/security-skills --path skills/awesome-claude-code-security-compliance-suite
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/awesome-claude-code-security-compliance-suite/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add reason-machines/security-skills --skill awesome-claude-code-security-compliance-suite -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/reason-machines/security-skills/tree/HEAD/skills/awesome-claude-code-security-compliance-suite/SKILL.md

## When to use it
- scan source code for OWASP issues
- find CVEs in project dependencies
- audit an application for GDPR gaps
- create a threat model for an architecture
- prepare an incident response playbook

## Example prompts
- Scan `src/` for OWASP vulnerabilities and sort the findings by severity.
- Check the project dependencies for known CVEs with `/dep-cve`.
- Run a GDPR review on the application with `/gdpr-audit . --data-map`.

## Similar
- [security-compliance-audit](https://affpapa.org/en/nevibecode/skills/security-compliance-audit.md) — skill · 665 installs
- [compliance-tracking](https://affpapa.org/en/nevibecode/skills/compliance-tracking.md) — skill · 3000 installs
- [compliance-os](https://affpapa.org/en/nevibecode/plugins/compliance-os.md) — plugin · ★ 28786
- [compliance-check](https://affpapa.org/en/nevibecode/commands/compliance-check.md) — command · ★ 41823
- [hr-legal-compliance](https://affpapa.org/en/nevibecode/plugins/hr-legal-compliance.md) — plugin · ★ 41823
- [soc2-compliance](https://affpapa.org/en/nevibecode/skills/soc2-compliance.md) — skill · 658 installs

From the same set: [reason-machines/security-skills](https://affpapa.org/en/nevibecode/by/reason-machines/security-skills.md) — 69 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md