Skip to main content
affpapa.org
RU EN
skill CX Codex

security-compliance-skills-suite-claude — Claude Code skill

This skill scans code and dependencies for security issues, supports GDPR, SOC 2 and ISO 27001 checks, and guides incident response.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓ 
npx skills add reason-machines/security-skills --skill security-compliance-skills-suite-claude -a claude-code
Open on GitHub

What security-compliance-skills-suite-claude does

The skill adds 10 security commands and 5 multi-step workflows for AI coding agents. It can inspect code for OWASP Top-10 issues, find known CVEs in dependencies, spot exposed secrets, and review IAM permissions for least-privilege gaps. Other workflows cover STRIDE threat models, GDPR, SOC 2 and ISO 27001 reports, zero-trust architecture, and incident response.

Results use structured reports with severity-ranked findings and suggested fixes. Some checks can return JSON, Markdown, or HTML. Dependency scans work with files such as requirements.txt, Pipfile, pyproject.toml, package.json, package-lock.json, yarn.lock, Gemfile.lock, pom.xml, build.gradle, go.mod, go.sum, and Cargo.lock.

That CVE coverage is tied to these dependency formats, so a project using another manifest file will not be covered by this scan.

What it helps with

  • scan source code for OWASP Top-10 flaws
  • find known CVEs in project dependencies
  • map personal-data flows for a GDPR review
  • detect secrets and credentials in the repository
  • prepare a response plan for a security incident

Example prompts for the agent

  • Scan ./src/api for OWASP issues and show findings at high severity or above.
  • Check production dependencies for CVEs with --min-cvss=7.0.
  • Review ./src for GDPR gaps and generate a data-flow report.

How to install security-compliance-skills-suite-claude

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill security-compliance-skills-suite-claude -a claude-code

2Manually: put the files in place

~/.claude/skills/security-compliance-skills-suite-claude/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/security-compliance-skills-suite-claude/

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about security-compliance-skills-suite-claude

How do I install security-compliance-skills-suite-claude in Claude Code?

Run npx skills add reason-machines/security-skills --skill security-compliance-skills-suite-claude -a claude-code, then open ~/.claude/skills/security-compliance-skills-suite-claude/SKILL.md in a Claude Code session.

What does security-compliance-skills-suite-claude do?

It runs security and dependency scans, reviews GDPR, SOC 2 and ISO 27001 controls, creates threat models, finds secrets, checks IAM permissions, and supports incident response.

Which dependency files can it scan?

The skill covers Python, JavaScript, Ruby, Java, Go, and Rust manifests or lock files, including pyproject.toml, package.json, Gemfile.lock, pom.xml, go.mod, and Cargo.lock.

Similar skills

All skills for Security →
git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set42

malware-analysis-warning This skill flags repositories that may distribute malware while posing as antivirus or other security software. CX Codex +1 833installs edgesecurityaccess-wireguard-vpn This skill walks the agent through standing up a WireGuard VPN: build the Go server, add users, and hand out configs over an HTTP API. CX Codex +1 788installs zen-ai-pentest-framework A skill that sets up an autonomous pentest framework for AI agents, running real security tools and producing compliance-mapped reports. CX Codex +1 779installs sparkfinderoven-security-compliance-skills A suite of commands and workflows for security and compliance work: OWASP scanning, CVE detection, GDPR audits, SOC 2 readiness, threat modeling. CX Codex +1 759installs pentestify-security-report-generator A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs awesome-claude-code-security-compliance-suite This skill checks code and dependencies for security issues, supports GDPR audits, and builds threat models. Use it for security work inside coding agents. CX Codex +1 730installs sparkfinderoven-r01-security-compliance-skills A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs s800-vehicle-network-security-testing A skill for automotive network security work: CAN traffic analysis, fuzzing, ECU scanning and replay. Useful when you have authorization to test a vehicle. CX Codex +1 723installs

Project sponsors

Companies that keep this analytics open
Gold sponsor
Nutra.Club

Impressions, clicks and code copies — open statistics. We keep the numbers public for the same reason NeBlask itself is public. Become a sponsor