skill CX Codex

sparkfinderoven-claude-security-compliance-suite — Claude Code skill

Q: How to install sparkfinderoven-claude-security-compliance-suite in Claude Code?

Run `npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a claude-code` in your terminal. You can also inspect `~/.claude/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md` directly inside an active session.

Runs OWASP vulnerability scans, audits third-party packages for CVEs, reviews IAM policies, and evaluates GDPR or SOC2 compliance directly in coding agents.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a claude-code

Open on GitHub

What sparkfinderoven-claude-security-compliance-suite does

This suite equips development agents with targeted routines for software security and compliance reviews. It inspects source code for OWASP Top-10 flaws, calculates CVSS scores, and suggests remediations. Threat modeling relies on the STRIDE framework.

Beyond code scanning, it verifies project dependencies against published CVE databases, proposing patch versions. For GDPR reviews, an AST-based parser tracks personal data fields such as email addresses or phone numbers. Secret detection assists in setting up pre-commit defenses.

Auditing library vulnerabilities requires access to project manifest files like package.json. Reports format findings into clear tables accompanied by prioritized remediation checklists.

What it helps with

scan source code for OWASP Top-10 security flaws
identify known CVEs in project dependencies with recommended updates
map data flows and consent gaps for GDPR compliance
evaluate repository readiness against SOC2 trust service criteria

Example prompts for the agent

Scan the API directory for vulnerabilities: /owasp-scan src/api --verbose
Check package dependencies for critical flaws: /dep-cve --severity high,critical
Map personal data flows and consent gaps: /gdpr-audit --output report.md

How to install sparkfinderoven-claude-security-compliance-suite

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a claude-code

2Manually: put the files in place

~/.claude/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/sparkfinderoven-claude-security-compliance-suite/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a codex

2Manually: put the files in place

.agents/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a cursor

2Manually: put the files in place

.cursor/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills sparkfinderoven-claude-security-compliance-suite

2Manually: put the files in place

.github/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/sparkfinderoven-claude-security-compliance-suite

Manually: put the files in place

.devin/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about sparkfinderoven-claude-security-compliance-suite

How to install sparkfinderoven-claude-security-compliance-suite in Claude Code?

Run npx skills add reason-machines/security-skills --skill sparkfinderoven-claude-security-compliance-suite -a claude-code in your terminal. You can also inspect ~/.claude/skills/sparkfinderoven-claude-security-compliance-suite/SKILL.md directly inside an active session.

What does sparkfinderoven-claude-security-compliance-suite do?

It adds commands for automated security auditing, CVE scanning, STRIDE threat modeling, and regulatory checks covering GDPR and SOC2.

Which regulatory frameworks does the suite evaluate?

The tools support compliance assessments for GDPR, SOC2 Trust Service Criteria, and ISO27001 requirements.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

security-compliance-skills-suite-claude This skill scans code and dependencies for security issues, supports GDPR, SOC 2 and ISO 27001 checks, and guides incident response. CX Codex +1 754installs pentestify-security-report-generator A skill that turns pentest findings into a structured report: vulnerability tracking, live risk stats and PDF export. CX Codex +1 747installs awesome-claude-code-security-compliance-suite This skill checks code and dependencies for security issues, supports GDPR audits, and builds threat models. Use it for security work inside coding agents. CX Codex +1 730installs sparkfinderoven-r01-security-compliance-skills A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs s800-vehicle-network-security-testing A skill for automotive network security work: CAN traffic analysis, fuzzing, ECU scanning and replay. Useful when you have authorization to test a vehicle. CX Codex +1 723installs sparkfinderoven-security-compliance-suite Automates OWASP vulnerability checks, dependency CVE scans, and SOC2 or GDPR audits inside your development workflow. Designed for security assessments during coding. CX Codex +1 720installs esaa-security-audit This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. CX Codex +1 717installs foundry-security-spec A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. Useful when you're building your own evaluation pipeline. CX Codex +1 683installs