skill CX Codex

sparkfinderoven-security-compliance-suite — Claude Code skill

Q: How do I install sparkfinderoven-security-compliance-suite in Claude Code?

Run `npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a claude-code` in your terminal.

Automates OWASP vulnerability checks, dependency CVE scans, and SOC2 or GDPR audits inside your development workflow. Designed for security assessments during coding.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a claude-code

Open on GitHub

What sparkfinderoven-security-compliance-suite does

This skill equips your agent with specialized routines for source code audits. It inspects repositories for OWASP Top-10 flaws and exposed secret keys across NPM, PyPI, Maven, or NuGet configurations. Findings include CVSS ratings and EPSS exploitability metrics.

Beyond basic scanning, it manages governance workflows. You can evaluate compliance gaps against SOC2 Type II and GDPR requirements, or create structured response playbooks for data breaches. Architectural evaluations rely on the STRIDE framework. Each command executes through a 5-step sequence with prioritized remediation items.

Threat modeling requires detailed architecture files, or the STRIDE breakdown stays superficial.

What it helps with

scan source directories for OWASP Top-10 security flaws
audit project dependencies for published CVEs and upgrade paths
build STRIDE threat matrices directly from architecture documentation
evaluate compliance gaps for GDPR and SOC2 Type II criteria
configure pre-commit checks to catch leaked API credentials and tokens

Example prompts for the agent

Audit our backend code: /owasp-scan ./src/api --severity high
Check our project dependencies: /dep-cve --scope full --fix-suggestions
Generate a threat model from specs: /threat-model ./docs/architecture.md

How to install sparkfinderoven-security-compliance-suite

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a claude-code

2Manually: put the files in place

~/.claude/skills/sparkfinderoven-security-compliance-suite/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/sparkfinderoven-security-compliance-suite/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a codex

2Manually: put the files in place

.agents/skills/sparkfinderoven-security-compliance-suite/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a cursor

2Manually: put the files in place

.cursor/skills/sparkfinderoven-security-compliance-suite/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install reason-machines/security-skills sparkfinderoven-security-compliance-suite

2Manually: put the files in place

.github/skills/sparkfinderoven-security-compliance-suite/SKILL.md

1Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a gemini-cli

2Platform CLI

gemini skills install https://github.com/reason-machines/security-skills --path skills/sparkfinderoven-security-compliance-suite

Manually: put the files in place

.devin/skills/sparkfinderoven-security-compliance-suite/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about sparkfinderoven-security-compliance-suite

How do I install sparkfinderoven-security-compliance-suite in Claude Code?

Run npx skills add reason-machines/security-skills --skill sparkfinderoven-security-compliance-suite -a claude-code in your terminal.

What package ecosystems does the CVE scanner support?

The scanner inspects dependencies across NPM, PyPI, Maven, and NuGet. It checks direct and transitive packages alongside EPSS scores.

How does the threat modeling command work?

It applies the STRIDE framework against provided architecture documentation or design files. The output maps spoofing, tampering, and privilege escalation risks.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set69

awesome-claude-code-security-compliance-suite This skill checks code and dependencies for security issues, supports GDPR audits, and builds threat models. Use it for security work inside coding agents. CX Codex +1 730installs sparkfinderoven-r01-security-compliance-skills A skill suite that scans code for OWASP vulnerabilities, checks dependencies for CVEs, audits GDPR and SOC 2 readiness, and builds STRIDE threat models. CX Codex +1 729installs sparkfinderoven-claude-security-compliance-suite Runs OWASP vulnerability scans, audits third-party packages for CVEs, reviews IAM policies, and evaluates GDPR or SOC2 compliance directly in coding agents. CX Codex +1 724installs s800-vehicle-network-security-testing A skill for automotive network security work: CAN traffic analysis, fuzzing, ECU scanning and replay. Useful when you have authorization to test a vehicle. CX Codex +1 723installs esaa-security-audit This skill runs 95 checks across 16 security domains and records every finding as an immutable event, so the same repo state yields the same report. CX Codex +1 717installs foundry-security-spec A skill that walks your agent through implementing Cisco's Foundry spec: a multi-role system for finding and validating vulnerabilities. Useful when you're building your own evaluation pipeline. CX Codex +1 683installs web-security-scanner-pro A skill that teaches your agent to drive Web Security Scanner Pro: 49 modules, WAF evasion, CMS checks and HTML or PDF reports. CX Codex +1 607installs pentestcompanion-workspace This skill wires your agent into a self-hosted Pentest Companion workspace for running engagements, tools and reports. CX Codex +1 534installs