About

Imported from sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security (SKILL.md). Install upstream with npx skills add sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security. Copyright stays with the author (MIT).

🔒 Security & Compliance Skill Suite

Name: r00-hesreallyhim-awesome-claude-code--security
Author: sparkfinderoven

Derived from hesreallyhim/awesome-claude-code · Focus: curated resources, skills, hooks, agents

Overview

This skill provides 10 production-ready commands tailored for Security & Compliance workflows. All commands follow a consistent interaction pattern with structured output, progress tracking and actionable recommendations.

Available Commands

/owasp-scan — OWASP Top-10 code scan with exploit description, CVSS score and remediation
/dep-cve — Dependency CVE report with exploitability score and upgrade path
/gdpr-audit — GDPR data-flow map, consent gaps and DPA checklist
/soc2-readiness — SOC 2 Type II readiness gap analysis across all 5 Trust Service Criteria
/threat-model — STRIDE threat model for architecture diagram with risk matrix
/pentest-report — Structured penetration test report: executive summary, findings and remediation
/secret-detect — Pre-commit secret detection hook config with entropy scanning
/iam-audit — IAM least-privilege audit: over-permissioned roles, stale access and MFA gaps
/incident-playbook — Security incident playbook: triage → contain → eradicate → recover → lessons
/privacy-policy — GDPR/CCPA-compliant privacy policy generator from data inventory

Interaction Pattern

Every command follows this structured response format:

1. CONTEXT CHECK   — Verify inputs and confirm scope with user
2. ANALYSIS        — Deep analysis with live progress display
3. FINDINGS TABLE  — Structured results with severity / priority
4. RECOMMENDATIONS — Prioritised action list (quick wins first)
5. NEXT STEPS      — Suggested follow-up commands

UI Conventions

Symbol	Meaning
✓	Passed / complete
✗	Failed / critical
⚠	Warning / review
⟳	In progress
░	Pending
🔴	Critical severity
🟠	High severity
🟡	Medium severity
🟢	Low / informational

Progress bars use block characters: [████████░░] 80%

Quick Start

# Install this skill
cp -r . ~/.claude/skills/r00-hesreallyhim-awesome-claude-code--security/

# In Claude Code
/read ~/.claude/skills/r00-hesreallyhim-awesome-claude-code--security/SKILL.md

Then simply describe your task and Claude will route to the appropriate command automatically.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/sparkfinderoven-r01-hesreallyhim-awesome-claude-code-sec-43906d/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

sparkfinderoven-r01-hesreallyhim-awesome-claude-code-sec-43906d.ocm.jsonjson

{
  "ocm": "1",
  "id": "sparkfinderoven-r01-hesreallyhim-awesome-claude-code-sec-43906d",
  "kind": "skill",
  "name": "r00-hesreallyhim-awesome-claude-code--security",
  "description": "🔒 Security & Compliance skill suite derived from hesreallyhim/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows.",
  "publisher": "sparkfinderoven",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "legal",
      "coding"
    ],
    "tags": [
      "skill-md",
      "security",
      "compliance",
      "gdpr",
      "soc2",
      "owasp",
      "pentest",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "🔒 Security & Compliance skill suite derived from hesreallyhim/awesome-claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security",
      "path": "SKILL.md",
      "ref": "f08bd83cdf6545e9ebcbb376ef944772b469eac1",
      "url": "https://github.com/sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security/blob/f08bd83cdf6545e9ebcbb376ef944772b469eac1/SKILL.md",
      "key": "sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security/SKILL.md"
    },
    "license": "MIT"
  },
  "instructions": "# 🔒 Security & Compliance Skill Suite\n\n> Derived from **hesreallyhim/awesome-claude-code** · Focus: _curated resources, skills, hooks, agents_\n\n## Overview\n\nThis skill provides 10 production-ready commands tailored for\n**Security & Compliance** workflows. All commands follow a consistent\ninteraction pattern with structured output, progress tracking and\nactionable recommendations.\n\n## Available Commands\n\n- `/owasp-scan` — OWASP Top-10 code scan with exploit description, CVSS score and remediation\n- `/dep-cve` — Dependency CVE report with exploitability score and upgrade path\n- `/gdpr-audit` — G",
  "cost": {
    "context_tokens": 612
  }
}

Fetch it by URL: GET /api/v1/registry/sparkfinderoven-r01-hesreallyhim-awesome-claude-code-sec-43906d/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.