Awesome Claude Code Security Compliance Suite

🔒 Security & Compliance Skills Suite

Skill by ara.so — Security Skills collection.

A comprehensive security and compliance skill suite derived from hesreallyhim/awesome-claude-code, providing specialized commands and workflows for security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance, and incident response.

What This Project Does

This skill suite provides 10 specialized security commands and 5 multi-step compliance workflows with structured output UI for:

• Vulnerability Scanning: OWASP Top-10 analysis, dependency CVE detection
• Compliance Auditing: GDPR, SOC2, ISO27001 gap analysis
• Security Operations: Threat modeling, penetration testing, IAM audits
• Incident Response: Breach response playbooks and investigation workflows
• Policy Generation: Privacy policies, security documentation

All commands use consistent structured output with progress tracking, findings tables, and prioritized action plans.

Installation

Quick Install (Local Skills Directory)

# Create Claude skills directory if it doesn't exist
mkdir -p ~/.claude/skills

# Clone the skill suite
git clone https://github.com/sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security.git \
  ~/.claude/skills/awesome-claude-code-security

# Activate in Claude Code session
# In your IDE with Claude Code, run:
/read ~/.claude/skills/awesome-claude-code-security/SKILL.md

Manual Installation

# Clone the repository
git clone https://github.com/sparkfinderoven/r01-hesreallyhim-awesome-claude-code-security.git

# Navigate to project directory
cd r01-hesreallyhim-awesome-claude-code-security

# Read the skill documentation
cat SKILL.md

Verification

Verify installation by checking available commands:

# List all security commands
ls -la ~/.claude/skills/awesome-claude-code-security/

# Expected output:
# - SKILL.md (this file)
# - README.md (documentation)
# - commands/ (individual command definitions)
# - workflows/ (multi-step workflow definitions)

Core Commands

1. OWASP Top-10 Security Scan

Scans code for OWASP Top-10 vulnerabilities with CVSS scores and remediation guidance.

/owasp-scan <target_directory>

# Options
/owasp-scan src/ --format json
/owasp-scan . --severity critical,high
/owasp-scan api/ --output report.md

Example Output Structure:

╔══════════════════════════════════════════════════╗
║  OWASP Security Scan — ./src/api                 ║
╠══════════════════════════════════════════════════╣
║  Files scanned       ✓   47                      ║
║  OWASP checks        ✓   14                      ║
║  Findings            ✗   8 issues                ║
╚══════════════════════════════════════════════════╝

FINDINGS (severity: desc)
┌──────┬──────────────────────────────┬──────────┬──────────────┐
│ Sev  │ Vulnerability                │ CVSS     │ File         │
├──────┼──────────────────────────────┼──────────┼──────────────┤
│  🔴  │ SQL Injection                │  9.8     │ users.js:42  │
│  🔴  │ JWT None Algorithm           │  9.1     │ auth.js:18   │
│  🟠  │ CORS Misconfiguration        │  6.5     │ server.js:12 │
└──────┴──────────────────────────────┴──────────┴──────────────┘

REMEDIATION
• SQL Injection: Use parameterized queries or ORM
• JWT None: Validate algorithm in token verification
• CORS: Restrict origins to known domains

2. Dependency CVE Scanner

Scans project dependencies for known CVEs with exploitability scores.

/dep-cve

# Options
/dep-cve --scope production
/dep-cve --output json > cve-report.json
/dep-cve --min-cvss 7.0
/dep-cve --show-paths

Example for Node.js project:

# Scans package.json and package-lock.json
/dep-cve --scope full

# Output includes:
# - CVE IDs with CVSS scores
# - Affected package versions
# - Upgrade paths
# - Exploitability assessment

Expected Output:

╔══════════════════════════════════════════════════╗
║  CVE Dependency Scan                             ║
╠══════════════════════════════════════════════════╣
║  Dependencies checked    ✓   234                 ║
║  CVEs found              ✗   12                  ║
║  Critical                ✗   3                   ║
║  High                    ⚠   5                   ║
║  Medium                  ⚠   4                   ║
╚══════════════════════════════════════════════════╝

┌─────────────┬──────────┬─────────────┬──────────────┬─────────────┐
│ Package     │ CVE      │ CVSS        │ Installed    │ Fixed In    │
├─────────────┼──────────┼─────────────┼──────────────┼─────────────┤
│ lodash      │ CVE-2021 │ 9.8 🔴      │ 4.17.15      │ 4.17.21     │
│ axios       │ CVE-2022 │ 8.1 🔴      │ 0.21.0       │ 0.21.4      │
│ express     │ CVE-2022 │ 7.5 🟠      │ 4.17.1       │ 4.18.2      │
└─────────────┴──────────┴─────────────┴──────────────┴─────────────┘

UPGRADE COMMANDS
npm install lodash@4.17.21
npm install axios@0.21.4
npm install express@4.18.2

3. GDPR Compliance Audit

Maps data flows, identifies consent gaps, and generates DPA checklist.

/gdpr-audit <application_path>

# Options
/gdpr-audit . --data-map
/gdpr-audit src/ --consent-analysis
/gdpr-audit . --full-report --output gdpr-audit.pdf

Example Analysis:

╔══════════════════════════════════════════════════╗
║  GDPR Compliance Audit                           ║
╠══════════════════════════════════════════════════╣
║  Data flows mapped       ✓   24                  ║
║  Personal data types     ✓   8                   ║
║  Consent gaps            ✗   5                   ║
║  DPA requirements        ⚠   12/15 met           ║
╚══════════════════════════════════════════════════╝

DATA FLOW MAP
User Registration → Database (PII: email, name, phone)
  ↳ Consent: ✗ Missing explicit opt-in
  ↳ Retention: ⚠ No deletion policy defined
  ↳ Encryption: ✓ AES-256 at rest

Analytics Pipeline → Third-party (IP address, user agent)
  ↳ Consent: ✗ No cookie banner
  ✳ DPA: ⚠ No Data Processing Agreement on file

COMPLIANCE GAPS
🔴 Critical:
  • No cookie consent mechanism implemented
  • Missing data retention policies in privacy policy
  • No user data deletion endpoint

🟠 High:
  • DPA missing for analytics provider
  • DSAR (data subject access request) workflow undefined

4. SOC2 Readiness Assessment

Performs gap analysis across all 5 Trust Service Criteria.

/soc2-readiness

# Options
/soc2-readiness --criteria security,availability
/soc2-readiness --type type2
/soc2-readiness --output xlsx

Example Output:

╔══════════════════════════════════════════════════╗
║  SOC 2 Type II Readiness Assessment              ║
╠══════════════════════════════════════════════════╣
║  Security                ⚠   65% ready           ║
║  Availability            ✓   90% ready           ║
║  Confidentiality         ✗   45% ready           ║
║  Processing Integrity    ⚠   70% ready           ║
║  Privacy                 ✗   50% ready           ║
╚══════════════════════════════════════════════════╝

SECURITY GAPS
✗ CC6.1: No background checks policy
✗ CC6.6: Missing logical access reviews (quarterly)
⚠ CC7.2: Incomplete system monitoring

AVAILABILITY GAPS
⚠ A1.2: RTO/RPO not documented in DR plan

REMEDIATION TIMELINE
Quick Wins (1-2 weeks):
  • Document RTO/RPO targets
  • Implement access review schedule

Medium-term (1-3 months):
  • Establish background check policy
  • Deploy SIEM for continuous monitoring

Strategic (3-6 months):
  • Conduct third-party penetration test
  • Implement data classification framework

5. Threat Modeling (STRIDE)

Generates STRIDE threat model for architecture diagrams.

/threat-model <architecture_file>

# Options
/threat-model architecture.png --framework stride
/threat-model system-design.md --risk-matrix
/threat-model . --auto-discover

Example for Web Application:

╔══════════════════════════════════════════════════╗