skills.rest
crozzbite
crozzbiteCOMMUNITY
Explore all skills by this author →
GitHub

app-security

Coordinate OWASP ASVS, LLM Top 10, GDPR, and PCI DSS security audits across codebases, pull requests, and deployments.

Updated May 29, 2025
Search Tags:#security#audit#compliance#secrets#pii#gdpr
One-click install
npx skills add https://github.com/crozzbite/DnDApp --skill app-security-crozzbite
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: app-security
Source: https://github.com/crozzbite/DnDApp/tree/main/.agent/skills/app-security
Command: npx skills add https://github.com/crozzbite/DnDApp --skill app-security-crozzbite

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security governance and coordination across multiple standards to streamline audits, enforce best practices, and reduce risk.

Core Features & Use Cases

  • Centralized coordination of OWASP ASVS, GDPR/CCPA, PCI DSS, and LLM Top 10 compliance checks.
  • Automated secret detection, PII sanitization, and PR review gating to prevent leaks.
  • Use Case: run an end-to-end security audit before PR merge or deployment.

Quick Start

Trigger the security-audit workflow to orchestrate all standards across your project.

Frequently Asked Questions about app-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I coordinate security standards across my software project?▼

Security standards coordination unifies audits and governance across codebases, pull requests, and deployments. You can trigger a centralized security-audit workflow to orchestrate OWASP ASVS, LLM Top 10, GDPR, and PCI DSS compliance checks across your project.

How do I run an end-to-end security audit before PR merge or deployment?▼

Run an end-to-end security audit by triggering the security-audit workflow to orchestrate all standards across your project. This enforces best practices by applying PR review gating, automated secret scanning, and PII sanitization before code merges or deployments.

What's the best way to automate secret detection and PII sanitization in pull requests?▼

Automated secret detection and PII sanitization are enforced through PR review gating to prevent leaks. A centralized hub coordinates these checks alongside compliance reporting to block sensitive data from entering your codebase during pull requests.

Can I enforce GDPR and PCI DSS compliance checks in my deployment workflow?▼

GDPR and PCI DSS compliance checks are enforced within your deployment workflow through centralized coordination. The security-audit workflow applies these policies across codebases and deployments to reduce risk and streamline governance.

Do I need any external dependencies to run OWASP ASVS compliance checks?▼

No external dependencies are required to run OWASP ASVS compliance checks. The centralized security hub operates independently to coordinate standards, scan for secrets, sanitize PII, and generate compliance reporting across your software project.

Related Skills

Explore More Legal & Compliance Skills→
zircotezircote
1

security-baseline

Audit GitHub repositories for security gaps and implement baseline hardening.

Community
Advanced
LerianStudioLerianStudio
205

ops-security-audit

Automate infrastructure security audits with phased scanning and compliance mapping.

Official
Advanced
PP-NamiasPP-Namias
2

ci-cd-security

Execute and interpret seven security checks in CI/CD pipelines.

Community
Advanced
luokai25luokai25

compliance-auditor

Automate compliance auditing and risk assessment across GDPR, HIPAA, PCI DSS, SOC 2, and ISO frameworks.

Community
Advanced