security-compliance-skills-suite-claude

What problem does it solve?

It solves the problem of missing security and compliance coverage by turning code scanning, dependency CVE checks, and framework readiness assessments into repeatable AI-guided workflows for delivery teams and security professionals.

Core Features & Use Cases

• OWASP Top-10 vulnerability scanning with severity-sorted findings and remediation guidance for target paths or individual files.
• Dependency CVE auditing across common ecosystems (Python/JS/Ruby/Java/Go/Rust) with filters like scope and minimum CVSS.
• Compliance reporting and governance workflows for GDPR, SOC 2 readiness, STRIDE threat modeling, IAM least-privilege reviews, secret detection, and incident response orchestration.
• Use case: before a release, scan the code for OWASP issues, check dependencies for high-CVSS CVEs, and run IAM/secret checks to produce an actionable security + compliance gap list.

Quick Start

Tell the AI to run an audit by asking: "Run an OWASP scan and a dependency CVE audit for the current project code in ./."