sparkfinderoven-r01-security-compliance-skills

What problem does it solve?

It reduces the time and risk involved in performing security reviews and producing compliance evidence by turning OWASP scanning, CVE checks, and compliance gap analysis into repeatable AI-driven workflows.

Core Features & Use Cases

• OWASP vulnerability scanning with remediation: Identifies OWASP Top-10 issues and provides CVSS-aware remediation guidance for faster fixes.
• Dependency CVE detection: Finds known vulnerabilities in project dependencies and suggests upgrade paths suitable for CI gating.
• GDPR/SOC 2/ISO 27001 compliance audits and readiness reporting: Maps data handling and evaluates readiness across SOC 2 criteria, outputting structured reports.
• Threat modeling and incident response playbooks: Generates STRIDE threat models and structured breach response procedures.
• IAM least-privilege and secret detection: Audits over-permissioned roles and detects secrets using entropy and pattern checks.

Quick Start

Run an OWASP scan and output a JSON report for your project by asking for "/owasp-scan . --output json".