sparkfinderoven-security-compliance-skills

What problem does it solve?

This skill suite helps you systematically assess software security and compliance readiness by turning common security tasks (vulnerability scanning, CVE checks, IAM review, and compliance gap analysis) into repeatable, structured workflows.

Core Features & Use Cases

• OWASP vulnerability scanning: identifies common weaknesses with severity indications, CVSS-style scoring, and remediation guidance.
• Dependency CVE detection: checks third-party libraries for known CVEs and produces upgrade paths.
• Compliance and readiness workflows: supports GDPR audits, SOC 2 readiness gap analysis, SOC2 TSC scoring, threat modeling (STRIDE), and security incident response playbook generation.
• Security hygiene automation: includes secret detection and IAM least-privilege audit support.

Use case example: you need to prepare for a SOC 2 audit for a web application; run OWASP scanning and dependency CVE checks, perform a SOC 2 readiness assessment, generate a STRIDE threat model for your architecture, and produce an incident response playbook for likely scenarios.

Quick Start

Ask the AI to run the full compliance workflow by saying: "Scan my project for OWASP issues, check dependencies for critical CVEs, generate a GDPR audit, and produce a SOC 2 readiness assessment."