Best audit readiness skills for Claude Code, Codex and other agents.

Remediates a specific recommendation from an A2UI compliance report issue, or resolves any general GitHub issue, by inspecting context, implementing minimal targeted fixes, verifying tests, creating…

a2ui-project/a2ui

Generates an x-ray.md pre-audit report covering overview, enhanced threat model (protocol-type profiling, git-weighted attack surfaces, temporal risk analysis, composability dependency mapping)…

pashov/skills

Checks OpenMed de-identified clinical text against the 18 HIPAA Safe Harbor identifier categories and reports gaps and residual re-identification risk.

maziyarpanahi/openmed

Command reference for omniroute's audit, logs, policy and telemetry commands: search and export audit trails, manage access policies and review request history for compliance work.

diegosouzapw/OmniRoute

Resolve a pnpm audit (dependency-audit CI job) failure — high/critical CVEs in the dependency tree.

openplayerjs/openplayerjs

Audit checklist for DiscordPHP bots and API libraries — stop the bot token leaking to third-party APIs or logs, keep secrets out of customids and exception messages, use constant-time comparison and…

discord-php/DiscordPHP

Organizes scope, controlled documents, risk files and traceability into draft evidence for human review against ISO 13485, 14971, 17025 and 15189.

K-Dense-AI/scientific-agent-skills

Expert ISO 42001 AI Management System (AIMS) compliance advisor.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Cognitive triage of fleet audit findings. An agent skill from google-labs-code/jules-sdk.

google-labs-code/jules-sdk

Reference for building payment systems that meet PCI DSS: the 12 requirements, merchant levels, data that must never be stored, tokenization and encryption.

wshobson/agents

Explores and triages a CycloneDX BOM interactively with the cdxi REPL, using built-in commands for dependency trees, licenses, services, cryptographic assets, audit findings, evidence occurrences…

cdxgen/cdxgen

A skill your agent uses when preparing for a security audit, performing reconnaissance on a new codebase, or creating a protocol overview.

ccashwell/evm-cortex

Bug-fix routine that fixes the whole class of bug, not just the reported instance.

joetawil7/first-pass

Builds and deploys a serverless trust center that publishes a company's compliance posture, with gated access to audit reports and an admin dashboard.

GRCEngClub/claude-grc-engineering

Build a preliminary, evidence-based EU AI Act readiness assessment across AI-system inventory, territorial scope, operator roles, prohibited-practice screening, risk classification, transparency…

seb1n/awesome-ai-agent-skills

Senior ISMS Audit Expert for internal and external information security management system auditing.

davila7/claude-code-templates

Security audit and code review for Solidity smart contracts.

sablier-labs/evm-monorepo

Prepare Solidity projects for a security audit — test coverage, test quality, NatSpec docs, code hygiene, dependency health, best-practice enforcement, deployment readiness, and project…

PlamenTSV/plamen

A Chinese-language persona that answers accounting-standards and audit questions in the style of forum moderator Chen Yiwei, checking standards text before it replies.

nigo81/nigo-skills

Flagship intra-paper self-consistency forensics: does the paper contradict ITSELF across abstract/intro/tables/body/appendix, and does the method DESCRIBED match the method EVALUATED?

wanshuiyin/Anti-Autoresearch

A skill your agent uses when you need to reference, cite, or apply software engineering standards.

kitchen-engineer42/pdf2skills

Fixes a security finding in calimero-network/core - reproduce it through the real entry point, commit a failing test first, add the limit or gate in the shared function every caller goes through…

calimero-network/core

Checks that plugins, collected findings and history exist before a GRC /report command runs, and walks the user through setup instead of producing an empty report.

GRCEngClub/claude-grc-engineering

A skill your agent uses when optimizing a bundle-plugin or single skill — improving descriptions, reducing tokens, fixing audit findings, restructuring workflows, adding skills to fill gaps, or…

OdradekAI/bundles-forge

Senior QMS Audit Expert for internal and external quality management system auditing.

davila7/claude-code-templates

Content quality and E-E-A-T analysis with AI citation readiness assessment.

AgriciDaniel/codex-seo

Read-only audit of one persisted skore report: audit/NN<stem.py (jupytext percent), 1:1 with experiments/ and journal/.

probabl-ai/skills

Promote a finished Craft, experimental UI, or reusable React component from the user's portfolio into the Sona UI library through an approval-gated two-phase workflow.

Dinil-Thilakarathne/sona-ui

Systematic false positive verification for security findings.

vibeeval/vibecosystem

This skill should be used when orchestrating complex writing workflows with multiple phases.

robertguss/claude-code-toolkit

Gets your own codebase ready for an external security review: sets review goals, runs static analysis, raises test coverage, removes dead code and writes documentation.

trailofbits/skills

Combines the evidence from completed Nucleus workflow steps into a final evidence report and result package, without scheduling steps, updating trackers or opening pull requests.

protect-my-hair/nucleus-marketplace

Prepare evidence-grounded graduate-advisor contact email candidates with review and audit findings.

Bubble252/offer-harvester

Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support.

alirezarezvani/claude-skills

ISO 13485 internal audit expertise for medical device QMS. An agent skill from alirezarezvani/claude-skills.

alirezarezvani/claude-skills

ISO 13485 Quality Management System implementation and maintenance for medical device organizations.

alirezarezvani/claude-skills

Design or document how new work enters a design system: contribution types, proposal criteria, review stages, sign-off and release.

murphytrueman/design-system-ops

Run the AgentRC readiness assessment on the current repository and produce a static HTML dashboard at reports/index.html.

github/awesome-copilot

Record a vetted Hex package version in hexvet.exs after a security review — manages the audit ledger, not the scanner.

oliver-kriska/claude-elixir-phoenix

Hardens Linux endpoints using CIS Benchmark recommendations for Ubuntu, RHEL, and CentOS to reduce attack surface, enforce security baselines, and meet compliance requirements.

mukul975/Anthropic-Cybersecurity-Skills

Hardens Windows endpoints using CIS (Center for Internet Security) Benchmark recommendations to reduce attack surface, enforce security baselines, and meet compliance requirements.

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and identity systems, control testing…

mukul975/Anthropic-Cybersecurity-Skills

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across…

alirezarezvani/claude-skills

Builds a structured ransomware incident response playbook aligned with the CISA StopRansomware Guide and NIST Cybersecurity Framework, covering preparation, detection, containment, eradication…

mukul975/Anthropic-Cybersecurity-Skills

Implements secure conduit architecture for OT remote access under the IEC 62443 zones-and-conduits model, deploying jump servers, MFA gateways, session recording, and approval-based workflows for…

mukul975/Anthropic-Cybersecurity-Skills

ISO/IEC 42001:2023 AI Management System (AIMS) specialist for compliance teams running internal audits.

alirezarezvani/claude-skills

A systematic checklist generation engine for compliance audits.

revfactory/harness-100

Audit preparation register: required document, period covered, request and receipt dates, preparer and reviewer, auditor queries and adjustments.

sickn33/agentic-awesome-skills