Best SOC 2 and security compliance skills for Claude Code, Codex and other agents.

Privacy and security compliance scanner for the Finance Guru repo.

AojdevStudio/Finance-Guru

Run a pre-deployment security compliance checklist based on KISA guidelines.

cdppcorp/KESE-KIT

Aggregates scanner results into DefectDojo, deduplicates findings, tracks remediation SLAs and prepares compliance reports across products and pipelines.

AgentSecOps/SecOpsAgentKit

Quality gate, audit evidence, live roots and cleanup boundaries for fastbrowse.

agent-labs-dev/fastbrowse

NIST SP 800-53 Rev 5 compliance advisor — all 20 control families (AC, AT, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, PT, RA, SA, SC, SI, SR), Low/Moderate/High baseline selection, FIPS 199/200…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

A skill your agent uses to durably record a hard constraint or invariant that the work must respect.

harrylettering/CodeMemory

Expert SOC 2 compliance assistant covering all five Trust Services Criteria (Security/CC, Availability/A, Confidentiality/C, Processing Integrity/PI, Privacy/P).

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Senior GRC analyst expertise across 18 compliance frameworks — NIST 800-53, FedRAMP (Rev5 + 20x/CR26, KSIs, VDR/VER, Certification Classes A–D), DoD/DoW Impact Levels (IL2–IL6, DISA Cloud SRG), ITAR…

mlunato47/claude-grc-plugin

Senior Information Security Manager specializing in ISO 27001 and ISO 27002 implementation for HealthTech and MedTech companies.

davila7/claude-code-templates

Audit Cartography's rules and compliance frameworks under cartography/rules/data/rules/.

cartography-cncf/cartography

Builds and deploys a serverless trust center that publishes a company's compliance posture, with gated access to audit reports and an admin dashboard.

GRCEngClub/claude-grc-engineering

Apply CIS benchmarks and secure Linux servers. An agent skill from BagelHole/DevOps-Security-Agent-Skills.

BagelHole/DevOps-Security-Agent-Skills

Senior ISMS Audit Expert for internal and external information security management system auditing.

davila7/claude-code-templates

Generate audit reports and compliance trails using Harness audit trail data via MCP v2 tools.

harness/harness-skills

Build the deterministic evidence ledger (artifactmanifest.json + claims.json) that every other Anti-Autoresearch auditor reads.

wanshuiyin/Anti-Autoresearch

Expert CIS Controls v8 (CIS Top 18) advisor — implementation group scoping (IG1/IG2/IG3), control gap assessments, safeguard-level guidance, asset inventory, software inventory, data protection…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and…

sangrokjung/claude-forge

Expert ISO 27001 compliance assistant for security and compliance teams.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Security leadership for growth-stage companies. An agent skill from alirezarezvani/claude-skills.

alirezarezvani/claude-skills

ISO 27001 ISMS implementation and cybersecurity governance for HealthTech and MedTech companies.

alirezarezvani/claude-skills

Information Security Management System (ISMS) audit expert for ISO 27001 compliance verification, security control assessment, and certification support.

alirezarezvani/claude-skills

Senior SecOps engineer skill for application security, vulnerability management, compliance verification, and secure development practices.

alirezarezvani/claude-skills

Implement ISO 27001 Information Security Management System. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Implement SOC 2 Trust Services Criteria. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

安全架构与治理：威胁建模 (STRIDE/PASTA/LINDDUN)、零信任身份架构、IAM/SSO/MFA/PAM、合规框架 (SOC2/PCI/HIPAA/GDPR)、DLP、隐私工程、安全控制设计。Use when designing security architecture, threat modeling new systems, implementing zero-trust…

telagod/code-abyss

Compliance expert for SOC 2, GDPR, HIPAA, PCI-DSS, and security frameworks

RightNow-AI/openfang

A skill your agent uses whenever someone needs security or compliance guidance for Amazon EKS — phrased as "CIS Benchmark for EKS", "HIPAA / PCI-DSS / FedRAMP / SOC 2 / GDPR on EKS", "harden my EKS…

aws-samples/appmod-blueprints

Expert ISO 27701 Privacy Information Management System (PIMS) compliance advisor.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

EU NIS2 Directive (Directive (EU) 2022/2555) compliance advisor for essential and important entities: entity classification, Art.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert NIST Cybersecurity Framework (CSF) advisor covering CSF 2.0 and CSF 1.1.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Helps you triage a quarterly user access review from an Okta, Azure AD, AWS IAM, GitHub, or generic CSV/JSON export.

GRCEngClub/claude-grc-engineering

Review agentic workflow changes for correctness, security posture, and optimization opportunities with compile, validation, and audit evidence.

github/gh-aw

Create source-grounded paid-ad campaign concepts, messaging, copy, creative briefs, and production plans from a validated brand profile, campaign objective, platform requirements, and optional audit…

AgriciDaniel/claude-ads

Policy-as-code enforcement and compliance validation using Open Policy Agent (OPA).

AgentSecOps/SecOpsAgentKit

Policy register: name, version, category, owner and approver, applies to, compliance framework, acknowledgement requirement, effective date and next review.

sickn33/agentic-awesome-skills

Build a vulnerability exception and risk acceptance tracking system covering approval workflows, compensating controls documentation, and automatic expiration for vulnerabilities that miss SLA…

mukul975/Anthropic-Cybersecurity-Skills

Configure and execute access recertification campaigns in Saviynt Enterprise Identity Cloud to validate user entitlements, revoke excessive access, and maintain compliance with SOX, SOC 2, and HIPAA.

mukul975/Anthropic-Cybersecurity-Skills

Turns kube-bench output into a finished CIS Kubernetes Benchmark audit: interpreting PASS/FAIL/WARN per control, judging which failures are genuine on a managed cluster, writing remediation, and…

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC 2 Type II audit preparation including gap assessment against AICPA Trust Services Criteria (CC1-CC9), evidence collection from cloud providers and identity systems, control testing…

mukul975/Anthropic-Cybersecurity-Skills

Reviews pull requests for compliance regressions. An agent skill from GRCEngClub/claude-grc-engineering.

GRCEngClub/claude-grc-engineering

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap, SIMULATE internal audits, and CONSOLIDATE evidence across…

alirezarezvani/claude-skills

A skill your agent uses when an RFP, RFI, RFQ, security questionnaire, vendor questionnaire, or proposal request arrives and the team needs a structured response — parsing multi-section…

alirezarezvani/claude-skills

Plan/create/audit evidence-led research decks for defenses, meetings and talks, with render QA.

huang-sir1/radiology-skills

Designs and implements VLAN-based (802.1Q) network segmentation on managed switches to isolate zones such as corporate, servers, DMZ, guest, and IoT, and to limit lateral movement paths.

mukul975/Anthropic-Cybersecurity-Skills

Deploy AWS Security Hub as a centralized CSPM platform, backed by AWS Config, aggregating findings from GuardDuty, Inspector, Macie, and third-party tools; enable CIS Foundations, PCI-DSS, and NIST…

mukul975/Anthropic-Cybersecurity-Skills

Continuously monitor multi-cloud environments (AWS, Azure, GCP) for misconfigurations, compliance violations, and security risks using Prowler, ScoutSuite, AWS Security Hub, Microsoft Defender for…

mukul975/Anthropic-Cybersecurity-Skills

Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection.

mukul975/Anthropic-Cybersecurity-Skills

Implements 802.1X port-based network access control using RADIUS authentication, PacketFence NAC, and switch configuration to enforce identity-based access policies, posture assessment, and…

mukul975/Anthropic-Cybersecurity-Skills