Best SOC 2 and security compliance skills, page 2

Provides step-by-step procedures for remediating Amazon S3 bucket misconfigurations that expose sensitive data: enabling S3 Block Public Access, auditing bucket policies and ACLs, enforcing…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when the user asks to prepare for SOC 2 audits, map Trust Service Criteria, build control matrices, collect audit evidence, perform gap analysis, or assess SOC 2 Type I vs…

alirezarezvani/claude-skills

Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and…

mukul975/Anthropic-Cybersecurity-Skills

Guides implementation of an ISO/IEC 27001:2022 Information Security Management System (ISMS) end to end: gap analysis and scoping, risk assessment methodology, Annex A control selection, Statement…

mukul975/Anthropic-Cybersecurity-Skills

Build and run a third-party/vendor risk management (TPRM) program aligned to NIST SP 800-161 C-SCRM: inventory and tier vendors, issue SIG/CAIQ questionnaires, review SOC 2/ISO 27001 evidence, set…

mukul975/Anthropic-Cybersecurity-Skills

Saudi Arabia Governance, Risk & Compliance advisor — a compliance router that first determines WHICH Saudi regulations apply (NCA ECC-2:2024, Saudi PDPL, NCA Cloud Cybersecurity Controls, SAMA Cyber…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Expert third-party risk management (TPRM) advisor — a vendor risk analyst for the full lifecycle: risk-based vendor tiering, tailored due-diligence questionnaires (SIG-style or mapped to ISO 27001…

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

United Arab Emirates Governance, Risk & Compliance advisor — a jurisdiction-first compliance router.

Sushegaad/Claude-Skills-Governance-Risk-and-Compliance

Architect and provision enterprise Azure infrastructure from workload descriptions.

microsoft/GitHub-Copilot-for-Azure

Implement and maintain compliance with SOC 2, HIPAA, PCI-DSS, and GDPR using unified control mapping, policy-as-code enforcement, and automated evidence collection.

ancoleman/ai-design-components

Expert security auditor specializing in DevSecOps, comprehensive cybersecurity, and compliance frameworks.

aiskillstore/marketplace

Expertise in evaluating AWS accounts for compliance — what checks are meaningful, which SCF controls they map to, and how to interpret aws CLI output.

GRCEngClub/claude-grc-engineering

AWS compliance commands in Atmos: atmos aws compliance report, Security Hub standards, CIS AWS, PCI DSS, SOC2, HIPAA, NIST, report formats, AI summaries

cloudposse/atmos

Secure change control: RFC process, testing requirements, rollback procedures per ISO 27001 A.8.9, A.8.32

Hack23/cia

You are a compliance expert specializing in regulatory requirements for software systems including GDPR, HIPAA, SOC2, PCI-DSS, and other industry standards.

aiskillstore/marketplace

/cs:ciso-review <plan — Risk-paranoid interrogation of any plan that touches data, compliance, or production access.

alirezarezvani/claude-skills

Router/index for the 15 regulatory & quality-management skills bundled in this plugin (ISO 13485 QMS, EU MDR 2017/745, FDA submissions under QMSR, ISO 14971 risk, CAPA, document control, ISO…

alirezarezvani/claude-skills

Design comprehensive security architectures using defense-in-depth, zero trust principles, threat modeling (STRIDE, PASTA), and control frameworks (NIST CSF, CIS Controls, ISO 27001).

ancoleman/ai-design-components

When the user needs to prepare for SOC 2, build a compliance roadmap, assess security posture, quantify security risk, or says "we need SOC 2", "security audit", "compliance", "enterprise customer…

shawnpang/startup-founder-skills

[omh] Pull request or changes to vet: bug-first review with evidence.

rlaope/oh-my-hermes

Automated compliance checking against CIS, PCI-DSS, HIPAA, and SOC 2 benchmarks

aiskillstore/marketplace

Audit numeric, artifact, log, citation, and cross-report claims against inspectable evidence.

NeuroAIHub/BrainPilot

Execute automate SOC 2 audit preparation including evidence gathering, control assessment, and compliance gap identification.

jeremylongshore/tons-of-skills-marketplace

Execute use when you need to work with compliance checking. An agent skill from jeremylongshore/tons-of-skills-marketplace.

jeremylongshore/tons-of-skills-marketplace

Generate comprehensive compliance reports for security standards.

jeremylongshore/tons-of-skills-marketplace

Analyze a target's TLS configuration — negotiated protocol version, cipher suite, certificate chain, expiry, and downgrade vectors.

jeremylongshore/tons-of-skills-marketplace

Audit a Node.js project's installed npm dependency tree for known CVEs by wrapping the npm audit JSON output and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Audit a Python project's installed dependencies for known CVEs by wrapping pip-audit (PyPA's official vulnerability auditor) and emitting findings in the canonical penetration-tester schema.

jeremylongshore/tons-of-skills-marketplace

Probe a target for accidentally-public admin / debug / introspection endpoints — Spring Boot Actuator, Apache server-status, Prometheus metrics, GraphQL playground, Swagger UI, phpMyAdmin…

jeremylongshore/tons-of-skills-marketplace

Probe a target for directories that return auto-generated index listings instead of denying or serving a specific file — exposes the full file tree under any reachable directory, including files the…

jeremylongshore/tons-of-skills-marketplace

Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards.

jeremylongshore/tons-of-skills-marketplace

Annotate every pentest finding with its OWASP Top 10 (2021) category by applying a deterministic rule table keyed on source skill, finding category, detail keywords, and CWE identifier when present.

jeremylongshore/tons-of-skills-marketplace

Scan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens, Anthropic API keys, OpenAI keys, JWT signing secrets, generic…

jeremylongshore/tons-of-skills-marketplace

Cross-framework compliance readiness orchestrator. An agent skill from borghei/Claude-Skills.

borghei/Claude-Skills

ISO 27001:2022 ISMS implementation and cybersecurity governance for HealthTech and MedTech.

borghei/Claude-Skills

Cross-framework infrastructure security audit across cloud, network, and CI/CD.

borghei/Claude-Skills

ISMS auditing for ISO 27001 compliance, control assessment, and certification support.

borghei/Claude-Skills

PCI DSS v4.0 payment card data security compliance, assessment, and implementation.

borghei/Claude-Skills

SOC 2 audit-prep playbook: the 4/8/12-week sprint to audit-ready for a Type I or Type II observation.

borghei/Claude-Skills

/cs:iso27001-audit-prep <scope — ISO 27001 ISMS audit readiness 6-question forcing interrogation.

alirezarezvani/claude-skills

/cs:soc2-audit-prep <scope — SOC 2 Type II readiness 6-question forcing interrogation.

alirezarezvani/claude-skills

Monitor and investigate EU DORA compliance posture using Dynatrace Compliance Assistant.

Dynatrace/dynatrace-for-ai

Design marketing automation programs — end-to-end workflow architecture, lead scoring models with MQL/SQL thresholds, nurture and drip sequences, behavioral triggers, lifecycle stage frameworks…

indranilbanerjee/digital-marketing-pro

Generate auditor-ready compliance evidence from Datadog Audit Trail for SOC 2 and PCI DSS.

datadog-labs/agent-skills

Implement Kubernetes security contexts, Pod Security Standards, and network policies.

BagelHole/DevOps-Security-Agent-Skills

SOC 2 Type I and Type II compliance management against the Trust Services Criteria.

borghei/Claude-Skills

Use this skill as THE specialized Lightning Web Security (LWS) validator for a Lightning Web Component bundle (.js, .ts, .html, .css, .js-meta.xml) — the canonical LWS/Product-Security review for…

forcedotcom/sf-skills

Regulatory compliance testing for GDPR, CCPA, HIPAA, SOC2, PCI-DSS and industry-specific regulations.

proffesor-for-testing/agentic-qe