
This is a security and compliance toolkit that brings OWASP scanning, CVE detection, and framework audits (GDPR, SOC 2, ISO 27001) directly into your Claude Code workflow. You get ten specialized commands that do things like scan for SQL injection vulnerabilities with CVSS scores, check your dependencies against known exploits, generate STRIDE threat models from architecture descriptions, and set up secret detection with pre-commit hooks. The output is structured and actionable, like showing you exactly which parameterized query to use instead of string interpolation. If you're doing security work or compliance prep and want those checks in your AI coding environment instead of switching to separate tools, this covers the main bases. Derived from the hesreallyhim awesome-claude-code collection.
npx -y skills add aradotso/security-skills --skill sparkfinderoven-r01-security-compliance-skills --agent claude-codeInstalls into .claude/skills of the current project.
Select a file.