r18-anthropics-claude-code-security

内容来源：SKILL.md（标准 Skill 格式） · 原始地址 · 查看安装指南

原始内容

---
name: "r00-anthropics-claude-code--security"
description: >
  🔒 Security & Compliance skill suite derived from anthropics/claude-code.
  Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response.
  Provides 10 specialised commands for security, compliance, gdpr workflows.
version: "1.0.0"
domain: security
tags: ["security", "compliance", "gdpr", "soc2", "owasp", "pentest"]
source: "https://github.com/anthropics/claude-code"
license: MIT
---

# 🔒 Security & Compliance Skill Suite

> Derived from **anthropics/claude-code** · Focus: _official Claude Code CLI, examples, plugins, scripts_

## Overview

This skill provides 10 production-ready commands tailored for
**Security & Compliance** workflows. All commands follow a consistent
interaction pattern with structured output, progress tracking and
actionable recommendations.

## Available Commands

- `/owasp-scan` — OWASP Top-10 code scan with exploit description, CVSS score and remediation
- `/dep-cve` — Dependency CVE report with exploitability score and upgrade path
- `/gdpr-audit` — GDPR data-flow map, consent gaps and DPA checklist
- `/soc2-readiness` — SOC 2 Type II readiness gap analysis across all 5 Trust Service Criteria
- `/threat-model` — STRIDE threat model for architecture diagram with risk matrix
- `/pentest-report` — Structured penetration test report: executive summary, findings and remediation
- `/secret-detect` — Pre-commit secret detection hook config with entropy scanning
- `/iam-audit` — IAM least-privilege audit: over-permissioned roles, stale access and MFA gaps
- `/incident-playbook` — Security incident playbook: triage → contain → eradicate → recover → lessons
- `/privacy-policy` — GDPR/CCPA-compliant privacy policy generator from data inventory

## Interaction Pattern

Every command follows this structured response format:

```
1. CONTEXT CHECK   — Verify inputs and confirm scope with user
2. ANALYSIS        — Deep analysis with live progress display
3. FINDINGS TABLE  — Structured results with severity / priority
4. RECOMMENDATIONS — Prioritised action list (quick wins first)
5. NEXT STEPS      — Suggested follow-up commands
```

## UI Conventions

| Symbol | Meaning              |
|--------|----------------------|
| ✓      | Passed / complete    |
| ✗      | Failed / critical    |
| ⚠      | Warning / review     |
| ⟳      | In progress          |
| ░      | Pending              |
| 🔴     | Critical severity    |
| 🟠     | High severity        |
| 🟡     | Medium severity      |
| 🟢     | Low / informational  |

Progress bars use block characters:
`[████████░░] 80%`

## Quick Start

```bash
# Install this skill
cp -r . ~/.claude/skills/r00-anthropics-claude-code--security/

# In Claude Code
/read ~/.claude/skills/r00-anthropics-claude-code--security/SKILL.md
```

Then simply describe your task and Claude will route to the
appropriate command automatically.

name: "r00-anthropics-claude-code--security" description: > 🔒 Security & Compliance skill suite derived from anthropics/claude-code. Security audits, vulnerability management, GDPR/SOC2/ISO27001 compliance and incident response. Provides 10 specialised commands for security, compliance, gdpr workflows. version: "1.0.0" domain: security tags: ["security", "compliance", "gdpr", "soc2", "owasp", "pentest"] source: "https://github.com/anthropics/claude-code" license: MIT

🔒 Security & Compliance Skill Suite

Derived from anthropics/claude-code · Focus: official Claude Code CLI, examples, plugins, scripts

Overview

This skill provides 10 production-ready commands tailored for Security & Compliance workflows. All commands follow a consistent interaction pattern with structured output, progress tracking and actionable recommendations.

Available Commands

/owasp-scan — OWASP Top-10 code scan with exploit description, CVSS score and remediation
/dep-cve — Dependency CVE report with exploitability score and upgrade path
/gdpr-audit — GDPR data-flow map, consent gaps and DPA checklist
/soc2-readiness — SOC 2 Type II readiness gap analysis across all 5 Trust Service Criteria
/threat-model — STRIDE threat model for architecture diagram with risk matrix
/pentest-report — Structured penetration test report: executive summary, findings and remediation
/secret-detect — Pre-commit secret detection hook config with entropy scanning
/iam-audit — IAM least-privilege audit: over-permissioned roles, stale access and MFA gaps
/incident-playbook — Security incident playbook: triage → contain → eradicate → recover → lessons
/privacy-policy — GDPR/CCPA-compliant privacy policy generator from data inventory

Interaction Pattern

Every command follows this structured response format:

1. CONTEXT CHECK   — Verify inputs and confirm scope with user
2. ANALYSIS        — Deep analysis with live progress display
3. FINDINGS TABLE  — Structured results with severity / priority
4. RECOMMENDATIONS — Prioritised action list (quick wins first)
5. NEXT STEPS      — Suggested follow-up commands

UI Conventions

Symbol	Meaning
✓	Passed / complete
✗	Failed / critical
⚠	Warning / review
⟳	In progress
░	Pending
🔴	Critical severity
🟠	High severity
🟡	Medium severity
🟢	Low / informational

Progress bars use block characters: [████████░░] 80%

Quick Start

# Install this skill
cp -r . ~/.claude/skills/r00-anthropics-claude-code--security/

# In Claude Code
/read ~/.claude/skills/r00-anthropics-claude-code--security/SKILL.md

Then simply describe your task and Claude will route to the appropriate command automatically.