jassics/awesome-claude-security
38 skills
$npx skills add jassics/awesome-claude-securitySkillInstalls
agent-security-reviewAssess an autonomous / tool-using AI agent for security end-to-end: tool privileges, autonomy and approval boundaries, excessive agency, memory/state…ai-threat-modelThreat model an LLM / RAG / agentic AI system: map prompts, data sources, tools, identities, and trust boundaries, then enumerate AI-specific threats and…api-authz-testTest an API's authorization — BOLA (object-level), BFLA (function-level), and BOPLA (property-level / mass assignment) — to confirm each request is authorized…autonomy-boundary-testTest what an AI agent will actually do without human confirmation, including under injected-goal / prompt-injection scenarios, to validate its autonomy and…bias-fairness-assessmentAssess an AI model, feature, or dataset for bias and fairness across groups — representational and allocative harms, disparate performance, and skewed refusals…board-deckProduce a board / executive security presentation — risk posture and direction, top risks in business terms, program progress against strategy, the metrics…cloud-iam-reviewAudit cloud IAM (AWS/Azure/GCP) for least privilege: over-permissioned identities, wildcard/admin grants, public or cross-account access, unused credentials,…cloud-misconfig-scanScan a cloud environment (AWS/Azure/GCP) for high-impact misconfigurations and exposures — public storage, open ingress, unencrypted data, exposed secrets/…cloud-posture-reviewReview a cloud environment's security posture (AWS/Azure/GCP) across IAM, network, data protection, logging/monitoring, and workload configuration, mapped to…compliance-assessmentGap-assess an organization or system against a compliance framework (SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, NIST CSF/800-53), mapping controls to evidence,…config-security-scanStatically review a Claude Code / AI-agent setup for security misconfigurations — risky hooks, over-broad permissions, untrusted or cleartext MCP servers,…cyber-risk-quantificationTranslate technical security risk into business and financial terms — top risk scenarios, likelihood × impact, a risk register, and (where useful) quantified…detection-coverage-reviewAssess detection coverage against the MITRE ATT&CK matrix: which tactics/techniques are covered, partially covered, or blind, weighted by data-source…detection-rule-developmentDevelop or review a detection rule (Sigma, YARA, KQL/SPL/EQL) for a specific behavior or threat, mapped to MITRE ATT&CK, with test cases and false-positive…forensic-triagePerform forensic triage on a host or artifacts — collect and analyze disk, memory, and log evidence with proper handling, then build an incident timeline.guardrail-reviewReview or design the content-safety guardrails of an AI system — input/output classifiers, refusal and safe-completion behavior, escalation/human handoff, and…harm-modelingSystematically enumerate the potential HARMS of an AI system — to users, third parties, vulnerable groups, and society — under normal use, misuse, and…host-hardening-reviewReview a host/OS (Linux or Windows) or its baseline image against CIS Benchmark hardening — accounts, services, network, logging, file permissions, and…iac-security-reviewReview Infrastructure-as-Code (Terraform, CloudFormation, ARM/Bicep, Pulumi, Ansible, Helm) for security misconfigurations before deployment — public exposure,…incident-responseDrive a security incident through the response lifecycle (NIST SP 800-61 / SANS PICERL): triage and scope, contain, eradicate, recover, and capture lessons…ioc-developmentExtract and operationalize indicators (IOCs) and behaviors (IOAs) from an incident or sample — atomic, computed, and behavioral — and prepare them for…k8s-cluster-reviewReview a Kubernetes cluster's security across control plane, RBAC, workload configuration, network policy, secrets, and admission control, mapped to the CIS…k8s-rbac-reviewAudit Kubernetes RBAC for least privilege and privilege-escalation paths — cluster-admin sprawl, wildcard/dangerous verbs, risky bindings, and service-account…k8s-workload-hardeningReview and harden Kubernetes workloads (pods/Deployments) against Pod Security Standards — privileged containers, host namespaces, hostPath, capabilities,…owasp-api-top10Assess a REST or GraphQL API against the OWASP API Security Top 10 (2023), producing a per-category finding set with severity and remediation.policy-managementDevelop or review security governance documents — policies, standards, procedures, and guidelines — aligned to a framework and the organization's risk, with a…purple-team-exercisePlan and run a purple-team exercise: collaboratively emulate specific ATT&CK techniques and measure whether detection and response actually work, then close…responsible-ai-assessmentGap-assess an AI system or program against a responsible-AI / governance framework — NIST AI RMF, ISO/IEC 42001, EU AI Act, OECD principles — covering…risk-assessmentRun a structured security risk assessment and maintain a risk register — identify, analyze, evaluate, and treat risks (ISO 27005 / NIST SP 800-30) against the…safety-caseAssemble a structured assurance / safety case for deploying an AI system — an explicit argument that it is acceptably safe for its context, backed by evidence…safety-evaluationDesign and run a safety evaluation suite for an AI model or feature across harm categories — refusals on disallowed content, robustness, over-refusal vs…safety-red-teamResponsibly red-team an AI system to find SAFETY failures — harmful outputs, jailbreaks that defeat safety guardrails, and foreseeable-misuse / dangerous-…secrets-management-reviewReview how secrets are handled across code, IaC, CI/CD, containers, and config — hardcoding, sprawl, exposure, vaulting, rotation, and access scope.secure-by-design-programEstablish or assess an org-wide secure-by-design program — paved roads / golden paths with secure defaults, automated guardrails, and developer enablement — so…security-strategyBuild or assess a security program strategy and roadmap — current-vs-target maturity, gaps, prioritized initiatives aligned to business objectives and risk…tech-risk-assessmentAssess the security risk of a technology or product decision for leadership — new technology/vendor adoption, build-vs-buy, third-party/supply-chain, or M&A…threat-huntingRun a hypothesis-driven threat hunt: form a hypothesis (often from ATT&CK or threat intel), query telemetry for evidence, analyze findings, and convert results…tool-permission-auditInventory the tools/functions an AI agent can call and audit their privileges, side effects, and approval requirements to find excessive-agency and…