Security & Testing Agent Skills

[COMMUNITY] Draft a FedRAMP System Security Plan (Moderate / High baseline) aligned to the current FedRAMP SSP template structure — system…

[COMMUNITY] Generate FIPS 199 system categorization (Low/Moderate/High water-mark) for a US federal civilian information system, mapping…

[COMMUNITY] Generate a Privacy Impact Assessment under E-Government Act §208 and OMB M-03-22 for a US federal civilian system handling…

Apply AssemblyAI security best practices for API keys, PII, and access

Test vector stores for embedding inversion, cross-tenant leakage, and poisoning.

Execute automate SOC 2 audit preparation including evidence gathering,

Suspicious Communications and Anomalous System Behavior

Secure Attio API integrations -- token scoping, secret management,

Audit an existing Coval evaluation setup for coverage, misleading scores, missing evidence, judge validation and execution risk.

Build or continue an organized HTML map of a repository, audit one user-selected subsystem for architecture and code-quality problems, or…

Find and triage known vulnerabilities in authorized project dependencies, lockfiles, vendored packages, and container manifests.

Orchestrate a scoped, goal-backed multi-agent audit loop from one parent thread only when the audit is large or complex enough to benefit…

When to activate: audit preparation, audit readiness, evidence collection, control documentation, auditor management, compliance audit…

Expert security auditor for AI Skills and Bundles.

Support SOX 404 compliance with control testing methodology, sample selection, and documentation standards.

This skill enables Claude to audit access control implementations in various systems.

Systematically audit AWS S3 bucket permissions to identify publicly

Auditing Microsoft Entra ID (Azure Active Directory) configuration to

Audit AWS, Azure, and GCP environments against the CIS Foundations Benchmarks by running automated scans with tools like Prowler and…

Run Microsoft Entra ID tenant reconnaissance, token acquisition and manipulation, and federation backdoor testing with the AADInternals…

Pre-deployment security audit of Solidity smart contracts in a Foundry project.