Security & Testing Agent Skills for Claude Desktop

Compliance OS — meta-orchestrator that lets compliance teams CONFIGURE which frameworks apply, COMPUTE cross-framework control overlap…

/cs:ai-act-readiness <system> — EU AI Act 6-question forcing interrogation.

/cs:fda-qsr-audit-prep <scope> — FDA 21 CFR 820 (QSR / QMSR) audit 6-question forcing interrogation.

/cs:iso13485-audit-prep <scope> — ISO 13485 QMS audit 6-question forcing interrogation.

/cs:iso27001-audit-prep <scope> — ISO 27001 ISMS audit readiness 6-question forcing interrogation.

Audit and manage dependencies across multi-language projects.

FDA regulatory consultant for medical device companies.

Medical device risk management specialist implementing ISO 14971 throughout product lifecycle.

Implement Salesforce data privacy, GDPR/CCPA compliance, and field-level

Implement Salesforce load testing, API limit capacity planning, and

Implement Salesforce lint rules, SOQL injection prevention, and API

Apply Salesforce security best practices for Connected Apps, OAuth,

Audit and recommend minimal sandbox entitlements for secure desktop applications

Static Application Security Testing orchestration and analysis.

Static Application Security Testing (SAST) tool setup, configuration, and custom rule creation for comprehensive security scanning across…

Static Application Security Testing (SAST) for code vulnerability

Scans container images, filesystems, and SBOMs for known CVEs with Anchore Grype, matching Syft-generated SBOM packages against NVD…

Integrates Aqua Security''s Trivy scanner into CI/CD pipelines to detect

Scans a Docker image with Trivy for vulnerabilities in OS packages and language dependencies, misconfiguration, exposed secrets, and…

This skill enables Claude to scan applications and data systems for GDPR compliance issues.

Scan a source-code tree for hardcoded credentials embedded in source files: AWS access keys, GitHub tokens, Stripe keys, Slack tokens…