Security & Testing Agent Skills for Claude Desktop

[COMMUNITY] Assess Diffusion Restreinte (DR) handling compliance — marking, storage, transmission, and destruction rules for French…

[COMMUNITY] Conduct an EBIOS Risk Manager risk analysis study following the ANSSI methodology — five workshops from study framing to risk…

[COMMUNITY] Structure an IRN (Digital Resilience Index) self-assessment following the aDRI framework — 8 resilience pillars × 5…

[COMMUNITY] Assess CNIL-specific GDPR obligations for French deployments — cookies, health data (HDS), minors, délibérations CNIL, and…

[COMMUNITY] Generate a three-tier AI autonomy posture (Tier 1 internal-productivity, Tier 2 investor-facing-with-approval, Tier 3…

[COMMUNITY] Generate a Data Sharing Agreement under the UAE Government Services Data Sharing Policy.

[COMMUNITY] Generate a UAE PDPL (Federal Decree-Law 45/2021) compliance assessment including DPIA, lawful-basis register…

[COMMUNITY] Generate a Critical Third Parties (CTP) dependency assessment — register of designated CTPs the firm relies on (cloud…

[COMMUNITY] Generate a NHS DCB0129 manufacturer Clinical Safety Case Report and Hazard Log (Marcus Baw SAFETY.md 3-file spec) for a…

[COMMUNITY] Generate a NHS DCB0160 deployer Clinical Safety Case Report and deployment Hazard Log for an NHS organisation deploying or…

[COMMUNITY] Generate an NHS Digital Technology Assessment Criteria (DTAC v3) assessment for a digital health product being procured or…

[COMMUNITY] Design a US federal Identity, Credential, and Access Management architecture per OMB M-19-17 and NIST SP 800-63-3, determining…

[COMMUNITY] Tailor the NIST SP 800-53 Rev 5 control catalog against the Low / Moderate / High baseline for a US federal information…

[COMMUNITY] Produce an EO 14028 secure-software self-attestation (per OMB M-22-18 / M-23-16) and an accompanying Software Bill of…

[COMMUNITY] Assess a US federal civilian system against the CISA Zero Trust Maturity Model v2.0 — scoring 5 pillars (Identity, Devices…

Translates natural language mathematical questions into optimal prompts for Harmonic's Aristotle formal theorem prover, submits them via…

Reviews a finished code change, document, issue output, execution graph, or integrated project result through predefined risk-selected…

Use when about to claim something works, is fixed, or ready to hand off — and when a task changed one or more repos and needs intentional…

Use when code handles authentication, authorization, secrets, untrusted input, uploads, redirects, external requests, or sensitive data.

This skill assists with SOC2 audit preparation by automating tasks related to evidence gathering and documentation.

Detect and triage OWASP AST01 Malicious Skills — hidden payloads (credential stealers, backdoors, social-engineering prose) shipped inside…