Skill UI

A comprehensive guide to integrating privacy protections into software architecture from the ground up. This skill ensures compliance with major global regulations like GDPR, CCPA, and LGPD by implementing core principles such as data minimization, purpose limitation, and default privacy settings. Essential for developers building any application that handles personal user data.

This comprehensive tool validates Claude Code plugins against official Anthropic specifications and internal enterprise standards. It performs two main types of checks: structural validation (checking `plugin.json` fields, file references, and permissions) and content validation (conducting deep grading using `SKILL.md`). Use this when building, auditing, or preparing plugins for marketplace submission to ensure compliance and quality.

Guards borrower interactions by enforcing TRID, RESPA, TILA, ECOA/Fair Lending, licensing, disclosures, and privacy rules whenever rates, fees, qualifications, or data are discussed in mortgage conversations.

A comprehensive design specification detailing 98 rules for building Command Line Interface (CLI) tools that are safe, reliable, and easily consumable by AI agents. It covers structured JSON output formats, standardized error handling (to stderr), robust input contracts, safety guardrails (e.g., preventing path traversal), and tiered compliance levels (Agent-Friendly, Agent-Ready, Agent-Native) for seamless integration into AI workflows.

This guide details the comprehensive process of using the Linux Audit framework (auditd) to detect advanced security threats. It covers deploying specific rules to monitor critical system files, detecting unauthorized privilege escalation, process injection, and suspicious system calls. Users can then leverage ausearch and aureport to efficiently query, reconstruct timelines, and summarize findings for forensic analysis and compliance auditing.

A comprehensive guide and set of scripts to systematically audit AWS S3 buckets for security misconfigurations. This tool identifies publicly exposed data, overly permissive ACLs, inadequate bucket policies, and missing encryption settings, ensuring adherence to least-privilege principles and compliance frameworks like SOC 2 or HIPAA.

This script provides a comprehensive security assessment of Microsoft Entra ID (Azure AD) identity configurations. It audits for risky authentication policies, overly permissive role assignments, stale accounts, conditional access gaps, and guest user risks using PowerShell and Graph API. Ideal for compliance audits, security posture review, and post-merger security assessments.

This guide provides a comprehensive methodology for conducting cloud security audits across major platforms (AWS, Azure, GCP) using industry-standard CIS Benchmarks. It covers selecting appropriate benchmark versions, running automated assessments using tools like Prowler and ScoutSuite, interpreting complex compliance results, and prioritizing systematic remediation steps to achieve and maintain continuous compliance (e.g., SOC 2, ISO 27001).

A comprehensive guide and script collection for auditing Google Cloud Platform IAM permissions. It helps identify overly permissive bindings, unused service accounts, primitive role usage, and cross-project access risks. It utilizes gcloud CLI, Policy Analyzer, and IAM Recommender to ensure compliance and minimize the blast radius of misconfigurations.

This utility provides comprehensive security auditing for Kubernetes Role-Based Access Control (RBAC) configurations. It identifies overly permissive roles, dangerous wildcard permissions (*), critical ClusterRoleBindings, and potential privilege escalation paths. By integrating tools like rbac-tool, KubiScan, and Kubeaudit, it helps users enforce the principle of least privilege, crucial for compliance and security assessments on EKS, GKE, and AKS clusters.

This guide details comprehensive methods for auditing Terraform infrastructure-as-code (IaC) against security misconfigurations. By leveraging industry-standard tools like Checkov, tfsec, Terrascan, and Open Policy Agent (OPA), users can detect critical vulnerabilities—such as overly permissive IAM policies, public resource exposure, and missing encryption—before cloud deployment. It is essential for integrating robust security gates into CI/CD pipelines and enforcing compliance standards.

This guide details how to write advanced correlation searches using Splunk's Search Processing Language (SPL). It covers techniques like threshold-based detection, sequence analysis, and anomaly detection to identify sophisticated security threats (e.g., brute force, data exfiltration, lateral movement) in a Security Operations Center (SOC) environment. Mastery of SPL is essential for closing SIEM detection gaps and ensuring compliance.