ClaudeSkillCollection

Use when applying the same security fix across many files or repos at once — large-scale vulnerability remediation. Provides 7 copy-paste /batch recipes (XSS, HTTPS, SQLi, input validation, log PII, secret rotation, CVE patches) each with a safety tier and false-positive trap, plus scan_diff.py to prove the migration introduced no new HIGH/CRITICAL findings.

Use this skill to install ready-made Claude Code hooks for security — a ConfigChange compliance audit trail (logs every settings/skill change), plus PreToolUse guards and optional HTTP notifications for security-relevant events. Covers command, http, and prompt hook types.

Use this skill to seed Claude Code's auto-memory with pre-built security/compliance patterns — known-safe code patterns, false-positive suppressions for the plugin-security-checker, org compliance rules, and supply-chain best practices. Helps Claude apply consistent security judgment across sessions.

Use this skill to reduce token consumption by 70-80% when using the Chrome DevTools MCP. Applies a snapshot-first strategy (text over images) with decision trees and pattern guides for navigation, forms, debugging, and visual checks, plus optional Gemini Flash vision processing for the cases that genuinely need an image.

Navigate Claude Code documentation and get quick answers about configuration, MCP, plugins, and best practices.

Use this skill to extract and analyze large Word documents (1MB-50MB+) with minimal token usage. Losslessly extracts text, tables, formatting, and structure while achieving 10-50x token reduction through local extraction, semantic chunking by headings, and intelligent caching. Use when a .docx is too large for the context window (policies, contracts, technical reports).

Use this skill to scan a Claude Code plugin (or any npm/PyPI package tree) for security issues before installation. Detects dangerous functions, code obfuscation, hardcoded credentials, schema problems, and known 2024-2026 supply-chain attack IOCs (Shai-Hulud, Nx s1ngularity, chalk/debug clipper, Axios RAT, litellm/.pth), mapped to MITRE ATT&CK/ATLAS, CVE, and OWASP.

Use this skill to extract and analyze large Excel workbooks (1MB-50MB+) with minimal token usage. Losslessly extracts formulas, cell formatting, and complex tables while achieving 20-100x token reduction through local extraction, semantic chunking, and intelligent caching. Use when an .xlsx is too large for the context window (compliance matrices, financial models, audit logs).

Generate enterprise cybersecurity policies from 51 professional templates (SANS, CIS Controls) for ISO 27001, SOC 2, NIST, and CIS Controls compliance in Markdown, Word, HTML, and PDF formats

Generate standards-compliant SBOMs (CycloneDX 1.6 + SPDX 2.3) for a project across stacks (npm, Python, Go, Rust, Java, containers), with optional quality scoring, vulnerability scan, VEX, and signing. Adds zero dependencies to the target project. Use when the user asks for a software bill of materials, dependency inventory, supply-chain manifest, or CycloneDX/SPDX output.

Use this skill to build professional security reports (HTML, PDF, DOCX) from plugin-security-checker scan results. Reduces false positives through context-aware analysis and maps findings to MITRE ATT&CK/ATLAS, OWASP, and CWE. Use when turning raw scan output into executive-ready, technical, or compliance reports.

Use this skill to generate comprehensive incident response playbooks from authoritative templates (NIST SP 800-61r3, CISA, NIST SP 800-161r1). Creates customized IR documentation for 11 incident scenarios — ransomware, data breach, phishing, supply-chain, cloud, API, container/K8s, IoT/OT, insider threat, AI/ML, and DDoS — with GDPR Article 33/34 and HIPAA breach-notification guidance.

This skill should be used when analyzing codebases, applications, databases, or systems for GDPR (General Data Protection Regulation) compliance. Use this skill when users need to audit data protection practices, identify potential compliance issues, assess data handling procedures, review privacy policies, or ensure adherence to EU data protection requirements.

Use this skill to extract and analyze large PDFs (3MB-10MB+) with minimal token usage. Preserves ~100% of content while achieving 12-103x token reduction through local extraction, semantic chunking, and intelligent caching. Use when a PDF is too large for the context window, or for technical/compliance documentation (NIST, ISO, AWS) and research papers.

Extract and analyze large PDFs (1MB-50MB+) with minimal token usage through local extraction, semantic chunking, and persistent caching. Enables 12-100x faster querying for technical documents like NIST, ISO, and AWS guides.

Transform plugin security scanner results into professional reports (HTML, PDF, DOCX) with intelligent false positive filtering and MITRE ATT&CK/OWASP integration. Reduces false positive rate from 85-90% to under 20%.

Generate comprehensive incident response playbooks based on NIST SP 800-61r3 and CISA guidance. Supports 11 incident scenarios including ransomware, data breach, phishing, supply chain attacks, and more. Includes GDPR and HIPAA compliance considerations.

Reduce token consumption by 70-80% when using Chrome DevTools MCP through smart snapshot strategies and optional Gemini Flash vision processing. Includes decision trees, pattern guides, and automated optimization workflows.

Advanced security scanner for Claude Code plugins with 91 specialized pattern agents. Detects vulnerabilities, code obfuscation, and security anti-patterns across plugin manifests, agents, and scripts.

Process Word documents (1MB-50MB+) with token optimization through local extraction and caching. Preserves formatting, tables, and document structure for policy analysis, contract review, and technical reports.

Extract and analyze Excel workbooks (1MB-50MB+) with minimal token usage through local extraction, sheet-based chunking, and persistent caching. Preserves formulas, cell formatting, and complex table structures for compliance matrices, financial models, and large datasets.

Generate enterprise cybersecurity policies from 51 professional templates (SANS, CIS Controls) for ISO 27001, SOC 2, NIST, and CIS Controls compliance in Markdown, Word, HTML, and PDF formats

This skill should be used when analyzing codebases, applications, databases, or systems for GDPR (General Data Protection Regulation) compliance. Use this skill when users need to audit data protection practices, identify potential compliance issues, assess data handling procedures, review privacy policies, or ensure adherence to EU data protection requirements.