chrismccoy

Devsecops — Security skill for Claude Code

Security community

Audit pipelines, IaC, or cloud config for security risk via guided intake - domain, stack, config context, framework.

How to install Devsecops

Installs to ~/.claude/skills/chrismccoy-forge-devsecops/SKILL.md

Terminal

mkdir -p ~/.claude/skills/chrismccoy-forge-devsecops && curl -fsSL https://raw.githubusercontent.com/chrismccoy/forge/HEAD/commands/devsecops.md -o ~/.claude/skills/chrismccoy-forge-devsecops/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Devsecops does

description: Audit pipelines, IaC, or cloud config for security risk via guided intake - domain, stack, config context, framework. argument-hint: [optional one-line config or stack description] disable-model-invocation: true

**Load first.** Read `${CLAUDE_PLUGIN_ROOT}/lib/devsecops/SKILL.md` in full before anything else - intake, tool calls, or output. That file is the authoritative procedure for this command; every mention of "the `devsecops` procedure" below refers to it. It i

Alternatives in Security

Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
Trail Of Bits Claude-code-config — Opinionated production defaults from a top security firm: sandboxing, permissions, hooks, skills, MCP server c 1.6k ★
Skill Threat Modeling — Code-First Deep Risk Analysis Skill for Claude Code - 8-Phase Workflow with Security design review, STRIDE Thr 207 ★