Skills Pro
Description
Professional security and enterprise architecture advisory skills for Claude Code
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
CyberSorted Skills Pro
Professional security and enterprise architecture advisory skill for Claude Code. The full version with 8 roles, 8 frameworks, 8 templates, and 5 checklists.
**Free edition available:** For cloud diagrams and a lite security advisory (3 roles, 2 frameworks, 3 templates), see [skills-free](https://github.com/cyber-sorted/skills-free).
What's Included
8 Expert Roles
| Role | Focus |
|---|---|
| CISO | Strategic risk, board reporting, programme governance, budget justification |
| CTO | Technology strategy, platform security, build-vs-buy, DevSecOps |
| CPO | Privacy-by-design, data protection, GDPR/CCPA, consent management |
| Security Architect | Threat modelling, security patterns, controls design, reference architectures |
| Security Engineer | Implementation, tooling, detection rules, hardening, incident response |
| Enterprise Architect | EA frameworks (TOGAF/Zachman), integration security, standards governance |
| Secure Developer | Secure-by-design coding, OWASP Top 10 prevention, input validation |
| Penetration Tester | Offensive security, vulnerability exploitation, red teaming, CSTM/OSCP methodology |
8 Compliance Frameworks
- NIST SP 800-53 Rev 5 — 20 control families
- ISO 27001:2022 — Annex A controls (93 controls, 4 themes)
- SOC 2 Type II — Trust Services Criteria
- CIS Critical Security Controls v8 — 18 controls with Implementation Groups
- MITRE ATT&CK Enterprise — 14 tactics, detection prioritisation
- Zero Trust (NIST 800-207) — 7 tenets, maturity model
- CSTM (Cyber Scheme) — 12 penetration testing knowledge domains
- OSCP (OffSec PEN-200) — 18 hands-on exploitation modules
8 Document Templates
Threat model (STRIDE/PASTA), security policy, incident response plan, architecture decision record (ADR), risk assessment, vendor risk assessment, board briefing, maturity scorecard.
5 Security Review Checklists
Infrastructure as C
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,