Skills Pro banner
cyber-sorted cyber-sorted

Skills Pro

Security community

Description

Professional security and enterprise architecture advisory skills for Claude Code

Installation

This entry records only its repository, not the path inside it, so there is no exact command to give. Open the source below and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

README

CyberSorted Skills Pro

Professional security and enterprise architecture advisory skill for Claude Code. The full version with 8 roles, 8 frameworks, 8 templates, and 5 checklists.

**Free edition available:** For cloud diagrams and a lite security advisory (3 roles, 2 frameworks, 3 templates), see [skills-free](https://github.com/cyber-sorted/skills-free).

What's Included

8 Expert Roles

Role Focus
CISO Strategic risk, board reporting, programme governance, budget justification
CTO Technology strategy, platform security, build-vs-buy, DevSecOps
CPO Privacy-by-design, data protection, GDPR/CCPA, consent management
Security Architect Threat modelling, security patterns, controls design, reference architectures
Security Engineer Implementation, tooling, detection rules, hardening, incident response
Enterprise Architect EA frameworks (TOGAF/Zachman), integration security, standards governance
Secure Developer Secure-by-design coding, OWASP Top 10 prevention, input validation
Penetration Tester Offensive security, vulnerability exploitation, red teaming, CSTM/OSCP methodology

8 Compliance Frameworks

  • NIST SP 800-53 Rev 5 — 20 control families
  • ISO 27001:2022 — Annex A controls (93 controls, 4 themes)
  • SOC 2 Type II — Trust Services Criteria
  • CIS Critical Security Controls v8 — 18 controls with Implementation Groups
  • MITRE ATT&CK Enterprise — 14 tactics, detection prioritisation
  • Zero Trust (NIST 800-207) — 7 tenets, maturity model
  • CSTM (Cyber Scheme) — 12 penetration testing knowledge domains
  • OSCP (OffSec PEN-200) — 18 hands-on exploitation modules

8 Document Templates

Threat model (STRIDE/PASTA), security policy, incident response plan, architecture decision record (ADR), risk assessment, vendor risk assessment, board briefing, maturity scorecard.

5 Security Review Checklists

Infrastructure as C