My Security Auditor — Security skill for Claude Code
Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS, GDPR/LGPD, SaaS multi-tenancy, red/blue/purple team ops.
How to install My Security Auditor
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open leomarviegas/my-security-auditor and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What My Security Auditor does
Comprehensive Claude skill for authorized security auditing — OWASP, MITRE ATT&CK, ISO 27001, SOC 2, PCI-DSS, GDPR/LGPD, SaaS multi-tenancy, red/blue/purple team ops.
Alternatives in Security
- T3mp3st — autonomous red teaming platform; multi-agent offensive-security meta-harness 5.7k ★
- Anthropic Cybersecurity Skills — 734+ structured cybersecurity skills for AI agents · MITRE ATT&CK mapped · agentskills.io open standard · Work 3.8k ★
- Cve MCP Server — Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS sco 1.2k ★
README
my-security-auditor
[](https://opensource.org/licenses/Apache-2.0) [](https://docs.claude.com/en/docs/claude-code/skills) [](https://owasp.org/) [](https://attack.mitre.org/)
Comprehensive Claude Code skill for authorized security audits. Covers web, APIs, cloud, Kubernetes, mobile, AI/LLM, microservices, SaaS (multi-tenancy, enterprise SSO, BYOK), plus red/blue/purple team operations.
What this is
`my-security-auditor` is a Claude Code skill that transforms Claude into a structured security auditor. Instead of ad-hoc security advice, the skill provides a systematic, phase-based workflow backed by 25+ framework references covering every major security discipline.
**Frameworks integrated:**
- OWASP — Top 10, API Top 10, Mobile Top 10, LLM Top 10, Cloud-Native Top 10, K8s Top 10, ASVS, SAMM, WSTG, MASVS
- MITRE — ATT&CK + D3FEND, adversary emulation
- OSSTMM with RAV scoring
- NIST — RMF, CSF 2.0, FAIR, 800-53, 800-207 (Zero Trust)
- ISO — 27001, 27002, 27005, 27017, 27018, 27034, 27701
- Risk scoring — CVSS v4.0, EPSS, SSVC
- Compliance — SOC 1/2/3, PCI-DSS v4.0.1, GDPR/LGPD/CCPA/HIPAA
- Architecture — SABSA, Zero Trust (CISA ZTMM), CIS benchmarks, CSA CCM
- SaaS-specific — multi-tenancy, enterprise SSO/SCIM, BYOK/CMEK
- Team ops — Red team (full kill chain, C2, OPSEC), Blue team (SOC, SIEM, detection engineering, threat hunting), Purple team (CALDERA, Atomic Red Team, BAS platforms)
Quick start
Installation
- Download the latest release:
my-security-auditor.skill - Install to Claude Code:
unzip my-security-auditor.skill -d ~/.claude/skills/ - Verify installation:
ls ~/.claude/skills/m
Related Skills
Design Compliance
Audit or generate regulation-specific UI patterns for HIPAA, PCI DSS, or ADA compliance. Use --regulation to t
Security Threat Intel
Security Threat Intelligence skill for AI code review agents — MITRE ATT&CK infostealer mapping, detection che
Threat Detection Engineer
Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting
Modern Threat Model
STRIDE threat-modeling skill for Claude. Turns an idea, diagram, or code repo into a DFD, threat ledger, score
Skill Auditor Seguranca
Executable security and LGPD gate for AI-built projects. Scans for exposed secrets, .env leaks, Supabase servi
Audit Tenancy
Audit multi-tenancy enforcement — RLS policies, withTenantDb usage, query-time tenant filters, and cross-tenan
Related Agents
Compliance Auditor
Compliance audit — LGPD, GDPR, HIPAA, SOX, PCI-DSS, ISO regulations.
Compliance Mapper
Delegates to this agent when the user wants to map penetration-test findings to compliance frameworks — PCI DS
Verify Compliance
Ensures regulatory and legal compliance including GDPR, PCI-DSS, HIPAA, SOC 2, dependency licensing, and acces
