My Security Auditor

my-security-auditor

[](https://opensource.org/licenses/Apache-2.0) [](https://docs.claude.com/en/docs/claude-code/skills) [](https://owasp.org/) [](https://attack.mitre.org/)

Comprehensive Claude Code skill for authorized security audits. Covers web, APIs, cloud, Kubernetes, mobile, AI/LLM, microservices, SaaS (multi-tenancy, enterprise SSO, BYOK), plus red/blue/purple team operations.

What this is

`my-security-auditor` is a Claude Code skill that transforms Claude into a structured security auditor. Instead of ad-hoc security advice, the skill provides a systematic, phase-based workflow backed by 25+ framework references covering every major security discipline.

**Frameworks integrated:**

• OWASP — Top 10, API Top 10, Mobile Top 10, LLM Top 10, Cloud-Native Top 10, K8s Top 10, ASVS, SAMM, WSTG, MASVS
• MITRE — ATT&CK + D3FEND, adversary emulation
• OSSTMM with RAV scoring
• NIST — RMF, CSF 2.0, FAIR, 800-53, 800-207 (Zero Trust)
• ISO — 27001, 27002, 27005, 27017, 27018, 27034, 27701
• Risk scoring — CVSS v4.0, EPSS, SSVC
• Compliance — SOC 1/2/3, PCI-DSS v4.0.1, GDPR/LGPD/CCPA/HIPAA
• Architecture — SABSA, Zero Trust (CISA ZTMM), CIS benchmarks, CSA CCM
• SaaS-specific — multi-tenancy, enterprise SSO/SCIM, BYOK/CMEK
• Team ops — Red team (full kill chain, C2, OPSEC), Blue team (SOC, SIEM, detection engineering, threat hunting), Purple team (CALDERA, Atomic Red Team, BAS platforms)

Quick start

Installation

1. Download the latest release: my-security-auditor.skill
2. Install to Claude Code:

   unzip my-security-auditor.skill -d ~/.claude/skills/

3. Verify installation:

   ls ~/.claude/skills/m