Skill · em Proteger

security-compliance

Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout…

Procedência

Antes de instalar

13 arquivos · 290,6 KB · inclui 2 scripts que executam: scripts/risk_calculator.py, scripts/vuln_prioritizer.py

Instalar na sua CLI

O comando baixa a versão fixada (commit 57f899e) direto da origem, para a pasta que a CLI lê. Precisa de curl (macOS e Linux); no Windows não há comando, porque o Rook Labs é para macOS.

Claude Code

Neste projeto: instala em .claude/skills/security-compliance/.

d=".claude/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.claude/skills/security-compliance/.

d="$HOME/.claude/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Codex

Neste projeto: instala em .agents/skills/security-compliance/.

d=".agents/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.agents/skills/security-compliance/.

d="$HOME/.agents/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Antigravity

Neste projeto: instala em .agents/skills/security-compliance/.

d=".agents/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Global: instala em ~/.gemini/antigravity-cli/skills/security-compliance/.

d="$HOME/.gemini/antigravity-cli/skills/security-compliance"
u="https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/cli-tool/components/skills/development/security-compliance"
curl -fsSL --create-dirs \
  -o "$d/SKILL.md" "$u/SKILL.md" \
  -o "$d/examples/incident-response-template.md" "$u/examples/incident-response-template.md" \
  -o "$d/examples/risks.csv" "$u/examples/risks.csv" \
  -o "$d/examples/soc2-control-example.md" "$u/examples/soc2-control-example.md" \
  -o "$d/examples/vulnerabilities.csv" "$u/examples/vulnerabilities.csv" \
  -o "$d/README.md" "$u/README.md" \
  -o "$d/reference/application-security.md" "$u/reference/application-security.md" \
  -o "$d/reference/compliance-frameworks.md" "$u/reference/compliance-frameworks.md" \
  -o "$d/reference/security-architecture.md" "$u/reference/security-architecture.md" \
  -o "$d/reference/security-operations.md" "$u/reference/security-operations.md" \
  -o "$d/reference/threat-modeling-risk.md" "$u/reference/threat-modeling-risk.md" \
  -o "$d/scripts/risk_calculator.py" "$u/scripts/risk_calculator.py" \
  -o "$d/scripts/vuln_prioritizer.py" "$u/scripts/vuln_prioritizer.py" \
  -o "$d/LICENSE" "https://raw.githubusercontent.com/davila7/claude-code-templates/57f899e5394bb8ca166f38eacae8f0853cbfe033/LICENSE"

Peça ao Rook

Já usa o Rook Labs? Cole no chat do Rook: instale a skill https://rooklabs.sh/marketplace/cct.security-compliance

Prévia do SKILL.md

---
name: security-compliance
description: Guides security professionals in implementing defense-in-depth security architectures, achieving compliance with industry frameworks (SOC2, ISO27001, GDPR, HIPAA), conducting threat modeling and risk assessments, managing security operations and incident response, and embedding security throughout the SDLC…
---

# Security & Compliance Expert

## Core Principles

### 1. Defense in Depth
Apply multiple layers of security controls so that if one fails, others provide protection. Never rely on a single security mechanism.

### 2. Zero Trust Architecture
Never trust, always verify. Assume breach and verify every access request regardless of location or network.

### 3. Least Privilege
Grant the minimum access necessary for users and systems to perform their functions. Regularly review and revoke unused permissions.

### 4. Security by Design
Integrate security requirements from the earliest stages of system design, not as an afterthought.

### 5. Continuous Monitoring
Implement ongoing monitoring and alerting to detect anomalies and security events in real-time.

### 6. Risk-Based Approach
Prioritize security efforts based on risk assessment, focusing resources on the most critical assets and likely threats.

### 7. Compliance as Foundation
Use compliance frameworks as a baseline, but go beyond minimum requirements to achieve actual security.

### 8. Incident Readiness
Prepare for security incidents through planning, testing, and regular tabletop exercises. Assume compromise will occur.

---

## Security & Compliance Lifecycle

### Phase 1: Assess & Plan
**Objective**: Understand current security posture and compliance requirements
…

Ver todo o marketplace