MCP HubMCP Hub
返回技能列表

generating-security-audit-reports

jeremylongshore
更新于 Today
63 次查看
712
74
712
在 GitHub 上查看
aidesigndata

关于

This skill generates comprehensive security audit reports from security data to assess vulnerabilities, compliance, and create remediation roadmaps. It is triggered by commands like `/audit-report` when users need a vulnerability assessment or security posture analysis. The skill produces detailed reports in various formats to help developers identify and track security issues.

快速安装

Claude Code

推荐
插件命令推荐
/plugin add https://github.com/jeremylongshore/claude-code-plugins-plus
Git 克隆备选方式
git clone https://github.com/jeremylongshore/claude-code-plugins-plus.git ~/.claude/skills/generating-security-audit-reports

在 Claude Code 中复制并粘贴此命令以安装该技能

技能文档

Overview

This skill allows Claude to create detailed security audit reports. It analyzes existing security data, identifies vulnerabilities, assesses compliance with industry standards, and suggests remediation steps. The generated reports can be used to improve an organization's security posture and meet compliance requirements.

How It Works

  1. Data Collection: Claude gathers data from various security tools and sources.
  2. Analysis: The plugin analyzes the collected data to identify vulnerabilities and compliance issues.
  3. Report Generation: Claude compiles the findings into a comprehensive security audit report, including an executive summary, vulnerability details, compliance status, and remediation recommendations.

When to Use This Skill

This skill activates when you need to:

  • Generate a comprehensive security audit report.
  • Assess the security posture of an application or system.
  • Identify vulnerabilities and compliance issues.

Examples

Example 1: Security Posture Assessment

User request: "Create a security audit report for our web application."

The skill will:

  1. Analyze the web application's security data.
  2. Generate a report outlining vulnerabilities, compliance status, and remediation recommendations.

Example 2: Compliance Audit

User request: "/auditreport for PCI-DSS compliance"

The skill will:

  1. Analyze the current system configurations and security measures.
  2. Generate a report focused on PCI-DSS compliance, highlighting areas of non-compliance and recommended actions.

Best Practices

  • Clarity: Provide specific details about the system or application you want to audit.
  • Context: Mention any relevant compliance standards (e.g., PCI-DSS, GDPR, HIPAA) to focus the audit.
  • Review: Always review the generated report for accuracy and completeness.

Integration

This skill can be integrated with other security tools and plugins to enhance data collection and analysis. It provides a central point for generating security audit reports from various sources.

GitHub 仓库

jeremylongshore/claude-code-plugins-plus
路径: backups/skills-batch-20251204-000554/plugins/security/security-audit-reporter/skills/security-audit-reporter
aiautomationclaude-codedevopsmarketplacemcp

相关推荐技能

content-collections

Content Collections 是一个 TypeScript 优先的构建工具,可将本地 Markdown/MDX 文件转换为类型安全的数据集合。它专为构建博客、文档站和内容密集型 Vite+React 应用而设计,提供基于 Zod 的自动模式验证。该工具涵盖从 Vite 插件配置、MDX 编译到生产环境部署的完整工作流。

查看技能

creating-opencode-plugins

该Skill为开发者创建OpenCode插件提供指导,涵盖命令、文件、LSP等25+种事件类型。它详细说明了插件结构、事件API规范及JavaScript/TypeScript实现模式,帮助开发者构建事件驱动的模块。适用于需要拦截操作、扩展功能或自定义AI助手行为的插件开发场景。

查看技能

sglang

SGLang是一个专为LLM设计的高性能推理框架,特别适用于需要结构化输出的场景。它通过RadixAttention前缀缓存技术,在处理JSON、正则表达式、工具调用等具有重复前缀的复杂工作流时,能实现极速生成。如果你正在构建智能体或多轮对话系统,并追求远超vLLM的推理性能,SGLang是理想选择。

查看技能

evaluating-llms-harness

测试

该Skill通过60+个学术基准测试(如MMLU、GSM8K等)评估大语言模型质量,适用于模型对比、学术研究及训练进度追踪。它支持HuggingFace、vLLM和API接口,被EleutherAI等行业领先机构广泛采用。开发者可通过简单命令行快速对模型进行多任务批量评估。

查看技能