audit-expert
关于
The `audit-expert` skill provides expert-level security auditing and compliance guidance for developers, specializing in code reviews, vulnerability assessments, and regulatory frameworks like SOC 2 and GDPR. It helps conduct security audits, analyze code for vulnerabilities, and ensure infrastructure compliance. Use this skill when you need to review code security, prepare for compliance audits, or assess your application against established security standards.
快速安装
Claude Code
推荐npx skills add majiayu000/claude-skill-registry -a claude-code/plugin add https://github.com/majiayu000/claude-skill-registrygit clone https://github.com/majiayu000/claude-skill-registry.git ~/.claude/skills/audit-expert在 Claude Code 中复制并粘贴此命令以安装该技能
GitHub 仓库
Frequently asked questions
What is the audit-expert skill?
audit-expert is a Claude Skill by majiayu000. Skills package instructions and resources that Claude loads on demand, so Claude can perform audit-expert-related tasks without extra prompting.
How do I install audit-expert?
Use the install commands on this page: add audit-expert to Claude Code as a plugin, or clone its repository into your skills directory, then restart Claude so it picks up the skill.
What category does audit-expert belong to?
audit-expert is in the security category, tagged audit, compliance, security-review, code-review, vulnerability-assessment and soc2.
Is audit-expert free to use?
Yes. audit-expert is listed on AIMCP and free to install. It runs inside Claude, so no separate service account is required to use the skill itself.
相关推荐技能
这个Skill为AGENT_SUCCESS_CRITERIA环境变量提供集中化的JSON验证，通过防御性解析防止注入攻击。它确保所有21个CFN Loop代理在测试驱动开发中获得一致的错误处理。开发者只需source验证脚本即可快速集成安全的数据验证功能。
Audit-expert为开发者提供专业级安全审计和合规性检查，支持代码审查、漏洞评估及SOC2/GDPR等标准合规分析。它整合了OWASP ASVS、NIST等安全框架，可执行安全审计、代码审查和基础设施配置检查。开发者可用它自动化安全审查流程，快速识别代码漏洞和合规风险。
这是一个专为安全分析设计的Claude Skill，提供专家级的CodeQL静态代码分析能力，用于漏洞检测和安全扫描。它能指导开发者创建自定义QL查询、分析扫描结果，并集成到CI/CD流程中。该Skill支持多语言项目，帮助开发者在代码层面识别和修复安全风险。
ClawShield是一个用于OpenClaw安装的安全审计工具，能扫描网关漏洞、定时任务和提示词注入模式。它通过生成JSON报告帮助开发者识别安全风险，特别适用于加固安装防护。该工具提供可视化面板和可配置的定时扫描功能，便于持续监控系统安全状态。