MCP HubMCP Hub
返回技能列表

generating-security-audit-reports

jeremylongshore
更新于 Today
12 次查看
409
51
409
在 GitHub 上查看
aidesigndata

关于

This skill enables Claude to generate comprehensive security audit and vulnerability assessment reports. It analyzes security data to identify vulnerabilities, assess compliance status, and provide recommended remediation steps. Use it via the `/audit-report` command when you need to evaluate an application's security posture or create a remediation roadmap.

技能文档

Overview

This skill allows Claude to create detailed security audit reports. It analyzes existing security data, identifies vulnerabilities, assesses compliance with industry standards, and suggests remediation steps. The generated reports can be used to improve an organization's security posture and meet compliance requirements.

How It Works

  1. Data Collection: Claude gathers data from various security tools and sources.
  2. Analysis: The plugin analyzes the collected data to identify vulnerabilities and compliance issues.
  3. Report Generation: Claude compiles the findings into a comprehensive security audit report, including an executive summary, vulnerability details, compliance status, and remediation recommendations.

When to Use This Skill

This skill activates when you need to:

  • Generate a comprehensive security audit report.
  • Assess the security posture of an application or system.
  • Identify vulnerabilities and compliance issues.

Examples

Example 1: Security Posture Assessment

User request: "Create a security audit report for our web application."

The skill will:

  1. Analyze the web application's security data.
  2. Generate a report outlining vulnerabilities, compliance status, and remediation recommendations.

Example 2: Compliance Audit

User request: "/auditreport for PCI-DSS compliance"

The skill will:

  1. Analyze the current system configurations and security measures.
  2. Generate a report focused on PCI-DSS compliance, highlighting areas of non-compliance and recommended actions.

Best Practices

  • Clarity: Provide specific details about the system or application you want to audit.
  • Context: Mention any relevant compliance standards (e.g., PCI-DSS, GDPR, HIPAA) to focus the audit.
  • Review: Always review the generated report for accuracy and completeness.

Integration

This skill can be integrated with other security tools and plugins to enhance data collection and analysis. It provides a central point for generating security audit reports from various sources.

快速安装

/plugin add https://github.com/jeremylongshore/claude-code-plugins-plus/tree/main/security-audit-reporter

在 Claude Code 中复制并粘贴此命令以安装该技能

GitHub 仓库

jeremylongshore/claude-code-plugins-plus
路径: backups/skills-migration-20251108-070147/plugins/security/security-audit-reporter/skills/security-audit-reporter
aiautomationclaude-codedevopsmarketplacemcp

相关推荐技能

llamaguard

其他

LlamaGuard是Meta推出的7-8B参数内容审核模型,专门用于过滤LLM的输入和输出内容。它能检测六大安全风险类别(暴力/仇恨、性内容、武器、违禁品、自残、犯罪计划),准确率达94-95%。开发者可通过HuggingFace、vLLM或Sagemaker快速部署,并能与NeMo Guardrails集成实现自动化安全防护。

查看技能

sglang

SGLang是一个专为LLM设计的高性能推理框架,特别适用于需要结构化输出的场景。它通过RadixAttention前缀缓存技术,在处理JSON、正则表达式、工具调用等具有重复前缀的复杂工作流时,能实现极速生成。如果你正在构建智能体或多轮对话系统,并追求远超vLLM的推理性能,SGLang是理想选择。

查看技能

evaluating-llms-harness

测试

该Skill通过60+个学术基准测试(如MMLU、GSM8K等)评估大语言模型质量,适用于模型对比、学术研究及训练进度追踪。它支持HuggingFace、vLLM和API接口,被EleutherAI等行业领先机构广泛采用。开发者可通过简单命令行快速对模型进行多任务批量评估。

查看技能

langchain

LangChain是一个用于构建LLM应用程序的框架,支持智能体、链和RAG应用开发。它提供多模型提供商支持、500+工具集成、记忆管理和向量检索等核心功能。开发者可用它快速构建聊天机器人、问答系统和自主代理,适用于从原型验证到生产部署的全流程。

查看技能