Command
safety-review
Run an AI safety review for a feature/model — harms, evaluations, guardrails, and a documented safety case.
@jassicsView CommandSecurity
Command
/assessment
Run a compliance gap-assessment for a framework, tie gaps to risk, and produce findings + remediation.
Install
> /plugin marketplace add jassics/awesome-claude-securityHow it fires
How this command gets triggered: by you, by Claude, or both.
- Fires itselfClaude auto-loads it when your prompt matches the work.
- You can call itInvoke it directly when you want it.
- Slash command
/assessment
Context preview
What this command does when you run it.
Run a compliance gap-assessment for a framework, tie gaps to risk, and produce findings + remediation.
Command definition
assessment.mddescription: Run a compliance gap-assessment for a framework, tie gaps to risk, and produce findings + remediation. argument-hint: [framework + scope, e.g. "SOC 2 for the prod platform"]
Run a GRC assessment for: **$ARGUMENTS**
Walk the assessment, using installed skills (note any whose plugin is missing):
1. **Gap-assess** — `/grc:compliance-assessment` against the named framework (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), control by control. 2. **Map across frameworks** — `/security-knowledge:framework-mapping` to express each gap in CWE/NIST/CIS/ISO terms so one finding serves multiple audiences. 3. **Risk** — `/grc:risk-assessment` to rank gaps by risk and feed the register. 4. **Policy** — `/grc:policy-management` for any policy/documentation gaps the controls require. 5. **Report** — a gap report with prioritized remediation; `/security-reporting:executive-summary` for leadership; `/security-diagramming:infographic` for the posture snapshot.
For deep execution, hand off to the `grc-analyst` agent. Tie every control gap to a business risk and an owner — a gap list without risk and ownership doesn't drive action.
Ships withawesome-claude-security
A Claude Code plugin marketplace for the full cybersecurity & GenAI-security lifecycle — from recon and threat modeling to detection engineering, GRC, and CISO-level strategy. A pentester knows which OWASP test bends a broken-access-control endpoint.
Get the whole plugin
Stats
7
Stars
0
Forks
Maintained
Maintenance
Python
Language
GPL-3.0
License
1mo ago
Last commit
3mo ago
Created
Repo: jassics/awesome-claude-security
Other commands on awesome-claude-security.
@jassicsView CommandCommand
defend
Run a threat-informed defense cycle for a technique or threat — coverage check, hunt, detection, and purple-team validation.
@jassicsView CommandCommand
board-brief
Build a board/executive security brief — strategy, quantified risk, and a board-ready deck.
@jassicsView CommandCommand
tech-review
Assess technology/security risk for a strategic decision and frame the secure-by-design path.
@jassicsView CommandCommand
precommit
Run the pre-commit security gate on the current changeset and report a single pass/fail verdict.
@jassicsView CommandCommand
engagement
Run an authorized penetration test end-to-end, chaining recon, testing, and reporting skills into one flow.
@jassicsView Command