MCP App StoreMCP App Store
from claude-skills367
Provides risk-based security strategy and compliance roadmaps (SOC 2, ISO 27001, HIPAA, GDPR), incident response playbooks, and vendor risk assessments for grow
Provides CISO-level guidance for growth-stage companies: quantifies cyber risk in business terms (ALE/SLE/ARO), sequences compliance efforts to maximize business value, designs defense-in-depth architectures, and runs incident response and vendor risk assessments. Includes templates (risk register), decision trees, and scripts for posture scoring and compliance tracking.
Use this skill when you need to justify security investments to executives, prepare for SOC 2/ISO/HIPAA compliance, build a security roadmap, run incident response, assess vendor security, or translate technical risk into board-level language. Trigger phrases include CISO, security strategy, SOC 2, ISO 27001, incident response, vendor assessment, risk quantification.
Optimized for assistant agents that can run Python scripts and produce reports (Claude Code, Cursor, Codex, Gemini CLI).
CISO Advisor provides risk quantification, compliance tracking, and security posture scoring for growth-stage companies. All three scripts ran successfully with demo data producing formatted board-ready reports. The skill covers NIST CSF 2.0, CISA Zero Trust maturity, SOC 2/ISO 27001/HIPAA/GDPR compliance, and ALE-based risk registers. No external dependencies beyond Python stdlib.
Well-structured security leadership skill with three complementary tools. Pure computation scripts with no network calls, no credentials, no destructive operations. Strong frontmatter and progressive disclosure. SKILL.md is comprehensive with decision trees, frameworks, metrics dashboards, and red flags section. Scripts lack type hints and unit tests but are clean and functional.
Founder Coach
Guided frameworks and checklists to help founders delegate, manage energy, audit calendars, detect blind spots, and plan succession to scale leadership effectiv
MLOps Engineer
Provides senior MLOps guidance: build and validate ML pipelines, deploy and monitor models in production, set up feature stores, and automate CI/CD for models.
Docker Development & Optimization
Professional auditing of Dockerfiles and Compose files for layer optimization, security hardening, and best practices.
UI Design System Toolkit
Comprehensive toolkit for generating design tokens, color palettes, typography scales, and managing developer handoff for consistent UI systems.
Product Vision Expert
Drafts durable 5-10 year product narratives using industry-standard frameworks like Pichler, Moore, and Cagan.
AWP (Agent Work Protocol)
Tooling and scripts for onboarding, staking, allocation, and managing agents on the AWP network (Base/Ethereum/Arbitrum/BSC). Includes safe, opt-in daemon and r
Reverse Engineer
Provides step-by-step guidance and best practices for binary reverse engineering: static analysis, dynamic tracing, disassembly, and documentation workflows for
Sandbox0 Integration
Guidance and templates for integrating Sandbox0 sandboxing into AI agents — CLI/SDK patterns, templates, volumes, network policy, and deployment choices.
CTF Write-up Generator
Generate a concise, reproducible submission-style CTF writeup with a one-path solution script, metadata, and a short checklist for fast verification.
GRC & Compliance (ServiceNow)
Guides Governance, Risk & Compliance (GRC) work in ServiceNow: policies, controls, risk records, audits and ES5 script examples for automating GRC workflows.
Azure External Attack Surface Management
Provides expert guidance for Azure External Attack Surface Management (EASM): quotas, configuration, integrations, and exporting inventory to analytics platform
Node.js Best Practices
Guidelines and decision-making for Node.js architecture, runtime, async patterns, security, validation, and testing to inform framework and system choices.
radar — Smart Contract AST & Security Analysis
Multi-framework AST generator and static analysis tool for smart contracts (Rust/Anchor/Stylus and Solidity/Foundry) with a template DSL for writing detection r