jassics

jassics/awesome-claude-security

Command

Assess technology/security risk for a strategic decision and frame the secure-by-design path.

jassics/awesome-claude-security

Skill Claude CodeCodex

Establish or assess an org-wide secure-by-design program — paved roads / golden paths with secure defaults, automated guardrails, and developer enablement — so the secure way is the default, fast way. Use for engineering-org security strategy at scale (not a single system's design).

jassics/awesome-claude-security

Skill Claude CodeCodex

Assess the security risk of a technology or product decision for leadership — new technology/vendor adoption, build-vs-buy, third-party/supply-chain, or M&A technical due diligence — and give a clear recommendation with trade-offs. Use to inform a strategic technology decision.

jassics/awesome-claude-security

Plugin Claude Code

Detection engineering: detection-as-code rule development (Sigma/YARA/KQL/SPL), ATT&CK coverage gap analysis, and hypothesis-driven threat hunting.

jassics/awesome-claude-security

Skill Claude CodeCodex

Assess detection coverage against the MITRE ATT&CK matrix: which tactics/techniques are covered, partially covered, or blind, weighted by data-source availability and threat relevance. Use to find and prioritize detection gaps for a SOC/program.

jassics/awesome-claude-security

Skill Claude CodeCodex

Develop or review a detection rule (Sigma, YARA, KQL/SPL/EQL) for a specific behavior or threat, mapped to MITRE ATT&CK, with test cases and false-positive tuning. Use when building, porting, or reviewing detections from a TTP, IOC, or incident finding.

jassics/awesome-claude-security

Skill Claude CodeCodex

Run a hypothesis-driven threat hunt: form a hypothesis (often from ATT&CK or threat intel), query telemetry for evidence, analyze findings, and convert results into detections. Use to proactively search for adversary activity that existing alerts may miss.

jassics/awesome-claude-security

Plugin Claude Code

Developer role bundle: secure-by-default coding companion for engineers (including AI-assisted/agentic coding workflows) — threat modeling, secure coding patterns, PRD/prompt security requirements, and a pre-commit security gate. Auto-installs the core secure-dev stack.

jassics/awesome-claude-security

Agent

A secure-by-default coding companion for developers and engineers — including AI-assisted/agentic ("vibe coding") workflows. Use when writing a new feature/PRD, coding day-to-day, or before committing/pushing, to fold security in proactively without needing to know which security plugin to reach for.

jassics/awesome-claude-security

Command

Run the pre-commit security gate on the current changeset and report a single pass/fail verdict.

jassics/awesome-claude-security

Skill Claude CodeCodex

Aggregate a fast, diff-scoped security check before git commit/git push — secrets/gitignore hygiene, SAST/SCA on changed files, and IaC/Claude-config checks where relevant — into a single go/no-go verdict. Use before committing or pushing, not as a full-repo audit.

jassics/awesome-claude-security

Plugin Claude Code

Digital forensics & incident response: drive the IR lifecycle (NIST 800-61 / PICERL), forensic evidence triage and timelining, and IOC development.