rico2035

rico2035/security-skills

Plugin Claude Code

Plugin marketplace listing 1 plugin: security-audit.

rico2035/security-skills

Plugin Claude Code

Security and compliance audit toolkit for any codebase: HIPAA, SOC 2, OWASP, PQC, FDCPA/TCPA, HITRUST.

rico2035/security-skills

Command

Run comprehensive security and compliance audits: HIPAA, SOC 2, OWASP Top 10, PQC, FDCPA/TCPA, HITRUST CSF.

rico2035/security-skills

Hook

Runs before the agent uses a tool for Edit, Write, MultiEdit and NotebookEdit tool calls, executing security_hook.py via python3. From rico2035/security-skills.

rico2035/security-skills

Skill Claude CodeCodex

Verifies audit trail completeness for security events, data access, and admin actions against HIPAA, SOC 2, and HITRUST requirements. Use when auditing logging coverage, adding services that handle sensitive data, reviewing incident response readiness, or the user mentions audit logs or compliance evidence.

rico2035/security-skills

Skill Claude CodeCodex

Verifies FDCPA, Regulation F, and TCPA compliance for debt collection and automated consumer contact. Use when reviewing dialer, SMS, or voice AI code, auditing call time windows, frequency caps, consent, or DNC handling, or the user mentions FDCPA, TCPA, Reg F, debt collection, or robocall rules.

rico2035/security-skills

Skill Claude CodeCodex

Checks HITRUST CSF implementation status across all 19 domains and reports per-domain completion. Use when preparing for a HITRUST assessment or recertification, responding to enterprise healthcare due diligence, or the user mentions HITRUST, CSF controls, or healthcare compliance posture.

rico2035/security-skills

Skill Claude CodeCodex

Scans a codebase for OWASP Top 10 (2021) vulnerabilities including injection, broken access control, and misconfiguration. Use when running a security audit, reviewing auth or user-input handling, preparing for a pentest or production deploy, or the user mentions OWASP, vulnerabilities, or a security scan.

rico2035/security-skills

Skill Claude CodeCodex

Detects PHI and PII leaks in logs, error messages, API responses, and source code for HIPAA compliance. Use when auditing logging or error handling, reviewing code that touches patient data, preparing a production deploy in a healthcare app, or the user mentions HIPAA, PHI, PII, or data leaks.

rico2035/security-skills

Skill Claude CodeCodex

Audits post-quantum cryptography against FIPS 203, 204, and 205, covering hybrid mode, key management, and deprecated algorithms. Use when a project implements ML-KEM, ML-DSA, or SLH-DSA, when planning NIST PQC migration, or the user mentions post-quantum, Kyber, Dilithium, or quantum-resistant crypto.

rico2035/security-skills

Skill Claude CodeCodex

Detects hardcoded secrets, API keys, tokens, passwords, and credentials in source code, config files, and git history. Use before commits or open-sourcing code, during security reviews and code audits, or when the user mentions leaked keys, exposed secrets, .env hygiene, or credential scanning.

rico2035/security-skills

Skill Claude CodeCodex

Verifies multi-tenant data segregation across database queries, API endpoints, caches, and background jobs. Use when adding or reviewing data access code, auditing for SOC 2 or HIPAA, or the user mentions tenant isolation, cross-tenant leaks, row-level security, or multi-tenancy.