cis skills

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure IAM policies that allow full ":" administrative privileges are not attached.

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure AWS resource policies do not allow unrestricted access using "Principal": "".

CyberStrikeus/CyberStrike

Skill Claude CodeCodex

Ensure that RDS instances are not publicly accessible.

UnitOneAI/SecuritySkills

Skill Claude CodeCodex

Reviews AI/ML systems for data privacy and governance risks including training data privacy, PII exposure in prompts and completions, data retention policies, model memorization risks, and regulatory compliance. Auto-invoked when reviewing systems that process personal data through LLMs, train or fine-tune models on…

UnitOneAI/SecuritySkills

Skill Claude CodeCodex

Performs a structured security code review against OWASP ASVS 4.0.3 verification requirements and CWE Top 25. Auto-invoked on pull request reviews, when code touching authentication, authorization, cryptography, or input handling is shared. Produces findings mapped to ASVS controls and CWE identifiers with severity…

UnitOneAI/SecuritySkills

Skill Claude CodeCodex

Reviews DAST tool configurations against OWASP Top 10:2021 and OWASP Testing Guide v4.2. Auto-invoked when reviewing OWASP ZAP configurations, DAST CI/CD integration, scan policies, or authenticated scanning setups. Produces a DAST maturity assessment covering scan policy configuration, active vs passive scanning, API…

Jody09-dotcom/constructionx-skills

Skill Claude CodeCodex

Check a UK construction project against CDM 2015 duty-holder requirements and determine F10 notifiability. Use when the user asks about "CDM 2015", "CDM check", "F10", "notifiable project", "duty holders", or is scoping a new project and needs the CDM picture. Outputs duty-holder roles, F10 y/n with reasoning…

Jody09-dotcom/constructionx-skills

Skill Claude CodeCodex

Walk a UK contractor through Construction Industry Scheme (CIS) subcontractor verification and calculate the correct deduction. Use when the user asks about "CIS", "CIS verification", "subcontractor deduction", "CIS rate", or is paying a subbie and needs to work out tax. Covers HMRC verification steps, 0/20/30% rate…

Jody09-dotcom/constructionx-skills

Skill Claude CodeCodex

Generate a 5-minute UK construction toolbox talk from a one-line risk topic. Use when the user asks for a "toolbox talk", "safety briefing", "tbt", "weekly safety talk", or needs a short briefing to deliver to site operatives. Plain English, real site examples, one question to throw to the team, one specific "do this…