12 tagged cis-benchmark, measured the same way as everything else here.
Browse within: compliance 5
Cholulaa/claude-code-hardening-skill
Skill Claude CodeCodex
Complete security hardening of a Linux server based on CIS Benchmarks, NIST 800-123, and ANSSI BP-028. Smart service discovery to avoid disruption. 4 hardening levels (minimal/standard/enhanced/paranoid). Installs open-source security tools, hardens SSH/kernel/firewall/systemd/permissions, runs all scans, generates a…
Skill Claude CodeCodex
Part of vmware-harden
A VMware environment compliance and baseline scanner for vSphere, ESXi, and NSX. It checks these systems against security standards such as CIS, PCI-DSS, and EU NIS2.
Skill Claude CodeCodex
Authors, reviews, and hardens GitHub Actions workflows, reusable workflows, and composite actions with least-privilege GITHUBTOKEN permissions, action references pinned by commit SHA to the latest published release, injection-safe handling of untrusted event data, safe trigger and runner choices, and a structure that…
Skill Claude CodeCodex
Authors and modifies Python source code with security best practices that static analysis alone does not fully cover, including input handling, deserialization, secrets, subprocess/SQL/crypto usage, SSRF, and dependency hygiene, layered on the ruff/ty quality gate. Use when writing or editing Python, and especially…
Skill Claude CodeCodex
Adds or updates pytest coverage for a Python change by first discovering the repository's existing test layout and conventions, matching them rather than imposing a new structure, deciding whether the change requires a test at all, and running the suite in a bounded verify loop. Use when a Python change adds behavior…