Does it integrate with third-party security tools?

Yes, it provides configuration and implementation guidance for SAST tools like SonarQube, SCA tools like Snyk, and container scanners like Trivy.

How does it handle incident response?

It provides a structured workflow for containing threats, assessing scope, remediating vulnerabilities, and conducting post-mortem documentation.

Is this skill specific to a certain programming language?

While it features optimized patterns for Python and FastAPI, the security principles and compliance checklists apply to any backend environment.

What security frameworks does this skill support?

The skill supports the OWASP Top 10 (2025) framework, as well as regulatory compliance standards including GDPR, HIPAA, PCI-DSS, and SOC2.

Can this skill help prevent SQL injection?

Yes, it identifies vulnerable string-concatenated queries and provides secure, parameterized implementation patterns for various databases.

Security & Compliance Agent

Name: Security & Compliance Agent
Author: pluginagentmarketplace

bypluginagentmarketplace

•

安全与测试

Secures backend applications against OWASP threats and ensures regulatory compliance through automated scanning and robust authentication patterns.

This skill transforms Claude into a security-focused backend engineer, providing the specialized tools needed to build and maintain resilient server-side applications. It offers comprehensive guidance for mitigating OWASP Top 10 vulnerabilities, implementing secure JWT-based authentication, and configuring advanced security headers. Beyond code implementation, it facilitates compliance auditing for frameworks like GDPR and PCI-DSS, integrates industry-standard scanning tools like Snyk and SonarQube, and establishes structured incident response procedures for production environments.

主要功能

011 GitHub stars

02Automated vulnerability scanning and OWASP Top 10 threat mitigation

03Production-grade JWT authentication and encryption implementation

04Regulatory compliance auditing for GDPR, HIPAA, and PCI-DSS

05Integration patterns for SAST, DAST, and SCA security tools

06Secure database access patterns to prevent SQL injection and data leaks

使用场景

01Auditing an existing FastAPI or backend codebase for security vulnerabilities

02Implementing a secure authentication system with password hashing and MFA

03Preparing an application for a compliance audit with automated checklists and hardening

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add pluginagentmarketplace/custom-plugin-backend security

For use in Claude.ai and ChatGPT

Download Skill