Senior Secops

This is a comprehensive SecOps toolkit that scans code for hardcoded secrets, SQL injection, and XSS vulnerabilities, checks dependencies against CVE databases across npm, Python, and Go ecosystems, and verifies compliance with SOC 2, PCI-DSS, HIPAA, and GDPR. You'd reach for this when setting up CI/CD security gates, responding to new CVEs, or preparing for compliance audits. The three Python scripts cover the fundamentals well, and the incident response workflow is practical. The compliance checker is more of a starting point than a comprehensive audit tool, but it catches the obvious gaps. Exit codes are sensible for pipeline integration, and the JSON output makes it easy to pipe results into other systems.

skills.sh installs: 133
GitHub stars: 1.1K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add borghei/claude-skills --skill senior-secops --agent claude-code

Installs into .claude/skills of the current project.

Files

Senior SecOps Engineer

The agent scans source code for common vulnerability patterns (hardcoded secrets, SQL injection, XSS, command injection), checks dependency pins against a small built-in advisory list for npm/Python/Go, and collects code-level evidence for SOC 2, PCI-DSS, HIPAA and GDPR controls.

All three tools are regex and lookup based. They catch obvious, local patterns and miss anything that flows through helpers, variables or runtime config, and the advisory list is a sample, not a CVE feed. Use them as a fast first pass and CI tripwire; confirm with a real SAST tool (Semgrep, CodeQL) and a live advisory source (pip-audit, npm audit, OSV) before calling a codebase clean.