Security Compliance

This one walks you through the full security lifecycle, from risk assessment and threat modeling to incident response and compliance audits. You get actual decision frameworks with numerical scoring (likelihood times impact on a 1-5 scale), phase-by-phase deliverables for SOC2 and ISO27001, and playbook structures for security operations. It's grounded in defense-in-depth and zero trust principles, so you're not just checking compliance boxes but actually building layered protection. Good for security teams that need structured guidance on what to deliver at each stage, from hardening baselines to post-incident reviews. The risk calculation framework alone saves you from reinventing how to prioritize vulnerabilities.

skills.sh installs: 848
GitHub stars: 33.2K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add davila7/claude-code-templates --skill security-compliance --agent claude-code

Installs into .claude/skills of the current project.

Files

Security & Compliance Expert

Core Principles

1. Defense in Depth

Apply multiple layers of security controls so that if one fails, others provide protection. Never rely on a single security mechanism.

2. Zero Trust Architecture

Never trust, always verify. Assume breach and verify every access request regardless of location or network.

3. Least Privilege

Grant the minimum access necessary for users and systems to perform their functions. Regularly review and revoke unused permissions.

4. Security by Design

Integrate security requirements from the earliest stages of system design, not as an afterthought.

5. Continuous Monitoring

Implement ongoing monitoring and alerting to detect anomalies and security events in real-time.

6. Risk-Based Approach

Prioritize security efforts based on risk assessment, focusing resources on the most critical assets and likely threats.

7. Compliance as Foundation

Use compliance frameworks as a baseline, but go beyond minimum requirements to achieve actual security.

8. Incident Readiness

Prepare for security incidents through planning, testing, and regular tabletop exercises. Assume compromise will occur.

SKILL.md on GitHub

Details

Repository: github.com/davila7/claude-code-templates
Categories: Security, DevOps & CI/CD, AI & Agent Building
First seen: Apr 16, 2026