This is a comprehensive security review assistant that walks you through code audits, compliance checks, and vulnerability assessments across multiple frameworks like SOC 2, GDPR, and HIPAA. It comes loaded with side-by-side examples of vulnerable versus secure code patterns for authentication, SQL injection, authorization, and XSS, making it genuinely useful for both finding issues and understanding how to fix them. The skill covers the full audit lifecycle from scoping through remediation tracking, and it can use git, grep, and find commands to actually examine your codebase. It's built for teams that need to prepare for compliance audits or security reviews and want specific, actionable guidance rather than generic security advice.

skills.sh installs
186
GitHub stars
44
last updated
Aug 21, 2026

Install

$ npx -y skills add personamanagmentlayer/pcl --skill audit-expert --agent claude-code

Installs into .claude/skills of the current project.

Files

Audit Expert

Expert guidance for security auditing, compliance assessments, code reviews, vulnerability assessments, and regulatory compliance (SOC 2, GDPR, HIPAA, PCI-DSS).

Core Concepts

Audit Types

  • Security Audit: Vulnerability assessment, penetration testing
  • Code Audit: Code review, static analysis, security patterns
  • Compliance Audit: SOC 2, GDPR, HIPAA, PCI-DSS, ISO 27001
  • Infrastructure Audit: Configuration review, access control
  • Process Audit: SDLC, change management, incident response

Audit Frameworks

  • OWASP ASVS (Application Security Verification Standard)
  • NIST Cybersecurity Framework
  • CIS Controls
  • ISO 27001/27002
  • SOC 2 Trust Service Criteria

Audit Process

  1. Planning and scoping
  2. Information gathering
  3. Vulnerability identification
  4. Risk assessment
  5. Reporting
  6. Remediation tracking
  7. Follow-up verification

Audit Reporting

Security Audit Report Template

class SecurityAuditReport {
  constructor() {
    this.findings = [];
    this.summary = {
      critical: 0,
      high: 0,
      medium: 0,
      low: 0,
      info: 0,
    };
  }

Sponsors

Details

Repository
github.com/personamanagmentlayer/pcl
Categories
Security, Git & Pull Requests, Code Review & Quality
First seen
Jun 3, 2026

More from personamanagmentlayer/pcl

All 99

Recommended

More Security
1davepoon avatarauth-patternsdavepoon/buildwithclaudeThis skill should be used when the user asks about "authentication in Next.js", "NextAuth", "Auth.js", "middleware auth", "protected routes", "session managemen182skills.sh installs
2charleswiltgen avataraxiom-file-protection-refcharleswiltgen/axiomUse when asking about 'FileProtectionType', 'file encryption iOS', 'NSFileProtection', 'data protection', 'secure file storage', 'encrypt files at rest', 'compl177skills.sh installs
3personamanagmentlayer avatarcodeql-expertpersonamanagmentlayer/pclExpert-level CodeQL for static analysis, vulnerability detection, and security code scanning172skills.sh installs
4dbjpanda avatarconvex-authzdbjpanda/convex-tenantsAdd production-ready authorization (RBAC, ABAC, ReBAC) to Convex apps with O(1) permission checks. Use when implementing roles, permissions, access control, mul170skills.sh installs
5win4r avataropenclawwin4r/openclaw-skillComprehensive guide for installing, configuring, operating, and troubleshooting OpenClaw — a self-hosted, multi-channel AI agent gateway. Use when the user asks149skills.sh installs
6samhvw8 avatarinfra-engineersamhvw8/dotfilesComprehensive infrastructure engineering covering DevOps, cloud platforms, FinOps, and DevSecOps. Platforms: AWS (EC2, Lambda, S3, ECS, EKS, RDS, CloudFormation139skills.sh installs