Eine Skill. Eine ganz neue Möglichkeit. Finden Sie Ihren nächsten Workflow.
soc2-evidence-helper
Maps engineering controls to SOC 2 Trust Service Criteria, builds a continuous evidence-collection plan with cadences per control family, and produces the control-to-evidence table auditors work from. Use when someone asks "what evidence do we need for SOC 2", "map our controls to the Trust Service Criteria", "how do we prepare for Type II fieldwork", "the …
claude-agent-sdk
Build autonomous AI agents with Claude Agent SDK. Structured outputs (v0.1.45, Nov 2025) guarantee JSON schema validation, plugins system, hooks for event-driven workflows. Use when: building coding agents with validated JSON responses, SRE systems, security auditors, or troubleshooting CLI not found, structured output validation, session forking errors.
medical-chart-review
Expert-level review and analysis of medical charts, EMRs, and EHRs by clinicians, coders, and CDI/quality auditors. Use when asked to "review a chart", "chart review", "chart abstraction", "clinical documentation review", "audit medical records", "extract from EHR", "summarize patient history", "check documentation", "validate ICD-10/HCC/CPT coding", "DRG v…
performing-hash-cracking-with-hashcat
Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
accessibility-agents
Twenty-five specialist accessibility agents enforcing WCAG 2.2 AA compliance: nine web code specialists, six document accessibility specialists (Office/PDF), and markdown auditors. Each agent focuses on a specific accessibility domain.
agent-teams-simplify-and-harden
Implementation + audit loop using parallel agent teams with structured simplify, harden, and document passes. Spawns implementation agents to do the work, then audit agents to find complexity, security gaps, and spec deviations, then loops until code compiles cleanly, all tests pass, and auditors find zero issues or the loop cap is reached. Use when: implem…
claude-agent-sdk
Build autonomous AI agents with Claude Agent SDK. Structured outputs guarantee JSON schema validation, with plugins system and hooks for event-driven workflows. Prevents 14 documented errors. Use when: building coding agents, SRE systems, security auditors, or troubleshooting CLI not found, structured output validation, session forking errors, MCP config i…
claude-agent-sdk
Build autonomous AI agents with Claude Agent SDK. Structured outputs guarantee JSON schema validation, with plugins system and hooks for event-driven workflows. Prevents 14 documented errors. Use when: building coding agents, SRE systems, security auditors, or troubleshooting CLI not found, structured output validation, session forking errors, MCP config i…
comfort-letter-from-auditors
Drafts PCAOB AS 6101-compliant auditor comfort letters (cold comfort letters) providing negative assurance on unaudited financial information for underwriters in U.S. securities offerings. Use when drafting comfort letters for underwriting agreements, capital markets closings, IPOs, secondary offerings, or any securities transaction requiring auditor negati…
comfort-letter-from-auditors
Drafts PCAOB AS 6101-compliant auditor comfort letters (cold comfort letters) providing negative assurance on unaudited financial information for underwriters in U.S. securities offerings. Use when drafting comfort letters for underwriting agreements, capital markets closings, IPOs, secondary offerings, or any securities transaction requiring auditor negati…
detecting-ssl-cert-issues
Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards. Use when: TLS handshake already passes (skill #1 analyzing-tls-config cleared) but you suspect the cert posture is fragile. Auditors flag this during SOC2 readiness when a r…
detecting-ssl-cert-issues
Audit a target's TLS certificate beyond protocol/expiry — chain ordering, OCSP stapling, revocation status, Certificate Transparency presence, key-usage flags, and over-broad wildcards. Use when: TLS handshake already passes (skill #1 analyzing-tls-config cleared) but you suspect the cert posture is fragile. Auditors flag this during SOC2 readiness when a r…
grc-raci-diagram
Use when creating a draw.io diagram for responsibility assignments across GRC, security, engineering, legal, HR, procurement, vendors, and auditors in a GRC, security, audit, compliance, privacy, cloud, or risk context.
integrity-forensics
Run the Anti-Autoresearch integrity-forensics sweep (span-anchored evidence ledger → GPT auditors propose findings → a rules-only reporter that lists every proposal with what the auditor said about it) against a paper via a SHA-pinned thin launcher — then convert the verdict into a typed policy gate (BLOCK/WARN/NO_NEW_BLOCKER) and an append-only obligations…
performing-hash-cracking-with-hashcat
Hash cracking is an essential skill for penetration testers and security auditors to evaluate password strength. Hashcat is the world's fastest password recovery tool, supporting over 300 hash types w
sox-itgc
Expert SOX IT General Controls (ITGC) advisor for finance, internal audit and IT compliance teams. Covers the four ITGC domains external auditors test for SOX 404 — access to programs and data, program changes, computer operations, and program development — plus scoping in-scope systems from the financial statements, designing risk-and-control matrices (RCM…
An independently imported catalog with original authors, licenses and source links. Classification is not a security audit.
Sources and import coverage