1
    Security Audit & Compliance Toolkit

    Security Audit & Compliance Toolkit

    by Arnstein Larsen

    A professional-grade toolkit for SAST code reviews, PII scanning, and automated compliance gap analysis.

    Updated Jun 2026
    Security scanned
    Optimized for Claude Code

    $12.99

    · or 65 credits

    30-day refund guarantee

    Secure checkout via Stripe

    Included in download

    • Identify OWASP Top 10 vulnerabilities like SQL injection and broken auth.
    • Scan repositories for hardcoded secrets, API keys, and private tokens.
    • terminal automation included
    • Ready for Optimized for Claude Code
    • Instant install

    Sample input

    Perform a security audit on my Node/Express API. I'm worried about OWASP vulnerabilities and hardcoded secrets in my git history. I also need to be GDPR compliant for EU users.

    Sample output

    Security Audit Results: Node/Express API

    Severity: Critical

    • Finding: Hardcoded AWS Access Key in config/db.js:14.
    • Finding: SQL Injection vulnerability in GET /users/:id via string concatenation.
    • GDPR Gap: Missing 'Right to Erasure' endpoint for PII deletion.

    Action: Rotate AWS keys immediately and use parameterized queries.

    About This Skill

    A systematic security pass trained on OWASP Top 10, STRIDE threat modelling, CWE patterns, and compliance frameworks including SOC2, ISO 27001, GDPR and HIPAA. Point it at code, architecture diagrams, or infrastructure configs and it returns a ranked finding list with severity, exploitability, and a remediation playbook. Goes deeper than a linter: reasons about data flow, trust boundaries, and attacker motivations. Used for pre-launch audits, compliance gap assessments, and pre-pentest preparation. Specify your stack and compliance target — it returns a prioritised action list your engineering team can actually work from.

    Use Cases

    • Identify OWASP Top 10 vulnerabilities like SQL injection and broken auth.
    • Scan repositories for hardcoded secrets, API keys, and private tokens.
    • Perform technical gap analysis for GDPR, SOC2, and HIPAA standards.
    • Audit project dependencies for known vulnerabilities and license risks.
    • Verify cloud infrastructure security against least-privilege benchmarks.

    Reviews

    No reviews yet - be the first to share your experience.

    Only users who have downloaded or purchased this skill can leave a review.

    Security Scanned

    Passed automated security review

    Permissions

    Terminal / Shell

    File Scopes

    security-audit-compliance-toolkit/**

    Optimized for Claude Code, Cursor, Windsurf, and related AI coding assistants.

    Frequently Asked Questions

    More Premium Skills

    $13