๐Ÿ›ก๏ธ
DevOpsShell

Security & Compliance

by sangrokjung

Security & Compliance is a DevOps skill for Claude Code, published by sangrokjung in claude-forge.

806 stars175 forkson sangrokjung/claude-forgeAdded 2026/08/22Repository updated 2026/08/21
agentsai-assistantai-codingai-frameworkai-pair-programminganthropicautomationclaude-codeclaude-code-agentscli-toolsdeveloper-experiencedeveloper-toolsdotfileshooksllmmacosproductivityshellslash-commandsworkflow
Install in seconds
Install Security & Compliance
Copy Security & Compliance into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/sangrokjung/claude-forge/tree/main/skills/security-compliance ~/.claude/skills/security-compliance

Requires Node.js. Downloads this skill only โ€” not the rest of the repository โ€” into your Claude Code skills folder.

Without Node.js

git clone https://github.com/sangrokjung/claude-forge.git

Clones the whole repository, then copy the skillโ€™s own directory into your skills folder yourself.

In this catalog

Source file
skills/security-compliance/SKILL.md in sangrokjung/claude-forge
Installs to
~/.claude/skills/security-compliance
Collection
One of 25 skills cataloged from this repository
Category
DevOps โ€” 798 skills

What Security & Compliance does

Security & Compliance guides security planning, threat modeling, incident response, and audit preparation for frameworks like SOC2, ISO27001, GDPR, and HIPAA. Use it to design, harden, monitor, and improve secure systems throughout the SDLC.

Security & Compliance is cataloged under DevOps on DirSkills. Security & Compliance comes from a repository tagged agents, ai-assistant, ai-coding, ai-framework and ai-pair-programming.

Documentation

README

Security & Compliance Expert

Core Principles

1. Defense in Depth

Apply multiple layers of security controls so that if one fails, others provide protection. Never rely on a single security mechanism.

2. Zero Trust Architecture

Never trust, always verify. Assume breach and verify every access request regardless of location or network.

3. Least Privilege

Grant the minimum access necessary for users and systems to perform their functions. Regularly review and revoke unused permissions.

4. Security by Design

Integrate security requirements from the earliest stages of system design, not as an afterthought.

5. Continuous Monitoring

Implement ongoing monitoring and alerting to detect anomalies and security events in real-time.

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Security & Compliance

  • What else does sangrokjung publish alongside Security & Compliance?

    Security & Compliance is one of 25 skills that DirSkills catalogs from sangrokjung/claude-forge, the repository it ships in. Its siblings there include BigCode Evaluation Harness, Blind Spot Pass and Build System. Each one is a separate skill with its own page in this directory, installs the same way Security & Compliance does, and is maintained by sangrokjung in that same repository. The rest of the collection is listed on the sangrokjung/claude-forge page.

  • How does Security & Compliance compare to other DevOps skills?

    Security & Compliance ranks #536 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Security & Compliance against them. Open each page to compare what they document and how they install.

More from sangrokjung/claude-forge

Security & Compliance is one of 25 skills cataloged on DirSkills from sangrokjung/claude-forge.

See all 25 skills โ†’
๐Ÿงช
1w ago

BigCode Evaluation Harness

BigCode Evaluation Harness evaluates code generation models on HumanEval, MBPP, MultiPL-E, and other benchmarks with pass@k metrics. Use it to compare coding ability, multi-language support, or overall code generation quality.
Quality
806175
๐Ÿงญ
1w ago

Blind Spot Pass

Blind Spot Pass surfaces the unknown unknowns in a domain before you start work, so you can prompt and decide with enough context. Use it when you are new to a field or handing off unfamiliar work and need a brief briefing first.
AI Engineering
806175
๐Ÿ› ๏ธ
1w ago

Build System

Build System detects a project's build tool and runs the right build or test command. Use it when setting up, building, or testing projects with npm, Python, Gradle, Maven, Cargo, Go, or Make.
DevOps
806175
๐Ÿงฉ
1w ago

Cache Components

Cache Components gives guidance for Next.js Cache Components and Partial Prerendering. Use it when `cacheComponents: true` is enabled to decide what to cache, stream, tag, and invalidate in Server Components.
Frontend
806175
๐Ÿค–
1w ago

Claude Code Agent

Claude Code Agent guides Claude Code projects with spec-first planning, context engineering, sub-agents, and post-dev verification. Use it when writing CLAUDE.md or spec.md, dispatching parallel agent work, or running the handoff and docs sync workflow.
AI Engineering
806175
๐Ÿง 
1w ago

Continuous Learning V2

Continuous Learning V2 turns Claude Code sessions into atomic instincts using hooks, confidence scoring, and background pattern detection. Use it to capture repeated behaviors and evolve them into skills, commands, or agents.
AI Engineering
806175