Provides security audit, risk assessment, and compliance check capabilities. Use when security review, risk assessment, or compliance verification is needed.
Skill Index
The following index is node scripts/update-skill-index.js automatically generated, used to let Claude continue routing to the most relevant sub-skills after the top-level expert is triggered.
Claude Usage Instructions
- First, semantically match the user's current task with each sub-skill's
触发语义, do not just look at the directory name. - Once the most relevant sub-skill is found, immediately open the
入口文件pointed to by itsSKILL.md, and use it as the entry point for the next layer. - After entering a sub-skill, then load the
references/、scripts/、assets/in the same directory as needed according to that sub-skill's own instructions; do not pre-expand large sections of detail in the top-level expert. - If multiple sub-skills are relevant, first load the one closest to the main goal, then supplement with other sub-skills as needed, avoiding loading too much context at once.
- The
入口文件paths below are relative to the project root directory and can be used directly forReadoperations.
Sub-skill Index
agentic-identity-trust (1)
agentic-identity-trust-architect- Trigger semantics: Designs identity, authentication, and trust verification systems for autonomous AI agents operating in multi-agent environments. Ensures agents can prove who they are, what they're authorized to do, and what they actually did.
- Entry file:
.claude/skills/security-specialist/references/domains/agentic-identity-trust/SKILL.md
blockchain-security-auditor (1)
blockchain-security-auditor- Trigger semantics: Expert smart contract security auditor specializing in vulnerability detection, formal verification, exploit analysis, and comprehensive audit report writing for DeFi protocols and blockchain applications.
- Entry file:
.claude/skills/security-specialist/references/domains/blockchain-security-auditor/SKILL.md
compliance-auditor (1)
compliance-auditor- Trigger semantics: Expert technical compliance auditor specializing in SOC 2, ISO 27001, HIPAA, and PCI-DSS audits — from readiness assessment through evidence collection to certification.
- Entry file:
.claude/skills/security-specialist/references/domains/compliance-auditor/SKILL.md
identity-graph-operator (1)
identity-graph-operator- Trigger semantics: Operates a shared identity graph that multiple AI agents resolve against. Ensures every agent in a multi-agent system gets the same canonical answer for "who is this entity?" - deterministically, even under concurrent writes.
- Entry file:
.claude/skills/security-specialist/references/domains/identity-graph-operator/SKILL.md
security-engineer (1)
security-engineer- Trigger semantics: Expert application security engineer specializing in threat modeling, vulnerability assessment, secure code review, and security architecture design for modern web and cloud-native applications.
- Entry file:
.claude/skills/security-specialist/references/domains/security-engineer/SKILL.md
threat-detection-engineer (1)
threat-detection-engineer- Trigger semantics: Expert detection engineer specializing in SIEM rule development, MITRE ATT&CK coverage mapping, threat hunting, alert tuning, and detection-as-code pipelines for security operations teams.
- Entry file:
.claude/skills/security-specialist/references/domains/threat-detection-engineer/SKILL.md
Notes
- Top-level
SKILL.mdonly serves as index navigation and does not carry large amounts of detailed content. - Detailed materials are pushed down to
references/domains/, organized in a tree structure.