compliance-awareness

仓库创建 2026年7月1日最近提交 23 天前SkillHot 收录 22 天前

▸ 精选理由

适合受监管环境的代码生成与审计追溯。

这个 Skill 做什么

将生成的代码与 OWASP/CWE/SANS Top 25 对照并打标签以便审计追溯。

把生成或改动的代码与 OWASP、CWE、SANS Top 25 做映射并打标签，方便审计回溯和合规证明。适用于处理 PII/PHI/PCI 范围的代码、写审计注释或跨合规边界重构时。优点是把合规点直接映射到代码，便于后续人工复核和报告。

▸ 展开 SKILL.md 英文原文

Map generated code against OWASP, CWE, and SANS Top 25 controls for traceability — Applies to: when generating code in regulated environments; when writing audit-relevant comments or documentation; when refactoring code that crosses compliance boundaries (PII, PHI, PCI scope)

开发编程合规漏洞映射审计追踪通用

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/ShieldNet-360/secure-vibe/main/dist/agent-skills/.agents/skills/compliance-awareness/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/ShieldNet-360/secure-vibe/main/dist/agent-skills/.agents/skills/compliance-awareness/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

<!-- Native skill bundle for agent-skills (cross-tool convention). Generated by `secure-vibe dev regenerate`. -->
<!-- Do not edit by hand; the source of truth is skills/compliance-awareness/SKILL.md. -->

# Compliance Awareness

Map generated code against OWASP, CWE, and SANS Top 25 controls for traceability

## ALWAYS

- Tag functions that handle PII / PHI / PCI data with a comment indicating the classification (e.g. `// classification: PII`).
- Log audit events for security-relevant actions (login, permission change, data export, admin operations) — log who, what, when, NOT the sensitive payload.
- Identify the CWE / OWASP category for security-relevant code in comments when the team's co

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有