Explore
MCP servers and skills: search, filter by where they run, and compare.
MCP servers and skills: search, filter by where they run, and compare.
An AI operating system for GRC practitioners, built on Claude Code. Clone it and run your compliance programme across ISO 27001, SOC 2, Cyber Essentials, GDPR and ISO 42001.
SkillMITFew starsNo key
Expert cybersecurity skill for Claude — OWASP, NIST CSF, ISO 27001, CIS Controls, LLM Security
SkillMIT★ 1Few starsNo key
EU compliance enforcement for AI agents. Org-profile-driven guardrails for NIS2, GDPR & ISO 27001 — blocks secrets, flags critical asset impact, enforces data residency, verifies suppliers, tracks inc
SkillGPL-3.0★ 13No key
Guide GRC teams with Claude Skills for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, TSA, and ISO 42001
SkillMIT★ 5No key
Engineering checklists for B2B SaaS penetration testing readiness: SOC 2, ISO 27001, DORA, AI Agent Security (LLM/RAG/MCP), Web/API & Cloud Infrastructure. Maintained by Sayfer Security Research.
SkillMITFew starsNo key
ISMS Copilot GRC expert skill for Claude Code — /heygrc
SkillMIT★ 4Few starsNo key
Open-source agent skills, agents, and reference connectors for compliance engineers. SOC 2, ISO 27001, NIST 800-53.
SkillMIT★ 5No key
Open-source replacement-grade GRC platform — architecture ideation canvas
SkillApache-2.0★ 4Few starsNo key
Competitive intelligence skill for Claude Code — tears through websites, tech stacks, APIs, communities, and infrastructure across 5 phases of deep reconnaissance
SkillGPL-3.0★ 6No key
GRC compliance review for your pull requests, as a Claude Code plugin. ISO 27001, SOC 2, GDPR, EU AI Act. Public repos free. By Better ISMS.
SkillMITFew starsNo key
Free Claude Code skills for cloud architecture diagrams and security advisory
SkillMITFew starsNo key
30 Agent Skills for deterministic USA compliance auditing of AI agents — HIPAA, NIST AI RMF, FERPA, COPPA, PCI-DSS, SOC 2, FedRAMP, CMMC, GLBA, privacy & GDPR. Presidio PHI redaction, MCP templates, P
SkillMIT★ 4Few starsNo key
Compliance trust shouldn't require emailing PDFs and hoping nobody tampered with them. Corsair signs compliance findings as verifiable digital certificates that anyone can check with a standard JWT li
SkillApache-2.0★ 15No key
Claude Cowork plugin for end-to-end IT vendor software provisioning: assessment, contracts, onboarding, licenses, compliance, reporting, audit, and exit management.
SkillApache-2.0★ 3Few starsNo key
A Claude Skill that turns an uploaded architecture diagram into a security architecture review — mapped against PCI DSS, ISO 27001, NIST CSF/800-207, CIS Controls, CSA CCM, OWASP ASVS/API Top 10, STRI
SkillMITFew starsNo key
Free, portable AI-agent skills that write compliant code (audit logging, access control, encryption) mapped to SOC 2, ISO 27001, PCI-DSS & HIPAA at once. Works in Claude Code, Cursor, Copilot, Gemini
SkillApache-2.0Few starsNo key
A Claude Code skill that generates user management and authentication security health reports from Tenable
SkillMIT★ 4Few starsNo key
Evidence-based security posture advisor for Claude, ChatGPT, Gemini and Codex. NIST CSF 2.0, ISO 27001, SLSA v1.2, OWASP Agentic Top 10.
SkillMITFew starsNo key
AI-powered cybersecurity review agents and skills for Claude Code
SkillMITFew starsNo key
🏗️ Universal 8-phase methodology for planning and building enterprise-grade, mission-critical software with AI coding agents. Supports Cursor AI, Claude Code, Kimi Code, Windsurf & Google Antigravity
SkillMIT★ 2Few starsNo key
An open source compliance auditing platform built as a minimal, domain-agnostic core with pluggable modules for identity, frameworks, risk, evidence, reporting, and other compliance capabilities.
SkillAGPL-3.0★ 4Few starsNo key
Skill /cyberseguranca para Claude Code — doutrina, threat modeling, hardening (Cloudflare/Supabase/Astro), compliance (LGPD/ISO/SOC2), supply chain, IR, IA/LLM security e orquestração multi-agente. ~2
SkillMIT★ 3Few starsNo key
Expert SOX 404 ITGC compliance guidance as a Claude Skill. PCAOB AS 2201, COSO 2013, Big Four audit methodology, plus a Build Chain of Custody pattern for modern engineering.
SkillMITFew starsNo key
Who stands behind it