Skip to content
Get packs

CISO Security Review

Interrogates a plan touching customer data or compliance with six CISO-style security questions and a verdict

Source Download skill
Repository
alirezarezvani/claude-skills
Stars
29,149
Licence
MIT
Files
1 file

What it does

When you ask the agent to review a plan, it walks through six security questions: likely threats (STRIDE), how much data could be exposed, how quickly a breach would be detected, whether there is a response runbook, which regulator notification deadlines apply, and whether third-party vendors are covered. It then produces a formatted report with a SHIP, MITIGATE, or BLOCK verdict. It is meant for plans involving personal, health or payment data, or before an audit.

Great for

  • Engineering or product leads preparing a feature that handles customer personal, health or payment data
  • Teams preparing for a SOC 2, ISO 27001, HIPAA or GDPR audit who want a structured pre-check
  • Small companies without a dedicated security team who want a checklist-style risk review after an incident or near-miss

Skip it if

  • Replacing a qualified security professional or formal audit, since the output is generated by an AI and the skill's own content points to numeric estimates (such as dollar figures) that are not validated against your data
  • Low-risk projects with no customer data or production access, where the questions add little value
  • Situations needing the referenced helper scripts to produce accurate numbers unless you have reviewed them, because the skill runs external Python scripts whose contents are not included in the reviewed file

Try asking

  • “/c-level-agents:ciso-review Launch a new patient intake form that stores medical history in our database”
  • “/c-level-agents:ciso-review Sign a payments vendor that will receive cardholder data via API”
  • “/c-level-agents:ciso-review Prepare our architecture for the upcoming SOC 2 audit”
  • “/c-level-agents:ciso-review Review our plan to give support staff production database access after last week's near-miss”
Step-by-step guide: how to use CISO Security ReviewInstall, first run, examples, tips and FAQs

Install in 3 steps

  1. 1

    Download the skill

    The ZIP contains the 1 original files, the MIT licence and an attribution note.

    ciso-review.zip
  2. 2

    Add it to your agent

    Claude Code (all projects)

    mkdir -p ~/.claude/skills && unzip ciso-review.zip -d ~/.claude/skills/

    Claude Code / Agent SDK (this project only)

    mkdir -p .claude/skills && unzip ciso-review.zip -d .claude/skills/

    Claude apps (web/desktop): Settings → Capabilities → Skills → Upload skill, and choose the ZIP.

  3. 3

    Ask for the task

    No special command needed — the agent reads the skill's description and loads it when your request matches. Try one of the prompts above.

Get better results

  • Describe the plan concretely: what data it touches, who has access, which vendors are involved, and which regulations apply
  • Review the scripts in the vendor folder before running the workflow, since they execute on your machine
  • Treat the verdict and dollar estimates as a starting discussion for human security and legal review, not a final sign-off

What's inside

  • SKILL.md

Redistributed unmodified from alirezarezvani/claude-skills under the MIT licence. The assessment was drafted with AI from the skill's files on 2026-10-29. Skills can instruct your agent to run code — read SKILL.md and any scripts before installing.