soc2-compliance
Implement SOC 2 Trust Services Criteria.
What this skill does for you
Implement SOC 2 Trust Services Criteria. Configure security, availability, and processing integrity controls. Use when achieving SOC 2 certification.
Quoted from the skill description in the pinned sourceWho made it
Use it with Edge
Set up Edge for me: read getedge.cc/SKILL.md and follow it. Then use Edge to load the soc2-compliance skill from bagelhole/devops-security-agent-skills.
Paste it into Claude, ChatGPT, Codex or Cursor.
Or read the skill source first.
Security evidence
| Scanner | Date | Result | Findings |
|---|---|---|---|
| Edge static checks | 2026-09-27 | Pass | 0 |
| Cisco skill-scanner | 2026-09-27 | Pass | 0 |
| Semgrep Edge rules | 2026-09-27 | Pass | 0 |
Static scans check the code, not how well the skill works.
Scanner scope, raw findings and mirrored provider records
Edge static checks (Edge-run): edge-static/1.0.1. Scope: Static patterns for remote execution, credentials with network sends, obfuscation, prompt overrides, hidden Unicode, binaries and persistence. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: . Counted findings: .
Cisco skill-scanner (Edge-run): cisco-skill-scanner/2.1.0. Scope: Local static, YARA, pipeline and behavioral analyzers; no LLM or AI Defense analysis. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: . Counted findings: .
Semgrep Edge rules (Edge-run): semgrep/1.178.0+edge-rules.c15016a36fd3+offline-v1. Scope: Six Edge-authored static rules with Semgrep CE; offline execution and metrics disabled. Semgrep-maintained rules excluded. Revision: 0365f57a079b1332f95cf26e31dd2d5332a8399f. Raw findings: . Counted findings: .
Source and licence
- Repository
- https://github.com/bagelhole/devops-security-agent-skills
- Pinned skill file
- View source at revision
- Revision
- 0365f57a079b1332f95cf26e31dd2d5332a8399f
- Package hash
- sha256:ba67b07e1203b6f6c09417762cb45bfdd27466482992410ae4687f289a9b488a
- Licence
- MIT