system-categorization-first-pass
From the author
Use this skill when a system enters the Risk Management Framework, or its categorization is missing, inherited from another system or out of date, and someone asks "categorize the system", "what is our impact level", "is this system moderate or high", "draft the security categorization", "list our information types", "define the authorization boundary" or "the categorization was never approved". Drafts the system description and boundary, the information types with provisional confidentiality, integrity and availability impact levels and the reason for each, the high-water mark, and the decisions the system owner and the authorizing official still have to make, for a named official to approve.
Install
npx skills add better-isms/grcskills --skill system-categorization-first-pass -a claude-code
Installs to .claude/skills/system-categorization-first-pass/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
No warnings.
Why 82
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- risk-register-first-passbetter-isms/grcskillsUse this skill when a team needs its first information security risk register, or has one that is a copied catalogue nobody owns, and asks "build our risk register", "draft a risk assessment", "what are our top risks", "risk register from scratch", "our auditor wants a risk assessment" or "turn our incidents and findings into risks". Drafts 20 to 40 company-specific risk scenarios from the material the agent can reach, scores them against an agreed method, proposes owners and treatments, and writes a CSV register plus a notes file of assumptions and questions for owners.Security★ 53
- risk-method-draftingbetter-isms/grcskillsUse this skill when a company needs a written risk assessment method before it builds or rescores a register, or when the current method produces registers where everything scores 3. Triggers: "write our risk methodology", "define likelihood and impact scales", "what is our risk appetite", "risk acceptance criteria", "who can accept a risk", "our auditor says the method is not repeatable", "risk matrix for our ISMS". Drafts a short method with likelihood and impact anchors in the company's own money, hours and records, a scoring rule, an acceptance threshold with an authority ladder, reassessment triggers, and a calibration test on five sample risks.Testing★ 53
- quality-risk-analysisnaodeng/awesome-qa-skillsUse this skill when you need to identify and prioritize quality risks from product, change, and evidence inputs; triggers include quality risk analysis.Other★ 285
- requirements-analysisnaodeng/awesome-qa-skillsUse this skill when you need to analyze requirements, identify test points, boundaries, dependencies, and risks before test design; triggers include requirements analysis and test point analysis.Planning★ 285
- ai-securityborghei/Claude-SkillsThis skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security posture", "detect data poisoning risks", or "audit AI/ML pipeline security".Security★ 999
- ml-decision-boundary-assessmentzero-lab-ai/skillsEvaluates classifiers and scoring models used as security gates for adversarial robustness, preprocessing differences, thresholds, abstention, and fallback behavior. Use when an authorized assessment must measure whether bounded input changes alter a security decision.Security★ 283
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in