system-categorization-first-pass
De la autor
Use this skill when a system enters the Risk Management Framework, or its categorization is missing, inherited from another system or out of date, and someone asks "categorize the system", "what is our impact level", "is this system moderate or high", "draft the security categorization", "list our information types", "define the authorization boundary" or "the categorization was never approved". Drafts the system description and boundary, the information types with provisional confidentiality, integrity and availability impact levels and the reason for each, the high-water mark, and the decisions the system owner and the authorizing official still have to make, for a named official to approve.
Instalare
npx skills add better-isms/grcskills --skill system-categorization-first-pass -a claude-code
Se instalează în .claude/skills/system-categorization-first-pass/ · Fiecare comandă descarcă skill-ul direct de pe GitHub cu utilitarul open source skills.
Identic octet cu octet cu commit-ul scanat, cu licența depozitului și un fișier SOURCE.txt.
Vrei ca agentul să-ți propună skill-uri în timp ce scrii? Vezi cum folosești skill-urile din IDE.
Verificări de siguranță pe SKILL.md
Niciun avertisment.
De ce 82
aiqbench calculează scorul de încredere din semnale publice. Nu este un audit de securitate, așa că citește un skill înainte să-l instalezi.
Skill-uri similare
Cele mai apropiate de acesta prin ce fac și când sunt folosite.
- risk-register-first-passbetter-isms/grcskillsUse this skill when a team needs its first information security risk register, or has one that is a copied catalogue nobody owns, and asks "build our risk register", "draft a risk assessment", "what are our top risks", "risk register from scratch", "our auditor wants a risk assessment" or "turn our incidents and findings into risks". Drafts 20 to 40 company-specific risk scenarios from the material the agent can reach, scores them against an agreed method, proposes owners and treatments, and writes a CSV register plus a notes file of assumptions and questions for owners.Securitate★ 53
- risk-method-draftingbetter-isms/grcskillsUse this skill when a company needs a written risk assessment method before it builds or rescores a register, or when the current method produces registers where everything scores 3. Triggers: "write our risk methodology", "define likelihood and impact scales", "what is our risk appetite", "risk acceptance criteria", "who can accept a risk", "our auditor says the method is not repeatable", "risk matrix for our ISMS". Drafts a short method with likelihood and impact anchors in the company's own money, hours and records, a scoring rule, an acceptance threshold with an authority ladder, reassessment triggers, and a calibration test on five sample risks.Testare★ 53
- quality-risk-analysisnaodeng/awesome-qa-skillsUse this skill when you need to identify and prioritize quality risks from product, change, and evidence inputs; triggers include quality risk analysis.Altele★ 285
- requirements-analysisnaodeng/awesome-qa-skillsUse this skill when you need to analyze requirements, identify test points, boundaries, dependencies, and risks before test design; triggers include requirements analysis and test point analysis.Planificare★ 285
- ai-securityborghei/Claude-SkillsThis skill should be used when the user asks to "scan AI systems for security threats", "check for prompt injection vulnerabilities", "assess model security posture", "detect data poisoning risks", or "audit AI/ML pipeline security".Securitate★ 999
- ml-decision-boundary-assessmentzero-lab-ai/skillsEvaluates classifiers and scoring models used as security gates for adversarial robustness, preprocessing differences, thresholds, abstention, and fallback behavior. Use when an authorized assessment must measure whether bounded input changes alter a security decision.Securitate★ 283
Note și recenzii
—
nicio recenzie
Ai încercat acest skill? Notează-l ca să-i ajuți pe alții. Autentifică-te
Discuție
Intră în discuție. Autentifică-te