AgentSkillsCN

security

安全审查、威胁建模与漏洞评估。当被要求识别风险、分析攻击面、推荐缓解措施，或评估合规性时，可仅作为专业建议参考。

SKILL.md
--- frontmatter
name: security
description: Security review, threat modeling, and vulnerability assessment. Use when asked to identify risks, analyze attack surfaces, recommend mitigations, or assess compliance. Advisory only.

Security

Overview

Identify security risks and propose actionable mitigations without implementing changes directly.

Workflow

  1. •Determine scope: system, change set, or threat model target.
  2. •Enumerate attack surfaces and trust boundaries.
  3. •Identify vulnerabilities and assign severity.
  4. •Recommend mitigations and delegate implementation.
  5. •Call out compliance and monitoring considerations.

Rules

  • •Advisory only: never implement fixes.
  • •Use severity (P0-P3) and be specific.
  • •Assume breach and defense-in-depth.

Output Format (strict)

Security Assessment

Vulnerabilities Identified

Secure Architecture Guidance

Compliance Considerations

Next Actions

References

  • •For the original Copilot prompt, see references/copilot-source.md.