All authors
Claude Skills by Manoj-11-Dahal
github.com/Manoj-11-Dahal15,860 skills0 installs0 views
- Security Assessment Report Audience Detail ControlUse when a task involves tailoring security findings to authorized report readers to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, contai...Votes: 0GitHub stars: 2
- Security Assessment Scope Authorization RegisterUse when preparing for and governing a bounded security assessment, to establish written authorization and maintain explicit in-scope assets, prohibited methods, and exclusions to produce a reviewable scope register linked to the approval packet. Success means each target, account, environment, date, test type, source address, data boundary, exclusion, owner, and expiry is explicit; aliases and redirects are checked against exclusions before activity. Public reachability or generic intent is ...Votes: 0GitHub stars: 2
- Security Asvs Versioned Requirement MappingUse when a task involves mapping application security verification evidence to an explicit OWASP ASVS version to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...Votes: 0GitHub stars: 2
- Security Authentication Policy Drift AuditUse when a task involves comparing deployed authentication controls with the approved identity policy to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Backup Restore Integrity ExerciseUse when a task involves evaluating recoverability of security-critical systems and data through an authorized exercise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit ...Votes: 0GitHub stars: 2
- Security Clock Sync For Incident CorrelationUse when a task involves assessing whether clock synchronization supports reliable security event correlation to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...Votes: 0GitHub stars: 2
- Security Cloud Audit Event TimelineUse when a task involves assembling cloud control-plane evidence for an incident review to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, ...Votes: 0GitHub stars: 2
- Security Cloud Audit Log Coverage MappingUse when a task involves checking which cloud control-plane actions are recorded and retained to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active tes...Votes: 0GitHub stars: 2
- Security Cloud Resource Quarantine ReviewUse when a task involves planning a reversible cloud resource quarantine during a security incident to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Security Control Test Sampling PlanUse when a task involves choosing a representative sample for a bounded security control verification to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Data Exposure Scope EstimationUse when a task involves estimating which data classes and records may have been exposed during a security incident to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...Votes: 0GitHub stars: 2
- Security Detection Coverage Gap To Test CaseUse when a task involves turning an identified defensive monitoring gap into a safe validation plan to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Security Detection Rule Evidence And Noise ReviewUse when a task involves reviewing a detection rule's evidence quality, scope, and operational noise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Security Dns Change Ownership And Risk ReviewUse when a task involves reviewing an authorized DNS change for ownership, target, and exposure implications to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Security Egress Exception Expiration AuditUse when a task involves reviewing outbound network exceptions for purpose, owner, evidence, and expiry to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ...Votes: 0GitHub stars: 2
- Security Email Phishing Report TriageUse when a task involves triaging a user-reported suspicious email using authorized message metadata to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Security Emergency Stop And Escalation DrillUse when a task involves verifying that an assessment can be paused quickly when unexpected impact appears to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...Votes: 0GitHub stars: 2
- Security Endpoint Isolation Approval GateUse when a task involves evaluating whether an endpoint can be isolated during a suspected compromise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Event Timezone NormalizationUse when a task involves aligning timestamps from endpoint, cloud, identity, and network sources during triage to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...Votes: 0GitHub stars: 2
- Security Evidence Custody RegisterUse when a task involves tracking who collected, accessed, transferred, or stored incident evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Security Evidence Hash Integrity CheckUse when a task involves checking whether an approved evidence artifact changed after collection to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active ...Votes: 0GitHub stars: 2
- Security Evidence Lifecycle GovernanceUse when planning how security-control evidence and operational security logs are collected, protected, accessed, retained, and disposed to produce an evidence-lifecycle plan linking each control claim or log source to a minimal artifact, owner, classification, collection period, access rule, retention deadline, integrity check, and disposal path. Success means evidence is sufficient and traceable without collecting unrelated secrets or user records, access is least-privilege, backup and lega...Votes: 0GitHub stars: 2
- Security Finding Disclosure RoutingUse when a task involves routing a verified security finding to the authorized owner without exposing it broadly to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approva...Votes: 0GitHub stars: 2
- Security Firewall Rule Change Justification ReviewUse when a task involves reviewing a firewall policy change for business need, scope, expiry, and rollback to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...Votes: 0GitHub stars: 2
- Security Fix Regression Test Quality GateUse when a task involves reviewing whether a security remediation includes a useful and non-brittle regression check to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit app...Votes: 0GitHub stars: 2
- Security Forensic Collection Authorization GateUse when a task involves reviewing permission and proportionality before acquiring endpoint or cloud evidence to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval b...Votes: 0GitHub stars: 2
- Security Hardening Baseline Deviation TriageUse when a task involves reviewing a system's deviations from a named security configuration baseline to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Identity Anomaly InvestigationUse when a task involves reviewing unusual authentication events without assuming that a signal proves compromise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approv...Votes: 0GitHub stars: 2
- Security Incident Alert TriageUse when a task involves deciding whether a security alert requires escalation into an incident workflow to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before...Votes: 0GitHub stars: 2
- Security Incident Decision Log And TimelineUse when a task involves maintaining an auditable sequence of incident observations, decisions, and actions to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval bef...Votes: 0GitHub stars: 2
- Security Incident Role And Authority MatrixUse when a task involves clarifying who can investigate, approve containment, communicate, and restore during a security incident to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain...Votes: 0GitHub stars: 2
- Security Incident Severity Priority CalibrationUse when a task involves assigning an initial incident priority from impact, scope, confidence, and time sensitivity to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit app...Votes: 0GitHub stars: 2
- Security Incident Status BriefUse when a task involves writing a concise, evidence-based status update during a security incident to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before acti...Votes: 0GitHub stars: 2
- Security Legal Privacy Notification HandoffUse when a task involves routing a potential reportable security incident to privacy and legal decision-makers to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...Votes: 0GitHub stars: 2
- Security Log Source Integrity PreservationUse when a task involves preserving trustworthy log copies while investigating a suspected security event to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befor...Votes: 0GitHub stars: 2
- Security Malware Alert Triage No ExecutionUse when a task involves reviewing a malware or endpoint detection alert without running the suspected file to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval bef...Votes: 0GitHub stars: 2
- Security Mfa Coverage And Exception ReviewUse when a task involves measuring multi-factor authentication coverage for defined identities and systems to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval befo...Votes: 0GitHub stars: 2
- Security Network Flow Evidence CorrelationUse when a task involves correlating approved network telemetry with a security incident timeline to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active...Votes: 0GitHub stars: 2
- Security Network Segmentation Test Evidence ReviewUse when a task involves evaluating whether evidence supports a claimed network-segmentation boundary to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before ac...Votes: 0GitHub stars: 2
- Security Post Incident Lessons And Improvement TrackingUse when a task involves turning incident findings into owned, measurable preparation and control improvements to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval ...Votes: 0GitHub stars: 2
- Security Privileged Access Periodic ReviewUse when a task involves reviewing whether privileged roles remain assigned to approved people and workloads to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Security Privileged Account Containment ReviewUse when a task involves planning an approved containment action for an account with elevated access to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before act...Votes: 0GitHub stars: 2
- Security Production Probing Impact BudgetUse when a task involves setting impact limits for authorized security checks on a live service to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active t...Votes: 0GitHub stars: 2
- Security Ransomware Restore Readiness TabletopUse when a task involves evaluating ransomware response and recovery roles through a non-destructive tabletop exercise to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit a...Votes: 0GitHub stars: 2
- Security Recovery And Residual Access ValidationUse when a task involves checking that service recovery did not leave incident persistence or unauthorized access behind to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit...Votes: 0GitHub stars: 2
- Security Remediation Diff Scope ReviewUse when a task involves reviewing whether a security-fix change stays within its approved remediation scope to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval be...Votes: 0GitHub stars: 2
- Security Rules Of Engagement MatrixUse when a task involves translating written testing permission into an action-by-action rules-of-engagement matrix to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appr...Votes: 0GitHub stars: 2
- Security Sandbox Equivalence And Isolation ReviewUse when a task involves choosing a representative test environment without connecting tools to production targets to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appro...Votes: 0GitHub stars: 2
- Security Scan Rate And Concurrency PlanUse when a task involves planning bounded scan pacing for an authorized asset inventory to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit approval before active testing, ...Votes: 0GitHub stars: 2
- Security Scope Expiry And Renewal CheckUse when a task involves checking whether security testing authorization remains valid after time or scope changes to record the asset owner, authorized environment, exact scope, applicable policy or assessment approval, evidence source, data sensitivity, and potential service impact. Prefer current primary references, bounded non-destructive checks, synthetic data, and independently verifiable evidence. Separate observed facts from assumptions, preserve uncertainty, and obtain explicit appro...Votes: 0GitHub stars: 2