Agent skill · security · sickn33

security-bluebook-builder

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

Why this skill is useful

Provides a structured approach to create enforceable security policies tailored for sensitive applications, which the AI may not generate reliably on its own.

What it needs

About 2k tokens when loaded. Last updated 2026-08-07. 44,571 stars on the source repository.

What this skill does

Supporting material availability This catalog copy contains the inline guidance below, but does not include the following supporting paths. They are external prerequisites, not bundled files: <support-root>/references/bluebooktemplate.md Ask for the original supporting material or an existing installation before using a step that depends on these paths; this catalog does not identify a verified download source for them. Resolve each path relative to that installation, inspect its contents, and verify any applicable license and execution prerequisites. Do not run a command or claim a referenced procedure was followed until its required file exists. Do not fabricate the missing scripts or treat an unrelated file with the same name as equivalent. Independent steps fully documented here can proceed within the user’s authorized scope; report any dependent step as unavailable. Security Bluebook Builder When to Use You need a concise but enforceable security policy for an app handling sensitive data. You want a single Blue Book document with explicit assumptions, controls, and go/no-go gates. The user needs policy guidance grounded in scope, threat model, and operational security defaults rather than generic advice. Overview Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates. Workflow 1) Gather inputs (ask only if missing) Collect just enough context to fill the template. …

How to use it

Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:

@skills sickn33/security-bluebook-builder--be66b0

View the source on GitHub

Browse the @skills marketplace