About secure-by-design
Secure by Design is an agent skill that organizes UK Government and Australian ASD/ACSC guidance into queryable references. It supports assessing and improving secure-by-design practices across the software lifecycle.
Key features
- 01Structured principles from UK and Australian guidance
- 02Machine-readable principle references
- 03Index with mappings and cross-references
- 04Lifecycle-oriented security guidance
Use cases
- 01Assess software against secure-by-design principles
- 02Identify areas to improve security practices
Install
Copy the command and run it in a terminal.
npx skills add https:/After installing, type/secure-by-designin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/00-principle-index.md01-security-governance.md02-risk-driven-approach.md03-secure-product-development.md04-supply-chain-security.md05-usable-security-controls.md06-detect-and-respond.md07-flexible-architecture.md08-minimize-attack-surface.md09-defense-in-depth.md10-continuous-assurance.md11-secure-deprecation.mdDetails
From the project READMESecure by Design — Skill Entry
This SKILL.md is the entrypoint for the Secure by Design skill.
The skill synthesizes the UK Government Secure by Design Principles (10 principles) and the Australian ASD/ACSC Secure by Design Foundations (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle.
Normative references (Secure by Design)
- 00 Principle Index
- 01 Security Governance
- 02 Risk-Driven Approach
- 03 Secure Product Development
- 04 Supply Chain Security
- 05 Usable Security Controls
- 06 Detect and Respond
- 07 Flexible Architecture
- 08 Minimize Attack Surface
- 09 Defense in Depth
- 10 Continuous Assurance
- 11 Secure Deprecation
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Secure by Design normative documents.00-principle-index.md— index of all principle identifiers, categories, source mappings, and cross-references.01through11— one document per synthesized principle area merging UK and AU guidance.
Third-Party Attribution
UK Government Secure by Design Principles
- Copyright: Crown Copyright, UK Government Security Group
- License: Open Government Licence v3.0 (OGL-UK-3.0)
- Source: https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/
- Modifications: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas
- Trademark: Use of UK Government content does not imply endorsement
Australian ASD/ACSC Secure by Design Foundations
- Copyright: © Commonwealth of Australia, Australian Signals Directorate
- License: Creative Commons Attribution 4.0 (CC-BY-4.0)
- Source: https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations
- Modifications: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas
- Trademark: Use of ASD/ACSC content does not imply endorsement