mcpField
S
security-documentation

security-documentation

github.com/aj-geddesSecurity373452 installsUpdated 34w ago
Repository

About security-documentation

security-documentation is a skill for producing security documentation for application development and operations. It covers policies, compliance requirements, guidelines, and best practices for teams preparing security plans or reports.

Key features

  1. 01Security policies and guidelines
  2. 02Compliance documentation
  3. 03Incident response plans
  4. 04Access control and data protection policies
  5. 05Security audit reports

Use cases

  1. 01Drafting security policies and development guidelines
  2. 02Preparing SOC 2, GDPR, or HIPAA documents
  3. 03Writing incident response and vulnerability disclosure plans

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill security-documentation

After installing, type/security-documentationin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
1-password-requirements.md
1-secure-coding-practices.md
2-multi-factor-authentication-mfa.md
2-security-headers.md
3-role-based-access-control-rbac.md
scripts/
security-checklist.sh

Details

From the project README

Security Documentation

Table of Contents

Overview

Create comprehensive security documentation including policies, guidelines, compliance requirements, and best practices for secure application development and operations.

When to Use

  • Security policies
  • Compliance documentation (SOC 2, GDPR, HIPAA)
  • Security guidelines and best practices
  • Incident response plans
  • Access control policies
  • Data protection policies
  • Vulnerability disclosure policies
  • Security audit reports

Quick Start

Minimal working example:

# Security Policy

**Version:** 2.0
**Last Updated:** 2025-01-15
**Review Schedule:** Quarterly
**Owner:** Security Team
**Contact:** [email protected]

## Table of Contents

1. [Overview](#overview)
2. [Scope](#scope)
3. [Authentication & Access Control](#authentication--access-control)
4. [Data Protection](#data-protection)
5. [Application Security](#application-security)
6. [Infrastructure Security](#infrastructure-security)
7. [Incident Response](#incident-response)
8. [Compliance](#compliance)
9. [Security Training](#security-training)

---

## 1. Overview

### Purpose
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

GuideContents
1 Password Requirements1 Password Requirements
2 Multi-Factor Authentication (MFA)2 Multi-Factor Authentication (MFA)
3 Role-Based Access Control (RBAC)3 Role-Based Access Control (RBAC)
1 Secure Coding Practices1 Secure Coding Practices
2 Security Headers2 Security Headers, 3 API Security

Best Practices

✅ DO
  • Follow principle of least privilege
  • Encrypt sensitive data
  • Implement MFA everywhere
  • Log security events
  • Regular security audits
  • Keep systems updated
  • Document security policies
  • Train employees regularly
  • Have incident response plan
  • Test backups regularly
❌ DON'T
  • Store passwords in plaintext
  • Skip input validation
  • Ignore security headers
  • Share credentials
  • Hardcode secrets in code
  • Skip security testing
  • Ignore vulnerability reports

Comments

Markdown supported