How do I install the Security Awareness skill?

Run npx skillmds@latest add ashutoshsrivastava17/security-awareness in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Security Awareness safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Security Awareness?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Security Awareness free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Security Awareness?

ashutoshsrivastava17 (@ashutoshsrivastava17) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Security Awareness by ashutoshsrivastava17

Name: Security Awareness
Author: ashutoshsrivastava17

Security Awareness

Design security awareness programs — training curriculum, phishing simulations, metrics, role-based content, and compliance. TRIGGER when: user says /security-awareness or asks about security training programs.

File contents

security awareness

Process

Step 1: Define Scope

Identify the boundaries of what to assess, who is involved, and what assets/processes are in scope.

Step 2: Identify Risks/Requirements

Risk/Requirement	Category	Severity	Likelihood
[item]	[category]	H/M/L	H/M/L

Step 3: Assess Current Controls

Control	Effectiveness	Gap
[control]	Strong/Adequate/Weak	[description]

Step 4: Prioritize Actions

Action	Impact	Effort	Priority
[action]	H/M/L	H/M/L	P1/P2/P3

Step 5: Develop Mitigation Plan

Risk	Mitigation	Owner	Timeline
[risk]	[strategy]	[name]	[date]

Step 6: Monitor and Report

Metric	Target	Frequency
[KRI/metric]	[threshold]	Weekly/Monthly/Quarterly

Output Format

## security awareness: [Scope]
### Risk Summary: [Key findings]
### Controls: [Current state assessment]
### Recommendations: [Prioritized actions]
### Monitoring: [KRIs and reporting cadence]

Quality Checklist

Scope clearly defined
Risks identified systematically
Current controls assessed for effectiveness
Recommendations prioritized by risk level
Monitoring plan established
Stakeholders reviewed findings

Edge Cases

For rapidly changing environments, increase assessment frequency
If data is limited, use qualitative assessment with expert judgment
For cross-organizational risks, coordinate with all affected parties
Adjust methodology based on regulatory requirements

---name: security-awarenessdescription: Design security awareness programs — training curriculum, phishing simulations, metrics, role-based content, and compliance. TRIGGER when: user says /security-awareness or asks about security training programs.---# security awareness## Process### Step 1: Define ScopeIdentify the boundaries of what to assess, who is involved, and what assets/processes are in scope.### Step 2: Identify Risks/Requirements| Risk/Requirement | Category | Severity | Likelihood ||-----------------|----------|----------|-----------|| [item] | [category] | H/M/L | H/M/L |### Step 3: Assess Current Controls| Control | Effectiveness | Gap ||---------|-------------|-----|| [control] | Strong/Adequate/Weak | [description] |### Step 4: Prioritize Actions| Action | Impact | Effort | Priority ||--------|--------|--------|----------|| [action] | H/M/L | H/M/L | P1/P2/P3 |### Step 5: Develop Mitigation Plan| Risk | Mitigation | Owner | Timeline ||------|-----------|-------|----------|| [risk] | [strategy] | [name] | [date] |### Step 6: Monitor and Report| Metric | Target | Frequency ||--------|--------|-----------|| [KRI/metric] | [threshold] | Weekly/Monthly/Quarterly |## Output Format```markdown## security awareness: [Scope]### Risk Summary: [Key findings]### Controls: [Current state assessment]### Recommendations: [Prioritized actions]### Monitoring: [KRIs and reporting cadence]```## Quality Checklist- [ ] Scope clearly defined- [ ] Risks identified systematically- [ ] Current controls assessed for effectiveness- [ ] Recommendations prioritized by risk level- [ ] Monitoring plan established- [ ] Stakeholders reviewed findings## Edge Cases- For rapidly changing environments, increase assessment frequency- If data is limited, use qualitative assessment with expert judgment- For cross-organizational risks, coordinate with all affected parties- Adjust methodology based on regulatory requirements

Frequently asked questions