How do I install the Secure By Design skill?

Run npx skillmds@latest add gabrielmoreira/secure-by-design in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Secure By Design safe to use?

This skill has not completed SkillMD's automated safety review yet. Independent scanners report: SkillSpector: CAUTION, Skill Scanner: PASS. Capability flags: makes network calls. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Secure By Design?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Secure By Design free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under OGL-UK-3.

Who published Secure By Design?

gabrielmoreira (@gabrielmoreira) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Secure By Design by gabrielmoreira — Agent Skill

Name: Secure By Design
Rating: 4.666666666666667 (3 reviews)
Author: gabrielmoreira

File contents

Secure by Design — Skill Entry

This SKILL.md is the entrypoint for the Secure by Design skill.

The skill synthesizes the UK Government Secure by Design Principles (10 principles) and the Australian ASD/ACSC Secure by Design Foundations (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle.

Normative references (Secure by Design)

00 Principle Index
01 Security Governance
02 Risk-Driven Approach
03 Secure Product Development
04 Supply Chain Security
05 Usable Security Controls
06 Detect and Respond
07 Flexible Architecture
08 Minimize Attack Surface
09 Defense in Depth
10 Continuous Assurance
11 Secure Deprecation

Skill layout

SKILL.md — this file (skill entrypoint).
references/ — the Secure by Design normative documents.
- 00-principle-index.md — index of all principle identifiers, categories, source mappings, and cross-references.
- 01 through 11 — one document per synthesized principle area merging UK and AU guidance.

Third-Party Attribution

UK Government Secure by Design Principles

Copyright: Crown Copyright, UK Government Security Group
License: Open Government Licence v3.0 (OGL-UK-3.0)
Source: https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/
Modifications: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas
Trademark: Use of UK Government content does not imply endorsement

Australian ASD/ACSC Secure by Design Foundations

License: Creative Commons Attribution 4.0 (CC-BY-4.0)
Source: https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations
Modifications: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas
Trademark: Use of ASD/ACSC content does not imply endorsement

---name: secure-by-designdescription: Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.license: OGL-UK-3.0 AND CC-BY-4.0--- # Secure by Design — Skill Entry This `SKILL.md` is the **entrypoint** for the Secure by Design skill. The skill synthesizes the **UK Government Secure by Design Principles** (10 principles) and the **Australian ASD/ACSC Secure by Design Foundations** (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle. ## Normative references (Secure by Design) 1. [00 Principle Index](references/00-principle-index.md) 2. [01 Security Governance](references/01-security-governance.md) 3. [02 Risk-Driven Approach](references/02-risk-driven-approach.md) 4. [03 Secure Product Development](references/03-secure-product-development.md) 5. [04 Supply Chain Security](references/04-supply-chain-security.md) 6. [05 Usable Security Controls](references/05-usable-security-controls.md) 7. [06 Detect and Respond](references/06-detect-and-respond.md) 8. [07 Flexible Architecture](references/07-flexible-architecture.md) 9. [08 Minimize Attack Surface](references/08-minimize-attack-surface.md) 10. [09 Defense in Depth](references/09-defense-in-depth.md) 11. [10 Continuous Assurance](references/10-continuous-assurance.md) 12. [11 Secure Deprecation](references/11-secure-deprecation.md) ## Skill layout * `SKILL.md` — this file (skill entrypoint). * `references/` — the Secure by Design normative documents. * `00-principle-index.md` — index of all principle identifiers, categories, source mappings, and cross-references. * `01` through `11` — one document per synthesized principle area merging UK and AU guidance. ## Third-Party Attribution ### UK Government Secure by Design Principles * **Copyright**: Crown Copyright, UK Government Security Group * **License**: [Open Government Licence v3.0 (OGL-UK-3.0)](https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/) * **Source**: <https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/> * **Modifications**: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas * **Trademark**: Use of UK Government content does not imply endorsement ### Australian ASD/ACSC Secure by Design Foundations * **Copyright**: © Commonwealth of Australia, Australian Signals Directorate * **License**: [Creative Commons Attribution 4.0 (CC-BY-4.0)](https://creativecommons.org/licenses/by/4.0/) * **Source**: <https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations> * **Modifications**: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas * **Trademark**: Use of ASD/ACSC content does not imply endorsement

Frequently asked questions

Secure By Design