How do I install the Security Documentation skill?

Run npx skillmds@latest add hack23/security-documentation in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Security Documentation skill do?

ISMS security documentation standards for Hack23 projects It is listed under Security on SkillMD.

Is Security Documentation safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Security Documentation?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Security Documentation free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Security Documentation?

Hack23 (@hack23) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Security Documentation by hack23 — Agent Skill

Name: Security Documentation
Author: Hack23

File contents

Security Documentation Standards

🔴 AI FIRST Quality Principle

Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.

Purpose

Maintain comprehensive security documentation per Hack23 ISMS requirements.

Required Documents

Current State

✅ SECURITY_ARCHITECTURE.md - Implemented security controls
✅ THREAT_MODEL.md - STRIDE threat analysis
✅ ARCHITECTURE.md - System design with C4 models
✅ SECURITY.md - Security policy and vulnerability reporting

Future State

✅ FUTURE_SECURITY_ARCHITECTURE.md - Planned security improvements

Document Structure

SECURITY_ARCHITECTURE.md:

# Security Architecture

## Executive Summary
## Security Controls
### Network Security
### Application Security
### Access Control
### Data Protection
### Monitoring & Detection
## Compliance Mapping
### ISO 27001:2022
### NIST CSF 2.0
### CIS Controls v8.1
## References

THREAT_MODEL.md:

# Threat Model

## Asset Inventory
## STRIDE Analysis
### Spoofing Threats
### Tampering Threats
### Repudiation Threats
### Information Disclosure Threats
### Denial of Service Threats
### Elevation of Privilege Threats
## Risk Assessment
## Mitigation Controls
## Residual Risks

Quality Standards

Use C4 diagrams (Context, Container, Component)
Include Mermaid diagrams for complex workflows
Map to ISO 27001/NIST CSF/CIS Controls
Version control metadata (version, date, owner)
Classification marking (Public, Internal, Confidential)

References

ISMS-PUBLIC: https://github.com/Hack23/ISMS-PUBLIC
Secure Development Policy: https://github.com/Hack23/ISMS-PUBLIC/blob/main/Secure_Development_Policy.md

---name: security-documentationdescription: ISMS security documentation standards for Hack23 projectslicense: Apache-2.0---# Security Documentation Standards## 🔴 AI FIRST Quality Principle> **Apply the AI FIRST principle: never accept first-pass quality. Minimum 2 iterations. Read all output, improve every section. No shortcuts.**## PurposeMaintain comprehensive security documentation per Hack23 ISMS requirements.## Required Documents### Current State- ✅ **SECURITY_ARCHITECTURE.md** - Implemented security controls- ✅ **THREAT_MODEL.md** - STRIDE threat analysis- ✅ **ARCHITECTURE.md** - System design with C4 models- ✅ **SECURITY.md** - Security policy and vulnerability reporting### Future State- ✅ **FUTURE_SECURITY_ARCHITECTURE.md** - Planned security improvements## Document Structure**SECURITY_ARCHITECTURE.md:**```markdown# Security Architecture## Executive Summary## Security Controls### Network Security### Application Security### Access Control### Data Protection### Monitoring & Detection## Compliance Mapping### ISO 27001:2022### NIST CSF 2.0### CIS Controls v8.1## References```**THREAT_MODEL.md:**```markdown# Threat Model## Asset Inventory## STRIDE Analysis### Spoofing Threats### Tampering Threats### Repudiation Threats### Information Disclosure Threats### Denial of Service Threats### Elevation of Privilege Threats## Risk Assessment## Mitigation Controls## Residual Risks```## Quality Standards- Use C4 diagrams (Context, Container, Component)- Include Mermaid diagrams for complex workflows- Map to ISO 27001/NIST CSF/CIS Controls- Version control metadata (version, date, owner)- Classification marking (Public, Internal, Confidential)## References- **ISMS-PUBLIC**: https://github.com/Hack23/ISMS-PUBLIC- **Secure Development Policy**: https://github.com/Hack23/ISMS-PUBLIC/blob/main/Secure_Development_Policy.md

Frequently asked questions

Security Documentation