docs-generate-security

Generate a standardized SECURITY.md file from package.json and changeset metadata.

Updated Mar 24, 2026
One-click install
npx skills add https://github.com/spencerbeggs/design-docs-plugin --skill docs-generate-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: docs-generate-security
Source: https://github.com/spencerbeggs/design-docs-plugin/tree/main/plugin/skills/docs-generate-security
Command: npx skills add https://github.com/spencerbeggs/design-docs-plugin --skill docs-generate-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill eliminates the manual effort of drafting security policies by automatically detecting project versions, identifying security contacts, and generating a standardized, professional SECURITY.md file.

Core Features & Use Cases

  • Automated Version Detection: Parses package.json and changeset files to accurately map supported versions.
  • Standardized Reporting: Generates clear vulnerability reporting instructions, response timelines, and GitHub security advisory links.
  • Use Case: When preparing a repository for public release, use this skill to instantly generate a compliant security policy that reflects your current versioning and contact information.

Quick Start

Run the docs-generate-security skill to create a new security policy file in the root of your repository.

Frequently Asked Questions about docs-generate-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a SECURITY.md file for my repository?

To generate a SECURITY.md file, you can use an automated security policy generator that parses your project configuration and versioning metadata to produce a compliant vulnerability reporting policy. It automatically detects supported versions and extracts security contacts.

What is automated security policy generation for software maintenance?

Automated security policy generation is the process of creating standardized compliance documentation by parsing project metadata. It eliminates manual drafting effort by automatically mapping supported versions, identifying security contacts, and disclosing professional response timelines.

How do I automate vulnerability reporting policies and compliance documentation?

You can automate vulnerability reporting policies by running a skill that parses package.json and changeset files to generate standardized compliance documentation. This produces clear instructions, response timelines, and GitHub security advisory links automatically.

Can I generate a security policy for a public repository release using package.json?

Yes, you can generate a compliant security policy for a public release by parsing your package.json and changeset files. The automation accurately maps your supported versions and extracts security contacts to create a professional SECURITY.md file.

What is the best way to create standardized version support tables for security policies?

The best way to create standardized version support tables is to automate security policy generation by parsing project configuration and versioning metadata. This ensures accurate version mapping and satisfies professional compliance documentation requirements.

Does automated security policy generation work without external dependencies?

Yes, automated security policy generation works without external dependencies. It solely requires your existing project configuration files, such as package.json and changesets, to extract versioning metadata and security contacts for the standardized policy output.