Automates MDCU security governance with STRIDE threat models, IRP containment, and RSOP audits.
npx skills add https://github.com/iago-leal/skills --skill mdcu-seg
Please help me install this Agent Skill. Skill: mdcu-seg Source: https://github.com/iago-leal/skills/tree/main/mdcu-framework/mdcu-seg Command: npx skills add https://github.com/iago-leal/skills --skill mdcu-seg
Módulo mdcu-seg expands MDCU by providing structured security analysis and governance, including threat modeling, incident containment, and longitudinal auditing.
Execute the commands /mdcu-seg threat-model, /mdcu-seg incidente, or /mdcu-seg auditoria to start the corresponding security workflow.
High-intent search queries and answers about installing and using this skill.
You can automate STRIDE threat modeling by invoking the threat-model command, which generates structured threat models analyzing security risks per component and data flow. This provides systematic coverage of spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege threats.
The best way to structure incident containment is using the F0 protocol, which generates IRP containment playbooks integrated with RSOP records. This ensures active incidents are systematically contained while maintaining governance alignment throughout the response process.
You maintain continuous security auditing through an RSOP-based security audit regime that includes quarterly reviews. This longitudinal governance approach tracks compliance over time and updates RSOP records to ensure ongoing regulatory alignment.
Yes, threat modeling integrates with existing workflows by connecting STRIDE analysis to incident containment via the F0 protocol and RSOP-based governance. This unified approach links threat identification, active incident response, and continuous auditing into a cohesive security workflow.
You should expect three structured outputs: STRIDE threat models for component risk analysis, IRP containment playbooks for active incident response, and RSOP-based audit records for longitudinal governance and quarterly compliance reviews.
You need RSOP-based governance when maintaining regulatory alignment through continuous auditing and quarterly reviews. This framework provides longitudinal tracking of security controls and ensures structured governance across threat modeling and incident containment processes.
hpsgdIdentify and document system threats using STRIDE analysis.
DuqueOMDetect leaked credentials in repositories, logs, or artifacts and initiate incident response.
rysweetAnalyze security events to identify vulnerabilities, threats, and risk posture.
sunilaicoeDevelop security specifications with threat modeling, encryption, and compliance standards.
