security

Provides a unified security framework across the entire software lifecycle.

2|Updated Jan 14, 2026

Search Tags:#security #compliance #governance #SDLC #threat-modeling #risk-management

Ready to run

npx skills add https://github.com/Harery/OCTALUME --skill security-harery

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security
Source: https://github.com/Harery/OCTALUME/tree/main/skills/shared/security
Command: npx skills add https://github.com/Harery/OCTALUME --skill security-harery

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Shared security framework across all phases. It embeds security considerations into every decision, reducing risk, rework, and audit friction across the lifecycle.

Core Features & Use Cases

Threat modeling guidance and security principles (CIA triad, defense in depth)
Phase-gated security controls, testing strategies, and compliance guidance
Governance-ready documentation for security, risk, and audits

Quick Start

Run the security framework during project kickoff to establish security requirements, threat models, and controls that carry through all phases.

Frequently Asked Questions about security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I embed threat modeling into the software development lifecycle?▼

To implement phase-gated security controls, apply a unified security framework across all SDLC phases. This embeds security testing strategies and compliance guidance into each phase, reducing risk, rework, and audit friction for enterprise-grade systems.

What is the best way to prepare governance-ready documentation for security audits?▼

Yes, you can use a unified security framework for enterprise-grade systems. It provides phase-gated security controls, CIA triad principles, and compliance guidance designed specifically to reduce audit friction and manage risk at an enterprise scale.

How do I implement phase-gated security controls for enterprise compliance?▼

Can I apply a unified security framework for enterprise-grade systems?▼

When do I need to start threat modeling and risk management in the SDLC?▼

You need to start threat modeling and risk management during project kickoff. Establishing security requirements and controls early ensures security considerations are embedded into every decision, reducing rework and audit friction across the lifecycle.