skills.rest
EmeaAppGbb
EmeaAppGbbOFFICIAL
Explore all skills by this author →
GitHub

security-planner

Generate prioritized security remediation plans from assessment findings.

Updated Mar 30, 2026
Search Tags:#vulnerability management#security assessment#pipeline integration#remediation plan#priority tiering
One-click install
npx skills add https://github.com/EmeaAppGbb/spec2cloud-microhack-greenfield --skill security-planner
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-planner
Source: https://github.com/EmeaAppGbb/spec2cloud-microhack-greenfield/tree/main/.github/skills/security-planner
Command: npx skills add https://github.com/EmeaAppGbb/spec2cloud-microhack-greenfield --skill security-planner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill automates the process of creating a prioritized security remediation plan from security assessment findings, focusing on critical vulnerabilities first and ensuring the plan fits into the Phase 2 delivery pipeline.

Core Features & Use Cases

  • Security Assessment Parsing: Extracts vulnerability findings from assessment documents.
  • Increment Plan Generation: Prioritizes vulnerabilities and creates increments for the plan.
  • Integration with Delivery Pipeline: Ensures the generated plan can be fed into the Phase 2 pipeline.

Quick Start

Generate a security remediation plan by using the 'security-planner' skill and referencing the 'specs/assessment/security.md' file.

Frequently Asked Questions about security-planner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a prioritized security remediation plan from vulnerability assessment findings?▼

You can generate a prioritized security remediation plan by feeding security assessment findings into the skill, which then maps vulnerabilities to priority tiers and outputs structured incremental fix items for your pipeline.

What is automated vulnerability priority tiering in security incident response?▼

Automated vulnerability priority tiering is the process of extracting security assessment findings and categorizing them by severity to ensure critical vulnerabilities are addressed first during incident response or compliance checks.

Can I integrate a generated vulnerability remediation plan directly into my delivery pipeline?▼

Yes, the generated vulnerability remediation plan is designed for pipeline integration, producing structured incremental fix items that can be fed directly into your Phase 2 delivery pipeline for execution.

Does security remediation planning work for proactive vulnerability management and compliance checks?▼

Security remediation planning works for proactive vulnerability management and compliance checks by reading assessment documents, prioritizing critical vulnerabilities, and generating incremental fix items to resolve them.

What are the limitations of automating security remediation planning from assessment documents?▼

The automation requires readable security assessment findings as input to map vulnerabilities to priority tiers, meaning unstructured or non-standard assessment formats may limit the accuracy of the generated incremental fix items.

Related Skills

matteocervellimatteocervelli
25

planning-doc-generator

Generate project assessment Markdown reports from structured JSON data.

Community
Intermediate
crgarcia12crgarcia12

security-planner

Transform security assessment findings into prioritized remediation plan increments.

Community
Advanced
farmountainfarmountain
1

Vulnerability Scanner Agent

Scan code, dependencies, containers, and infrastructure for vulnerabilities across the SDLC.

Community
Advanced
erikliebeneriklieben
7

dev-security

Automate OWASP Top 10:2025 security reviews for .NET and Angular applications.

Community
Advanced