skills.rest
crgarcia12
crgarcia12COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-planner

Transform security assessment findings into prioritized remediation plan increments.

Updated May 6, 2026
Search Tags:#security engineering#security assessment#remediation plan#vulnerability prioritization#incremental planning
One-click install
npx skills add https://github.com/crgarcia12/compy --skill security-planner-crgarcia12
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-planner
Source: https://github.com/crgarcia12/compy/tree/main/.github/skills/security-planner
Command: npx skills add https://github.com/crgarcia12/compy --skill security-planner-crgarcia12

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill transforms security assessment findings into a prioritized plan, ensuring critical vulnerabilities are addressed first, and hardening improvements are layered on in order.

Core Features & Use Cases

  • Security Assessment Parsing: Reads and parses vulnerability findings, severity ratings, and recommended fixes.
  • Incremental Planning: Generates increments that feed into a standard Phase 2 delivery pipeline.
  • Prioritization: Organizes increments by criticality, ensuring immediate risks are mitigated first.
  • Use Case: When you need to create a detailed security remediation plan from security assessment results to transform them into actionable fix items.

Quick Start

Run the 'security-planner' skill to generate a security remediation plan based on the findings in 'specs/assessment/security.md'.

Frequently Asked Questions about security-planner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a prioritized security remediation plan from assessment findings?▼

A security remediation plan organizes vulnerability findings by criticality, ensuring immediate risks are mitigated first and hardening improvements are layered in order. This Skill parses security assessment results and outputs prioritized fix increments for delivery pipelines.

What is vulnerability prioritization in incremental security planning?▼

Vulnerability prioritization ranks security findings by criticality to address the most severe risks immediately. It transforms raw security assessment data into ordered fix increments, ensuring critical vulnerabilities are mitigated before lower-priority hardening improvements.

How do I convert security assessment results into actionable fix increments for a delivery pipeline?▼

Converting security assessment results into fix increments involves parsing vulnerability findings and severity ratings to generate prioritized items. These increments feed directly into a standard Phase 2 delivery pipeline for structured remediation execution.

Does the security remediation plan require manual review for compliance?▼

Yes, the generated security remediation plan requires manual review to ensure compliance with security-related Architectural Decision Records. This validation step guarantees the prioritized fix increments align with established engineering standards before pipeline execution.

What format should security assessment findings be in for the planner to parse?▼

Security assessment findings should be placed in the 'specs/assessment/security.md' file as a markdown document. The planner reads and parses vulnerability findings, severity ratings, and recommended fixes directly from this file to generate the remediation plan.

Related Skills

dapperdiversdapperdivers
1

report-generator

Generate structured markdown penetration test reports from JSON security scan findings.

Community
Intermediate
PaloAltoNetworksPaloAltoNetworks
3

architecture-review

Automate architectural guardrail, drift, and ADR impact validation on code changes.

Official
Advanced
dreadnodedreadnode
11

vuln-critic

Filter low-quality and false positive vulnerability findings from scanners and agent output.

Official
Intermediate
josavicentevwjosavicentevw
1

devsecops

Automate security scanning and governance across CI/CD pipelines and compliance workflows.

Community
Advanced