skills.rest
vibbs
vibbsCOMMUNITY
Explore all skills by this author →
GitHub

security-posture

Aggregate threat models, scan status, compliance gaps, and human checkpoints into a posture snapshot.

6|1|Updated Feb 25, 2026
Search Tags:#security#vulnerability#compliance#risk assessment#threats#posture
One-click install
npx skills add https://github.com/vibbs/company-os --skill security-posture
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-posture
Source: https://github.com/vibbs/company-os/tree/main/.claude/skills/security-posture
Command: npx skills add https://github.com/vibbs/company-os --skill security-posture

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ./tools/security/posture-check.sh, ./tools/artifact/validate.sh, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a comprehensive overview of your project's security health by consolidating findings from various security tools and processes, helping you identify and address risks before they become critical.

Core Features & Use Cases

  • Aggregated Threat Intelligence: Combines findings from threat models, vulnerability scans, and compliance checks.
  • Security Posture Assessment: Evaluates overall security health against defined standards and policies.
  • Release Readiness: Crucial for ensuring security is not a blocker for major releases.
  • Use Case: Before deploying a new version of your SaaS product, run this Skill to get a clear picture of any open critical vulnerabilities, the freshness of your security scans, and any compliance gaps, ensuring you're not releasing with known security weaknesses.

Quick Start

Run the security posture skill to get a full assessment of the current security health.

Frequently Asked Questions about security-posture

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is a unified security posture snapshot and when do I need one?▼

A security posture snapshot aggregates open threats, scan status, compliance gaps, and human checkpoint audits into a unified report. You need it to review overall security health or verify release readiness before deploying major updates.

How do I assess compliance gaps and vulnerability scan freshness before a release?▼

You assess compliance gaps and scan freshness by running a security posture check that loads security standards, scans threat models, checks scan freshness, and evaluates compliance to produce a posture snapshot artifact.

Can I check release readiness by aggregating threat models and security scans?▼

Yes, you can check release readiness by aggregating findings from threat models, vulnerability scans, and compliance checks into a single security health snapshot, ensuring you avoid deploying with known critical weaknesses.

What's the best way to consolidate security findings from multiple tools and audits?▼

The best way to consolidate security findings is to aggregate open threats, scan status, compliance gaps, and human checkpoint audits into a unified posture snapshot, providing a comprehensive overview of your project's security health.

Does this security posture assessment work with custom security standards and configurations?▼

Yes, the security posture assessment loads your defined security standards and configuration to evaluate overall security health against your specific policies before producing the final posture snapshot artifact.

What limitations should I expect when scanning threat models for a security posture report?▼

The security posture scan relies on existing threat models, vulnerability scan freshness, and human checkpoint audits to function, meaning it aggregates current findings rather than independently discovering new vulnerabilities.

Related Skills

Explore More Legal & Compliance Skills→
ArdurAIArdurAI
1

god-security-core

Evaluate application and infrastructure security against best practices and threat models.

Official
Advanced
louloulinlouloulin
19

security-auditor

Detect security vulnerabilities in code, configurations, and deployment pipelines.

Community
Advanced
PeterHddPeterHdd
10

engineering-security-engineer

Model threats with STRIDE and DREAD frameworks and assess OWASP Top 10 risks.

Community
Advanced
michaelalbermichaelalber
2

dotnet-security-review

Review .NET applications for OWASP Top 10 vulnerabilities and Telerik CVEs.

Community
Advanced