security-tiers

Classify operations into T0–T3 security tiers for approval gating.

3|1|Updated Nov 10, 2025
One-click install
npx skills add https://github.com/metraton/gaia --skill security-tiers
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: security-tiers
Source: https://github.com/metraton/gaia/tree/main/skills/security-tiers
Command: npx skills add https://github.com/metraton/gaia --skill security-tiers

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Before executing any command, this Skill classifies the operation into a security tier to determine whether user approval is required.

Core Features & Use Cases

  • Classification framework for T0-T3 severity and approval requirements.
  • Hook-based safety gating for PreToolUse and policy enforcement.
  • Reference materials and examples for cloud and DevOps commands.

Quick Start

Classify a sample Terraform apply to determine if approval is needed.

Frequently Asked Questions about security-tiers

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce approval requirements for cloud deployments and infrastructure changes?

To enforce approval requirements, operations are classified into security tiers to determine if user approval is needed before execution. This applies to cloud deployments and infrastructure changes.

What is a security tiering model for gating DevOps commands?

A security tiering model classifies operations into T0-T3 severity levels to determine approval needs. It enforces policy gating for DevOps commands and tool executions to ensure safe operations.

Can I use pre-execution hooks to require approvals for Terraform apply?

Yes, pre-execution hooks like PreToolUse integrate with the tiering model to gate operations. A Terraform apply is classified into a security tier to determine if explicit approval is required.

How do nonce-based approvals work for infrastructure changes?

Nonce-based approvals integrate with pre-execution hooks to ensure safe, auditable infrastructure changes. They classify operations into security tiers and require user approval based on the determined tier.

Does this security classification framework support cloud governance policies?

Yes, the classification framework supports cloud governance by applying a T0-T3 tiering model to operations. It enforces hook-based safety gating and policy enforcement for tool executions.

When do I need to classify operations into security tiers?

You need to classify operations into security tiers whenever gating decisions influence risk, specifically for cloud deployments, infrastructure changes, and tool executions requiring auditable approvals.