trust-center

Generate a deployable security trust page from cloud-scan data.

7|2|Updated Apr 3, 2026
One-click install
npx skills add https://github.com/kkmookhey/shasta --skill trust-center
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: trust-center
Source: https://github.com/kkmookhey/shasta/tree/main/.claude/skills/trust-center
Command: npx skills add https://github.com/kkmookhey/shasta --skill trust-center

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Generating a public-facing security trust page from scan data eliminates manual reporting and makes posture information auditable and shareable.

Core Features & Use Cases

  • Public trust page generation: a single deployable index.html showing framework scores, policies, infrastructure overview, and data protection posture.
  • Configurable deployment: publish to S3, GitHub Pages, Vercel, or Netlify with no build steps.
  • Self-contained HTML with CDN resources: no dependencies beyond CDN-loaded libraries.
  • Aggregate posture rendering: presents high-level findings while omitting resource ARNs and detailed findings.

Quick Start

Run the trust-center generator after you have a scan to produce a deployable index.html you can publish.

Frequently Asked Questions about trust-center

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate a public security trust page from cloud scan data?

Generate a public security trust page by running the trust-center tool against your latest cloud scan data to render a single deployable index.html with aggregate framework scores and infrastructure posture.

Does the trust page generator require any build steps or external dependencies to run?

The trust page generator requires no build steps, using a self-contained HTML format with only CDN-loaded libraries to produce the final deployable index.html file.

Can I deploy a security trust page directly to S3, GitHub Pages, Vercel, or Netlify?

You can deploy your generated security trust page directly to S3, GitHub Pages, Vercel, or Netlify using the tool's configurable deployment targets after generating the index.html file.

What security posture information is included on a public trust page?

The public trust page includes aggregate framework scores, policies, infrastructure overview, and data protection posture, while omitting resource ARNs and detailed findings to ensure safe public sharing.

Why use a generated static HTML trust page instead of manual security reporting?

Generating a static HTML trust page eliminates manual reporting efforts by automatically transforming cloud-scan data into an auditable and shareable security posture summary.

When should I avoid publishing a public trust page from my scan data?

Avoid publishing a public trust page if your security posture requires sharing detailed findings or specific resource ARNs, as the generator omits these details for safe public visibility.