Security compliance gate
Skill jukrap/ai-agent-playbook/skills/security/security-compliance-gate
Use when deciding security or compliance gates before merge, release, publication, or handoff.From its SKILL.md
npx -y skills add jukrap/ai-agent-playbook --skill security-compliance-gateAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 2 stars2 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.2 KB, 214 tokens by cl100k_base, as published. Nobody here has run it
Security Compliance Gate
Use this as the primary security skill for deciding whether a change can proceed through a merge, release, publication, or handoff gate.
Workflow
- Identify the artifact, audience, environment, data scope, trust boundary, and required policy or compliance evidence.
- Route implementation-specific questions to
security-review,auth-access-control,dependency-supply-chain-review, orlicense-notice-reviewinstead of duplicating their checks. - Classify findings as
block,warn, ordocument, and record the owner, expiry, compensating evidence, and verification path for any accepted risk. - Verify public-doc hygiene, translation or notice coverage, runtime evidence safety, and required local scanner or repository-defined check output before calling the gate passed.
Reference
Read references/gate-severity-model.md before recording block, warn, document, or accepted-risk outcomes.
Read references/evidence-routing.md when connecting security, dependency, license, runtime schema, locator, or public documentation checks.
What ships with it: 2 files
5.5 KB alongside SKILL.md
references/
- evidence-routing.md2.7 KB
- gate-severity-model.md2.8 KB