AgentSecOps/SecOpsAgentKit
offsec-skills
January 15, 2026
Select agents to install to:
npx add-skill https://github.com/AgentSecOps/SecOpsAgentKit/blob/main//skills/_template/SKILL.md -a claude-code --skill skill-nameInstallation paths:
.claude/skills/skill-name/<!-- PROGRESSIVE DISCLOSURE GUIDELINES: - Keep this SKILL.md file under 500 lines - Only include core workflows and common patterns here - Move detailed content to references/ directory - Link clearly to when references should be consulted - See: references/WORKFLOW_CHECKLIST.md for workflow pattern examples - Challenge every sentence: "Does Claude really need this?" --> # Skill Name ## Overview Brief overview of what this skill provides and its security operations context. ## Quick Start Provide the minimal example to get started immediately: ```bash # Example command or workflow tool-name --option value ``` ## Core Workflow ### Sequential Workflow For straightforward step-by-step operations: 1. First action with specific command or operation 2. Second action with expected output or validation 3. Third action with decision points if needed ### Workflow Checklist (for complex operations) For complex multi-step operations, use a checkable workflow: Progress: [ ] 1. Initial setup and configuration [ ] 2. Run primary security scan or analysis [ ] 3. Review findings and classify by severity [ ] 4. Apply remediation patterns [ ] 5. Validate fixes with re-scan [ ] 6. Document findings and generate report Work through each step systematically. Check off completed items. **For more workflow patterns**, see [references/WORKFLOW_CHECKLIST.md](references/WORKFLOW_CHECKLIST.md) ### Feedback Loop Pattern (for validation) When validation and iteration are needed: 1. Generate initial output (configuration, code, etc.) 2. Run validation: `./scripts/validator_example.py output.yaml` 3. Review validation errors and warnings 4. Fix identified issues 5. Repeat steps 2-4 until validation passes 6. Apply the validated output **Note**: Move detailed validation criteria to `references/` if complex. ## Security Considerations - **Sensitive Data Handling**: Guidance on handling secrets, credentials, PII - **Access Control**: Required permissions and authorization context
Issues Found: