security-catchall
starsforks
How to install security-catchall?
chipagosfinest/enterprise-team/security-catchall
$npx -y skills add Chipagosfinest/enterprise-team --skill security-catchallRoutes security requests to the correct specialist: secure coding, auditing, compliance, or penetration testing. Covers OWASP, SOC2, GDPR, authentication, encryption, and vulnerability management. Triggers: security audit, vulnerability, penetration test, compliance, gdpr, soc2,
SKILL.md
| 1 | # Security Department |
| 2 | |
| 3 | Routes security work to the appropriate specialist role. |
| 4 | |
| 5 | ## Routing Targets |
| 6 | |
| 7 | | Role | Handles | |
| 8 | |---|---| |
| 9 | | security-engineer | Secure coding, auth implementation, encryption, OWASP fixes, secrets management | |
| 10 | | security-auditor | Penetration testing, vulnerability assessments, threat modeling, risk reports | |
| 11 | | compliance-officer | SOC2, GDPR, HIPAA, regulatory audits, compliance programs, policy review | |
| 12 | |
| 13 | ## Examples |
| 14 | |
| 15 | - "Review this auth implementation for vulnerabilities" -> security-engineer |
| 16 | - "Run a security audit on our API endpoints" -> security-auditor |
| 17 | - "Ensure our data handling is GDPR-compliant" -> compliance-officer |
| 18 | - "Fix the XSS vulnerability in the search input" -> security-engineer |
| 19 | - "Create a threat model for our payment system" -> security-auditor |
| 20 | - "Prepare documentation for our SOC2 audit" -> compliance-officer |
| 21 | - "Implement rate limiting and API key rotation" -> security-engineer |
| 22 | |
| 23 | ## Workflow |
| 24 | |
| 25 | 1. Identify whether the request is about implementation, assessment, or compliance. |
| 26 | 2. For broad security reviews, start with security-auditor for assessment, then security-engineer for fixes. |
| 27 | 3. For compliance-related requests, always involve compliance-officer. |
| 28 | 4. For security incidents, route to sre (via infrastructure-orchestrator) for immediate response, then security-auditor for post-mortem. |
People who liked this also viewed
6 picksType
- paperclip-create-agentCreate new agents in Paperclip with governance-aware hiring. Use when you need to inspect adapter configuration options, compare existing agent configs, draft a new agent prompt/config, and submit a hSkillsJul 2026
- subagent-driven-developmentUse when executing implementation plans with independent tasks in the current sessionSkillsJul 2026
- dispatching-parallel-agentsUse when facing 2+ independent tasks that can be worked on without shared state or sequential dependenciesSkillsJul 2026
- browser-act-skill-forgeForges reusable Skill packages (SKILL.md + scripts) from website exploration via browser-act — no re-exploration later. Use when: user wants a reusable Skill for any website, needs to understand a sitSkillsJul 2026
- wizardGenerate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state transition — opening URLs, capturing values, confirming each stSkillsJul 2026
- wonda-cliUsing the Wonda CLI to generate images, videos, music, and audio from the terminal — plus LinkedIn, Reddit, and X/Twitter research and automationSkillsJul 2026
