domains / families / security / security-bluebook-builder

security-bluebook-builder

authentic

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

When to use

• You need a concise but enforceable security policy for an app handling sensitive data.
• You want a single Blue Book document with explicit assumptions, controls, and go/no-go gates.
• The user needs policy guidance grounded in scope, threat model, and operational security defaults rather than generic advice.

When not to use

• Use this skill only when the task clearly matches the scope described above.
• Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
• Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

Skill page

Source