usap

Plugin usap from marketplace usap in jaskaranhundal/usap-skills. Commands read from the repo's manifest — 1 month ago.

Skills (64)

• appsec-code-review

  USAP agent skill for AppSec Code Review. Use for Security-focused static code analysis — OWASP Top 10, logic flaws, dependency audits.

• appsec-customize

  USAP agent skill for adapting the AppSec chain to a new language or vulnerability class. Use for walking three forcing questions (language, threat patterns, deployment target) and emitting a CUSTOMIZE.md plan that defines the pattern catalog, exploitability scores, and patch recipes the threat-model

• build-integrity

  USAP agent skill for Build Integrity. Verify build provenance, validate artifact signatures, check SLSA compliance, and detect signs of build pipeline compromise.

• devsecops-pipeline

  USAP agent skill for DevSecOps Pipeline Security. Use for assessing security gate completeness in CI/CD pipelines, pipeline configuration review, SAST/DAST integration gaps, secret scanning in pipeline YAML, and security toolchain hardening.

• finding-triage

  USAP agent skill for AppSec finding triage. Use for reading VULN-FINDINGS.json from the vuln-scan skill, verifying each finding against the threat model, deduplicating across runs, ranking by exploitability + business impact, and emitting a TRIAGE.md hit list the patch-candidate skill consumes.

• patch-candidate

  USAP agent skill for generating candidate patches against triaged AppSec findings. Use for reading TRIAGE.md from the finding-triage skill, producing per-finding patch proposals as unified diffs, and writing PATCH-CANDIDATES.md plus per-finding .patch files. Never auto-applies. L4 skill — requires e

• pipeline-security-scan

  USAP agent skill for Pipeline Security Scan. Use for CI/CD pipeline security scanning — secrets in env vars, SAST integration, artifact signing check.

• sast-dast-coordinator

  USAP agent skill for SAST/DAST Coordinator. Orchestrate static and dynamic application security testing, correlate findings across tools, deduplicate results, and prioritize by exploitability.

• secure-sdlc

  USAP agent skill for Secure SDLC. Embed security into every phase of development — design, coding, testing, deployment, and operations — with developer-friendly controls.

• security-requirements-review

  USAP agent skill for Security Requirements Review. Use for proactive analysis of design documents — POA&M, PRDs, architecture docs, requirements specs — to extract security gaps before any alerts fire.

• supply-chain-risk

  USAP agent skill for Supply Chain Risk. Evaluate software and hardware supply chain dependencies, detect malicious package injection, and assess build pipeline integrity.

• supply-chain-simulation

  USAP agent skill for Supply Chain Simulation. Design and analyze supply chain attack scenarios in isolated environments to test detection coverage and response capabilities.

• threat-model

  USAP agent skill for application threat modeling. Use for building a STRIDE+DREAD threat model from a target spec, generating a structured THREAT_MODEL.md artifact, and seeding the downstream vuln-scan + finding-triage chain with a prioritized asset and trust-boundary inventory.

• vuln-scan

  USAP agent skill for threat-model-scoped vulnerability scanning. Use for running static analysis (SAST, secrets, dependency vuln) against a target the threat-model skill has already mapped, weighting findings by their proximity to the model's top-DREAD threats, and emitting structured VULN-FINDINGS.

• attack-surface-management

  USAP agent skill for Attack Surface Management. Use for Continuously discover and assess exposed assets.

• behavioral-analytics

  USAP agent skill for Behavioral Analytics (UEBA). Use for Analyze behavioral anomalies across users and entities.

• deception-honeypot

  USAP agent skill for Deception & Honeypot Strategy. Use for Deception technology planning — honeypot placement, canary token deployment, lateral movement traps.

• detection-engineering

  USAP agent skill for Detection Engineering. Design, validate, and tune detection rules across SIEM, EDR, and cloud telemetry to minimize dwell time and maximize detection fidelity.

• network-exposure

  USAP agent skill for Network Exposure. Use for Identify network segmentation and exposure weaknesses.

• secrets-exposure

  USAP agent skill for Secrets and Credential Exposure Detection. Use for scanning repositories, pipelines, and runtime environments for exposed secrets, API keys, tokens, and credentials — includes entropy analysis, blast-radius estimation, and revocation prioritization.

• telemetry-signal-quality

  USAP agent skill for Telemetry and Signal Quality Assessment. Use for evaluating SIEM data source health, log completeness, normalization error rates, and detection data fidelity before running threat hunts or drawing conclusions from negative detection results.

• threat-hunting

  USAP agent skill for Threat Hunting. Use for Perform hypothesis-driven threat hunting across telemetry.

• threat-intelligence

  USAP agent skill for Threat Intelligence Enrichment and Attribution. Use for IOC enrichment, adversary TTP mapping to MITRE ATT&CK, threat actor attribution, intelligence-driven detection prioritization, and converting raw indicators into actionable detection or control recommendations.

• ciso-brief-generator

  USAP agent skill for CISO Brief Generator. Use for generating CISO-level security briefs — risk posture summaries, board-ready narratives.

• findings-tracker

  USAP agent skill for Findings Tracker. Maintain authoritative registry of security findings, track remediation status, assign risk scores, and enforce SLA compliance.

• knowledge-management

  USAP agent skill for Knowledge Management. Manage reusable security knowledge, record agent decisions with rationale, surface relevant precedents, and prevent institutional amnesia.

• metrics-reporting

  USAP agent skill for Security Metrics and Reporting. Use for producing MTTD/MTTR KPIs, patch coverage rates, SLA compliance metrics, false-positive rates, and board-level security dashboards — always with data provenance statements and period-over-period trend analysis.

• persona-coverage-audit

  USAP agent skill for Persona Coverage Audit. Use for measuring which security-relevant sessions carried a recorded USAP persona pass and reporting the uncovered ones.

• security-architecture

  USAP agent skill for Security Architecture. Validate architecture changes against security principles, assess Zero Trust readiness, and provide security design guidance for new systems.

• security-awareness

  USAP agent skill for Security Awareness. Track and improve human risk posture through targeted training, phishing simulation analysis, and behavioral risk measurement.

• security-debt-tracker

  USAP agent skill for Security Debt Tracking. Use for analyzing aging security findings, computing SLA breach counts, and classifying debt accumulation rate.

• security-policy-control

  USAP agent skill for Security Policy & Control. Author and govern policy-as-code rules, assess control effectiveness, and manage the security policy lifecycle.

• security-posture-score

  USAP agent skill for Security Posture Scoring. Use for Cross-domain security posture scoring — aggregates findings into an executive scorecard.

• security-roadmap-planner

  USAP agent skill for Security Roadmap Planning. Use for building investment-prioritized 12-month security program roadmaps from posture, risk, and compliance data.

• vulnerability-management

  USAP agent skill for Vulnerability Management. Use for Prioritize vulnerabilities by exploitability and impact.

• ai-red-teaming

  USAP agent skill for AI Red Teaming. Use for Adversarial testing of AI/ML systems — prompt injection, model inversion, jailbreaks.

• attack-path-analysis

  USAP agent skill for Attack Path Analysis. Use for Analyze lateral movement and blast-radius attack paths.

• continuous-pentesting

  USAP agent skill for Continuous Pentesting. Analyze attack surface changes, prioritize emerging exposures for testing, and maintain always-on adversarial posture.

• credential-attacks

  ARIA agent skill for credential attack reasoning. Use for deciding whether to spray vs brute-force, selecting wordlists, interpreting hydra results, and assessing account lockout risk before execution.

• red-team-operations

  USAP agent skill for Red Team Operations. Use for Execute controlled red-team operation workflows.

• red-team-planner

  USAP agent skill for Red Team Planner. Use for Plan red-team engagements, scope, and rules of engagement.

• safe-exploitation

  USAP agent skill for Safe Exploitation. Use for Run controlled exploitation workflows in approved lab contexts.

• security-research

  USAP agent skill for Security Research. Track emerging threats, analyze novel attack techniques, evaluate research findings, and translate intelligence into actionable security improvements.

• web-enumeration

  ARIA agent skill for active web content discovery. Use for reasoning about path brute-forcing results, prioritising discovered endpoints, and identifying high-value targets for exploitation.

• containment-advisor

  USAP agent skill for Incident Containment Strategy. Use for selecting the most targeted containment action for confirmed threats, blast-radius assessment across 10 threat types, production impact quantification, and preparing human-approval-gated containment plans for network isolation, credential r

• forensics

  USAP agent skill for Digital Forensics. Produce investigation timelines, evidence preservation guidance, and chain-of-custody recommendations for security incidents.

• incident-classification

  USAP agent skill for Security Incident Classification and Triage. Use for classifying incoming security events into 14 incident types, assigning SEV1-SEV4 severity with false-positive filtering across 5 categories, and routing confirmed incidents to the correct response track with zero false-negativ

• incident-commander

  USAP agent skill for Incident Commander. Coordinate multi-agent incident response, declare severity levels, assign response tracks, and drive decision-making under time pressure.

• zero-day-response-governance

  USAP agent skill for Zero-Day Response Governance. Govern policy and approval pathways for zero-day vulnerability programs — from discovery through coordinated disclosure and emergency response.

• zero-day-response

  USAP agent skill for Zero-Day Response. Use for Coordinate compensating controls for zero-day risk.

• compliance-mapping

  USAP agent skill for Multi-Framework Compliance Mapping. Use for mapping organizational controls to NIST, ISO 27001, SOC 2, PCI-DSS, HIPAA, GDPR, and NIS2 simultaneously, identifying coverage gaps, producing rationalized control cross-walk tables, and reducing duplicate evidence collection across fr

• cyber-insurance

  USAP agent skill for Cyber Insurance. Assess cyber insurance coverage adequacy, identify coverage gaps, maintain claim-readiness evidence, and support renewal applications.

• enterprise-risk-assessment

  USAP agent skill for Enterprise Risk Assessment. Quantify enterprise cyber risk using FAIR methodology, produce risk heat maps, and communicate residual exposure to the board.

• internal-audit-assurance

  USAP agent skill for Internal Audit and Controls Assurance. Use for planning and executing internal security audits, collecting admissible controls evidence for SOC 2, ISO 27001, SOX, and FedRAMP, testing control operating effectiveness, and producing board-ready audit findings with root cause analy

• privacy-dpia

  USAP agent skill for Privacy & DPIA. Produce GDPR-compliant Data Protection Impact Assessments, identify high-risk processing activities, and generate privacy evidence packs.

• quantum-security-readiness

  USAP agent skill for Quantum Security Readiness. Use for Track post-quantum migration readiness and crypto agility.

• regulatory-horizon

  USAP agent skill for Regulatory Horizon. Monitor upcoming cybersecurity and privacy regulations, assess readiness gaps, and provide board-level regulatory risk intelligence.

• risk-threat-modeling

  USAP agent skill for Risk & Threat Modeling. Model attacker paths using STRIDE, PASTA, and attack trees. Quantify risk impact and prioritize mitigations.

• usap-alex

  Universal USAP security advisor (cs-security-analyst). Use for any security question, alert triage (AT), threat hunt (TH), compromise assessment (CA), or when the user says "activate Alex", "start USAP", or asks what USAP can do.

• usap-ciso

  CISO and executive security advisor (cs-ciso-advisor). Use for board reports, executive risk briefings, regulatory gap assessments, cyber insurance inputs, or when the user says "board report", "CISO brief", "executive summary", "risk posture for leadership", or "regulatory update".

• usap-devsecops

  DevSecOps pipeline security engineer (cs-devsecops-engineer). Use for pipeline security reviews, SAST/DAST result analysis, PR security gates, CI/CD hardening, supply chain risk, SBOM generation, or when the user says "pipeline security", "scan this PR", "CI/CD security", or "DevSecOps".

• usap-incident-responder

  Active incident command and response (cs-incident-responder). Use when there is a confirmed or suspected active incident, for containment decisions, forensic investigation, SEV declaration, or when the user says "declare incident", "start IR", "we have an active breach", or "forensics".

• usap-program-manager

  Security program manager and passive lifecycle orchestrator (cs-security-program-manager). Use for security roadmap planning, program health scanning, debt tracking, facilitated reviews, or when the user says "security roadmap", "program planning", "security debt", "proactive scan", or "program revi

• usap-red-teamer

  Offensive security coordinator (cs-red-teamer). Use for red team campaign planning, attack path analysis, engagement scoping, adversary simulation, or when the user says "red team", "pentest", "attack simulation", "run an engagement", or "offensive security". Requires explicit authorization scope.

Slash commands (7)

• /usap:README
• /usap:challenge

  Run cs-security-analyst (AT workflow) against the Perfect Storm 8-vector crisis scenario and produce a 12-check mock comparison scorecard.

• /usap:compare

  Before/after comparison of zero-day-response SKILL.md v1 (broken) vs v2 (fixed) against the FortiGate zero-day scenario. Outputs a scored table.

• /usap:fortigate

  Run cs-security-analyst (AT + CA workflows) against the Fintech FortiGate zero-day scenario and produce a 7-task scorecard.

• /usap:orchestrate

  Run the full 4-agent USAP orchestration chain (cs-security-analyst → cs-incident-responder → cs-ciso-advisor → cs-security-program-manager) against the Perfect Storm scenario. Shows inter-agent handoffs and per-agent mock comparison.

• /usap:run

  Load a USAP skill SKILL.md and activate it as your operating persona. Argument: skill slug.

• /usap:test

  Run a USAP skill against the FortiGate zero-day test scenario and produce a 6-problem compliance scorecard.

Hooks (3)

• UserPromptSubmit

  python3 "${CLAUDE_PLUGIN_ROOT}/hooks/usap_gate.py" prompt

• PreToolUse

  python3 "${CLAUDE_PLUGIN_ROOT}/hooks/usap_gate.py" pretool

• Stop

  python3 "${CLAUDE_PLUGIN_ROOT}/hooks/usap_gate.py" stop

Similar plugins