microsoft/hve-core

secure-by-design

Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.

Voir la source

Mode d’emploi

  1. Copiez la commande et examinez le paquet avant de l’installer dans votre environnement agent.
  2. Consultez le document original pour les outils, identifiants et environnements requis.
  3. Décrivez les entrées et le livrable souhaité ; comparez la sortie aux sources.
npx skills add https://github.com/microsoft/hve-core --skill secure-by-design

Avant de commencer

  • L’installation n’inclut ni abonnement au modèle, ni quota API, ni accès aux fichiers.
  • Étoiles et installations reflètent l’activité, pas un test indépendant de qualité ou de sécurité.
Document Skill original

Rendu depuis le dépôt source en conservant titres, exemples, code, tableaux, liens et images.

Secure by Design — Skill Entry

This SKILL.md is the entrypoint for the Secure by Design skill.

The skill synthesizes the UK Government Secure by Design Principles (10 principles) and the Australian ASD/ACSC Secure by Design Foundations (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle.

Normative references (Secure by Design)

  1. 00 Principle Index
  2. 01 Security Governance
  3. 02 Risk-Driven Approach
  4. 03 Secure Product Development
  5. 04 Supply Chain Security
  6. 05 Usable Security Controls
  7. 06 Detect and Respond
  8. 07 Flexible Architecture
  9. 08 Minimize Attack Surface
  10. 09 Defense in Depth
  11. 10 Continuous Assurance
  12. 11 Secure Deprecation

Skill layout

  • SKILL.md — this file (skill entrypoint).
  • references/ — the Secure by Design normative documents.
  • 00-principle-index.md — index of all principle identifiers, categories, source mappings, and cross-references.
  • 01 through 11 — one document per synthesized principle area merging UK and AU guidance.

Third-Party Attribution

UK Government Secure by Design Principles

  • Copyright: Crown Copyright, UK Government Security Group
  • License: Open Government Licence v3.0 (OGL-UK-3.0)
  • Source: <https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/>
  • Modifications: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas
  • Trademark: Use of UK Government content does not imply endorsement

Australian ASD/ACSC Secure by Design Foundations

  • Copyright: © Commonwealth of Australia, Australian Signals Directorate
  • License: Creative Commons Attribution 4.0 (CC-BY-4.0)
  • Source: <https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations>
  • Modifications: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas
  • Trademark: Use of ASD/ACSC content does not imply endorsement

Tâches connexes

du même dépôt

Autres Skills

Tous les Skills