generate-security-md - Generate a repository security policy
Analyzes a repository and generates or updates SECURITY.md with reporting policy, architecture context, threat model, and security assumptions.
Tags
Updated: 2026-10-06Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Analyze repository codebase
- Inspect security artifacts
- Incorporate TAVA documents
- Classify repository exposure
- Classify service exposure
- Generate SECURITY.md sections
- Persist triage decisions
- Update existing SECURITY.md
Inputs
- Git repository
- Optional TAVA document
- User classification decisions
- Existing SECURITY.md
- Existing triage file
Outputs
- Generated SECURITY.md
- Updated SECURITY.md
- Updated .security-triage.yaml
- Security findings summary
- Classification confirmation prompts
Requirements
- Git repository context
- Repository read access
- Repository write access
- Git metadata access
- Visibility CLI when needed