jaskaranhundal

jaskaranhundal/usap-skills

Plugin Claude Code

Plugin marketplace listing 1 plugin: usap.

jaskaranhundal/usap-skills

Plugin Claude Code

Unified Security Agent Platform — 79 cybersecurity skills + 12 cs- orchestrator agents that emit a typed 11-field JSON output contract, mapped to MITRE ATT&CK and NIST CSF 2.0. Runs in any LLM. Bundles 7 slash commands (usap:run, usap:fortigate, usap:orchestrate, usap:challenge, usap:compare, usap:test, usap:README) a.

jaskaranhundal/usap-skills

Command Claude Code

Claude Code slash commands for the Unified Security Agent Platform (USAP). These commands let you load any USAP skill as a live LLM persona and run structured compliance tests — all inside a Claude Code session.

jaskaranhundal/usap-skills

Command Claude Code

Run cs-security-analyst (AT workflow) against the Perfect Storm 8-vector crisis scenario and produce a 12-check mock comparison scorecard.

jaskaranhundal/usap-skills

Command Claude Code

Before/after comparison of zero-day-response SKILL.md v1 (broken) vs v2 (fixed) against the FortiGate zero-day scenario. Outputs a scored table.

jaskaranhundal/usap-skills

Command Claude Code

Run cs-security-analyst (AT + CA workflows) against the Fintech FortiGate zero-day scenario and produce a 7-task scorecard.

jaskaranhundal/usap-skills

Command Claude Code

Run the full 4-agent USAP orchestration chain (cs-security-analyst → cs-incident-responder → cs-ciso-advisor → cs-security-program-manager) against the Perfect Storm scenario. Shows inter-agent handoffs and per-agent mock comparison.

jaskaranhundal/usap-skills

Command Claude Code

Load a USAP skill SKILL.md and activate it as your operating persona. Argument: skill slug.

jaskaranhundal/usap-skills

Command Claude Code

Run a USAP skill against the FortiGate zero-day test scenario and produce a 6-problem compliance scorecard.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

Universal USAP security advisor (cs-security-analyst). Use for any security question, alert triage (AT), threat hunt (TH), compromise assessment (CA), or when the user says "activate Alex", "start USAP", or asks what USAP can do.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

CISO and executive security advisor (cs-ciso-advisor). Use for board reports, executive risk briefings, regulatory gap assessments, cyber insurance inputs, or when the user says "board report", "CISO brief", "executive summary", "risk posture for leadership", or "regulatory update".

jaskaranhundal/usap-skills

Skill Claude CodeCodex

DevSecOps pipeline security engineer (cs-devsecops-engineer). Use for pipeline security reviews, SAST/DAST result analysis, PR security gates, CI/CD hardening, supply chain risk, SBOM generation, or when the user says "pipeline security", "scan this PR", "CI/CD security", or "DevSecOps".

jaskaranhundal/usap-skills

Skill Claude CodeCodex

Active incident command and response (cs-incident-responder). Use when there is a confirmed or suspected active incident, for containment decisions, forensic investigation, SEV declaration, or when the user says "declare incident", "start IR", "we have an active breach", or "forensics".

jaskaranhundal/usap-skills

Skill Claude CodeCodex

Security program manager and passive lifecycle orchestrator (cs-security-program-manager). Use for security roadmap planning, program health scanning, debt tracking, facilitated reviews, or when the user says "security roadmap", "program planning", "security debt", "proactive scan", or "program review".

jaskaranhundal/usap-skills

Skill Claude CodeCodex

Offensive security coordinator (cs-red-teamer). Use for red team campaign planning, attack path analysis, engagement scoping, adversary simulation, or when the user says "red team", "pentest", "attack simulation", "run an engagement", or "offensive security". Requires explicit authorization scope.

jaskaranhundal/usap-skills

Instructions file

Instructions for jaskaranhundal/usap-skills, covering claude.md, what this repo is, repository layout, common commands and run any skill tool (all tools support --output json).

jaskaranhundal/usap-skills

Instructions file Gemini CLI

Instructions for jaskaranhundal/usap-skills, covering usap skills — gemini cli context, repo layout, available usap commands (gemini cli skills), conventions and 11 skill domains.

jaskaranhundal/usap-skills

Agent

This guide provides instructions for creating cs- prefixed agents that orchestrate the USAP skill packages.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for AppSec Code Review. Use for Security-focused static code analysis — OWASP Top 10, logic flaws, dependency audits.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for adapting the AppSec chain to a new language or vulnerability class. Use for walking three forcing questions (language, threat patterns, deployment target) and emitting a CUSTOMIZE.md plan that defines the pattern catalog, exploitability scores, and patch recipes the threat-model / vuln-scan /…

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for Build Integrity. Verify build provenance, validate artifact signatures, check SLSA compliance, and detect signs of build pipeline compromise.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for DevSecOps Pipeline Security. Use for assessing security gate completeness in CI/CD pipelines, pipeline configuration review, SAST/DAST integration gaps, secret scanning in pipeline YAML, and security toolchain hardening.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for AppSec finding triage. Use for reading VULN-FINDINGS.json from the vuln-scan skill, verifying each finding against the threat model, deduplicating across runs, ranking by exploitability + business impact, and emitting a TRIAGE.md hit list the patch-candidate skill consumes.

jaskaranhundal/usap-skills

Skill Claude CodeCodex

USAP agent skill for generating candidate patches against triaged AppSec findings. Use for reading TRIAGE.md from the finding-triage skill, producing per-finding patch proposals as unified diffs, and writing PATCH-CANDIDATES.md plus per-finding .patch files. Never auto-applies. L4 skill — requires explicit human…