kyleoliveiro

21 mods across 1 repository, 16 stars between them.

sg-gov-skills

01

kyleoliveiro/sg-gov-skills

Plugin Claude Code

Agent skills for developers building Singapore government digital services.

16 1mo ago A tokens not measured original MIT

kyleoliveiro/sg-gov-skills

Instructions file

Instructions for kyleoliveiro/sg-gov-skills, a project described as: Agent skills for developers building tech projects for Singapore government agencies.

16 1mo ago A 3 tokens copy · 100% MIT

access-control

04

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Set up or audit identity and access management against the Singapore Government's ICT&SS Policy Reform (IM8 successor) Access Control controls (AC-1..AC-16): account inventory and deny-by-default least privilege, MFA for privileged accounts, Singpass/Corppass for public users vs government SSO (WOG AAD) for internal…

16 1mo ago A 204 tokens original MIT

container-security

05

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build, scan, distribute, and run containers that satisfy the Singapore Government's ICT&SS Policy Reform (IM8 successor) Container Security (CS-1..CS-11) controls. Use whenever writing or reviewing a Dockerfile, a Kubernetes manifest or Helm chart, a container build pipeline, or registry/runtime configuration for a…

16 1mo ago A 189 tokens original MIT

corppass-legacy

06

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Maintain, debug, or migrate a LEGACY Corppass integration — the pre-FAPI 2.0 Corppass Authorization API (entityInfo/userInfo ID-token claims, the comma-separated sub format, /authorization-info, Bearer access tokens, esrvcID) or Myinfo Business v1/v2 (/entity-person, PKISIGN, clientsecret). Use this whenever an…

16 1mo ago A 221 tokens original MIT

corppass

07

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Integrate Corppass — business-user login and Myinfo Business corporate data — into a Singapore government digital service using the Corppass Authorization API (FAPI 2.0). Use this whenever a service lets companies or other entities transact with an agency: "log in with Corppass", business user login, UEN, entity roles…

16 1mo ago A 203 tokens original MIT

data-protection

08

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build or audit a system's data handling against the Singapore Government's ICT&SS Policy Reform (IM8 successor) Data Protection controls (DP-1..DP-8): Singapore data residency, encryption at rest and in transit, central cloud tenant management, storage sanitisation and witnessed destruction, data loss prevention, and…

16 1mo ago A 209 tokens original MIT

dss-accessibility

09

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build and review frontend code that satisfies the 53 accessibility controls of the Singapore Digital Service Standards (WCAG 2.2 A/AA recast as DSS WP/WO/WU/WR controls, with SG-specific levels). Use whenever writing or reviewing UI for a Singapore government digital service — components, pages, forms, modals…

16 1mo ago C 191 tokens original MIT

gen-ai-security

10

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build or audit a Generative AI feature so it satisfies the Singapore Government's ICT&SS Policy Reform (IM8 successor) Gen-AI SSP overlay — the 8 GA controls (GA-1..GA-8) plus DP-8. Use whenever writing, reviewing, or hardening code that calls a GenAI/LLM API, builds a RAG or agent or chatbot feature, self-hosts…

16 1mo ago A 233 tokens original MIT

logging-monitoring

11

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Set up or audit logging and monitoring against the Singapore Government's ICT&SS Policy Reform (IM8 successor) Logging and Monitoring controls (LM-1..LM-21): capturing the five security log sources, off-box tamper-resistant storage, retention, structured formats and log sanitisation, central security log management…

16 1mo ago A 196 tokens original MIT

network-security

12

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Design or audit a system's network boundaries against the Singapore Government's ICT&SS Policy Reform (IM8 successor) Network Security controls (NS-1..NS-11): VPC/VNet segmentation and tiered subnets, access restrictions on CSP resources outside the virtual network, deny-by-default security groups and egress…

16 1mo ago A 227 tokens original MIT

resiliency-recovery

13

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build or audit availability and recoverability for a Singapore government system against the ICT&SS Policy Reform (IM8 successor) Resiliency (RS-1..RS-3) and Backup & Recovery (BR-1..BR-6) controls: multi-AZ deployment with health checks and failover, load balancing and auto-scaling, periodic load testing, backups…

16 1mo ago A 214 tokens original MIT

secure-coding-as

14

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Write and review application code that satisfies the Singapore Government ICT&SS Policy Reform Application Security (AS) controls and allied Cryptography/Key Management (CK) controls. Use whenever writing new code, reviewing a diff, or auditing an existing codebase for a Singapore government agency project …

16 1mo ago A 152 tokens original MIT

secure-pipeline

15

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Set up or audit a repository and CI/CD pipeline that satisfies the Singapore Government's ICT&SS Policy Reform (IM8 successor) Secure Development (SD-1..SD-10) and Software Supply Chain (SC-1..SC-9) controls. Use whenever creating a repo, configuring CI/CD, reviewing pipeline or infra config, or preparing for a…

16 1mo ago A 156 tokens original MIT

security-testing

16

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Set up or audit a security testing and vulnerability management programme against the Singapore Government's ICT&SS Policy Reform (IM8 successor) Security Testing controls (ST-1..ST-5): vulnerability assessment scans, cloud security posture management, a public vulnerability disclosure channel (security.txt), the…

16 1mo ago A 192 tokens original MIT

sg-service-shell

17

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build the mandatory "shell" every Singapore government public-facing digital service needs before feature work — the Official Government Banner (masthead), WOGAA registration and tracking, the official footer, .gov.sg domain, SGDS setup, and the rest of the DSS Trust & Legitimacy, Baseline Design, and Performance &…

16 1mo ago A 169 tokens original MIT

singpass-legacy

18

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Maintain, debug, or migrate a LEGACY Singpass integration — Myinfo v3 (clientsecret + PKISIGN X.509 signing, /com/v3/authorise), Myinfo v4 (OAuth 2.1 client assertions + DPoP, /com/v4), or the pre-FAPI 2.0 Singpass authentication API (direct /auth redirect, comma-separated sub like "s=S1234567A,u=uuid"). Use this…

16 1mo ago A 210 tokens original MIT

singpass

19

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Integrate Singpass — citizen/resident login and Myinfo (v5) government-verified person data — into a Singapore government digital service using the current FAPI 2.0 Singpass authentication API. Use this whenever a service authenticates individual members of the public or pre-fills their personal data: "log in with…

16 1mo ago A 200 tokens original MIT

ssp-navigator

20

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Determine which Singapore Government System Security Plan(s) apply to a system under the ICT&SS Policy Reform (IM8's successor) and emit the resulting control baseline — including stacking the Generative AI overlay and Digital Service Standards profiles on top of a cybersecurity SSP. Use whenever a project touches SG…

16 1mo ago A 144 tokens original MIT

kyleoliveiro/sg-gov-skills

Skill Claude CodeCodex

Build or audit the transaction and payment flows of a Singapore government digital service against the DSS Transactions & Payments controls (TX-1..TX-15): fully digital end-to-end transactions, upfront prerequisites and fees, multi-step forms with progress indicators, save-draft and resume, pre-fill with Myinfo/EDH…

16 1mo ago A 198 tokens original MIT