Agent skill

Kesekit Check

Run a pre-deployment security compliance checklist based on KISA guidelines.

MITAuto-check passedSecurity

Install Kesekit Check

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/kesekit-check .claude/skills/kesekit-check && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Paste into Claude Code

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .claude/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

$skill-installer

$skill-installer install https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check

Type this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a codex

Project install goes to .agents/skills/; add -g for ~/.codex/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check --agent codex

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/kesekit-check .agents/skills/kesekit-check && rm -rf skills-src

Use ~/.agents/skills/ instead of .agents/skills for a personal install.

Codex skills documentation · loads skills from .agents/skills/

Paste into Codex

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .agents/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a cursor

Project install goes to .agents/skills/; add -g for ~/.cursor/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check --agent cursor

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/kesekit-check .cursor/skills/kesekit-check && rm -rf skills-src

Use ~/.cursor/skills/ instead of .cursor/skills for a personal install.

Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/

Paste into Cursor

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .cursor/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

gemini skills install

$ gemini skills install https://github.com/cdppcorp/KESE-KIT.git --path skills/kesekit-check

--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a gemini-cli

Project install goes to .agents/skills/; add -g for ~/.gemini/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check --agent gemini-cli

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/kesekit-check .gemini/skills/kesekit-check && rm -rf skills-src

Use ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.

Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/

Paste into Gemini CLI

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .gemini/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check

Installs for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a github-copilot

Project install goes to .agents/skills/; add -g for ~/.copilot/skills/.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/kesekit-check .github/skills/kesekit-check && rm -rf skills-src

Use ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.

GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/

Paste into GitHub Copilot

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .github/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

skills CLI

$ npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a opencode

OpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.

GitHub CLI

$ gh skill install cdppcorp/KESE-KIT kesekit-check --agent opencode

Project scope by default (.agents/skills/); add --scope user for a personal install.

Manual copy

$ git clone --depth 1 https://github.com/cdppcorp/KESE-KIT.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/kesekit-check .opencode/skills/kesekit-check && rm -rf skills-src

Use ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.

OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/

Paste into OpenCode

Install the "kesekit-check" agent skill from https://github.com/cdppcorp/KESE-KIT/tree/main/skills/kesekit-check into .opencode/skills/kesekit-check/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "kesekit-check", then confirm the skill loads.

OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.

Facts

Skill name: kesekit-check
GitHub stars: 361
Token cost: ~1.3k tokens
SKILL.md length: 493 words
Files: 82 (incl. scripts, references)
Skills in repo: 8
Repo updated: Apr 9, 2026
First seen: Oct 7, 2026
Licence: MIT

At a glance

Run a pre-deployment security compliance checklist based on KISA guidelines.

Pre-deploy check
SKILL.md covers Guideline Selection, CII Branch, AI Security Branch and Robot Security Branch, plus 5 more sections
Compliance checklist
Security checklist

What it does

Kesekit Check is an agent skill from cdppcorp/KESE-KIT. Run a pre-deployment security compliance checklist based on KISA guidelines. Supports CII compliance (70 items), AI security checklists, Robot Security (103 items), Space Security (12 domains, 53 items), SW Supply Chain (SBOM, 29 items). Use when "pre-deploy check", "compliance checklist", "security checklist", "AI security check", "robot security check", "space security check", "satellite compliance", "GSaaS check", "supply chain check", "SBOM check", "공급망 점검".

Its SKILL.md is about 1.3k tokens, which your agent loads only when the skill is triggered. The skill folder holds 89 other files, including scripts and reference files (for example `references/ai-security/overview.md`, `references/ai-security/service-provider.md` and `references/ai-security/user-guide.md`).

It sits in Security, covering Supply chain security, Prompt injection and agent security and SOC 2 and security compliance. The repository describes itself as: KISA 주요정보통신기반시설 기술적 취약점 분석 평가방법 상세가이드 기반 Skills. The licence is MIT.

When your agent uses it

Pre-deploy check
Compliance checklist
Security checklist
AI security check

Example prompts

“pre-deploy check”
“compliance checklist”
“security checklist”
“/kesekit-check”

Requirements

Python 3

What it can do on your machine

Read from SKILL.md and the folder at commit cd118f9. It shows what the files ask for, not the result of running them.

Tool permissions
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
Runs code
Ships 1 file in scripts/, which the agent can run.
From the folder's file list and the shell code blocks in SKILL.md.
Network
No URLs in SKILL.md.
From URLs in SKILL.md, links to its own repository left out.
Credentials
Names no API keys, tokens, secrets or passwords.
From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Kesekit Check loads about 1.3k tokens when it runs, and up to ~18k if it reads all its reference files. Until then it costs about 120 tokens; SKILL.md has 493 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it: ~120
When it runs · the whole SKILL.md, loaded when a task matches: ~1.3k
With references · SKILL.md plus every file in references/, read only if the agent opens them: ~18k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); the scripts in this folder are not scanned.

SKILL.md

The full file from cdppcorp/KESE-KIT at commit cd118f9, republished under its MIT licence (© cdppcorp). 493 words, ~1,311 tokens.

Download SKILL.mdSave it as .claude/skills/kesekit-check/SKILL.md (or your agent's skills folder). This skill also uses 81 other files; get the full folder from GitHub.

name: kesekit-check
description: Run a pre-deployment security compliance checklist based on KISA guidelines. Supports CII compliance (70 items), AI security checklists, Robot Security (103 items), Space Security (12 domains, 53 items), SW Supply Chain (SBOM, 29 items). Use when "pre-deploy check", "compliance checklist", "security checklist", "AI security check", "robot security check", "space security check", "satellite compliance", "GSaaS check", "supply chain check", "SBOM check", "공급망 점검".

KESE Pre-Deployment Security Compliance Checklist

Run pre-deployment security checks. Auto-selects guideline based on user context.

Guideline Selection

#	Guideline	Description
1	CII Compliance	70-item pre-deployment checklist
2	AI Security Checklist	AI developer/provider verification
3	Robot Security Checklist	Robot system 11 categories, 103 items
4	Space Security Checklist	Satellite/GSaaS/supply chain 12 domains, 53 items
5	Secure Coding Checklist	JavaScript/Python code review (7 categories, 46 CWE)
6	Zero Trust Checklist	Zero Trust maturity assessment (8 elements, 4 maturity levels, ~396 items)
7	SW Supply Chain Checklist	SBOM-based supply chain security (5 phases, 29 items)

Servers, infrastructure → CII / AI models, LLM → AI Security / robots, ROS/ROS2 → Robot Security / satellites, ground stations, GSaaS, space supply chain → Space Security / JavaScript, Python, web app code → Secure Coding Zero Trust, ZTA, ZTNA, 제로트러스트, 마이크로세그멘테이션, microsegmentation, SDP, SASE, PEP/PDP, never trust always verify → Zero Trust SBOM, supply chain, 공급망, C-SCRM, SCA, CycloneDX, SPDX, npm audit, pip-audit → SW Supply Chain

CII Branch

Load reference files from templates/cii/ based on detected environment. Check commands available in scripts/cii/ directory. Check categories: Account Security (15), Access Control (15), Encryption (12), Logging (10), Service Hardening (12), Patch Management (6).

Severity: Critical (deployment blocker) → High → Medium → Low

AI Security Branch

Load from references/ai-security/ for overview and guidance, and templates/ai-security/ for assessment checklists. Check developer (54 items), service provider, or user checklists by lifecycle phase.

Robot Security Branch

Load from templates/robot-security/. Start with overview.md, then select one or more category references (ssdf.md, supply-chain.md, iec62443.md, cyber-resilience.md, wireless.md) based on the robot type, interfaces, and regulatory context.

Space Security Branch

Load from references/space-security/ for overview and supply chain guidance, and templates/space-security/ for assessment checklists. Start with references/space-security/overview.md, then select domain references based on the space system type (GSaaS, satellite operator, ground station). Check against CMMC/K-RMF/NIS2/ISMS-P standards.

Show full SKILL.md (206 more words)Show less

Secure Coding Branch

Load from references/secure-coding/overview.md for category/CWE mapping, then use templates/secure-coding/javascript.md or templates/secure-coding/python.md for language-specific checklists. Use references/secure-coding/pseudocode.md for other languages.

Priority: Critical (8 items) → High (13 items) → Medium (25 items). Block deployment if any Critical CWE found.

Zero Trust Branch

Load from references/zero-trust/ for overview and maturity model, and templates/zero-trust/ for assessment checklists. Start with templates/zero-trust/overview.md, then select element-specific checklists based on system context. If OT/ICS detected, also load templates/zero-trust/ot-environment.md.

Topic	Reference File
Overview	`templates/zero-trust/overview.md`
Identity & Device	`templates/zero-trust/identity-device.md`
Network & System	`templates/zero-trust/network-system.md`
Application & Data	`templates/zero-trust/app-data.md`
Visibility & Automation	`templates/zero-trust/visibility-automation.md`
OT/ICS Environment	`templates/zero-trust/ot-environment.md`
ZT Architecture Reference	`references/zero-trust/overview.md`
Maturity Model Details	`references/zero-trust/maturity-model.md`
OT Deployment Guide	`references/zero-trust/ot-guide.md`

8 core elements, ~396 items across 4 maturity levels. Standards: KISA ZT Guideline 2.0, NIST SP 800-207, CISA ZT Maturity Model.

SW Supply Chain Branch

Load from references/supply-chain/overview.md for context, then use templates/supply-chain/sbom-checklist.md for the 29-item pre-deployment checklist. Use scripts/supply-chain/sbom-generate.md and scripts/supply-chain/sbom-vuln-scan.md for verification commands.

5 phases: Design (5) → Development (11) → Supply (3) → Operations (7) → Maintenance (3). Critical items: SC-10, SC-14, SC-15 must ALL pass. Block deployment if any Critical item fails. Standards: NIST SP 800-161r1, NIST SP 800-218, NTIA SBOM, NIS-SBOM.

Rules

Never skip Critical severity items
Provide specific file paths and commands for fixes
Block deployment if pass rate < 60%

Files

SKILL.md and 81 other files (scripts, references) in skills/kesekit-check of cdppcorp/KESE-KIT.

SKILL.md
references/ai-security/overview.md
references/ai-security/service-provider.md
references/ai-security/user-guide.md
references/secure-coding/overview.md
references/secure-coding/pseudocode.md
references/space-security/overview.md
references/space-security/supply-chain.md
references/supply-chain/overview.md
references/zero-trust/maturity-model.md
references/zero-trust/ot-guide.md
references/zero-trust/overview.md
scripts/ai-security/api-security-check.md
… and 69 more

Open the folder on GitHubat commit cd118f9

Compare with similar skills

Kesekit Check next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Kesekit Check compared with similar skills
Skill	Stars	Used in	Tokens	Auto-check	Licence	Repo updated
Kesekit Check this skillcdppcorp/KESE-KIT	361	—	~1.3k	Automated safety check: Pass	MIT	6 mo ago
AI SAFE2 Secure Build CopilotCyberStrategyInstitute/ai-safe2-framework	146	—	~1.2k	Automated safety check: Pass	Custom licence	today
Csono-session/pstack	135	—	~12k	Automated safety check: Notes	MIT	6 mo ago
Security Audit 2sundial-org/awesome-openclaw-skills	663	—	~875	Automated safety check: Pass	None	7 mo ago
Skill Scannergetsentry/skills	1k	4 repos	~2.5k	Automated safety check: Warn	Apache-2.0	6 days ago
Agentic GitHub Actions Auditortrailofbits/skills	7.4k	6 repos	~5.4k	Automated safety check: Notes	CC-BY-SA-4.0	yesterday

Similar skills

AI SAFE2 Secure Build Copilot
CyberStrategyInstitute/ai-safe2-framework
Applies the AI SAFE2 framework to security reviews, code reviews and compliance mapping for AI agents, RAG pipelines and MCP servers.
146 GitHub stars~1.2k tokensUpdated today
SecurityAuto-check passed
Cso
no-session/pstack
Chief Security Officer mode. An agent skill from no-session/pstack.
135 GitHub stars~12k tokensUpdated 6 mo ago
SecurityAuto-check: notes
Security Audit 2
sundial-org/awesome-openclaw-skills
Fail-closed security auditing for OpenClaw/ClawHub skills & repos: trufflehog secrets scanning, semgrep SAST, prompt-injection/persistence signals, and supply-chain hygiene checks before enabling or…
663 GitHub stars~875 tokensUpdated 7 mo ago
SecurityAuto-check passed
Skill Scanner
getsentry/skills
Official
Scan agent skills for security issues. An agent skill from getsentry/skills.
1k GitHub starsUsed in 4 repos~2.5k tokens
SecurityAuto-check: warnings
Agentic GitHub Actions Auditor
trailofbits/skills
Official
Statically audits GitHub Actions workflows that run AI coding agents, tracing attacker-controlled input to agent prompts and flagging unsafe sandbox, trigger and allowlist settings.
7.4k GitHub starsUsed in 6 repos~5.4k tokens
SecurityAuto-check: notes
Sbom
NVIDIA/OpenShell
Official
Generate and manage Software Bill of Materials (SBOMs) for the OpenShell project.
16k GitHub stars~1.3k tokensUpdated today
SecurityAuto-check passed

Questions about Kesekit Check

What does Kesekit Check do?

Run a pre-deployment security compliance checklist based on KISA guidelines. Kesekit Check is an agent skill from cdppcorp/KESE-KIT. Run a pre-deployment security compliance checklist based on KISA guidelines.

When should I use Kesekit Check?

Kesekit Check fits situations like: pre-deploy check; compliance checklist; security checklist; AI security check.

How do I install Kesekit Check in Claude Code?

Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a claude-code`. Or copy the skill folder (skills/kesekit-check in cdppcorp/KESE-KIT) into .claude/skills/kesekit-check in your project. Claude Code loads it when a task matches its description.

How do I install Kesekit Check in Codex?

Run `npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a codex`. Or copy the skill folder (skills/kesekit-check in cdppcorp/KESE-KIT) into .agents/skills/kesekit-check in your project. Codex loads it when a task matches its description.

Can I use Kesekit Check in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add cdppcorp/KESE-KIT --skill kesekit-check -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/kesekit-check, .gemini/skills/kesekit-check, .github/skills/kesekit-check and .opencode/skills/kesekit-check in your project.

What does Kesekit Check need to run?

SKILL.md names no scripts, command-line tools or credentials: Kesekit Check is instructions for the agent only. Our summary lists: Python 3.

Does Kesekit Check access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Kesekit Check safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. The check reads SKILL.md only: the scripts in the folder are not scanned, so read them before running anything.

What licence does Kesekit Check use?

Kesekit Check is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Kesekit Check use?

About 1.3k tokens (SKILL.md is roughly 5.2k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 16k tokens, read only when the agent opens those files.

What are the alternatives to Kesekit Check?

Skills that share tags, products or a category with Kesekit Check: AI SAFE2 Secure Build Copilot (CyberStrategyInstitute/ai-safe2-framework, 146 stars), Cso (no-session/pstack, 135 stars), Security Audit 2 (sundial-org/awesome-openclaw-skills, 663 stars) and Skill Scanner (getsentry/skills, 1k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Kesekit Check?

cdppcorp (a GitHub organization) maintains it in cdppcorp/KESE-KIT, which has 361 GitHub stars. The repository holds 8 skills in this directory. The repository was last updated on April 9, 2026.

Source: cdppcorp/KESE-KIT on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.

Install Kesekit Check

Facts

At a glance

What it does

When your agent uses it

Example prompts

Requirements

What it can do on your machine

Tool permissions

Runs code

Network

Credentials

Context cost

Safety

SKILL.md

KESE Pre-Deployment Security Compliance Checklist

Guideline Selection

CII Branch

AI Security Branch

Robot Security Branch

Space Security Branch

Secure Coding Branch

Zero Trust Branch

SW Supply Chain Branch

Rules

Files

Compare with similar skills

Similar skills

More from cdppcorp/KESE-KIT

Related

Questions about Kesekit Check