New: 98,000+ skills indexed from GitHub repos with 100+ stars · every skill safety-checkedBrowse top skillsTop skills
Esc to closeBrowse all skills
Submit a skillBrowse skills
Submit a skillBrowse skills

Agent skill

Security Bluebook Builder

by sickn33 in sickn33/agentic-awesome-skills

Build a minimal but real security policy for sensitive apps.

MITAuto-check passed

Install Security Bluebook Builder

skills CLI
$ npx skills add sickn33/agentic-awesome-skills --skill security-bluebook-builder -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install sickn33/agentic-awesome-skills security-bluebook-builder --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/sickn33/agentic-awesome-skills.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/security-bluebook-builder .claude/skills/security-bluebook-builder && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
security-bluebook-builder
GitHub stars
47k
Used in
2 other repos
Token cost
~710 tokens
SKILL.md length
341 words
Files
1
Skills in repo
1,493
Repo updated
First seen
Licence
MIT

At a glance

Build a minimal but real security policy for sensitive apps.

  • Works in 4 steps: Gather inputs (ask only if missing) → Draft the Blue Book → Enforce guardrails → …
  • SKILL.md covers When to Use, Overview, Workflow and Resources, plus 2 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Security Bluebook Builder is an agent skill from sickn33/agentic-awesome-skills. Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

Its SKILL.md is about 710 tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.

The repository describes itself as: AAS Core is the local, agent-first control plane for complete catalog discovery, agent-owned selection, stack validation, and planning, backed by 2,400+ agentic skills. Includes… The licence is MIT.

Example prompts

  • “/security-bluebook-builder”

Workflow steps

4 steps, taken from the step headings in SKILL.md.

  1. Gather inputs (ask only if missing)
  2. Draft the Blue Book
  3. Enforce guardrails
  4. Quality checks

What it can do on your machine

Read from SKILL.md and the folder at commit 680176d. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Security Bluebook Builder loads about 710 tokens when it runs. Until then it costs about 56 tokens; SKILL.md has 341 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~56
When it runs · the whole SKILL.md, loaded when a task matches
~710

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from sickn33/agentic-awesome-skills at commit 680176d, republished under its MIT licence (© sickn33). 341 words, ~710 tokens.

Download SKILL.mdSave it as .claude/skills/security-bluebook-builder/SKILL.md (or your agent's skills folder).
name
security-bluebook-builder
description
Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.
risk
safe
source
community
date_added
2026-09-04

Security Bluebook Builder

When to Use

  • You need a concise but enforceable security policy for an app handling sensitive data.
  • You want a single Blue Book document with explicit assumptions, controls, and go/no-go gates.
  • The user needs policy guidance grounded in scope, threat model, and operational security defaults rather than generic advice.

Overview

Build a minimal but real security policy for sensitive apps. The output is a single, coherent Blue Book document using MUST/SHOULD/CAN language, with explicit assumptions, scope, and security gates.

Workflow

1) Gather inputs (ask only if missing)

Collect just enough context to fill the template. If the user has not provided details, ask up to 6 short questions:

  • What data classes are handled (PII, PHI, financial, tokens, content)?
  • What are the trust boundaries (client/server/third parties)?
  • How do users authenticate (OAuth, email/password, SSO, device sessions)?
  • What storage is used (DB, object storage, logs, analytics)?
  • What connectors or third parties are used?
  • Retention and deletion expectations (default + user-initiated)?

If the user cannot answer, proceed with safe defaults and mark TODOs.

2) Draft the Blue Book

Load references/bluebook_template.md and fill it with the provided details. Keep it concise, deterministic, and enforceable.

3) Enforce guardrails
  • Do not include secrets, tokens, or internal credentials.
  • If something is unknown, write "TODO" plus a clear assumption.
  • Fail closed: if a capability is required but unavailable, call it out explicitly.
  • Keep scope minimal; do not add features or tools beyond what the user asked for.
4) Quality checks

Confirm the Blue Book includes:

  • Threat model (assumptions + out-of-scope)
  • Data classification + handling rules
  • Trust boundaries + controls
  • Auth/session policy
  • Token handling policy
  • Logging/audit policy
  • Retention/deletion
  • Incident response mini-runbook
  • Security gates + go/no-go checklist

Resources

  • references/bluebook_template.md

Example

User request:

Create a concise, enforceable security policy for this sensitive application using explicit MUST, SHOULD, and CAN requirements.

Limitations

  • Use this skill only when the task clearly matches the scope described above.
  • Do not treat the output as a substitute for environment-specific validation, testing, or expert review.
  • Stop and ask for clarification if required inputs, permissions, safety boundaries, or success criteria are missing.

© sickn33, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

Just SKILL.md in skills/security-bluebook-builder of sickn33/agentic-awesome-skills.

Open the folder on GitHubat commit 680176d

Used in 2 other repositories

We found 11 copies of this SKILL.md (exact, near-identical or edited) in other folders, from 2 other GitHub owners. This page covers the copy in sickn33/agentic-awesome-skills, which our catalogue first saw on October 7, 2026.

Compare with similar skills

Security Bluebook Builder next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Security Bluebook Builder compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Security Bluebook Builder this skillsickn33/agentic-awesome-skills47k2 repos~710Automated safety check: PassMIT
Implementing Policy As Code With Open Policy Agentmukul975/Anthropic-Cybersecurity-Skills34k—~2.6kAutomated safety check: NotesApache-2.0
Privacy Policythedaviddias/Front-End-Checklist74k—~617Automated safety check: PassMIT
Referrer Policythedaviddias/Front-End-Checklist74k—~599Automated safety check: PassMIT
Editorial Policythedaviddias/Front-End-Checklist74k—~763Automated safety check: PassMIT
Policy Draftinganthropics/claude-for-legal9.6k2 repos~1.4kAutomated safety check: PassApache-2.0

Similar skills

  • Implementing Policy As Code With Open Policy Agent

    mukul975/Anthropic-Cybersecurity-Skills

    Implements policy-as-code enforcement with Open Policy Agent (OPA) and Gatekeeper for Kubernetes and CI/CD pipelines, covering writing Rego policies, deploying OPA Gatekeeper as a Kubernetes…

    34k GitHub stars~2.6k tokensUpdated 1 mo ago
    DevOps & CloudAuto-check: notes

  • Privacy Policy

    thedaviddias/Front-End-Checklist

    A skill your agent uses when reviewing whether a website has a visible, accessible privacy policy link, particularly in the footer navigation.

    74k GitHub stars~617 tokensUpdated 2 days ago
    Legal & ComplianceAuto-check passed

  • Referrer Policy

    thedaviddias/Front-End-Checklist

    A skill your agent uses when reviewing HTTP response headers for privacy hardening on any website that handles authentication, session state, or sensitive URL parameters.

    74k GitHub stars~599 tokensUpdated 2 days ago
    Agent WorkflowsAuto-check passed

  • Editorial Policy

    thedaviddias/Front-End-Checklist

    A skill your agent uses when auditing a blog, news site, or YMYL content site for trust signals, drafting editorial policy page content, or evaluating whether a site meets Google's quality rater…

    74k GitHub stars~763 tokensUpdated 2 days ago
    Auto-check passed

  • Policy Drafting

    anthropics/claude-for-legal

    Official

    Draft an employment policy with state supplements where law differs across the jurisdictional footprint.

    9.6k GitHub starsUsed in 2 repos~1.4k tokens
    Legal & ComplianceAuto-check passed

  • Team Builder

    affaan-m/ECC

    Interactive picker that discovers available agent personas via the claude agents command and agents/ markdown globs, groups them into domains, has the user select up to five, dispatches them in…

    276k GitHub starsUsed in 1 repo~1.8k tokens
    Agent WorkflowsAuto-check passed

More from sickn33/agentic-awesome-skills

All 1,493 skills in this repo

  • Liuguang Banlan UI

    sickn33/agentic-awesome-skills

    Implements an interface in one of two named color modes, iridescent white or colorful black, from a parameterized starter that reports measured color intensity.

    47k GitHub starsUsed in 1 repo~2.5k tokens
    Auto-check passed

  • User Thoughts Memory

    sickn33/agentic-awesome-skills

    Saves a user's project decisions, rules and preferences into a project-local mdbase so later sessions and other agents can recover the intent.

    47k GitHub starsUsed in 1 repo~2.5k tokens
    Auto-check passed

  • Using LWC Memory and Graphs

    sickn33/agentic-awesome-skills

    Keeps project decisions, research and verified results available across coding-agent sessions through LWC memory, a document Wiki graph and a CodeGraph code index.

    47k GitHub starsUsed in 1 repo~2k tokens
    Auto-check passed

  • Find Complementary Founders

    sickn33/agentic-awesome-skills

    Guides an agent through assessing its own owner for cofounder fit, publishing an approved profile, and ranking complementary profiles other agents published for their owners.

    47k GitHub starsUsed in 1 repo~4.8k tokens
    Auto-check passed

  • Whatsapp Cloud API

    sickn33/agentic-awesome-skills

    Integracao com WhatsApp Business Cloud API (Meta). An agent skill from sickn33/agentic-awesome-skills.

    47k GitHub starsUsed in 2 repos~4.5k tokens
    Auto-check passed

  • Cline Pilot

    sickn33/agentic-awesome-skills

    Acts as a proxy for the Cline CLI, dispatching coding tasks one at a time, monitoring runs by hard evidence, relaying decisions to you and learning per-project preferences.

    47k GitHub starsUsed in 1 repo~4.6k tokens
    Auto-check passed

Questions about Security Bluebook Builder

What does Security Bluebook Builder do?

Build a minimal but real security policy for sensitive apps. Security Bluebook Builder is an agent skill from sickn33/agentic-awesome-skills. Build a minimal but real security policy for sensitive apps.

How do I install Security Bluebook Builder in Claude Code?

Run `npx skills add sickn33/agentic-awesome-skills --skill security-bluebook-builder -a claude-code`. Or copy the skill folder (skills/security-bluebook-builder in sickn33/agentic-awesome-skills) into .claude/skills/security-bluebook-builder in your project. Claude Code loads it when a task matches its description.

How do I install Security Bluebook Builder in Codex?

Run `npx skills add sickn33/agentic-awesome-skills --skill security-bluebook-builder -a codex`. Or copy the skill folder (skills/security-bluebook-builder in sickn33/agentic-awesome-skills) into .agents/skills/security-bluebook-builder in your project. Codex loads it when a task matches its description.

Can I use Security Bluebook Builder in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add sickn33/agentic-awesome-skills --skill security-bluebook-builder -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/security-bluebook-builder, .gemini/skills/security-bluebook-builder, .github/skills/security-bluebook-builder and .opencode/skills/security-bluebook-builder in your project.

What does Security Bluebook Builder need to run?

SKILL.md names no scripts, command-line tools or credentials: Security Bluebook Builder is instructions for the agent only.

Does Security Bluebook Builder access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Security Bluebook Builder safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Security Bluebook Builder use?

Security Bluebook Builder is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Security Bluebook Builder use?

About 710 tokens (SKILL.md is roughly 2.8k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Security Bluebook Builder?

Skills that share tags, products or a category with Security Bluebook Builder: Implementing Policy As Code With Open Policy Agent (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Privacy Policy (thedaviddias/Front-End-Checklist, 74k stars), Referrer Policy (thedaviddias/Front-End-Checklist, 74k stars) and Editorial Policy (thedaviddias/Front-End-Checklist, 74k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Security Bluebook Builder?

sickn33 (a GitHub user) maintains it in sickn33/agentic-awesome-skills, which has 47,379 GitHub stars. The repository holds 1,493 skills in this directory. The repository was last updated on October 9, 2026.

Source: sickn33/agentic-awesome-skills on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.