AI Company CISO

核心功能涵盖安全架构搭建、STRIDE威胁建模、CVSS漏洞评分、安全审核审批、渗透测试、事件响应等全流程安全管控。典型场景包括安全评审触发、威胁评估、漏洞定级、应急危机处理等。输入为含任务描述的对象（可选上下文），输出含操作结果及详细报告，触发特定风险时返回对应错误码。

johnsmithfan

热度 53.90

最近更新 2026-04-27 01:36:49

分类：安全依赖：读写文件 / 第三方 API / MCP 服务 / 内部调用大模型应用场景：incident-response / 报告撰写 / 工作流

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add ai-company-ciso

Metadata

name: AI Company CISO
slug: ai-company-ciso
version: 3.0.0
homepage: https://clawhub.com/skills/ai-company-ciso
description: CISO skill: Security architecture, STRIDE threat modeling, CVSS scoring, security review pipeline, approval gate, penetration testing, incident response, CEO-EXEC crisis channel.
license: MIT-0
install: {"requires":[],"verify_command":"python -c \"print('ok')\""}
dependencies: {"runtime":["python3.9+"],"skills":["ai-company-hq","ai-company-cto","ai-company-harness"]}
tags: ["ai-company","ciso","security","stride","cvss","penetration-testing","incident-response","approval-gate"]
triggers: ["security review","STRIDE assessment","CVSS scoring","penetration testing","incident response","security gate","threat modeling"]
interface: {"inputs":{"type":"object","schema":{"type":"object","properties":{"task":{"type":"string","description":"Task description"},"context":{"type":"object","description":"Optional context information"}},"required":["task"]}},"outputs":{"type":"object","schema":{"type":"object","properties":{"result":{"type":"string","description":"Operation result"},"report":{"type":"object","description":"Detailed report data"}},"required":["result"]}},"errors":[{"code":"CISO_001","message":"Security gate blocked"},{"code":"CISO_002","message":"CVSS score critical"},{"code":"CISO_003","message":"STRIDE threat detected"},{"code":"CISO_004","message":"Incident response required"}]}
permissions: {"files":["read","write"],"network":["api"],"commands":[],"mcp":["sessions_send","subagents"]}
quality: {"saST":"Pass","vetter":"Approved","idempotent":true}
metadata: {"category":"security","layer":"AGENT","cluster":"ai-company","maturity":"STABLE","license":"MIT-0","standardized":true,"department":"security-and-compliance","merged_from":["ai-company-ciso","ai-company-ciso-security-gate"]}

AI Company CISO v3.0.0

Index & Quick Reference. Full specifications in references/method-patterns.md.

Quick Reference

Role

AI Company CISO — CISO skill: Security architecture, STRIDE threat modeling, CVSS scoring, security review pipeline, approval gate, penetration testing, incident response, CEO-EXEC crisis channel.

Department

Security & Compliance

Merged From

[ai-company-ciso, ai-company-ciso-security-gate]

Section Index

Dependencies

See frontmatter dependencies.skills for complete dependency list.

Error Codes

See frontmatter interface.errors for complete error code reference.

Prompts

Copy-paste ready prompts in prompts/:

Changelog

Version	Date	Changes
3.0.0	2026-04-26	Full English rewrite; department-aligned structure; merged skills consolidated

This skill follows AI Company Governance Framework. See references/method-patterns.md for complete specifications.

Integration & Merge History

v3.0.0 Rebuild (2026-04-26)

This skill was created by merging multiple predecessor skills into a unified department-aligned structure.

Department: Security & Compliance

Merged From (2 skills total):

CISO (primary)
ai-company-ciso-security-gate

Merge Rationale:

Consolidate related capabilities under single department owner
Reduce skill count from 47 to 15 for better maintainability
Preserve all functionality while improving discoverability
Standardize structure: SKILL.md (index) + references/method-patterns.md (details)

Integration Points:

All predecessor skill triggers preserved in unified trigger list
All predecessor interfaces consolidated with consistent error codes
Dependencies unified and simplified
Prompts merged and organized by function

Migration Guide:

Previous skill users: Use new unified skill slug ai-company-ciso
All functionality from predecessor skills is available
Error codes may have changed - see Error Codes section
Prompts are now user copy-paste ready (not auto-call)

Department Integration Process

For detailed integration process and checklist, see references/department-integration-process.md.

This skill follows AI Company Governance Framework. See references/method-patterns.md for complete specifications.