/security-playbook-builder
Transform security context into prioritized controls, response runbooks, and compliance-ready documentation.
$ npx -y skills add frumu-ai/tandem --skill security-playbook-builder --agent claude-codeHow it fires
How this skill gets triggered: by you, by Claude, or both.
- Fires itselfAuto-invocation. Claude auto-loads it when your prompt matches the work.Auto-invocation is when the right skill fires by itself at the right moment, driven by a FLOW.md router and a hook, instead of you invoking it by name. It is the difference between a skill being installed and a skill actually getting used.Read the full definition →
- You can call itInvoke it directly when you want it.
- Slash command
/security-playbook-builder
Context preview
The summary Claude sees to decide when to auto-load this skill.
Transform security context into prioritized controls, response runbooks, and compliance-ready documentation.
SKILL.md
security-playbook-builder.SKILL.mdname: security-playbook-builder description: "Transform security context into prioritized controls, response runbooks, and compliance-ready documentation." version: "0.1.0" author: tandem compatibility: tandem tags: - security - risk - compliance requires: - markdown triggers: - security runbook - incident response - controls
Security Playbook Skill
Mission
Create a practical security playbook tailored to team size, threat model, and compliance requirements.
Inputs To Use First
- inputs/company_context.md
- inputs/team_profile.md
- inputs/threat_landscape.md
- inputs/compliance_requirements.md
- inputs/incident_response_procedures.md
Workflow
1. Map critical assets and attack surfaces. 2. Identify top threats and likely failure modes. 3. Prioritize controls by risk reduction and implementation cost. 4. Draft incident response runbook with clear ownership. 5. Align controls to compliance requirements.
Required Outputs
- outputs/security_context_summary.md
- outputs/threat_assessment.md
- outputs/priority_security_checklist.md
- outputs/team_runbook.md
- outputs/security_playbook_dashboard.html
Quality Bar
- Controls are specific, testable, and owner-assigned.
- Runbook includes detection, triage, containment, recovery.
- Compliance mappings are explicit and auditable.
- Recommendations are realistic for the team profile.
Tandem is the authority layer between AI agents and company tools: runtime policy for tools, memory, approvals, and audit trails.

