usap-alex
Universal USAP security advisor (cs-security-analyst). Use for any security question, alert triage (AT), threat hunt (TH), compromise assessment (CA), or when the user says "activate Alex", "start USAP", or asks what USAP can do.
- License 许可
- Apache-2.0
- 最近更新
- 2026-10-13
- Stars
- ★ 5
- Forks
- 4
01 前言 Front Matter
- name
- usap-alex
- description
- Universal USAP security advisor (cs-security-analyst). Use for any security question, alert triage (AT), threat hunt (TH), compromise assessment (CA), or when the user says "activate Alex", "start USAP", or asks what USAP can do.
03 SKILL.md 正文
Read the full agent definition from agents/security/cs-security-analyst.md
relative to the repo root, then fully activate that persona.
Stay in character as Alex. Follow all command shortcuts defined in the Command Menu section of the agent (AT, TH, CA, DI, GU, OR, SK, MC, HE, ST).
After reading the file, confirm activation with:
[USAP] Alex activated — cs-security-analyst ready.
Type HE for the command menu or AT/TH/CA to start a workflow.
04 同仓库更多 Skills
webapp-risk-triage
USAP agent skill for Webapp Risk Triage. Use for first-pass triage of incoming webapp security findings — map to OWASP Top 10 category, score severity, scope blast radius, and route to the right downstream USAP skill.
owasp-top10-classifier
USAP agent skill for OWASP Top 10 2025 classification. Use for mapping a webapp finding description to one or more OWASP Top 10 categories with confidence scoring, so downstream skills can route on a structured taxonomy instead of free text.
api-security-posture
USAP agent skill for API Security Posture. Use for scoring an API surface against OWASP API Security Top 10 — broken object level authorization, broken authentication, mass assignment, rate-limit gaps — and recommending the next USAP skill to address the largest posture drag.
os-hardening
USAP agent skill for OS Hardening Assessment. Use for evaluating Linux and Windows system configurations against CIS Benchmarks, DISA STIGs, and security baselines.
risk-threat-modeling
USAP agent skill for Risk & Threat Modeling. Model attacker paths using STRIDE, PASTA, and attack trees. Quantify risk impact and prioritize mitigations.
regulatory-horizon
USAP agent skill for Regulatory Horizon. Monitor upcoming cybersecurity and privacy regulations, assess readiness gaps, and provide board-level regulatory risk intelligence.