bgr-3-create-security-plan
Create security plan covering threat modeling, security controls, authentication/authorization strategy, data protection, and compliance mapping. Use when the user says "create security plan" or "define threat model" or "map compliance requirements"
- License 许可
- MIT
- 最近更新
- 2026-11-11
- Stars
- ★ 4
- Forks
- 1
01 前言 Front Matter
- name
- bgr-3-create-security-plan
- description
- Create security plan covering threat modeling, security controls, authentication/authorization strategy, data protection, and compliance mapping. Use when the user says "create security plan" or "define threat model" or "map compliance requirements"
02 资源文件 9
- 参考文档bmad-skill-manifest.yaml12 B
- 参考文档steps/step-01-init.md8.6 KB
- 参考文档steps/step-01b-continue.md6.0 KB
- 参考文档steps/step-02-threat-modeling.md9.7 KB
- 参考文档steps/step-03-security-controls.md13.6 KB
- 参考文档steps/step-04-compliance-mapping.md12.4 KB
- 参考文档steps/step-05-validation.md12.8 KB
- 参考文档templates/security-plan-template.md3.5 KB
- 参考文档workflow.md2.5 KB
03 SKILL.md 正文
Follow the instructions in ./workflow.md.
04 同仓库更多 Skills
bmad-testarch-trace
Generate traceability matrix and quality gate decision. Use when the user says "lets create traceability matrix" or "I want to analyze test coverage"
bmad-testarch-test-review
Review test quality using best practices validation. Use when user says "lets review tests" or "I want to evaluate test quality"
bmad-testarch-test-design
Create system-level or epic-level test plans. Use when the user says "lets design test plan" or "I want to create test strategy"
bmad-testarch-nfr
Audit NFR evidence for performance, security, reliability, and scalability. Use when implementation evidence exists and the user says "audit NFR evidence", "audit NFRs", or "evaluate non-functional requirements"
bmad-testarch-framework
Initialize test framework with Playwright or Cypress. Use when the user says "lets setup test framework" or "I want to initialize testing framework"
bmad-testarch-ci
Scaffold CI/CD quality pipeline with test execution. Use when the user says "lets setup CI pipeline" or "I want to create quality gates"