secure-by-design
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
Works with
--- name: secure-by-design description: Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle. license: MIT --- # Secure by Design — Skill Entry This `SKILL.md` is the **entrypoint** for the Secure by Design skill. The skill synthesizes the **UK Government Secure by Design Principles** (10 principles) and the **Australian ASD/ACSC Secure by Design Foundations** (6 foundations) into structured, machine-readable references that an agent can query to identify, assess, and improve adherence to secure-by-design practices across the software lifecycle. ## Normative references (Secure by Design) 1. [00 Principle Index](references/00-principle-index.md) 2. [01 Security Governance](references/01-security-governance.md) 3. [02 Risk-Driven Approach](references/02-risk-driven-approach.md) 4. [03 Secure Product Development](references/03-secure-product-development.md) 5. [04 Supply Chain Security](references/04-supply-chain-security.md) 6. [05 Usable Security Controls](references/05-usable-security-controls.md) 7. [06 Detect and Respond](references/06-detect-and-respond.md) 8. [07 Flexible Architecture](references/07-flexible-architecture.md) 9. [08 Minimize Attack Surface](references/08-minimize-attack-surface.md) 10. [09 Defense in Depth](references/09-defense-in-depth.md) 11. [10 Continuous Assurance](references/10-continuous-assurance.md) 12. [11 Secure Deprecation](references/11-secure-deprecation.md) ## Skill layout * `SKILL.md` — this file (skill entrypoint). * `references/` — the Secure by Design normative documents. * `00-principle-index.md` — index of all principle identifiers, categories, source mappings, and cross-references. * `01` through `11` — one document per synthesized principle area merging UK and AU guidance. ## Third-Party Attribution ### UK Government Secure by Design Principles * **Copyright**: Crown Copyright, UK Government Security Group * **License**: [Open Government Licence v3.0 (OGL-UK-3.0)](https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/) * **Source**: <https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/> * **Modifications**: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas * **Trademark**: Use of UK Government content does not imply endorsement ### Australian ASD/ACSC Secure by Design Foundations * **Copyright**: © Commonwealth of Australia, Australian Signals Directorate * **License**: [Creative Commons Attribution 4.0 (CC-BY-4.0)](https://creativecommons.org/licenses/by/4.0/) * **Source**: <https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations> * **Modifications**: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas * **Trademark**: Use of ASD/ACSC content does not imply endorsement
More Deployment & CI/CD skills
azure-enterprise-infra-planner
microsoft/azure-skills
Architect and provision enterprise Azure infrastructure from workload descriptions. For cloud architects and platform engineers planning networking, identity, security, compliance, and multi-resource topologies with WAF alignment. Generates Bicep or Terraform directly (no azd). WHEN: 'plan Azure infrastructure', 'architect Azure landing zone', 'design hub-spoke network', 'plan multi-region DR topology', 'set up VNets firewalls and private endpoints', 'subscription-scope Bicep deployment', 'Azure Backup for VM workloads'. PREFER azure-prepare FOR app-centric workflows.
azure-kubernetes-app-deploy
microsoft/azure-skills
Use when deploying an existing web application or API to an already-running Azure Kubernetes Service cluster. Detects the framework, generates a Dockerfile and Kubernetes manifests, validates against AKS Deployment Safeguards, and deploys with verification. WHEN: deploy app to AKS, deploy to existing AKS cluster, containerize app for Kubernetes, generate K8s manifests for Azure, set up CI/CD for AKS, my AKS deployment is failing safeguard checks, I have a Django/Express/Spring Boot app to run on AKS. DO NOT USE FOR: creating or provisioning an AKS cluster (use azure-kubernetes), assessing migration to AKS Automatic (use azure-kubernetes-automatic-readiness), or deploying to non-AKS targets like Web Apps, Container Apps, or Functions.
finetuning
microsoft/azure-skills
Fine-tune models on Microsoft Foundry using SFT (supervised), DPO (preference), or RFT (reinforcement with graders). Covers dataset preparation, training job submission, deployment, and evaluation. USE FOR: fine-tune, SFT, DPO, RFT, training data, grader, distillation, fine-tuned model, training job, large file upload, calibrate grader, deploy fine-tuned model, evaluate fine-tuned model. DO NOT USE FOR: general model deployment without fine-tuning (use deploy-model), agent creation (use agents), prompt optimization without training (use prompt-optimizer).
