Security Bluebook Builder

If you've ever needed to write a real security policy but didn't want to copy-paste a 50-page template full of enterprise boilerplate, this walks you through building a concise Blue Book with MUST/SHOULD/CAN language, explicit threat models, and actual go/no-go gates. It asks six targeted questions about data classes, trust boundaries, auth, storage, third parties, and retention, then fills a template with enforceable controls, incident runbooks, and audit policies. The output is designed to be minimal but defensible, with TODOs marked where assumptions are needed. It's aimed at sensitive apps where you need something grounded in scope and operational defaults, not generic checklists.

skills.sh installs: 215
GitHub stars: 39.4K
last updated: Jun 3, 2026

View on GitHub

Install

$ npx -y skills add sickn33/antigravity-awesome-skills --skill security-bluebook-builder --agent claude-code

Installs into .claude/skills of the current project.

Files

Supporting material availability

This catalog copy contains the inline guidance below, but does not include the following supporting paths. They are external prerequisites, not bundled files:

<support-root>/references/bluebook_template.md

Ask for the original supporting material or an existing installation before using a step that depends on these paths; this catalog does not identify a verified download source for them. Resolve each path relative to that installation, inspect its contents, and verify any applicable license and execution prerequisites. Do not run a command or claim a referenced procedure was followed until its required file exists. Do not fabricate the missing scripts or treat an unrelated file with the same name as equivalent. Independent steps fully documented here can proceed within the user’s authorized scope; report any dependent step as unavailable.