Skip to content

INDEX.md

Latest commit

 

History

History
306 lines (227 loc) · 14.6 KB

INDEX.md

File metadata and controls

306 lines (227 loc) · 14.6 KB

Hack23 Skills Library - Index

This index catalogs all available skills in the Hack23 ecosystem for GitHub Copilot to reference when generating code, documentation, or configurations.

Purpose

Skills are reusable knowledge units that encode Hack23's security policies, architecture patterns, quality standards, and compliance requirements. Each skill provides explicit, actionable rules that GitHub Copilot can apply during development.

Skills Catalog

Security Skills (8 skills)

Based on Hack23 ISMS-PUBLIC policies:

  • Secure Development - Security-by-design principles, input validation, secure authentication, cryptographic best practices
  • Access Control - Least privilege, RBAC, authentication, authorization, session management
  • Data Classification - Classification levels (Public, Internal, Confidential, Restricted), handling requirements
  • Cryptography - Approved algorithms, TLS enforcement, key management, certificate handling
  • Incident Response 🆕 - Security incident detection, analysis, containment, eradication, recovery per NIST SP 800-61r2
  • Secrets Management 🆕 - Zero-tolerance for hardcoded secrets, credential lifecycle, rotation, detection
  • Vulnerability Management 🆕 - Systematic vulnerability lifecycle with SLAs (Critical: 7d, High: 30d, Medium: 90d, Low: 180d)
  • Input Validation 🆕 - Comprehensive input validation and output encoding to prevent injection attacks

Architecture Skills (3 skills)

Based on C4 model and Hack23 documentation standards:

Quality Skills (3 skills)

Based on web standards and accessibility requirements:

Deployment Skills (2 skills)

Based on AWS and CI/CD best practices:

  • AWS S3/CloudFront - S3 configuration, CloudFront setup, security headers, SSL/TLS
  • GitHub Actions CI/CD - Workflow structure, security scanning, Lighthouse audits, deployment automation

Compliance Skills (4 skills)

Based on ISO 27001, NIST CSF, CIS Controls, GDPR, and regulatory requirements:

  • ISO 27001 - ISO 27001:2022 requirements, control implementation, documentation, audit preparation
  • GDPR Compliance - Privacy by design, data protection, consent management, breach response
  • NIST CSF 2.0 🆕 - NIST Cybersecurity Framework 2.0 mapping (Govern, Identify, Protect, Detect, Respond, Recover)
  • CIS Controls v8.1 🆕 - CIS Controls implementation by Implementation Group, security baselines

Operations Skills (4 skills) 🆕

Based on Hack23 ISMS-PUBLIC operational policies:

Governance Skills (7 skills) 🆕

Based on Hack23 ISMS-PUBLIC governance frameworks:

Business Skills (3 skills) 🆕

Strategic business development and marketing expertise:

  • Business Strategy - Strategic business growth, market positioning, client acquisition, partnership development, revenue optimization
  • Content Marketing - B2B content marketing, demand generation, SEO content creation, thought leadership
  • Brand Voice & Tone - Hack23 brand voice, tone, messaging guidelines, content style standards

Intelligence Skills (2 skills) 🆕

OSINT and ethical information operations:

  • OSINT Methods - Open Source Intelligence collection, analysis, verification, GDPR compliance
  • Ethical Information Operations - Ethical information operations, strategic communication, counter-disinformation, transparency advocacy

Development Skills (3 skills) 🆕

Testing, code review, and security review best practices:

  • Testing Strategy - Comprehensive testing: unit, integration, E2E, security, accessibility, performance
  • Code Review Practices - Code review standards, quality gates, security checks, constructive feedback
  • Secure Code Review 🆕 - Security-focused code review ensuring vulnerabilities are caught before deployment

Documentation Skills (2 skills) 🆕

Product and API documentation standards:

Integration Skills (7 skills) 🆕

MCP servers, agent patterns, and GitHub Agentic Workflows:

Skills by Agent

task-agent (Orchestration)

  • All skills (comprehensive analysis and delegation)
  • Particularly: business-strategy, copilot-agent-patterns, mcp-server-integration

ui-enhancement-specialist

  • html-css-best-practices
  • accessibility-wcag
  • seo-optimization
  • c4-modeling
  • secure-development

marketing-specialist

  • seo-optimization
  • content-marketing
  • brand-voice-tone
  • html-css-best-practices
  • gdpr

business-development-specialist

  • business-strategy
  • content-marketing
  • brand-voice-tone
  • iso-27001
  • security-architecture

political-analyst

  • osint-methods
  • ethical-information-ops
  • gdpr
  • data-classification

george-dorn (Developer)

  • testing-strategy
  • code-review-practices
  • secure-development
  • access-control
  • github-actions-cicd

simon-moon (Architect)

  • c4-modeling
  • security-architecture
  • documentation-portfolio
  • api-documentation
  • cryptography

hagbard-celine (Product Owner)

  • product-documentation
  • business-strategy
  • content-marketing
  • documentation-portfolio

How to Use Skills

For GitHub Copilot

Skills are automatically loaded when working in the Hack23 repositories. Copilot will reference these skills to:

  • Generate secure code following ISMS policies
  • Create compliant architecture documentation
  • Implement accessible and performant web interfaces
  • Configure secure deployment pipelines
  • Ensure regulatory compliance
  • Execute business and marketing strategies
  • Conduct ethical intelligence operations
  • Design and orchestrate custom agents

For Developers

  1. Reference skills before starting new work to understand requirements
  2. Cite specific skills in PR descriptions to show compliance
  3. Update skills when policies or standards change
  4. Propose new skills for emerging technologies or practices

For Custom Agents

Agents should document which skills they leverage in their profile:

## 🎯 Skills Integration

This agent leverages these skills:
- **Secure Development** - Security-by-design principles
- **Testing Strategy** - Comprehensive testing approach
- **Code Review Practices** - Quality gates and feedback

Skill Structure

Each skill follows this structure:

---
name: skill-name
description: When and why to use this skill
license: Apache-2.0
---

# Skill Name

## Purpose
Why this skill exists and when to apply it

## Rules
Explicit, concrete rules (MUST/MUST NOT)

## Examples
Code, configuration, or documentation examples

## Related Policies
Links to ISMS policies

## Related Documentation
Links to project documentation

Skills Statistics

Total Skills: 58 skills (expanded from 48)

  • Security: 18 skills (8 core + 10 policy-specific; expanded with incident-response, secrets-management, vulnerability-management, input-validation)
  • Architecture: 3 skills
  • Quality: 3 skills
  • Deployment: 2 skills
  • Compliance: 4 skills (expanded from 2 with nist-csf, cis-controls)
  • Operations: 4 skills
  • Governance: 7 skills (expanded from 5 with information-security-strategy, compliance-checklist)
  • Business: 3 skills
  • Intelligence: 2 skills
  • Development: 3 skills (expanded from 2 with secure-code-review)
  • Documentation: 2 skills
  • Integration: 7 skills

Maintenance

Skills are maintained by:

  • Security Skills: Security team, updated when ISMS policies change
  • Architecture Skills: Architecture team, updated when patterns evolve
  • Quality Skills: Quality team, updated when standards change
  • Deployment Skills: DevOps team, updated when infrastructure changes
  • Compliance Skills: Compliance team, updated when regulations change
  • Business Skills: Business development and marketing teams
  • Intelligence Skills: OSINT and strategic communication teams
  • Development Skills: Engineering and QA teams
  • Documentation Skills: Technical writers and product teams
  • Integration Skills: DevOps and agent development teams

Version History

  • 2026-02-20: Cross-repository skills expansion

    • Added 9 cross-repo skills from Hack23 organization
    • Total skills: 58 (from 48)
    • New Security skills: incident-response, secrets-management, vulnerability-management, input-validation
    • New Compliance skills: nist-csf, cis-controls
    • New Governance skills: information-security-strategy, compliance-checklist
    • New Development skills: secure-code-review
    • Skills consolidated from cia, blacktrigram, cia-compliance-manager, European-Parliament-MCP-Server, game, riksdagsmonitor repos

  • 2026-02-11: GitHub Agentic Workflows skills addition 🌟

    • Added 5 comprehensive skills for GitHub Agentic Workflows
    • Total skills: 48 (from 43)
    • New skills:
      • GitHub Agentic Workflows (core fundamentals)
      • Agentic Workflow Security (defense-in-depth, threat detection)
      • Agentic Workflow Orchestration (multi-agent coordination)
      • Agentic Workflow Development (CLI, testing, debugging)
      • Continuous AI Patterns (automation patterns, best practices)
    • Based on latest 2026 GitHub Agentic Workflows features and documentation
    • Covers complete lifecycle: design, security, orchestration, development, continuous AI

  • 2026-02-10: Major skills library expansion

    • Expanded from 23 to 43 skills across 11 categories
    • New categories: Operations (4), Governance (5)
    • Security expanded from 4 to 14 skills
    • All skills reference ISMS-PUBLIC policies

  • 2026-02-06: Mid-size skills expansion

    • Added 9 new skills across 5 new categories
    • Total skills: 23 (from 14)
    • New categories: Business (3), Intelligence (2), Development (2), Documentation (2), Integration (2)
    • Enhanced agent-to-skill mappings

  • 2025-01-24: Initial skills library creation

    • 14 skills covering security, architecture, quality, deployment, and compliance
    • Based on ISMS-PUBLIC policies and Hack23 standards

License

All skills are licensed under Apache-2.0, consistent with Hack23's open-source commitment.