AI安全文档生成工具 | 一键创建合规策略、安全指南与最佳实践

security-documentation by aj-geddes/useful-ai-prompts

158 周安装量

160 GitHub Stars

GitHub

安装命令

npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill security-documentation

自动化技术文档安全

🇨🇳中文介绍

安全文档

概述

创建全面的安全文档，包括策略、指南、合规性要求以及安全应用开发和运维的最佳实践。

使用场景

安全策略
合规文档（SOC 2、GDPR、HIPAA）
安全指南和最佳实践
事件响应计划
访问控制策略
数据保护策略
漏洞披露策略
安全审计报告

快速开始

最小工作示例：

# Security Policy

**Version:** 2.0
**Last Updated:** 2025-01-15
**Review Schedule:** Quarterly
**Owner:** Security Team
**Contact:** security@example.com

## Table of Contents

1. [Overview](#overview)
2. [Scope](#scope)
3. [Authentication & Access Control](#authentication--access-control)
4. [Data Protection](#data-protection)
5. [Application Security](#application-security)
6. [Infrastructure Security](#infrastructure-security)
7. [Incident Response](#incident-response)
8. [Compliance](#compliance)
9. [Security Training](#security-training)

---

## 1. Overview

### Purpose
// ... (see reference guides for full implementation)

参考指南

目录下的详细实现：

广告位招租

在这里展示您的产品或服务

触达数万 AI 开发者，精准高效

联系我们

指南	内容
1 Password Requirements	1 密码要求
2 Multi-Factor Authentication (MFA)	2 多因素认证 (MFA)
3 Role-Based Access Control (RBAC)	3 基于角色的访问控制 (RBAC)
1 Secure Coding Practices	1 安全编码实践
2 Security Headers	2 安全头部，3 API 安全

🇺🇸English

Security Documentation

Overview
When to Use
Quick Start
Reference Guides
Best Practices

Overview

Create comprehensive security documentation including policies, guidelines, compliance requirements, and best practices for secure application development and operations.

When to Use

Security policies
Compliance documentation (SOC 2, GDPR, HIPAA)
Security guidelines and best practices
Incident response plans
Access control policies
Data protection policies
Vulnerability disclosure policies
Security audit reports

Quick Start

Minimal working example:

# Security Policy

**Version:** 2.0
**Last Updated:** 2025-01-15
**Review Schedule:** Quarterly
**Owner:** Security Team
**Contact:** security@example.com

## Table of Contents

1. [Overview](#overview)
2. [Scope](#scope)
3. [Authentication & Access Control](#authentication--access-control)
4. [Data Protection](#data-protection)
5. [Application Security](#application-security)
6. [Infrastructure Security](#infrastructure-security)
7. [Incident Response](#incident-response)
8. [Compliance](#compliance)
9. [Security Training](#security-training)

---

## 1. Overview

### Purpose
// ... (see reference guides for full implementation)

Reference Guides

Detailed implementations in the references/ directory:

Guide	Contents
1 Password Requirements	1 Password Requirements
2 Multi-Factor Authentication (MFA)	2 Multi-Factor Authentication (MFA)
3 Role-Based Access Control (RBAC)	3 Role-Based Access Control (RBAC)
1 Secure Coding Practices	1 Secure Coding Practices
2 Security Headers	2 Security Headers, 3 API Security

Best Practices

✅ DO

Follow principle of least privilege
Encrypt sensitive data
Implement MFA everywhere
Log security events
Regular security audits
Keep systems updated
Document security policies
Train employees regularly
Have incident response plan
Test backups regularly

❌ DON'T

Store passwords in plaintext
Skip input validation
Ignore security headers
Share credentials
Hardcode secrets in code
Skip security testing
Ignore vulnerability reports

Weekly Installs

137

Repository

aj-geddes/usefu…-prompts

GitHub Stars

144

First Seen

Jan 21, 2026

Security Audits

Gen Agent Trust HubPass SocketPass SnykPass

Installed on

opencode113

gemini-cli111

codex109

claude-code108

cursor104

github-copilot97