Use when needing to produce a work output document -- threat models, playbooks, checklists, architecture docs, reports, and other security deliverables
Produce real work output documents. These are deliverables the user gives to their boss or team -- not learning materials.
Receives the document type and context from the current work.
# Threat Model: <system name>
## System Overview
<brief architecture description>
## Assets
| Asset | Classification | Owner |
|-------|---------------|-------|
## Threat Actors
| Actor | Motivation | Capability |
|-------|-----------|------------|
## Threats (STRIDE)
| Category | Threat | Affected Component | Likelihood | Impact | Risk |
|----------|--------|--------------------|-----------|--------|------|
## Mitigations
| Threat | Mitigation | Status | Priority |
|--------|-----------|--------|----------|
## Residual Risks
<risks accepted or not yet mitigated>
# Playbook: <procedure name>
## Purpose
<when to use this playbook>
## Prerequisites
- <required access, tools, knowledge>
## Steps
1. <step with specific commands/actions>
2. <step>
## Decision Points
- If <condition>: <action>
- If <condition>: <action>
## Escalation
<when and how to escalate>
## Post-Incident
<follow-up actions>
# Checklist: <topic>
## <Category>
- [ ] <item with specific criteria>
- [ ] <item>
## <Category>
- [ ] <item>
# Security Review: <system name>
## Architecture Overview
<description + diagram if possible>
## Security Controls
| Layer | Control | Status | Notes |
|-------|---------|--------|-------|
## Findings
### Finding 1: <title>
**Severity:** Critical / High / Medium / Low
**Component:** <affected component>
**Description:** <what's wrong>
**Recommendation:** <how to fix>
**Reference:** <OWASP, CIS, NIST reference>
## Summary
| Severity | Count |
|----------|-------|
| Critical | N |
| High | N |
| Medium | N |
| Low | N |
# <Report Title>
**Date:** <date>
**Author:** <name>
**Status:** Draft
## Executive Summary
<2-3 sentences for leadership>
## Scope
<what was covered>
## Methodology
<approach taken>
## Findings
<detailed findings>
## Recommendations
| Priority | Recommendation | Effort | Impact |
|----------|---------------|--------|--------|
## Next Steps
<action items>
topics/<current-topic>/deliverables/<slug>.md<!-- TODO: ... --> only for information the user needs to fill in (not for things you should know)