secure-by-design
Secure by Design principles knowledge base for assessing security-first design, development, and deployment across the software lifecycle.
Resources
1Install
npx skillscat add microsoft/hve-core/secure-by-design Install via the SkillsCat registry.
This skill provides a structured knowledge base of Secure by Design principles from UK and Australian government sources, enabling assessment of security practices across the software lifecycle. It helps identify gaps in security-first design, development, and deployment processes. Developers and agents should use it when evaluating or improving software security adherence from initial design through continuous operation.
Secure by Design — Skill Entry
This SKILL.md is the entrypoint for the Secure by Design skill.
The skill synthesizes the UK Government Secure by Design Principles (10 principles) and the
Australian ASD/ACSC Secure by Design Foundations (6 foundations) into structured,
machine-readable references that an agent can query to identify, assess, and improve adherence to
secure-by-design practices across the software lifecycle.
Normative references (Secure by Design)
- 00 Principle Index
- 01 Security Governance
- 02 Risk-Driven Approach
- 03 Secure Product Development
- 04 Supply Chain Security
- 05 Usable Security Controls
- 06 Detect and Respond
- 07 Flexible Architecture
- 08 Minimize Attack Surface
- 09 Defense in Depth
- 10 Continuous Assurance
- 11 Secure Deprecation
Skill layout
SKILL.md— this file (skill entrypoint).references/— the Secure by Design normative documents.00-principle-index.md— index of all principle identifiers, categories, source mappings, and cross-references.01through11— one document per synthesized principle area merging UK and AU guidance.
Third-Party Attribution
UK Government Secure by Design Principles
- Copyright: Crown Copyright, UK Government Security Group
- License: Open Government Licence v3.0 (OGL-UK-3.0)
- Source: https://www.security.gov.uk/policy-and-guidance/secure-by-design/principles/
- Modifications: Synthesized into structured principle-checklist format with cross-references; merged with Australian guidance into unified principle areas
- Trademark: Use of UK Government content does not imply endorsement
Australian ASD/ACSC Secure by Design Foundations
- Copyright: © Commonwealth of Australia, Australian Signals Directorate
- License: Creative Commons Attribution 4.0 (CC-BY-4.0)
- Source: https://www.cyber.gov.au/business-government/secure-design/secure-by-design/secure-by-design-foundations
- Modifications: Synthesized into structured principle-checklist format with cross-references; merged with UK guidance into unified principle areas
- Trademark: Use of ASD/ACSC content does not imply endorsement
Install
npx skillscat add microsoft/hve-core/secure-by-design Install via the SkillsCat registry.
Repository Stars
The star count shown is for the parent repository (microsoft/hve-core), not this specific skill.
.github/skills/security/secure-by-design