security-baseline

name	security-baseline
description	Create a practical startup security baseline covering secrets, authentication, authorization, backups, logging, dependency updates, access control, incident response, and customer trust.
version	0.1.0

Security Baseline

Use this skill before launch or customer onboarding.

Workflow

1. Identify sensitive data, user roles, integrations, and threat exposure.
2. Check secrets, auth, permissions, data retention, backups, logs, monitoring, dependencies, admin access, and support tooling.
3. Prioritize fixes by customer trust and exploitability.
4. Draft a plain-English security posture for customers or investors.

Output

Return Security checklist, Critical fixes, 30-day baseline, Customer answers, and Incident prep.