Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →borghei/ciso-advisor
Security leadership for growth-stage companies.
Passed 18 of 22 test cases with the skill, and 8 of 22 without it.
and 13 more in the full report
10 fixed8 passed either way4 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 10 test cases the skill fixed. Same model, same prompt, with and without the skill.
We need to run the CLI tool `scripts/security_posture_scorer.py` against a custom JSON assessment file named `audit_controls.json` to generate security posture scores across NIST CSF functions. What is the exact command-line invocation to run this analysis and output JSON?
| Checked | Without skill | With skill |
|---|---|---|
| Includes `--input audit_controls.json` in the command invocation. | Passed | Passed |
| Includes `--json` in the command invocation. | Missed | Passed |
The instructions your model reads when the skill loads.
Risk-based security frameworks for growth-stage companies. Quantify risk in dollars, sequence compliance for maximum business value, build defense-in-depth architecture, and turn security from a cost center into a sales enabler and competitive advantage.
CISO, security strategy, risk quantification, ALE, SLE, ARO, security posture, compliance roadmap, SOC 2, ISO 27001, HIPAA, GDPR, zero trust, defense in depth, incident response, board security reporting, vendor assessment, security budget, cyber risk, program maturity, penetration testing, vulnerability management, data classification, threat modeling, security awareness, phishing, MFA, IAM
Every security investment must be justified in business terms. "We need better security" is not a business case. "$800K expected annual loss from this unmitigated risk" is.
ALE = SLE x ARO
ALE = Annual Loss Expectancy (expected cost per year)
SLE = Single Loss Expectancy (cost if the event occurs once)
ARO = Annual Rate of Occurrence (probability of occurrence per year)
| Risk ID | Threat | Asset | SLE | ARO | ALE | Mitigation Cost | ROI | Priority |
|---|---|---|---|---|---|---|---|---|
| R-001 | Data breach (customer PII) | Customer database | $2.5M | 0.15 | $375K | $120K/yr | 3.1x | Critical |
| R-002 | Ransomware | Production systems | $1.8M | 0.10 | $180K | $80K/yr | 2.3x | High |
| R-003 | Insider threat | Source code | $500K | 0.05 | $25K | $40K/yr | 0.6x | Medium |
| R-004 | DDoS | Customer-facing app | $200K | 0.20 | $40K | $30K/yr | 1.3x | Medium |
| R-005 | Third-party breach | Vendor with PII access | $1.2M | 0.08 | $96K | $25K/yr | 3.8x | High |
START: New risk identified
|
v
test cases passed, vs 8 / 22 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.