Security Evidence Capture
Independent PiSkill directory guide. The original prompt remains hosted by Microsoft HVE Core.
What does this prompt do?
Captures security context, assets, trust boundaries, threats, controls, assumptions, evidence, owners, and open actions for a software initiative.
Primary use case
Create a structured security record for a project or change.
Expected output
A reviewable security evidence and action artifact.
Inputs or variables
- system context
- assets
- security requirements
Related prompts
Incident Response Plan
Structures an incident response workflow around evidence collection, containment, recovery and follow-up actions.
LLM Security Review
Reviews an LLM or agent solution for prompt injection, unsafe tool access, data exposure, trust-boundary failures, weak validation, and operational controls.
Responsible AI Evidence Capture
Captures responsible-AI requirements, stakeholders, harms, controls, evidence, ownership, and unresolved questions in a consistent planning artifact.
Responsible AI Plan from PRD
Turns a product requirements document into a responsible-AI plan covering likely harms, mitigations, validation, monitoring, governance, and accountable owners.
Responsible AI Plan from Security Plan
Extends an existing security plan with model-specific harms, misuse, data, evaluation, transparency, monitoring, and governance requirements.
Secure Supply Chain Plan from PRD
Derives software-supply-chain controls from product requirements, covering dependencies, provenance, builds, artifacts, releases, ownership, and verification.