---
title: Security Planning Reference Index
---

# Security Planning Reference Index

This index is the entry point for the reusable security-planning skill. It summarizes the durable reference files that carry the detailed planning knowledge previously embedded in the Security Planner instructions.

## Reference catalog

| File                                                         | Purpose                                                                      | Source basis                                                          |
|--------------------------------------------------------------|------------------------------------------------------------------------------|-----------------------------------------------------------------------|
| [operational-buckets.md](operational-buckets.md)             | Bucket definitions, classification guidance, and GS overlay                  | Operational bucket guidance from the Security Planner instruction set |
| [stride-model.md](stride-model.md)                           | STRIDE methodology, AI extensions, risk matrix, and DFD guidance             | Security model guidance from the Security Planner instruction set     |
| [standards-cross-reference.md](standards-cross-reference.md) | Standards mapping and control references for bucket analysis                 | Standards mapping guidance and existing shared security skills        |
| [nist-control-families.md](nist-control-families.md)         | NIST control-family references and AI RMF mapping                            | NIST mapping guidance from the planning instruction set               |
| [backlog-formats.md](backlog-formats.md)                     | Prioritization formats and work-item categories for security backlog handoff | Backlog handoff guidance from the Security Planner instruction set    |

## Usage notes

* Use this skill for durable planning knowledge, not for orchestration logic.
* Keep instruction files thin and delegate detailed reference lookups to the skill references.
* Prefer shared skills such as `owasp-top-10`, `owasp-llm`, and `backlog-templates` when the content already exists there.

## Attribution

This skill consolidates content previously scattered across Security Planner instruction files and intentionally avoids duplication of the shared security skills already maintained elsewhere in the repository.
