SkillFeeder › 全部 Skill › Bug与质量 › exposure-risk-quantification

将OSINT侦察结果转化为董事会可读的0-100风险分、A-F评级和美元损失预估。

exposure-risk-quantification

exposure-risk-quantification 是 SkillFeeder 收录的Agent Skill,来自 GitHub 仓库 elementalsouls/Claude-OSINT,★ 2,992。将OSINT侦察结果转化为董事会可读的0-100风险分、A-F评级和美元损失预估。适合红队/蓝队负责人、安全顾问。场景是Bug与质量 · 测试验证。能做的事包括输出FAIR对齐的0-100分+字母评级、生成基于记录成本的美元损失区间、自动降权未验证或权属不清的发现。打开 GitHub 自行安装。

打开 GitHub

仓库
elementalsouls/Claude-OSINT
仓库星标
★ 2,992
场景
Bug与质量 · 测试验证
适合
红队/蓝队负责人、安全顾问
类型
Skill

能做什么

原文简介

FAIR-aligned exposure quantification: turns a pile of recon findings into a defensible 0-100 + A-F org risk score (Likelihood x Impact, three ownership-aware factors: exposure/threat/impact), an ownership + proof demotion cap so unproven or weakly-owned findings can't inflate the number, a $-denominated FAIR loss-magnitude estimate (IBM/Ponemon per-record cost bands, cross-source record dedup, thr

同场景推荐