Habilidades data-security-expert

📦

data-security-expert

Name: data-security-expert
Author: 图灵数盟

Revisão do conteúdo r1 Seguro 📁 Acesso ao sistema de arquivos⚙️ Comandos externos🌐 Acesso à rede

Assess and Strengthen Data Security

Organizations need consistent controls across the data lifecycle. This skill structures classification, risk assessment, MLPS planning, safeguards, audits, and response deliverables.

Suporta: Claude Codex Code(CC)

🥉 77 Bronze

Instalar com meu Agente

Copie esta solicitação para o seu Agente. Ela inclui a página canônica do Skill e o manifesto.

Solicitação do agente

Review the Skillstore skill "data-security-expert" from https://skillstore.io/skills/dhturing-data-security-expert.md and its manifest at https://skillstore.io/api/skills/dhturing-data-security-expert/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Seu Agente ainda deve apresentar o plano e solicitar qualquer confirmação exigida pela política de segurança.

Recursos legíveis por agentes

Use estes links quando um agente de IA, crawler ou script precisar de contexto limpo em vez de ler a página completa.

Detalhe em Markdown GET /skills/dhturing-data-security-expert.md manifest assinado GET /api/skills/dhturing-data-security-expert/manifest lockfile assinado GET /api/skills/dhturing-data-security-expert/lockfile

Testar

Usando "data-security-expert". Classify customer profiles, public product data, and high-value transaction records.

Resultado esperado:

Customer profiles: general sensitive data, internal level 3, with encryption and controlled access.
Public product data: general public data, internal level 1, with integrity controls.
High-value transaction records: assess industry thresholds before deciding important status; apply level 4 controls meanwhile.

Usando "data-security-expert". Outline a security assurance package for a financing review.

Resultado esperado:

Management evidence: approved policies, ownership records, training logs, and risk acceptance decisions.
Technical evidence: access reviews, encryption design, masking rules, immutable audit logs, backup tests, and vulnerability remediation.
Assurance evidence: MLPS filing, assessment reports, incident exercises, audit results, and tracked corrective actions.

Auditoria de segurança

Seguro

v1 • 27/09/2026 Abrir o relatório versionado

All 12 static findings are false positives caused by documentation syntax, cited installation paths, public links, and entropy heuristics on multilingual Markdown. The reviewed files contain no automated command execution, network requests, obfuscated payloads, or prompt injection language.

Arquivos analisados

437

Linhas analisadas

Itens de revisão

Falsos positivos ignorados

Fatores de risco

📁 Acesso ao sistema de arquivos (2)

profile.md:38 profile.md:38

⚙️ Comandos externos (3)

SKILL.md:20 SKILL.md:26 SKILL.md:33

🌐 Acesso à rede (2)

SKILL.md:6 SKILL.md:12

A auditoria estática e semântica concluída mais recente não detectou achados de segurança confirmados. Isso não comprova que a skill não tenha efeitos colaterais.

Auditado por: codex

Compartilhar e citar este relatório

Compartilhe o relatório de avaliação versionado, o badge neutro, o cartão incorporável e as citações. A Skillstore apresenta evidências sem decidir se este Skill é seguro.

Abrir o relatório versionado

Copiar link do relatório

https://skillstore.io/skills/dhturing-data-security-expert/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Badge Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/dhturing-data-security-expert/security.svg)](https://skillstore.io/skills/dhturing-data-security-expert?utm_source=security_passport_badge)

Badge HTML

<a href="https://skillstore.io/skills/dhturing-data-security-expert?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/dhturing-data-security-expert/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Cartão incorporável

<iframe src="https://skillstore.io/embed/skills/dhturing-data-security-expert.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citações acadêmicas (APA · BibTeX · CFF)

Citação APA

图灵数盟. (2026). data-security-expert security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/dhturing-data-security-expert/audits/1

Citação BibTeX

@techreport{dhturing-data-security-expert-2026,
  author = {图灵数盟},
  title = {data-security-expert security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/dhturing-data-security-expert/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "data-security-expert security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "图灵数盟"
date-released: "2026-09-27"
url: "https://skillstore.io/skills/dhturing-data-security-expert/audits/1"
identifiers:
  - type: other
    value: "skillstore:dhturing-data-security-expert:audit:1"
    description: "Skillstore immutable audit report identifier"

Pontuação do Skillstore

Por que esta pontuação Confiança das evidências: Médio

Arquitetura

Manutenibilidade

Conteúdo

Comunidade

Conformidade com a especificação

O que você pode criar

Classify Enterprise Data

Create a classification table and important data catalog from an inventory, ownership details, scale, sensitivity, and business impact.

Plan Security Remediation

Map lifecycle gaps to access, encryption, masking, logging, backup, disposal, and incident response controls.

Prepare Assurance Evidence

Draft evidence checklists and report structures for MLPS assessment, financing review, registration, audit, or DSMM improvement.

Teste estes prompts

Classify a Data Inventory

Classify these assets as core, important, or general under GB/T 43697-2024. State assumptions, evidence gaps, and controls: [asset list].

Review Lifecycle Controls

Assess controls across collection, storage, use, sharing, transfer, and disposal. Prioritize gaps by threat, vulnerability, impact, owner, and deadline.

Build an MLPS Plan

Evaluate this system for MLPS scope and likely level. Provide rationale, filing steps, remediation work, evidence needs, timing, and external dependencies.

Design an Assurance Program

Create an integrated security program for [organization]. Include classification, risk register, lifecycle controls, DSMM roadmap, audit schedule, incident response, and evidence.

Boas práticas

Provide current inventories, architecture diagrams, control evidence, and applicable industry requirements.
Separate confirmed facts, assumptions, evidence gaps, and recommendations in every deliverable.
Validate classifications and compliance conclusions with accountable owners and qualified external assessors.

Evitar

Do not assign important data status solely from a generic example.
Do not treat encryption as sufficient without access control, key management, logging, and recovery.
Do not present draft guidance as regulator approval or a completed independent assessment.

Perguntas frequentes

Can this skill determine whether data is important data?

It can structure the assessment and compare supplied facts with applicable catalogs. Final classification requires industry context and accountable review.

Does it perform an MLPS assessment?

It prepares scope, likely level, gaps, evidence, and remediation plans. A qualified assessment body must perform formal testing.

Can it create an important data catalog?

Yes. Provide the inventory, business purpose, scale, precision, affected parties, geography, and industry requirements.

Which lifecycle stages does it cover?

It covers collection, storage, use, sharing, transfer, and disposal, including controls and audit evidence.

Can it recommend encryption and masking controls?

Yes. It can propose control requirements, but implementation choices require architecture, threat, performance, and legal details.

Is the guidance limited to China?

The knowledge base centers on Chinese laws and standards. Supply other jurisdictional requirements before applying it elsewhere.