Security team toolkit

Turn a skill into a clear workflow

Write down inputs, fixed steps, AI decisions, permissions and exception handling before sharing the tool.

Download the workflow worksheet · Follow the worked guide

Measure repeat-run token use

Compare equivalent cases, including conversion, retries, output quality and review time. Token counts alone do not establish cost savings.

Download the token worksheet · Use the measurement guide

Practical examples for your team

• Support ticket to a reviewable triage result
• Jira notes to a Slack-ready weekly update

A one-page routine worksheet

List your routines and mark the three risk legs.

The threat model

From the Security model page: what injected text can change, and what covers it.

A sample evidence bundle with the verifier

An intact bundle and a tampered one, with the open-source verifier that tells them apart offline.

The builder’s approval checklist

From our post on getting an AI tool approved.