First public release.
What's in this release
/tabletop-exercise— generates a complete tabletop exercise package tailored to the project in the cwd. Surveys README, manifests, IaC, and CI/CD configs to pick scenarios matching your actual stack. Produces facilitator runbook, participant packet, timed inject deck, fillable forms, and an interactive single-file HTML runbook with live exercise timer, per-inject reveal overlays, decision-log auto-timestamping, localStorage form persistence, and JSON export./tabletop-aar— companion skill that ingests filled forms (or the HTML's JSON export) and drafts a structured After-Action Report. Audience-tuned register (internal / leadership / regulator / board), severity-rubric P0/P1/P2 action items, blameless framing.
Coverage
- 9 domains: cybersecurity, product security, DevOps/SRE, privacy/compliance, data/ML, platform, mobile, AI safety, business continuity
- 54 scenarios across all domains, with stack-relevance hints and framework mappings
- 38 inject archetypes + 28 NPC personas for vivid, branchable exercise design
- 7 compliance frameworks with optional
--frameworkstagging: NIST CSF 2.0, SOC 2, PCI DSS v4, ISO 27001:2022, HIPAA, GDPR, MITRE ATT&CK
Try it
- 🌐 Live demo: https://live-demo-zeta-one.vercel.app
- 📦 Install:
cp -r skills/tabletop-exercise ~/.claude/skills/andcp -r skills/tabletop-aar ~/.claude/skills/
See INSTALL.md for full options including project-local install and symlink-from-source workflow.