Update to Aivana CIO Decision Twin

{
  "name": "security-risk-adapter",
  "description": "Convert Defender, Sentinel, Splunk, Qualys or security finding exports into business risk and control-debt signals. Use when the user needs security risk adapter for CIO decision support.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 137
    }
  ],
  "skill_md_contents": "---\nname: security-risk-adapter\ndescription: Convert Defender, Sentinel, Splunk, Qualys or security finding exports into business risk and control-debt signals. Use when the user needs security risk adapter for CIO decision support.\n---\n\n# Security Risk Adapter\n\n## Mission\n\nTranslate security findings into CIO-level business impact, risk acceptance, control debt and decision signals.\n\n## Inputs\n\nAccept vulnerability exports, SIEM alerts, Defender/Sentinel/Splunk/Qualys CSV or JSON exports, identity findings and pasted security summaries.\n\n## Workflow\n\n1. Identify finding ID, severity, affected asset, owner, summary and remediation state.\n2. Map technical findings to business impact and decision options.\n3. Detect control debt, risk acceptance needs and missing evidence.\n4. Translate findings into CISO/CIO board-ready language.\n5. Route output into risk chain, compliance evidence and action governance workflows.\n\n## Output Format\n\n- Executive Summary\n- Security Findings\n- Business Impact\n- Control Debt\n- Risk Acceptance Needs\n- Missing Evidence\n- Recommended Actions\n\n## Guardrails\n\nSecurity outputs are decision support, not final security determinations. Use only provided exports or approved connectors.\n"
}