security-questionnaire-autofill
Draft answers to a vendor security questionnaire (SIG, CAIQ, or a custom sheet) from your real controls — fast, consistent, and honest about gaps. Use when asked to fill out a security questionnaire, answer a SIG/CAIQ, respond to a customer's security review, or complete a vendor risk assessment. Produces drafted answers grounded in your stated controls, a gap list of questions you can't truthfully answer yet, and reusable answer snippets for next time — never fabricated compliance.
npx skills add mohitagw15856/pm-claude-skills --skill security-questionnaire-autofill --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# Security Questionnaire Autofill A single enterprise deal can arrive with a 300-question security questionnaire, and answering it by hand is a week no one has. This drafts the answers from your actual security posture, keeps the wording consistent across questions, and — critically — refuses to invent a control you don't have. What it can't answer truthfully, it flags, so you close the real gap instead of papering over it. > Answers must reflect reality. A fabricated "yes" on a security questionnaire is a misrepresentation that can void a contract — this skill flags gaps, it does not invent controls. ## What This Skill Produces - **Drafted answers** — one per question, grounded in your stated controls, in consistent language - **The gap list** — questions you can't currently answer "yes" to, with what closing them would take - **Reusable snippets** — a growing answer library so the next questionnaire is faster - **Evidence pointers** — which policy/doc backs each answer (so reviewers can verify) ## Required Inputs Ask for these if not provided: - **The questionnaire** — the questions (SIG, CAIQ, or custom), pasted or attached - **Your controls** — your security posture: policies,
- What This Skill Produces
- Required Inputs
- Framework: Answer From Truth
- Output Format
- Security Questionnaire — [customer] · [framework]
- Answers
- Gaps to close (ranked)
- Snippets saved for reuse
- Quality Checks
- Anti-Patterns
- Example Trigger Phrases
What does the security-questionnaire-autofill skill do?
Draft answers to a vendor security questionnaire (SIG, CAIQ, or a custom sheet) from your real controls — fast, consistent, and honest about gaps. Use when asked to fill out a security questionnaire, answer a SIG/CAIQ, respond to a customer's security review, or complete a vendor risk assessment. Produces drafted answers grounded in your stated controls, a gap list of questions you can't truthfully answer yet, and reusable answer snippets for next time — never fabricated compliance.
How do I install it?
Run `npx skills add mohitagw15856/pm-claude-skills --skill security-questionnaire-autofill --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From mohitagw15856/pm-claude-skills, a repository with 1,255 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.