from Arcanum Tabletop Exercises29
Design and generate CISA-aligned cybersecurity tabletop exercises, facilitator guides, participant materials, technical atomics, and SOP gap analyses for incide
A complete framework to design, run, and evaluate cybersecurity tabletop exercises (TTX). Produces three outputs: a client-ready PDF, a facilitator HTML (full notes and expected responses), and a participant HTML (no spoilers). Includes detailed inject cards, realistic evidence artifacts, technical atomics for runners, and an SOP/playbook gap analysis generator.
Use when you need to: create executive or technical incident simulation scenarios; generate timed injects and facilitator scripts; produce atomics for technical runners; or run a post-exercise gap analysis to identify missing SOPs and assign remediation tasks. Ideal for SOC drills, executive tabletop sessions, and compliance exercises.
Best used with agents that can run Node/Bun and render HTML or PDFs (e.g., Claude Code, local Node-based runners, and automation agents capable of invoking the provided generators).
Comprehensive cybersecurity tabletop exercise designer that generates CISA-aligned scenarios with facilitator guides, participant materials, technical atomics, and SOP gap analyses. The SKILL.md is extremely detailed (48KB) with JSON schemas, CSS specs, HTML templates, and scenario libraries all inline. No scripts were bundled — generators are referenced but require separate setup with bun. The skill is well-suited for its niche but suffers from a monolithic structure that should be split into references/.
bun (referenced for generators but not bundled)No security concerns. The skill is purely instructional — generates exercise documentation locally with no network calls or external data exfiltration. Main issues are architectural: the 48KB monolithic SKILL.md should be refactored to use references/ for JSON schemas, CSS specs, and HTML templates. The generators referenced in the skill are not bundled, so the skill is essentially a very long prompt rather than an executable skill. Content quality is high for the cybersecurity tabletop exercise niche.
