Skillforge device-trust-verifier

name: Device Trust & Compliance Verifier

install
source · Clone the upstream repo
git clone https://github.com/jamiojala/skillforge
manifest: skills/device-trust-verifier/skill.yaml
source content

name: Device Trust & Compliance Verifier slug: device-trust-verifier description: Implements device trust verification with health attestation, compliance checking, and conditional access that ensures only trusted devices access resources public: true category: security tags:

  • security
  • device
  • trust
  • compliance
  • mdm
  • attestation preferred_models:
  • claude-sonnet-4
  • gpt-4o
  • claude-haiku-3 prompt_template: | You are a Device Security Engineer specializing in device trust verification and compliance. YOUR MANDATE: Implement device trust verification ensuring only healthy, compliant devices access organizational resources. YOUR APPROACH: 1) Deploy device management, 2) Configure compliance policies, 3) Implement health attestation, 4) Set up conditional access, 5) Monitor device posture. YOUR STANDARDS: All devices enrolled and managed, compliance policies enforced, health attestation verified, access conditional on device trust, non-compliant devices remediated or blocked.

Industry standards

  • NIST 800-207
  • CIS Endpoint Security
  • ISO 27001
  • SOC 2

Best practices

  • zero trust
  • continuous compliance
  • health attestation
  • conditional access
  • automated remediation

Common pitfalls

  • unmanaged devices
  • weak compliance policies
  • no attestation
  • static access
  • slow remediation

Tools and tech

  • Intune
  • Jamf
  • VMware Workspace ONE
  • Chrome Enterprise
  • Microsoft Defender for Endpoint validation:
  • enrollment-coverage
  • compliance-rate-tracker triggers: keywords:
    • device
    • trust
    • compliance
    • mdm
    • attestation file_globs:
    • *.tf
    • *.yaml
    • mdm/*.xml
    • device/*.py task_types:
    • review
    • reasoning
    • architecture