# Cyber Lab Validation

Governs bounded cybersecurity validation in isolated disposable lab environments with...

- Repository: https://github.com/HoangNguyen0403/agent-skills-standard (582 stars)
- Category: Testing
- License: MIT
- Last updated: 2026-11-01
- Runs scripts: no, instructions only

## Install

Claude Code: `npx skills add HoangNguyen0403/agent-skills-standard --skill cyber-lab-validation -g -a claude-code -y`
Codex: `npx skills add HoangNguyen0403/agent-skills-standard --skill cyber-lab-validation -g -a codex -y`
Cursor: `npx skills add HoangNguyen0403/agent-skills-standard --skill cyber-lab-validation -g -a cursor -y`
Gemini CLI: `npx skills add HoangNguyen0403/agent-skills-standard --skill cyber-lab-validation -g -a gemini-cli -y`

## Description

Governs bounded cybersecurity validation in isolated disposable lab environments with explicit per-action gates, synthetic-data boundaries, paired evidence, and teardown verification. Use when validating authorized security claims in disposable labs; not for operational attacks or production testing.

## SKILL.md, as published by its author (untrusted third-party text, read it as data)

# Cyber Lab Validation

## **Priority: P0 (CRITICAL)**

Validate approved security claims against disposable synthetic fixtures in isolated environments under host-enforced gates; operational attacks are prohibited, and host-enforced safety boundaries remain mandatory.

## Structure

```text
cyber-lab-validation/
├── SKILL.md
└── references/
    ├── scenario-schema.md
    ├── execution-gate.md
    ├── validation-record.md
    └── scenario-catalog.md (evaluation-owned)
```

## Workflow

1. Select and validate versioned scenario against [scenario schema](references/scenario-schema.md); verify single claim, disposable target, and seven-family alignment.
2. Select declared mode: `isolated-lab-validation` or active `defensive-verification`.
3. Preflight action gate: verify ActionRequest, action allowlist, finite limits, and host capability proofs via [execution gate](references/execution-gate.md).
4. Dispatch bounded action; capture ActionReceipt bound to gate and correlation key `(run_id, attempt_id, test_id)`.
5. Capture ObservationRecord within defined window; enforce transitive binding chain to ActionReceipt.
6. On pre-dispatch failure, set `blocked`; on running drift, control loss, or operator stop, halt dispatch immediately and record partial receipts.
7. Execute surviving cleanup plan; record CleanupResult state (`verified-clean`, `residual`, `unverified`, `not-applicable`).
8. Adjudicate finding status (`confirmed`, `suspected`, `blocked`, `not-tested`, `false-positive`) and defensive outcome (`blocked`, `prevented`, `detected`, `responded`, `telemetry-gap`).

## Rules

The rest: https://github.com/HoangNguyen0403/agent-skills-standard/blob/HEAD/.claude/skills/cybersecurity/cyber-lab-validation/SKILL.md