# Trust Posture Narrator

> Turns live Tenable exposure and remediation data into a quick-scan snapshot plus ready-to-use trust-center copy, RFP answers, and proof points.

- Type: Skill
- Author: kffbos
- License: MIT
- Trust tier: contributed (passed automated validation and a baseline maintainer review)
- Last reviewed: 2026-07-26
- Source repository: https://github.com/kffbos/tenable-trust-posture-narrator
- Repo state: not archived
- Last push: 2026-07-23T12:54:26Z
- Stars: 3 (a popularity signal, not a safety signal)
- Forks: 1 (a popularity signal, not a safety signal)
- Open issues: 0
- Health checked at: 2026-11-05T20:35:15.821Z
- Integrations: Tenable, Tenable Hexa AI MCP
- Domains: governance-risk-compliance, vulnerability-management
- Tags: trust-center, marketing, reporting, compliance, vulnerability-management
- Date added: 2026-07-22
- Works with the Tenable Hexa AI MCP server: yes
- Compatible platforms: Claude Code
- Invocation: `/trust-posture-narrator`
- Listing page: https://exchange.tenable.com/skills/trust-posture-narrator
- Source file: https://github.com/tenable/cyberagents-exchange/blob/main/skills/trust-posture-narrator.md

## What it does

Trust Posture Narrator bridges a gap most Tenable-integrated agents don't touch: it turns live exposure-management data into accurate, ready-to-use language for the teams downstream of security — trust/compliance, marketing, and executive reporting. Instead of manually drafting trust-center blurbs, RFP security-questionnaire answers, and proof points from stale or guessed figures, this skill pulls current aggregate metrics — findings by severity, remediation SLA compliance, scan coverage, and trend vs. the prior period — directly from Tenable via the Hexa MCP server, and drafts a bulleted quick-scan snapshot plus all three copy formats in one pass, with every hard number bolded and trend arrows in place of a chart.

Every output is run through a redaction and claims filter before it's returned: no host, IP, asset, or CVE-level detail; no absolute-security language ("fully secure," "zero vulnerabilities"); no claim that isn't traceable to a metric the skill actually retrieved that run. Every response ends with a mandatory footer requiring Security, Legal, and Compliance sign-off before external use — this skill produces first drafts, not approved copy.

## How it works

It's a single Claude Code skill definition — no custom backend, no data storage, no credentials handled by the skill itself. It relies entirely on the Tenable Hexa MCP server for data access (auth stays in your existing Hexa MCP connection) and on a constrained instruction set that governs what it's allowed to query, retain, and phrase. Because the underlying data is live, output only reflects the Tenable environment the invoking user is already authenticated to.

This is the Markdown version of one of 140 listings on CyberAgents Exchange. The same listing as JSON: https://exchange.tenable.com/api/skills/trust-posture-narrator.json. The full index and how to read it: https://exchange.tenable.com/llms.txt