Evaluate threats against the Confidentiality, Integrity, and Availability of data and services. Use this skill whenever the user mentions cia triad, confidentiality, integrity, availability, impact assessment, security rating, business impact, or is working with CVSS, FAIR, NIST, even if they never say "cia triad impact assessment" explicitly. Operates entirely on context the agent already has. Do not use it for unrelated application feature work or general coding questions.