skills.rest
rajyeole6
rajyeole6COMMUNITY
Explore all skills by this author →
GitHub

agency-application-security-engineer

Integrate SAST, DAST, and dependency scanning into CI/CD pipelines.

Updated Jul 23, 2026
Search Tags:#secure coding#threat modeling#sast#vulnerability management#devsecops#appsec
One-click install
npx skills add https://github.com/rajyeole6/AI-RECRUITER --skill agency-application-security-engineer
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-application-security-engineer
Source: https://github.com/rajyeole6/AI-RECRUITER/tree/main/.agents/skills/security-appsec-engineer
Command: npx skills add https://github.com/rajyeole6/AI-RECRUITER --skill agency-application-security-engineer

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires json, subprocess, sys, pathlib, and includes scripts (resource) components.

What problem does it solve?

This Skill addresses the critical gap between rapid software development and robust security, preventing vulnerabilities from reaching production by integrating security practices directly into the development lifecycle.

Core Features & Use Cases

  • Threat Modeling: Proactively identify architectural flaws and trust boundaries using STRIDE/PASTA frameworks before code is written.
  • Secure Code Review: Receive expert guidance on identifying and fixing injection flaws, authentication bypasses, and cryptographic misuses with language-specific examples.
  • Security Automation: Integrate SAST, DAST, and SCA tools into CI/CD pipelines to enforce security policies and manage dependency vulnerabilities.

Quick Start

Use the agency-application-security-engineer skill to conduct a threat model analysis for the new authentication module architecture.

Frequently Asked Questions about agency-application-security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate SAST and DAST scanning workflows into my CI/CD pipeline?▼

To integrate SAST and DAST scanning workflows into CI/CD pipelines, this Skill automates security testing and enforces organizational policies during the build process. It directly facilitates vulnerability identification across data handling layers.

What is the best way to perform threat modeling for application architecture?▼

Threat modeling for application architecture is best performed using STRIDE or PASTA frameworks. This Skill proactively identifies architectural flaws and trust boundaries before code is written, preventing vulnerabilities from reaching production.

Does dependency scanning manage vulnerabilities in software development lifecycles?▼

Dependency scanning manages vulnerabilities in software development lifecycles by automating Software Composition Analysis. This Skill enforces security policies through integrated SCA workflows to continuously identify and remediate vulnerable libraries.

Can I enforce compliance standards during automated vulnerability management?▼

You can enforce compliance standards during automated vulnerability management by integrating security testing into development workflows. This Skill bridges rapid software development and robust security by applying policies directly to the SDLC.

How do I remediate authentication bypasses and cryptographic misuses in code?▼

To remediate authentication bypasses and cryptographic misuses, this Skill conducts expert secure code reviews with language-specific examples. It targets these exact vulnerabilities to ensure robust authorization and data handling security.

Related Skills

Explore More Software Engineering Skills→
jassicsjassics
6

threat-model-dfd

Generate Data Flow Diagrams with trust boundaries for STRIDE/PASTA threat modeling.

Community
Intermediate
devCharuzudevCharuzu

senior-secops

Automates security operations including SAST/DAST scans and compliance checks.

Community
Advanced
williamzujkowskiwilliamzujkowski
17

ci-cd

Standardize CI/CD pipelines for builds, tests, and deployments.

Community
Advanced
Nhqvu2005Nhqvu2005
54

security-scanner

Scan codebases for security vulnerabilities and generate a release checklist.

Community
Intermediate