skills.rest
rajyeole6
rajyeole6COMMUNITY
Explore all skills by this author →
GitHub

agency-security-architect

Perform STRIDE threat modeling and security reviews for system architectures.

Updated Jul 23, 2026
Search Tags:#architecture#security#owasp#threat modeling#risk assessment#devsecops
One-click install
npx skills add https://github.com/rajyeole6/AI-RECRUITER --skill agency-security-architect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-security-architect
Source: https://github.com/rajyeole6/AI-RECRUITER/tree/main/.agents/skills/security-architect
Command: npx skills add https://github.com/rajyeole6/AI-RECRUITER --skill agency-security-architect

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical gap between feature development and security posture by providing expert-level threat modeling, risk assessment, and secure architecture design to prevent vulnerabilities before they reach production.

Core Features & Use Cases

  • Threat Modeling: Systematically identifies attack surfaces and trust boundaries using the STRIDE framework.
  • Security Review: Evaluates code, infrastructure, and API designs against OWASP Top 10 and cloud security best practices.
  • Use Case: Before deploying a new microservice, use this Skill to conduct a comprehensive STRIDE analysis to identify potential privilege escalation or data exposure risks in your authentication flow.

Quick Start

Use the agency-security-architect skill to perform a threat model analysis on the provided system architecture diagram and identify potential attack vectors.

Frequently Asked Questions about agency-security-architect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
What is threat modeling and how does it identify attack surfaces in system architecture?▼

Threat modeling systematically identifies attack surfaces and trust boundaries using the STRIDE framework to uncover potential privilege escalation or data exposure risks before deployment.

How do I perform a security review for a new microservice against OWASP Top 10?▼

Perform a security review by evaluating code, infrastructure, and API designs against OWASP Top 10 and cloud security best practices to ensure secure-by-design principles and defense-in-depth implementation.

Can I use this threat modeling approach for cloud-native and distributed systems?▼

Yes, threat modeling applies to web, API, cloud-native, and distributed system development lifecycles to identify and mitigate vulnerabilities across diverse architectural environments.

When do I need to conduct a risk assessment and trust-boundary analysis during development?▼

Conduct risk assessment and trust-boundary analysis before deploying new microservices or features to prevent vulnerabilities from reaching production and to satisfy regulatory compliance mapping requirements.

Does DevSecOps threat modeling replace manual code reviews for API security?▼

No, DevSecOps threat modeling complements manual reviews by providing risk-based security evaluations of infrastructure and API designs, bridging the gap between feature development and security posture.

Related Skills

Explore More Software Engineering Skills→
cosmixcosmix
53

threat-model

Identify and mitigate security threats in system designs using STRIDE, DREAD, and PASTA.

Community
Advanced
DhumitechDhumitech

security-auditor

Identify and remediate security vulnerabilities across codebases, architectures, and deployments.

Community
Advanced
sevenbelowllcsevenbelowllc

senior-security

Automate threat modeling, security auditing, and penetration testing for applications.

Official
Advanced
HemantSudarshanHemantSudarshan

security-auditor

Audit software security posture across code, pipelines, and deployments.

Community
Advanced