skills.rest
anavvanzin
anavvanzinCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

agency-security-engineer

Identify and mitigate security risks across web, API, and cloud-native applications.

Updated Apr 15, 2026
Search Tags:#security#threat-modeling#security-architecture#incident-response#vulnerability-assessment#secure-code-review
One-click install
npx skills add https://github.com/anavvanzin/Research --skill agency-security-engineer-anavvanzin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agency-security-engineer
Source: https://github.com/anavvanzin/Research/tree/main/cowork/integrations/antigravity/agency-security-engineer
Command: npx skills add https://github.com/anavvanzin/Research --skill agency-security-engineer-anavvanzin

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Protects applications by embedding expert security practices into the development lifecycle, enabling threat modeling, vulnerability assessment, secure code review, security architecture design, and incident response.

Core Features & Use Cases

  • Threat modeling sessions to identify attack surfaces and remediation priorities.
  • Comprehensive vulnerability assessments aligned with OWASP Top 10 and industry standards.
  • Secure code reviews and architecture guidance to harden systems, plus incident response planning for production environments.
  • Use cases include integrating in CI/CD gates, designing zero-trust access, and implementing robust secrets management.

Quick Start

Run a threat-modeling session on your web application and integrate SAST/DAST in your CI/CD pipeline.

Frequently Asked Questions about agency-security-engineer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate threat modeling into my web application development lifecycle?▼

Threat modeling integrates into web application development by identifying attack surfaces and prioritizing remediation during the design phase, connecting security architecture directly to development workflows.

How do I conduct a secure code review aligned with OWASP Top 10 standards?▼

Secure code reviews aligned with OWASP Top 10 identify vulnerabilities and provide remediation guidance with code-level examples, hardening systems before deployment.

What is the best way to set up SAST and DAST security gates in a CI/CD pipeline?▼

Setting up SAST and DAST in a CI/CD pipeline involves integrating vulnerability assessments as automated security gates to evaluate code and detect risks during testing and deployment.

Can I use this for incident response planning in cloud-native environments?▼

Yes, incident response planning applies to production environments in cloud-native applications, connecting operational security monitoring to mitigated risks and remediation workflows.

Does this approach support designing zero-trust access and secrets management?▼

Yes, this approach supports designing zero-trust access and implementing robust secrets management by providing security architecture guidance throughout the system design process.

Related Skills

Explore More Software Engineering Skills→
asfbay-bitasfbay-bit

security-auditor

Perform STRIDE threat modeling and OWASP Top 10 compliance mapping for application security.

Community
Advanced
dy9759dy9759
1

security-audit-expert

Identify and remediate security vulnerabilities across IT infrastructure and applications.

Community
Advanced
jaskaranhundaljaskaranhundal
3

sast-dast-coordinator

Orchestrate SAST, DAST, SCA, and secrets scanning tools to correlate and prioritize findings.

Community
Advanced
cwinvestmentscwinvestments
412

memstack-security-owasp-top10

Audit web applications against OWASP Top 10 vulnerability categories.

Community
Advanced